This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/pLGoFC89pNsr7Py4cTyjK2qhEfg.roa File: pLGoFC89pNsr7Py4cTyjK2qhEfg.roa (raw, json) Hash identifier: E5aXP60TZFECYX5WU/DbcrY7n3oYD2lgvk9iR+kGxes= Subject key identifier: A4:B1:A8:14:2F:3D:A4:DB:2B:EC:FC:B8:71:3C:A3:2B:6A:A1:11:F8 Certificate issuer: /CN=577cd086d6b82925abb8bb815e658852522e0921 Certificate serial: 019B77C71DCABBFAD0FF09E6AC519A186FA5 Authority key identifier: 57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/pLGoFC89pNsr7Py4cTyjK2qhEfg.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44329 IP address blocks: 194.50.28.0/24 maxlen: 24 2001:67c:ac::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.mft rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1d:ca:bb:fa:d0:ff:09:e6:ac:51:9a:18:6f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=577cd086d6b82925abb8bb815e658852522e0921 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4b1a8142f3da4db2becfcb8713ca32b6aa111f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:35:50:f6:17:a4:5a:1a:4c:87:9a:19:27:0a: fa:41:57:f8:c8:c2:4a:86:61:24:f3:a2:04:03:07: 0a:29:40:24:1a:67:6a:1f:20:e6:59:98:ff:e2:63: 64:c5:f0:e3:89:58:79:a1:a7:47:b0:e2:9f:42:54: 90:85:f9:8e:00:57:5e:4d:e9:9d:6e:76:ba:b6:02: 66:64:41:d0:d5:75:99:bb:6e:58:2d:00:90:ba:23: 5e:8a:65:0f:a5:fb:88:2d:15:70:ec:42:7e:07:ea: cf:93:3f:26:15:0c:4c:4b:b8:b6:ef:49:ed:d6:7e: e9:8e:04:c6:cb:22:40:9a:12:54:d5:bf:ef:6f:39: 1e:5a:6d:62:29:8a:ec:76:09:12:72:7c:51:e1:64: f2:68:d3:da:15:23:0f:63:9c:93:81:7f:95:a4:bb: 0f:b0:da:80:66:57:74:b3:21:6d:cc:7a:f2:50:cf: 4b:33:3e:01:0e:9e:7f:15:c6:f9:5d:a8:f7:9d:9f: 31:7a:a8:e9:f0:01:bb:60:34:0b:73:9f:6f:d2:fe: f1:5b:1e:8c:17:a1:7a:87:d8:98:92:ca:aa:44:58: 12:bb:ec:27:b9:38:a8:16:1f:2d:f2:55:e0:10:d5: 4c:50:14:03:59:85:27:bb:2e:a8:33:a3:8e:c4:b8: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B1:A8:14:2F:3D:A4:DB:2B:EC:FC:B8:71:3C:A3:2B:6A:A1:11:F8 X509v3 Authority Key Identifier: keyid:57:7C:D0:86:D6:B8:29:25:AB:B8:BB:81:5E:65:88:52:52:2E:09:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zQhta4KSWruLuBXmWIUlIuCSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/pLGoFC89pNsr7Py4cTyjK2qhEfg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7aa89e-4bae-4014-82b9-7208cd98d881/1/V3zQhta4KSWruLuBXmWIUlIuCSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.28.0/24 IPv6: 2001:67c:ac::/48 Signature Algorithm: sha256WithRSAEncryption b3:6b:bf:01:64:ac:ef:4f:a4:a5:c4:75:38:c2:0c:aa:1f:4f: 06:3f:d6:44:f9:5b:48:4b:d1:4e:4c:e4:28:4e:8b:c4:53:4f: 0e:eb:80:c5:75:b8:50:8d:1c:bb:49:6e:7e:a7:10:a3:31:23: 28:88:6a:4c:63:8a:b4:f9:72:dd:b3:fc:8e:f8:e2:ba:71:f1: 77:bd:75:73:6e:f8:15:d1:fc:b2:91:38:6f:e9:0d:05:fe:12: ac:a8:ae:78:94:9d:3d:f7:d4:97:e9:1a:77:2c:60:89:54:94: c8:64:a4:6f:12:d0:f0:f2:8f:c6:82:69:d7:ec:cb:9a:ca:57: 45:7f:7d:9e:34:fb:9c:7b:30:c0:9e:36:e1:89:5b:9e:3c:af: 68:60:fc:15:bc:e8:70:0d:d0:eb:64:74:90:d5:8a:54:1b:51: b5:9e:20:bf:13:70:fe:fc:f5:10:b1:a5:4b:6c:90:a9:32:0c: 7c:4d:f8:ae:5b:7a:8b:09:04:5c:fc:11:c8:f8:e7:95:b2:ef: 4a:74:85:5c:c5:ea:17:25:46:25:13:3b:a4:17:c7:85:c4:11: 34:cb:67:89:3b:bf:cf:dc:1e:fb:be:16:42:23:ee:1c:2a:33: 32:83:de:6f:c9:dd:92:20:1e:df:78:a6:ad:c1:ea:3c:cf:41: a1:35:0b:3f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3xx3Ku/rQ/wnmrFGaGG+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3N2NkMDg2ZDZiODI5MjVhYmI4YmI4MTVlNjU4ODUyNTIy ZTA5MjEwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGIxYTgxNDJmM2RhNGRiMmJlY2ZjYjg3MTNjYTMyYjZhYTExMWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TVQ9hekWhpMh5oZJwr6QVf4yMJK hmEk86IEAwcKKUAkGmdqHyDmWZj/4mNkxfDjiVh5oadHsOKfQlSQhfmOAFdeTemd bna6tgJmZEHQ1XWZu25YLQCQuiNeimUPpfuILRVw7EJ+B+rPkz8mFQxMS7i270nt 1n7pjgTGyyJAmhJU1b/vbzkeWm1iKYrsdgkScnxR4WTyaNPaFSMPY5yTgX+VpLsP sNqAZld0syFtzHryUM9LMz4BDp5/Fcb5Xaj3nZ8xeqjp8AG7YDQLc59v0v7xWx6M F6F6h9iYksqqRFgSu+wnuTioFh8t8lXgENVMUBQDWYUnuy6oM6OOxLiFEwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKSxqBQvPaTbK+z8uHE8oytqoRH4MB8GA1UdIwQY MBaAFFd80IbWuCklq7i7gV5liFJSLgkhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjkt NzIwOGNkOThkODgxLzEvcExHb0ZDODlwTnNyN1B5NGNUeWpLMnFoRWZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83YWE4OWUtNGJhZS00MDE0LTgyYjktNzIwOGNkOThkODgx LzEvVjN6UWh0YTRLU1dydUx1QlhtV0lVbEl1Q1NFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwjIcMA8E AgACMAkDBwAgAQZ8AKwwDQYJKoZIhvcNAQELBQADggEBALNrvwFkrO9PpKXEdTjC DKofTwY/1kT5W0hL0U5M5ChOi8RTTw7rgMV1uFCNHLtJbn6nEKMxIyiIakxjirT5 ct2z/I744rpx8Xe9dXNu+BXR/LKROG/pDQX+EqyorniUnT331JfpGncsYIlUlMhk pG8S0PDyj8aCadfsy5rKV0V/fZ40+5x7MMCeNuGJW548r2hg/BW86HAN0OtkdJDV ilQbUbWeIL8TcP789RCxpUtskKkyDHxN+K5beosJBFz8Ecj455Wy70p0hVzF6hcl RiUTO6QXx4XEETTLZ4k7v8/cHvu+FkIj7hwqMzKD3m/J3ZIgHt94pq3B6jzPQaE1 Cz8= -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:31 2026 by rpki-client