This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/PjGZVG-uOaDVHbHbJIUYe0z8jmg.roa File: PjGZVG-uOaDVHbHbJIUYe0z8jmg.roa (raw, json) Hash identifier: 6MncPoLprurVYfiY9ZBImtV4SOtSMwf+QcTHZ6cdyhk= Subject key identifier: 3E:31:99:54:6F:AE:39:A0:D5:1D:B1:DB:24:85:18:7B:4C:FC:8E:68 Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b Certificate serial: 019B7F1564A14E1EB29BFC37B48D8A2F5648 Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/PjGZVG-uOaDVHbHbJIUYe0z8jmg.roa Signing time: Fri 02 Jan 2026 14:21:06 +0000 ROA not before: Fri 02 Jan 2026 14:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44692 IP address blocks: 78.31.144.0/23 maxlen: 23 78.31.146.0/23 maxlen: 23 78.31.148.0/23 maxlen: 23 78.31.150.0/23 maxlen: 23 85.202.96.0/20 maxlen: 24 85.202.107.0/24 maxlen: 24 109.125.192.0/19 maxlen: 19 109.125.218.0/23 maxlen: 23 109.125.220.0/22 maxlen: 22 109.125.224.0/23 maxlen: 23 109.125.226.0/23 maxlen: 23 109.125.228.0/23 maxlen: 23 109.125.230.0/23 maxlen: 23 109.125.232.0/22 maxlen: 22 109.125.236.0/22 maxlen: 22 109.125.240.0/22 maxlen: 22 109.125.244.0/22 maxlen: 22 109.125.248.0/22 maxlen: 22 109.125.254.0/24 maxlen: 24 109.125.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:64:a1:4e:1e:b2:9b:fc:37:b4:8d:8a:2f:56:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b Validity Not Before: Jan 2 14:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e3199546fae39a0d51db1db2485187b4cfc8e68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d9:09:17:f4:34:ea:6a:5f:05:76:da:0a:05: bb:42:2b:74:04:d5:c9:7e:d5:bb:7d:71:91:ca:1e: 44:3e:88:18:69:6b:dd:5e:2c:1d:53:40:ec:2c:d6: 07:91:b1:80:9a:38:cf:13:a9:4f:13:b4:ac:f1:16: 56:70:e0:53:db:33:2d:ac:cd:55:90:ac:28:a6:74: 97:65:26:b2:bd:e5:3d:a9:dc:29:6b:41:55:b8:60: d2:15:b8:a4:a3:ac:c0:07:2c:83:e6:56:04:79:05: b7:ad:79:65:f8:46:4e:13:94:63:c1:f8:9d:24:3d: 34:4a:05:f1:f1:78:0c:9b:6d:e4:1f:bd:31:ea:8c: d2:5a:07:d8:a3:8c:98:6f:1d:41:8c:4d:cb:52:f9: 89:ab:95:07:da:a3:52:1f:63:eb:7a:b5:65:c4:95: 36:95:29:fa:4a:bf:f0:ae:6f:22:2e:16:8e:19:46: 34:68:6d:9d:d4:1c:dd:8a:75:09:39:fd:f1:70:35: 80:08:0d:77:e7:95:5d:0b:f4:36:26:3b:9a:b4:b3: 7c:23:13:3b:38:71:e0:f0:60:79:3a:08:fc:fb:cf: 26:d9:f1:e9:22:e0:f1:44:40:72:65:e6:46:12:51: d1:46:d2:6e:de:18:e3:ec:62:b6:d2:f4:a4:cf:c8: 4d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:31:99:54:6F:AE:39:A0:D5:1D:B1:DB:24:85:18:7B:4C:FC:8E:68 X509v3 Authority Key Identifier: keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/PjGZVG-uOaDVHbHbJIUYe0z8jmg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.144.0/21 85.202.96.0/20 109.125.192.0-109.125.251.255 109.125.254.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:ec:cc:dd:82:02:a1:be:1f:c4:cf:87:1f:84:28:bf:d0:83: ab:5b:21:9d:d8:2c:28:84:22:2d:15:6f:ad:10:0f:16:1f:49: 20:98:1f:a8:c7:67:7d:9e:c6:e9:c5:5f:fe:09:5b:ce:e3:55: 7e:05:c6:16:62:c2:58:9a:3a:f0:30:50:c9:b6:49:33:16:15: b6:ac:af:d5:df:23:7b:1b:6b:ad:e0:3b:6b:ce:ce:e8:3f:4d: f6:c9:71:a5:98:5a:f6:49:03:f4:dc:ca:2e:e6:7e:e6:c7:a4: 9d:5b:a9:84:de:14:0d:50:4b:2f:31:f8:b5:0b:fd:59:a7:9d: f2:83:c2:44:f1:65:87:b5:5f:a6:ea:1b:91:48:3a:6d:48:29: ea:8a:67:31:ba:b8:56:e1:ec:d2:f1:16:79:c7:37:db:23:59: dd:b6:d4:3f:97:dc:c0:4b:92:5d:91:fd:5c:ec:9c:1d:b9:98: df:9a:ce:e1:0a:c4:db:23:d1:b3:bc:a0:8f:24:56:c0:85:8c: be:9e:4b:5b:4e:d0:ed:ed:12:18:05:7d:c2:11:f5:66:61:04: b9:67:60:4c:b8:89:3a:7e:c2:5f:64:44:f5:8b:b2:af:e0:23: 9b:39:b0:9f:8b:cd:3f:83:51:23:9b:27:a3:08:f2:3e:47:37: 4d:a4:45:5c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/FWShTh6ym/w3tI2KL1ZIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZmQwZjBhZDljNzg0MDk2YzVhMGZiOWU4Y2Y1YzJmMDQ0 MDQxM2IwHhcNMjYwMTAyMTQyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTMxOTk1NDZmYWUzOWEwZDUxZGIxZGIyNDg1MTg3YjRjZmM4ZTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNkJF/Q06mpfBXbaCgW7Qit0BNXJ ftW7fXGRyh5EPogYaWvdXiwdU0DsLNYHkbGAmjjPE6lPE7Ss8RZWcOBT2zMtrM1V kKwopnSXZSayveU9qdwpa0FVuGDSFbiko6zAByyD5lYEeQW3rXll+EZOE5Rjwfid JD00SgXx8XgMm23kH70x6ozSWgfYo4yYbx1BjE3LUvmJq5UH2qNSH2PrerVlxJU2 lSn6Sr/wrm8iLhaOGUY0aG2d1BzdinUJOf3xcDWACA1355VdC/Q2JjuatLN8IxM7 OHHg8GB5Ogj8+88m2fHpIuDxREByZeZGElHRRtJu3hjj7GK20vSkz8hN2QIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFD4xmVRvrjmg1R2x2ySFGHtM/I5oMB8GA1UdIwQY MBaAFL/9DwrZx4QJbFoPuejPXC8EQEE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUt NmRjZjBjOTNjYmRiLzEvUGpHWlZHLXVPYURWSGJIYkpJVVllMHo4am1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUtNmRjZjBjOTNjYmRi LzEvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDTh+QAwQE VcpgMAwDBAZtfcADBAJtffgDBAFtff4wDQYJKoZIhvcNAQELBQADggEBAHrszN2C AqG+H8TPhx+EKL/Qg6tbIZ3YLCiEIi0Vb60QDxYfSSCYH6jHZ32exunFX/4JW87j VX4FxhZiwliaOvAwUMm2STMWFbasr9XfI3sba63gO2vOzug/TfbJcaWYWvZJA/Tc yi7mfubHpJ1bqYTeFA1QSy8x+LUL/VmnnfKDwkTxZYe1X6bqG5FIOm1IKeqKZzG6 uFbh7NLxFnnHN9sjWd221D+X3MBLkl2R/VzsnB25mN+azuEKxNsj0bO8oI8kVsCF jL6eS1tO0O3tEhgFfcIR9WZhBLlnYEy4iTp+wl9kRPWLsq/gI5s5sJ+LzT+DUSOb J6MI8j5HN02kRVw= -----END CERTIFICATE-----Generated at Mon Jan 26 19:41:59 2026 by rpki-client