This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/Pug_p9HITgpm7BJCSDWU0O14f6k.roa File: Pug_p9HITgpm7BJCSDWU0O14f6k.roa (raw, json) Hash identifier: ZRQX3KG8bE/bbw5v9G0xJ8TDZlB8FFTvWWz9Ahu2Og0= Subject key identifier: 3E:E8:3F:A7:D1:C8:4E:0A:66:EC:12:42:48:35:94:D0:ED:78:7F:A9 Certificate issuer: /CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8 Certificate serial: 019B78A2B992BF23BB34659586C1B11930B5 Authority key identifier: 0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/Pug_p9HITgpm7BJCSDWU0O14f6k.roa Signing time: Thu 01 Jan 2026 08:18:08 +0000 ROA not before: Thu 01 Jan 2026 08:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44295 IP address blocks: 92.42.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.mft rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b9:92:bf:23:bb:34:65:95:86:c1:b1:19:30:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be779eb90be7d5be0c1dc48a6cd23dbd43b97c8 Validity Not Before: Jan 1 08:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ee83fa7d1c84e0a66ec1242483594d0ed787fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:02:7a:25:82:e4:bc:76:83:b2:6b:1e:6e:74: ed:59:4e:87:ee:da:c7:bc:4c:99:a5:37:be:7b:81: 29:32:de:01:de:b8:96:95:4d:c5:6e:0c:56:54:d9: 80:db:54:29:90:76:af:f5:46:3e:b7:f4:75:50:cd: 37:b5:25:a9:a9:a8:63:5a:5f:66:62:5f:4d:fb:18: 11:2e:1a:5a:cc:67:db:dd:b7:a0:17:97:a1:ec:c6: f8:3e:1d:7a:56:46:b0:91:18:4e:79:10:db:c5:f3: bb:ae:9f:65:ec:96:45:04:3c:73:65:62:2b:2b:42: 26:b7:01:30:57:60:da:d6:ec:65:8d:2f:09:ac:a8: 3c:bb:6b:40:be:27:3a:84:c2:4a:9c:d7:68:63:7f: f2:8f:15:42:27:9a:db:a9:fe:16:0f:af:fd:5d:18: a4:7d:1a:d9:43:bd:51:f7:7e:c1:51:0a:7a:d3:5a: 76:32:00:d0:7c:d2:4e:c5:5a:54:69:26:a2:ae:a1: 5f:ec:81:49:f9:c8:49:b1:03:3e:c8:d6:53:97:65: 2e:99:5a:07:2c:2f:c4:dc:96:ee:d9:e8:57:97:0c: c5:8d:13:1d:3d:e4:5d:2c:e9:80:da:e4:b9:bd:11: ca:71:bb:13:4e:5a:aa:f0:1a:62:e8:2c:38:0c:56: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E8:3F:A7:D1:C8:4E:0A:66:EC:12:42:48:35:94:D0:ED:78:7F:A9 X509v3 Authority Key Identifier: keyid:0B:E7:79:EB:90:BE:7D:5B:E0:C1:DC:48:A6:CD:23:DB:D4:3B:97:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-d565C-fVvgwdxIps0j29Q7l8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/Pug_p9HITgpm7BJCSDWU0O14f6k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cf8b14-b7f7-405a-b66e-387a8fbb1042/1/C-d565C-fVvgwdxIps0j29Q7l8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.176.0/21 Signature Algorithm: sha256WithRSAEncryption 8a:95:34:c7:3e:31:50:1b:17:75:65:62:24:82:ef:03:9a:61: 64:3b:5d:7c:b1:7b:e5:ba:fe:c1:97:7b:c0:51:89:c3:40:58: b3:68:9b:2d:2c:b5:5a:db:aa:01:b6:f3:c5:ac:1d:c9:5f:34: f7:53:75:fe:9c:9a:6b:fb:17:56:03:73:04:3e:d0:5e:32:e3: 6a:22:e1:ef:b8:9a:9f:6d:15:02:d7:3d:ae:78:71:f7:77:9e: 19:48:c2:70:99:ec:c8:9a:6b:c1:9f:72:6c:53:97:49:e3:b0: 50:62:d8:7e:b7:91:dc:4e:ac:3d:3b:09:7a:9c:83:13:28:68: e8:ee:70:47:b9:e2:2e:b9:07:02:e3:66:97:48:0e:9f:b9:bb: 99:12:95:7e:bb:8e:a0:7e:04:ca:03:fc:99:32:f9:2e:21:f0: f0:8d:57:e6:8c:17:1e:dc:0b:b6:dc:37:f5:4c:bf:0a:58:0c: e6:8d:4a:a8:3e:fb:d9:a7:af:52:34:ac:20:d2:2c:f5:97:1c: 9c:1c:a0:54:03:82:d9:a1:5e:50:76:64:4b:31:2e:25:b3:5b: a0:e9:92:da:3c:0b:10:1a:85:f5:25:09:27:d0:0c:1b:8e:d6: 8e:27:6e:ae:d6:02:a7:33:99:9e:d6:68:7e:1b:8d:a5:3a:b0: b4:a6:0a:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ormSvyO7NGWVhsGxGTC1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZTc3OWViOTBiZTdkNWJlMGMxZGM0OGE2Y2QyM2RiZDQz Yjk3YzgwHhcNMjYwMTAxMDgxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWU4M2ZhN2QxYzg0ZTBhNjZlYzEyNDI0ODM1OTRkMGVkNzg3ZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAJ6JYLkvHaDsmsebnTtWU6H7trH vEyZpTe+e4EpMt4B3riWlU3FbgxWVNmA21QpkHav9UY+t/R1UM03tSWpqahjWl9m Yl9N+xgRLhpazGfb3begF5eh7Mb4Ph16VkawkRhOeRDbxfO7rp9l7JZFBDxzZWIr K0ImtwEwV2Da1uxljS8JrKg8u2tAvic6hMJKnNdoY3/yjxVCJ5rbqf4WD6/9XRik fRrZQ71R937BUQp601p2MgDQfNJOxVpUaSairqFf7IFJ+chJsQM+yNZTl2UumVoH LC/E3Jbu2ehXlwzFjRMdPeRdLOmA2uS5vRHKcbsTTlqq8Bpi6Cw4DFYOXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD7oP6fRyE4KZuwSQkg1lNDteH+pMB8GA1UdIwQY MBaAFAvneeuQvn1b4MHcSKbNI9vUO5fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jZjhiMTQtYjdmNy00MDVhLWI2NmUt Mzg3YThmYmIxMDQyLzEvUHVnX3A5SElUZ3BtN0JKQ1NEV1UwTzE0ZjZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9jZjhiMTQtYjdmNy00MDVhLWI2NmUtMzg3YThmYmIxMDQy LzEvQy1kNTY1Qy1mVnZnd2R4SXBzMGoyOVE3bDhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXCqwMA0G CSqGSIb3DQEBCwUAA4IBAQCKlTTHPjFQGxd1ZWIkgu8DmmFkO118sXvluv7Bl3vA UYnDQFizaJstLLVa26oBtvPFrB3JXzT3U3X+nJpr+xdWA3MEPtBeMuNqIuHvuJqf bRUC1z2ueHH3d54ZSMJwmezImmvBn3JsU5dJ47BQYth+t5HcTqw9Owl6nIMTKGjo 7nBHueIuuQcC42aXSA6fubuZEpV+u46gfgTKA/yZMvkuIfDwjVfmjBce3Au23Df1 TL8KWAzmjUqoPvvZp69SNKwg0iz1lxycHKBUA4LZoV5QdmRLMS4ls1ug6ZLaPAsQ GoX1JQkn0AwbjtaOJ26u1gKnM5me1mh+G42lOrC0pgos -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:35 2026 by rpki-client