This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/pgKqZWjn8bJ132yin6103Bat9Vc.roa File: pgKqZWjn8bJ132yin6103Bat9Vc.roa (raw, json) Hash identifier: M83Fju8fgneb3OZm/YtaPkJlVKYgDt3W/DPj1+xb3L4= Subject key identifier: A6:02:AA:65:68:E7:F1:B2:75:DF:6C:A2:9F:AD:74:DC:16:AD:F5:57 Certificate issuer: /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161 Certificate serial: 019B78A287F4D437EF281D7710D004F1B772 Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/pgKqZWjn8bJ132yin6103Bat9Vc.roa Signing time: Thu 01 Jan 2026 08:17:56 +0000 ROA not before: Thu 01 Jan 2026 08:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33835 IP address blocks: 92.42.216.0/21 maxlen: 21 217.169.240.0/20 maxlen: 20 217.169.246.0/23 maxlen: 23 2a02:2440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:87:f4:d4:37:ef:28:1d:77:10:d0:04:f1:b7:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161 Validity Not Before: Jan 1 08:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a602aa6568e7f1b275df6ca29fad74dc16adf557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c3:70:76:76:ec:8d:ff:4a:55:cd:99:e2:5d: 76:44:6e:a2:97:3e:50:d0:9d:24:82:33:86:b0:35: cb:18:0c:d4:9b:c5:e9:16:6b:30:fb:93:11:65:51: eb:9b:36:fd:7d:26:27:28:e7:3f:83:86:c7:8e:67: 4d:03:a5:ab:04:b6:06:c2:34:eb:59:84:78:72:bb: 74:fd:f5:98:a2:c5:f2:ce:e6:4a:54:98:df:33:87: 4f:42:6c:31:0e:61:8f:a9:30:a7:b0:9d:fb:ac:f7: f4:d3:86:e1:73:85:0e:24:ea:b9:dd:0b:77:bd:3a: 86:5c:fe:4f:12:f1:a9:fc:44:8c:9e:21:c9:a3:2f: a0:b1:50:77:fc:97:16:72:aa:66:a4:e9:dc:48:c0: 36:b5:99:fa:a4:3f:ad:19:6a:7c:d0:bf:2c:73:ab: fe:fb:2d:ce:17:3b:c8:5b:76:66:48:01:f8:2d:55: 94:28:cb:9e:3e:f7:c8:d6:8a:b0:b7:78:16:bc:22: 91:6d:6b:0c:b6:17:eb:b9:83:09:c0:a6:8f:78:4b: 14:56:98:29:e6:59:c6:c4:13:46:cc:54:fe:3b:b5: 9f:f7:52:d7:8b:4f:d9:15:3e:b1:ce:1e:3a:ac:30: a3:1d:67:1e:25:4d:db:d8:58:25:ae:67:d3:d4:88: 80:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:02:AA:65:68:E7:F1:B2:75:DF:6C:A2:9F:AD:74:DC:16:AD:F5:57 X509v3 Authority Key Identifier: keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/pgKqZWjn8bJ132yin6103Bat9Vc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.42.216.0/21 217.169.240.0/20 IPv6: 2a02:2440::/32 Signature Algorithm: sha256WithRSAEncryption cd:04:6d:bd:ad:6a:56:17:2e:44:96:1f:3e:66:9a:e4:06:d5: 26:c6:ba:a9:7f:1d:78:92:b1:a7:19:14:2f:cb:26:a5:37:59: ec:97:70:e1:e8:8c:17:98:49:2b:da:c8:94:2d:e2:8e:19:27: e8:24:a6:b3:46:4f:05:a1:78:f3:9d:c8:56:6d:c5:0d:1f:08: f2:37:73:e3:e0:75:86:82:c3:af:0f:86:32:b2:79:6b:cd:75: 0b:fa:64:b2:72:6b:c8:e2:8e:3e:e2:4c:b3:95:f4:4c:3b:25: 04:51:f5:b5:7b:82:22:8d:5c:2c:8e:97:35:f9:f6:fe:e9:93: 20:75:e3:e6:f7:50:0d:44:f4:27:a7:e3:f5:a5:70:44:cc:b9: 1e:68:56:c2:ff:22:7b:33:81:20:d7:35:d1:f3:ab:dd:1a:e1: 53:aa:2a:53:46:2b:1d:a5:2b:f3:07:f4:a0:d6:4d:c2:32:a7: 31:b5:9d:23:22:72:24:17:1b:4e:1a:e3:24:8d:28:a9:c9:20: 1a:12:f3:10:b3:5d:80:23:a6:82:93:c6:bb:aa:8f:43:4e:fe: 91:cb:de:f9:8d:53:b0:5a:54:5d:c3:78:8f:c5:64:1c:e0:ea: 8c:27:ca:59:1a:7e:ec:68:dc:ab:62:64:c3:43:de:a9:7b:64: d5:7c:a6:86 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4oof01DfvKB13ENAE8bdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODU1NWY5YTUyNzI3ZjZiY2Y3MTVjYjQ3NTBhMmE0YTZj MzUxNjEwHhcNMjYwMTAxMDgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjAyYWE2NTY4ZTdmMWIyNzVkZjZjYTI5ZmFkNzRkYzE2YWRmNTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8Nwdnbsjf9KVc2Z4l12RG6ilz5Q 0J0kgjOGsDXLGAzUm8XpFmsw+5MRZVHrmzb9fSYnKOc/g4bHjmdNA6WrBLYGwjTr WYR4crt0/fWYosXyzuZKVJjfM4dPQmwxDmGPqTCnsJ37rPf004bhc4UOJOq53Qt3 vTqGXP5PEvGp/ESMniHJoy+gsVB3/JcWcqpmpOncSMA2tZn6pD+tGWp80L8sc6v+ +y3OFzvIW3ZmSAH4LVWUKMuePvfI1oqwt3gWvCKRbWsMthfruYMJwKaPeEsUVpgp 5lnGxBNGzFT+O7Wf91LXi0/ZFT6xzh46rDCjHWceJU3b2FglrmfT1IiADwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKYCqmVo5/Gydd9sop+tdNwWrfVXMB8GA1UdIwQY MBaAFNSFVfmlJyf2vPcVy0dQoqSmw1FhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlWVi1hVW5KX2E4OXhYTFIxQ2lwS2JEVVdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9lNDU1NzctNjViMS00ZDQzLTg1M2Et MDJhYmY4NTcyZmNiLzEvcGdLcVpXam44YkoxMzJ5aW42MTAzQmF0OVZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9lNDU1NzctNjViMS00ZDQzLTg1M2EtMDJhYmY4NTcyZmNi LzEvMUlWVi1hVW5KX2E4OXhYTFIxQ2lwS2JEVVdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDXCrYAwQE 2anwMA0EAgACMAcDBQAqAiRAMA0GCSqGSIb3DQEBCwUAA4IBAQDNBG29rWpWFy5E lh8+ZprkBtUmxrqpfx14krGnGRQvyyalN1nsl3Dh6IwXmEkr2siULeKOGSfoJKaz Rk8FoXjznchWbcUNHwjyN3Pj4HWGgsOvD4YysnlrzXUL+mSycmvI4o4+4kyzlfRM OyUEUfW1e4IijVwsjpc1+fb+6ZMgdePm91ANRPQnp+P1pXBEzLkeaFbC/yJ7M4Eg 1zXR86vdGuFTqipTRisdpSvzB/Sg1k3CMqcxtZ0jInIkFxtOGuMkjSipySAaEvMQ s12AI6aCk8a7qo9DTv6Ry975jVOwWlRdw3iPxWQc4OqMJ8pZGn7saNyrYmTDQ96p e2TVfKaG -----END CERTIFICATE-----Generated at Wed Jan 21 09:22:24 2026 by rpki-client