This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/pGtQQai-dxwqAqhELvcpGWvnJZQ.roa File: pGtQQai-dxwqAqhELvcpGWvnJZQ.roa (raw, json) Hash identifier: bWty7Pjo+KwFzlM1rDtQDVkiqqU12gvaV9LDUSEaGgU= Subject key identifier: A4:6B:50:41:A8:BE:77:1C:2A:02:A8:44:2E:F7:29:19:6B:E7:25:94 Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B7E3891A5105318180C823D8AF5060F67 Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/pGtQQai-dxwqAqhELvcpGWvnJZQ.roa Signing time: Fri 02 Jan 2026 10:19:55 +0000 ROA not before: Fri 02 Jan 2026 10:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25693 IP address blocks: 193.108.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:91:a5:10:53:18:18:0c:82:3d:8a:f5:06:0f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Jan 2 10:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a46b5041a8be771c2a02a8442ef729196be72594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:be:3f:3b:8e:66:9a:4c:88:69:2b:bf:3b:41: 8a:9e:80:35:df:ab:a7:83:86:1c:10:07:f6:d8:3c: 03:7e:04:1a:15:42:ae:99:3f:3a:89:bb:9f:5f:7c: 7a:27:d4:be:54:ea:aa:82:f8:55:6c:d7:b3:db:47: 76:b6:c0:de:50:c0:1d:84:00:55:79:8f:80:20:f9: a4:2d:07:9c:2a:38:56:0d:e1:f6:47:fc:78:fc:6b: a0:a8:c5:c8:89:e0:d0:c4:7f:15:70:43:ec:c8:60: 8c:1b:34:95:30:97:f0:a2:e0:39:da:58:28:aa:0e: e5:ed:84:93:71:d9:be:be:e5:90:45:e6:91:14:74: 29:65:e9:60:a6:72:cd:d1:8e:78:8f:98:16:8a:fb: 7c:5f:27:30:50:98:b6:56:ab:8b:f8:f5:f4:35:35: 84:5e:73:0a:cd:e2:cc:65:66:e3:25:63:4e:ef:3d: 85:b9:4c:e1:e8:a7:9d:68:0a:ef:2f:1a:a5:3a:33: 78:ef:3b:26:b3:06:2f:d5:0a:76:3f:c6:ba:d0:d6: 75:b9:dd:20:ba:2e:46:b8:ff:6f:42:5c:20:a6:36: 4b:fc:d7:28:6e:5d:0b:0f:7b:c9:56:e2:28:a1:e3: 5e:37:20:e6:43:2d:65:15:db:54:f3:aa:e0:a6:87: 38:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:6B:50:41:A8:BE:77:1C:2A:02:A8:44:2E:F7:29:19:6B:E7:25:94 X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/pGtQQai-dxwqAqhELvcpGWvnJZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.108.56.0/24 Signature Algorithm: sha256WithRSAEncryption 14:b3:80:7f:b7:98:7c:d8:cd:96:80:0d:d8:f4:d6:1f:58:20: b2:96:6a:ef:92:13:bd:3b:42:ad:24:3a:9d:7c:c1:3f:c5:af: 6c:78:bb:93:5d:b2:af:dc:2e:e5:6c:fd:0c:78:e8:27:37:0f: 06:2a:7f:3f:e0:d5:17:57:56:49:78:4c:4e:8f:5c:ba:77:7c: 29:11:ff:fd:98:fb:b8:1f:29:f9:57:8e:5f:26:07:15:83:ce: 37:ef:f7:3a:09:c9:1a:e5:ca:3d:c0:54:32:f9:26:2e:f9:64: 96:ff:54:98:2f:46:25:d5:d9:48:dd:ce:20:c5:f6:e1:70:fe: 03:fe:e0:61:69:95:51:78:9b:e2:e6:3f:93:f2:d2:f5:15:f5: 84:fc:57:63:66:4b:0e:41:5f:37:14:ec:fa:59:4e:b4:c5:17: d0:4e:b2:72:a4:d7:e6:dd:a5:7c:b5:8e:7c:f4:ac:e2:ec:3d: c1:d2:bb:bd:11:a1:e8:10:52:15:47:66:46:e0:41:c0:40:39: a3:bc:94:df:08:57:1c:a2:1c:ce:c6:17:0c:7a:b2:bc:db:fc: 88:b1:bf:23:36:01:5b:af:37:56:73:d1:3c:f7:1a:47:22:27: 02:4c:9c:d5:69:b4:e2:60:9a:c6:a0:a0:49:bf:ce:1c:24:7a: 1a:03:ca:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OJGlEFMYGAyCPYr1Bg9nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjYwMTAyMTAxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDZiNTA0MWE4YmU3NzFjMmEwMmE4NDQyZWY3MjkxOTZiZTcyNTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA574/O45mmkyIaSu/O0GKnoA136un g4YcEAf22DwDfgQaFUKumT86ibufX3x6J9S+VOqqgvhVbNez20d2tsDeUMAdhABV eY+AIPmkLQecKjhWDeH2R/x4/GugqMXIieDQxH8VcEPsyGCMGzSVMJfwouA52lgo qg7l7YSTcdm+vuWQReaRFHQpZelgpnLN0Y54j5gWivt8XycwUJi2VquL+PX0NTWE XnMKzeLMZWbjJWNO7z2FuUzh6KedaArvLxqlOjN47zsmswYv1Qp2P8a60NZ1ud0g ui5GuP9vQlwgpjZL/Ncobl0LD3vJVuIooeNeNyDmQy1lFdtU86rgpoc4uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRrUEGovnccKgKoRC73KRlr5yWUMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvcEd0UVFhaS1keHdxQXFoRUx2Y3BHV3ZuSlpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWw4MA0G CSqGSIb3DQEBCwUAA4IBAQAUs4B/t5h82M2WgA3Y9NYfWCCylmrvkhO9O0KtJDqd fME/xa9seLuTXbKv3C7lbP0MeOgnNw8GKn8/4NUXV1ZJeExOj1y6d3wpEf/9mPu4 Hyn5V45fJgcVg8437/c6Ccka5co9wFQy+SYu+WSW/1SYL0Yl1dlI3c4gxfbhcP4D /uBhaZVReJvi5j+T8tL1FfWE/FdjZksOQV83FOz6WU60xRfQTrJypNfm3aV8tY58 9Kzi7D3B0ru9EaHoEFIVR2ZG4EHAQDmjvJTfCFccohzOxhcMerK82/yIsb8jNgFb rzdWc9E89xpHIicCTJzVabTiYJrGoKBJv84cJHoaA8rr -----END CERTIFICATE-----Generated at Tue Jan 20 09:08:57 2026 by rpki-client