This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PgVA-0Iihow2aGoRxP_WDjSo6is.roa File: PgVA-0Iihow2aGoRxP_WDjSo6is.roa (raw, json) Hash identifier: OTnbjqityXk1jfHbstcdHtxas+KamyDiu0Hul6fiaWo= Subject key identifier: 3E:05:40:FB:42:22:86:8C:36:68:6A:11:C4:FF:D6:0E:34:A8:EA:2B Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F844AED0844F5DEC82541FA2387BB6F Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PgVA-0Iihow2aGoRxP_WDjSo6is.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3491 IP address blocks: 31.59.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4a:ed:08:44:f5:de:c8:25:41:fa:23:87:bb:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e0540fb4222868c36686a11c4ffd60e34a8ea2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c3:dc:8a:d0:95:93:73:60:95:ca:e7:49:ee: f1:f6:92:3e:9b:57:f5:4b:69:b2:c1:1d:d7:e6:a4: a8:02:f3:6f:d2:56:08:0b:b5:dd:76:c3:14:79:f6: f9:60:f6:26:81:84:e3:ac:dc:8a:92:f8:d6:05:87: 28:90:42:0f:28:b1:e1:0d:47:76:04:51:dd:98:87: d2:32:96:10:75:df:00:c1:5e:dc:3a:94:ae:b8:35: 6f:7e:f7:0f:60:51:d0:b0:7f:43:63:f7:b4:32:67: 53:d4:23:53:f3:20:ee:4e:3a:33:e5:2e:c6:7c:60: cf:6d:58:3f:ba:b8:f0:a5:81:f0:8e:2e:2f:0b:a0: d9:48:b9:e4:90:45:ef:e9:9f:27:30:89:8e:71:25: fc:14:85:5e:c0:20:e7:1c:52:ae:b9:5c:1a:cb:92: 6b:2f:c3:59:42:78:0e:4b:18:fc:91:94:ab:04:40: 96:27:87:1e:8a:95:28:ac:50:b6:dd:ca:ff:6c:7d: c5:f6:db:fc:cb:0f:7f:ab:a6:32:24:45:02:43:de: 4b:e3:66:c8:e8:b2:fc:c4:bd:ce:99:a1:54:38:82: 76:f6:ab:1e:6e:21:44:9f:cb:41:69:e3:fb:01:72: 6e:8f:8a:b9:32:2c:b1:1d:6c:86:11:56:21:d6:e1: ff:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:05:40:FB:42:22:86:8C:36:68:6A:11:C4:FF:D6:0E:34:A8:EA:2B X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/PgVA-0Iihow2aGoRxP_WDjSo6is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.59.78.0/24 Signature Algorithm: sha256WithRSAEncryption 11:c2:48:1b:a5:6c:e2:ea:fe:29:c2:78:38:ae:d2:a7:7f:f7: de:22:5d:d1:d3:6e:29:16:43:60:36:db:10:f8:0c:1d:cd:ec: 88:73:4f:3b:ec:78:bf:98:d1:68:86:a2:69:2b:ae:4d:70:e2: ff:32:0d:ce:99:f1:1e:74:eb:1a:11:fe:ea:20:59:d3:1a:85: f6:c4:a2:b3:10:62:f4:a6:7a:fc:79:e2:2a:67:70:c8:93:f2: 00:47:13:55:39:6b:61:59:82:42:6d:6d:6a:d4:c5:f8:8a:2f: 27:20:86:46:3b:99:b3:46:ff:d2:68:20:32:99:3c:9a:43:d5: 06:a9:fd:e0:e0:9d:3a:ef:e3:18:15:af:f4:09:94:85:6d:41: f1:07:d1:5f:5d:a2:f4:79:c0:85:d4:bd:2b:5a:d5:55:20:03: 94:56:41:7f:56:24:7a:38:a5:df:3f:dc:1d:2f:cf:b4:1e:14: 37:40:8f:90:ac:ef:2a:45:b2:f4:17:16:9c:f2:20:26:ce:7f: 92:78:96:47:f9:44:04:2f:ae:d6:d3:b6:f7:79:46:10:b6:fd: 33:52:e2:bf:86:ee:2f:72:08:9b:5a:b3:2e:41:d1:b1:91:43: c1:e1:fa:b4:64:e0:ac:95:dd:0d:59:d8:40:fe:79:44:dd:c9: 5b:bf:4b:7a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hErtCET13sglQfojh7tvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTA1NDBmYjQyMjI4NjhjMzY2ODZhMTFjNGZmZDYwZTM0YThlYTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMPcitCVk3NglcrnSe7x9pI+m1f1 S2mywR3X5qSoAvNv0lYIC7XddsMUefb5YPYmgYTjrNyKkvjWBYcokEIPKLHhDUd2 BFHdmIfSMpYQdd8AwV7cOpSuuDVvfvcPYFHQsH9DY/e0MmdT1CNT8yDuTjoz5S7G fGDPbVg/urjwpYHwji4vC6DZSLnkkEXv6Z8nMImOcSX8FIVewCDnHFKuuVway5Jr L8NZQngOSxj8kZSrBECWJ4ceipUorFC23cr/bH3F9tv8yw9/q6YyJEUCQ95L42bI 6LL8xL3OmaFUOIJ29qsebiFEn8tBaeP7AXJuj4q5MiyxHWyGEVYh1uH/awIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4FQPtCIoaMNmhqEcT/1g40qOorMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvUGdWQS0wSWlob3cyYUdvUnhQX1dEalNvNmlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHztOMA0G CSqGSIb3DQEBCwUAA4IBAQARwkgbpWzi6v4pwng4rtKnf/feIl3R024pFkNgNtsQ +AwdzeyIc0877Hi/mNFohqJpK65NcOL/Mg3OmfEedOsaEf7qIFnTGoX2xKKzEGL0 pnr8eeIqZ3DIk/IARxNVOWthWYJCbW1q1MX4ii8nIIZGO5mzRv/SaCAymTyaQ9UG qf3g4J067+MYFa/0CZSFbUHxB9FfXaL0ecCF1L0rWtVVIAOUVkF/ViR6OKXfP9wd L8+0HhQ3QI+QrO8qRbL0Fxac8iAmzn+SeJZH+UQEL67W07b3eUYQtv0zUuK/hu4v cgibWrMuQdGxkUPB4fq0ZOCsld0NWdhA/nlE3clbv0t6 -----END CERTIFICATE-----Generated at Mon Jan 5 14:33:07 2026 by rpki-client