This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PgoNorXNkBr0EP5pVAvr0zuPZ10.roa File: PgoNorXNkBr0EP5pVAvr0zuPZ10.roa (raw, json) Hash identifier: u7AXDZOBX4+LgFK328M/+dMX/GTq3PkPzqdAaRl1Mp0= Subject key identifier: 3E:0A:0D:A2:B5:CD:90:1A:F4:10:FE:69:54:0B:EB:D3:3B:8F:67:5D Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A24469EC343981906D326EB1151CB6 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PgoNorXNkBr0EP5pVAvr0zuPZ10.roa Signing time: Thu 01 Jan 2026 08:17:38 +0000 ROA not before: Thu 01 Jan 2026 08:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 212.134.180.0/22 maxlen: 22 212.134.184.0/22 maxlen: 22 212.134.192.0/22 maxlen: 22 212.134.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:44:69:ec:34:39:81:90:6d:32:6e:b1:15:1c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e0a0da2b5cd901af410fe69540bebd33b8f675d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:61:9d:4a:79:e2:63:91:64:9b:0d:39:20:d4: ee:5d:d5:b6:32:8e:cc:38:d7:ba:99:98:b5:86:74: 99:07:ba:1d:a8:11:cf:bd:1b:bb:86:5b:23:52:31: 7f:7c:b8:3f:b0:cd:ec:64:c0:9d:b8:66:68:ce:df: 74:79:2a:72:b4:2d:8b:09:19:eb:6e:7d:bc:5f:77: 03:c1:0c:57:85:f6:3f:0f:31:f7:5d:ab:ab:53:b7: a9:26:29:53:77:30:fd:be:fe:93:c9:dd:2f:68:0c: 8b:ad:8c:10:0b:0a:40:e7:a5:cb:ab:02:b2:dc:27: f2:e7:08:f7:96:63:c6:56:de:19:f1:c2:88:40:da: fb:7a:e5:b1:1b:24:b7:a7:2c:aa:7f:42:59:b3:16: 53:0c:26:24:56:32:87:6c:28:2a:ee:19:d7:0c:3e: 79:c2:02:f1:48:78:23:08:e8:e6:d2:e4:17:d8:22: fb:3c:1a:47:c8:a0:7f:e0:91:c4:77:22:bf:95:14: 14:65:5f:92:d4:fa:7b:9b:5c:0d:65:a9:2b:7c:36: 98:d7:63:3b:21:5c:c0:70:36:bd:b1:6a:d1:b7:cf: ef:38:aa:cf:ca:9d:9f:7c:89:26:d0:72:7d:82:bf: 03:ac:3e:f4:5b:c5:73:05:f0:9a:1e:81:8e:83:4a: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0A:0D:A2:B5:CD:90:1A:F4:10:FE:69:54:0B:EB:D3:3B:8F:67:5D X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/PgoNorXNkBr0EP5pVAvr0zuPZ10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.180.0-212.134.187.255 212.134.192.0/22 212.134.200.0/22 Signature Algorithm: sha256WithRSAEncryption 54:58:1c:7c:d7:2d:60:e4:de:68:b9:bf:21:5a:99:53:9d:43: a4:70:7e:3e:ea:78:ca:92:78:36:18:cc:bb:c2:a1:0e:5a:8d: a4:0d:7f:a0:53:d8:8a:e8:4f:a7:4d:76:ae:13:df:d8:dc:18: df:85:25:22:35:41:06:ca:c7:38:56:6c:4d:c9:2f:d9:0e:ad: cc:46:65:d2:d6:61:e2:7d:68:c1:f4:2a:9b:77:cb:3f:43:0c: 38:64:73:50:d9:67:9e:95:a1:c7:5c:70:17:11:9f:16:85:d6: ee:f6:c2:23:3e:23:25:18:87:49:dd:0c:7b:39:e3:a6:04:3f: d5:59:8d:1c:57:8e:0e:3c:e0:66:38:59:9c:ab:3f:af:84:1f: 61:2d:64:10:f1:ed:33:fa:9d:da:c0:45:f2:da:97:c7:ee:32: 6c:9b:89:87:c0:81:e2:67:58:2b:50:8b:db:c0:f7:5b:a2:df: c7:35:93:ce:18:cf:eb:97:d5:cd:eb:42:1e:1f:20:9f:73:0c: 88:ff:25:91:4f:d7:a7:a8:ea:4e:c7:92:7d:1d:7a:71:2c:e4: 04:bc:d3:f4:49:c2:e2:f6:86:7a:8a:95:4d:f7:f2:cc:84:f5: 65:62:23:d9:40:63:d5:89:11:82:69:1f:3d:1a:3a:2e:d4:27: 7b:e1:0f:47 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4okRp7DQ5gZBtMm6xFRy2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTBhMGRhMmI1Y2Q5MDFhZjQxMGZlNjk1NDBiZWJkMzNiOGY2NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWGdSnniY5Fkmw05INTuXdW2Mo7M ONe6mZi1hnSZB7odqBHPvRu7hlsjUjF/fLg/sM3sZMCduGZozt90eSpytC2LCRnr bn28X3cDwQxXhfY/DzH3XaurU7epJilTdzD9vv6Tyd0vaAyLrYwQCwpA56XLqwKy 3Cfy5wj3lmPGVt4Z8cKIQNr7euWxGyS3pyyqf0JZsxZTDCYkVjKHbCgq7hnXDD55 wgLxSHgjCOjm0uQX2CL7PBpHyKB/4JHEdyK/lRQUZV+S1Pp7m1wNZakrfDaY12M7 IVzAcDa9sWrRt8/vOKrPyp2ffIkm0HJ9gr8DrD70W8VzBfCaHoGOg0qQvQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFD4KDaK1zZAa9BD+aVQL69M7j2ddMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvUGdvTm9yWE5rQnIwRVA1cFZBdnIwenVQWjEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBALUhrQD BALUhrgDBALUhsADBALUhsgwDQYJKoZIhvcNAQELBQADggEBAFRYHHzXLWDk3mi5 vyFamVOdQ6Rwfj7qeMqSeDYYzLvCoQ5ajaQNf6BT2IroT6dNdq4T39jcGN+FJSI1 QQbKxzhWbE3JL9kOrcxGZdLWYeJ9aMH0Kpt3yz9DDDhkc1DZZ56VocdccBcRnxaF 1u72wiM+IyUYh0ndDHs546YEP9VZjRxXjg484GY4WZyrP6+EH2EtZBDx7TP6ndrA RfLal8fuMmybiYfAgeJnWCtQi9vA91ui38c1k84Yz+uX1c3rQh4fIJ9zDIj/JZFP 16eo6k7Hkn0denEs5AS80/RJwuL2hnqKlU338syE9WViI9lAY9WJEYJpHz0aOi7U J3vhD0c= -----END CERTIFICATE-----Generated at Mon Jan 19 08:16:32 2026 by rpki-client