This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/Pygss5f1ruujkq8WTW7laONkQ2o.roa File: Pygss5f1ruujkq8WTW7laONkQ2o.roa (raw, json) Hash identifier: 7WHTQ4+Rj6UfUnW2B2kYVMQPC72bm+std85TSgIO/SI= Subject key identifier: 3F:28:2C:B3:97:F5:AE:EB:A3:92:AF:16:4D:6E:E5:68:E3:64:43:6A Certificate issuer: /CN=c355722b4e8a48240acdf5f337838aa206aa02da Certificate serial: 019B797F02DAABD09B1E5CA70BED3C8379FA Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/Pygss5f1ruujkq8WTW7laONkQ2o.roa Signing time: Thu 01 Jan 2026 12:18:45 +0000 ROA not before: Thu 01 Jan 2026 12:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60458 IP address blocks: 185.144.52.0/24 maxlen: 24 185.144.53.0/24 maxlen: 24 185.144.54.0/24 maxlen: 24 185.144.55.0/24 maxlen: 24 185.164.100.0/22 maxlen: 22 185.254.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:02:da:ab:d0:9b:1e:5c:a7:0b:ed:3c:83:79:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da Validity Not Before: Jan 1 12:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f282cb397f5aeeba392af164d6ee568e364436a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a7:32:83:83:c8:53:9f:7d:09:19:39:71:49: ef:f7:3c:69:8f:91:28:cf:f7:87:6a:d7:d8:16:8a: 1e:bd:2e:55:a4:ab:27:ae:b9:3a:3d:42:91:b1:ce: 62:d9:15:21:30:18:d9:c0:94:b9:6c:76:df:73:79: 89:40:e2:9e:d8:cd:47:c8:2a:7f:4c:bf:7b:d8:5c: 5e:03:e0:f3:36:cf:56:f4:5a:53:ae:6d:32:ec:68: 57:d9:9d:f0:8d:4c:ad:dd:1d:d8:77:87:81:97:78: c6:d5:c7:59:7e:ea:32:bd:d9:f4:de:8e:f3:e4:ee: c0:3c:4f:09:a4:15:a7:cf:d7:51:39:9a:d8:89:9d: 9f:8f:65:74:a2:95:62:40:1e:f1:c2:9c:9e:bc:57: 06:a4:cc:5b:16:cc:11:58:9b:ce:f9:14:f9:0f:c1: 9d:72:b0:1f:bb:af:4d:c8:ad:f8:db:81:42:05:0f: a2:df:8b:c4:21:d0:91:24:99:0f:9b:fa:1f:9a:5f: 8e:fa:8a:d4:5a:66:0c:37:6e:a1:b5:49:8d:c3:8f: dc:b0:97:43:75:11:8d:1d:1f:e7:23:74:9f:4f:54: f2:14:48:6c:f1:9c:d5:9c:46:05:83:de:ff:93:8a: 1e:f9:6f:d3:35:62:5a:d5:c0:a4:e7:3d:f9:c0:c2: a0:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:28:2C:B3:97:F5:AE:EB:A3:92:AF:16:4D:6E:E5:68:E3:64:43:6A X509v3 Authority Key Identifier: keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/Pygss5f1ruujkq8WTW7laONkQ2o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.144.52.0/22 185.164.100.0/22 185.254.24.0/22 Signature Algorithm: sha256WithRSAEncryption 9d:8f:56:8f:30:4c:33:43:12:42:e9:96:35:31:14:4e:f8:de: c1:9f:27:81:73:2d:53:a8:64:e8:2a:ff:1d:c7:34:c0:54:8b: 81:c5:10:bb:a6:b1:0e:fb:81:55:e4:0b:40:72:d6:1e:ae:ee: b8:4f:c7:5a:9c:36:ec:4a:e8:2e:9c:c7:26:22:80:01:cc:cc: a2:5e:95:5d:d5:c3:54:84:b2:31:c5:bb:f0:11:b2:a9:ce:22: 8e:7c:55:c5:d4:db:ca:f4:40:32:f9:e6:5c:9a:7c:fd:64:8d: 3a:be:29:98:ff:a9:d2:4e:de:3f:6c:e3:d4:c9:cb:16:0a:39: 52:4e:39:e1:c5:90:14:d4:77:80:ef:36:cf:9a:2d:48:91:67: 17:bb:04:16:d2:3c:41:1f:01:70:90:1b:42:71:53:e4:c6:1b: 87:13:d8:6e:15:69:b3:88:21:f0:f9:49:f1:58:93:2a:37:d1: a2:eb:7b:02:f8:f2:ba:1d:fc:03:45:3e:e1:25:af:2e:10:23: d2:88:3d:48:51:5c:c1:1c:54:22:21:a7:3b:ba:71:7f:e6:84: 06:82:c1:91:82:09:af:22:1d:5c:ce:58:73:2f:f8:98:f5:c9: 06:91:77:2a:87:c3:ac:be:90:94:f3:08:e6:b6:72:d3:d0:3a: e1:d3:6c:f9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fwLaq9CbHlynC+08g3n6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNTU3MjJiNGU4YTQ4MjQwYWNkZjVmMzM3ODM4YWEyMDZh YTAyZGEwHhcNMjYwMTAxMTIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjI4MmNiMzk3ZjVhZWViYTM5MmFmMTY0ZDZlZTU2OGUzNjQ0MzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKcyg4PIU599CRk5cUnv9zxpj5Eo z/eHatfYFooevS5VpKsnrrk6PUKRsc5i2RUhMBjZwJS5bHbfc3mJQOKe2M1HyCp/ TL972FxeA+DzNs9W9FpTrm0y7GhX2Z3wjUyt3R3Yd4eBl3jG1cdZfuoyvdn03o7z 5O7APE8JpBWnz9dROZrYiZ2fj2V0opViQB7xwpyevFcGpMxbFswRWJvO+RT5D8Gd crAfu69NyK3424FCBQ+i34vEIdCRJJkPm/ofml+O+orUWmYMN26htUmNw4/csJdD dRGNHR/nI3SfT1TyFEhs8ZzVnEYFg97/k4oe+W/TNWJa1cCk5z35wMKgbwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFD8oLLOX9a7ro5KvFk1u5WjjZENqMB8GA1UdIwQY MBaAFMNVcitOikgkCs318zeDiqIGqgLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYt YTJlZjkwYzllOTEzLzEvUHlnc3M1ZjFydXVqa3E4V1RXN2xhT05rUTJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYtYTJlZjkwYzllOTEz LzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCuZA0AwQC uaRkAwQCuf4YMA0GCSqGSIb3DQEBCwUAA4IBAQCdj1aPMEwzQxJC6ZY1MRRO+N7B nyeBcy1TqGToKv8dxzTAVIuBxRC7prEO+4FV5AtActYeru64T8danDbsSugunMcm IoABzMyiXpVd1cNUhLIxxbvwEbKpziKOfFXF1NvK9EAy+eZcmnz9ZI06vimY/6nS Tt4/bOPUycsWCjlSTjnhxZAU1HeA7zbPmi1IkWcXuwQW0jxBHwFwkBtCcVPkxhuH E9huFWmziCHw+UnxWJMqN9Gi63sC+PK6HfwDRT7hJa8uECPSiD1IUVzBHFQiIac7 unF/5oQGgsGRggmvIh1czlhzL/iY9ckGkXcqh8OsvpCU8wjmtnLT0Drh02z5 -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:01 2026 by rpki-client