This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/PG-UHbQTZHuH3-4z7ptrJ0PncOY.roa File: PG-UHbQTZHuH3-4z7ptrJ0PncOY.roa (raw, json) Hash identifier: nEkCZPK0IElgvngwjJLm5JXljyXO8vFH73CRNykbxfs= Subject key identifier: 3C:6F:94:1D:B4:13:64:7B:87:DF:EE:33:EE:9B:6B:27:43:E7:70:E6 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83A2B2A58CE70EC875459C5AFA653C Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/PG-UHbQTZHuH3-4z7ptrJ0PncOY.roa Signing time: Fri 02 Jan 2026 16:21:31 +0000 ROA not before: Fri 02 Jan 2026 16:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58071 IP address blocks: 37.230.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a2:b2:a5:8c:e7:0e:c8:75:45:9c:5a:fa:65:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c6f941db413647b87dfee33ee9b6b2743e770e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:38:cb:19:25:43:ea:1e:c2:87:f4:b6:7f: 5a:bb:22:fc:74:2d:e2:eb:2d:49:a5:11:c2:9b:19: df:5a:f7:d6:50:62:a4:5d:d9:d4:df:e8:22:eb:c2: 57:53:f4:b6:4d:10:39:1f:64:00:a3:ec:83:23:35: 58:b4:ba:a4:40:b6:e8:b2:c6:7c:c8:0f:f0:e3:7d: c5:a8:86:6c:7a:56:f9:99:9c:58:5f:0f:15:f7:6a: 5f:b3:61:a5:d6:ba:c2:57:b3:c7:a6:b6:91:48:2b: 02:bd:13:f5:8b:e4:da:cd:a3:7a:38:07:16:a9:f7: 83:43:95:38:b8:68:34:43:6a:39:ab:2d:d0:e2:f6: 2f:54:1e:de:50:54:4a:21:de:5e:91:59:74:da:1e: 6e:c1:a0:56:0f:38:3c:22:57:3c:6e:a8:7d:36:be: 8c:45:93:7e:04:f1:1f:ef:97:d2:ba:0e:2e:c9:0f: 99:c7:79:64:56:50:fa:da:07:67:cf:f3:d0:15:81: de:f2:82:73:dd:5d:9a:a0:2a:ce:f5:65:3c:5b:4b: b4:fc:9c:86:a9:d7:70:ba:17:f7:d2:ce:b0:be:94: 11:6d:64:39:be:67:e4:49:09:62:1b:a5:c6:16:95: 31:96:d8:4f:65:e7:ef:98:fd:bb:23:df:16:5e:7d: 80:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:6F:94:1D:B4:13:64:7B:87:DF:EE:33:EE:9B:6B:27:43:E7:70:E6 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/PG-UHbQTZHuH3-4z7ptrJ0PncOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.230.156.0/24 Signature Algorithm: sha256WithRSAEncryption a4:02:d2:52:c2:6e:b8:1c:cf:7c:00:b3:d7:4e:c6:79:a8:e1: f6:65:35:d3:74:ba:d9:ba:5c:57:55:8e:d5:2f:cf:86:e4:3b: e2:8a:3c:b8:1d:86:33:69:02:4c:b0:25:93:8d:b3:df:33:14: 8e:5a:a8:0f:8a:68:3b:bd:7d:12:d0:17:75:35:03:73:4d:ae: 6a:ff:35:53:99:f6:f4:8a:df:e3:80:7e:c3:c3:9b:0d:8c:de: 0d:5a:6b:83:25:ce:9e:08:01:2b:82:c1:58:3c:2a:85:29:4c: b2:36:6b:87:db:5f:14:82:ab:c9:c8:2c:0a:44:a3:42:f8:8f: 6d:6f:e9:22:56:67:e9:5f:3a:fa:5c:66:50:fc:4e:86:74:0e: 4e:b2:a0:1d:0b:85:16:79:16:85:2b:9b:12:f4:15:02:9d:a2: 96:f6:48:ac:df:08:b4:00:07:bd:fc:90:38:9b:fd:ec:18:e0: 3e:97:6e:6b:d9:22:b8:cc:ad:77:ed:72:c1:a7:6e:41:20:31: 96:72:96:b4:bb:cb:dd:93:a0:e0:9b:ed:71:04:79:27:1b:fb: 81:5a:0e:f5:b5:cb:03:4b:1f:3c:9d:38:61:a3:71:7a:0e:ca: 94:3a:de:6d:f8:be:16:11:79:37:10:0a:ed:24:f0:86:f2:9b: a6:8b:88:0a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6KypYznDsh1RZxa+mU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzZmOTQxZGI0MTM2NDdiODdkZmVlMzNlZTliNmIyNzQzZTc3MGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAU4yxklQ+oewof0tn9auyL8dC3i 6y1JpRHCmxnfWvfWUGKkXdnU3+gi68JXU/S2TRA5H2QAo+yDIzVYtLqkQLbossZ8 yA/w433FqIZselb5mZxYXw8V92pfs2Gl1rrCV7PHpraRSCsCvRP1i+TazaN6OAcW qfeDQ5U4uGg0Q2o5qy3Q4vYvVB7eUFRKId5ekVl02h5uwaBWDzg8Ilc8bqh9Nr6M RZN+BPEf75fSug4uyQ+Zx3lkVlD62gdnz/PQFYHe8oJz3V2aoCrO9WU8W0u0/JyG qddwuhf30s6wvpQRbWQ5vmfkSQliG6XGFpUxlthPZefvmP27I98WXn2ACQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDxvlB20E2R7h9/uM+6baydD53DmMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvUEctVUhiUVRaSHVIMy00ejdwdHJKMFBuY09ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJeacMA0G CSqGSIb3DQEBCwUAA4IBAQCkAtJSwm64HM98ALPXTsZ5qOH2ZTXTdLrZulxXVY7V L8+G5Dviijy4HYYzaQJMsCWTjbPfMxSOWqgPimg7vX0S0Bd1NQNzTa5q/zVTmfb0 it/jgH7Dw5sNjN4NWmuDJc6eCAErgsFYPCqFKUyyNmuH218UgqvJyCwKRKNC+I9t b+kiVmfpXzr6XGZQ/E6GdA5OsqAdC4UWeRaFK5sS9BUCnaKW9kis3wi0AAe9/JA4 m/3sGOA+l25r2SK4zK137XLBp25BIDGWcpa0u8vdk6Dgm+1xBHknG/uBWg71tcsD Sx88nThho3F6DsqUOt5t+L4WEXk3EArtJPCG8pumi4gK -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:26 2026 by rpki-client