This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/pgGjwO06WQVAvwzBQEHFretYh38.roa File: pgGjwO06WQVAvwzBQEHFretYh38.roa (raw, json) Hash identifier: dKaelOwvYncF3WIKZ5M3lwPFY4JsicG3zXcWLGubv5o= Subject key identifier: A6:01:A3:C0:ED:3A:59:05:40:BF:0C:C1:40:41:C5:AD:EB:58:87:7F Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBE2C65F5F7F9689415499F3FD1571 Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/pgGjwO06WQVAvwzBQEHFretYh38.roa Signing time: Thu 01 Jan 2026 14:17:40 +0000 ROA not before: Thu 01 Jan 2026 14:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202453 IP address blocks: 80.120.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:e2:c6:5f:5f:7f:96:89:41:54:99:f3:fd:15:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a601a3c0ed3a590540bf0cc14041c5adeb58877f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:e8:58:65:ad:f4:e5:e9:7a:49:bc:87:43: 24:0d:3d:e6:3d:2d:de:da:fc:21:80:07:6c:e6:d6: d3:a7:27:4c:59:97:ea:a5:fd:96:df:08:01:e9:31: 9c:8a:55:86:da:ed:55:26:aa:dd:ac:2c:2e:a7:98: 64:10:b3:31:b8:8d:22:24:a6:e9:77:ec:56:32:b2: 1b:79:6a:fa:87:9e:2c:81:e6:a9:1d:b2:ac:38:5c: 96:a7:b4:bc:20:58:a7:6c:66:ac:a2:cc:9f:cb:42: 3e:12:ee:fe:20:55:b9:71:9a:7f:d7:ba:f5:66:aa: bc:89:96:01:34:19:65:43:62:03:6e:b0:10:13:11: f7:02:fe:df:c8:73:f2:64:52:15:57:25:1d:23:1c: c0:c4:3c:a5:a1:2b:78:92:be:8c:a4:a6:29:65:72: 02:d5:91:98:74:eb:b8:b4:5c:62:e0:79:e8:58:e9: 87:e0:54:53:8d:0a:bc:b5:d2:f4:bb:2c:7a:b5:6e: 50:ab:ee:6d:46:14:7c:1a:62:b6:4c:07:bc:89:c4: fe:2b:de:ef:8c:44:55:66:6d:0c:12:a3:ff:66:c5: d7:aa:80:9b:26:5f:9b:fc:47:04:8f:eb:16:3c:d5: c5:96:b1:3b:a3:57:bf:78:56:8d:a3:3d:b5:82:98: 07:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:01:A3:C0:ED:3A:59:05:40:BF:0C:C1:40:41:C5:AD:EB:58:87:7F X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/pgGjwO06WQVAvwzBQEHFretYh38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.120.13.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:bc:61:38:77:72:70:48:12:c2:bf:d1:f3:37:3b:c4:56:0b: da:0a:b9:a0:de:56:1e:89:a6:01:00:94:6a:90:1c:1d:60:b4: 8f:f9:74:57:2d:a2:61:fd:d0:cc:69:80:1c:17:a0:36:39:2a: 78:14:ed:6d:31:17:cc:4d:29:97:d0:b6:a3:83:6e:56:03:df: 73:86:09:42:3a:5e:bc:78:2d:6b:55:30:ab:5d:5b:34:a5:09: 50:a5:18:da:07:d7:3e:f1:65:2d:23:be:b7:b2:9f:7f:5b:17: 4c:f6:0b:07:d0:18:75:ed:3e:3b:0c:47:c8:4a:2f:03:a8:2f: 5b:f7:c4:dd:7f:7a:6b:db:c3:9b:cf:64:74:34:03:ad:0e:02: be:3e:55:fc:ae:96:5c:b7:63:2c:ae:a5:a0:9b:1e:60:8e:29: 6e:9f:1c:0d:b1:83:22:01:0b:ab:80:b2:87:32:d7:ae:75:b5: 7e:5c:ea:b3:b3:22:cb:1c:dc:96:3b:43:07:fb:a2:2a:8c:bc: e7:95:1e:6b:b7:ac:89:a7:6a:a2:85:d0:bd:8f:13:f9:ea:3e: 74:49:e5:fe:4b:a9:eb:f2:ad:48:39:37:67:e7:85:47:09:db: 06:e8:f1:4f:84:39:f2:b8:b6:02:66:4d:ce:13:d6:74:0a:1d: 4f:29:a1:55 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt56+LGX19/lolBVJnz/RVxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjAxYTNjMGVkM2E1OTA1NDBiZjBjYzE0MDQxYzVhZGViNTg4NzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys3oWGWt9OXpekm8h0MkDT3mPS3e 2vwhgAds5tbTpydMWZfqpf2W3wgB6TGcilWG2u1VJqrdrCwup5hkELMxuI0iJKbp d+xWMrIbeWr6h54sgeapHbKsOFyWp7S8IFinbGasosyfy0I+Eu7+IFW5cZp/17r1 Zqq8iZYBNBllQ2IDbrAQExH3Av7fyHPyZFIVVyUdIxzAxDyloSt4kr6MpKYpZXIC 1ZGYdOu4tFxi4HnoWOmH4FRTjQq8tdL0uyx6tW5Qq+5tRhR8GmK2TAe8icT+K97v jERVZm0MEqP/ZsXXqoCbJl+b/EcEj+sWPNXFlrE7o1e/eFaNoz21gpgH9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYBo8DtOlkFQL8MwUBBxa3rWId/MB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvcGdHandPMDZXUVZBdnd6QlFFSEZyZXRZaDM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHgNMA0G CSqGSIb3DQEBCwUAA4IBAQAKvGE4d3JwSBLCv9HzNzvEVgvaCrmg3lYeiaYBAJRq kBwdYLSP+XRXLaJh/dDMaYAcF6A2OSp4FO1tMRfMTSmX0Lajg25WA99zhglCOl68 eC1rVTCrXVs0pQlQpRjaB9c+8WUtI763sp9/WxdM9gsH0Bh17T47DEfISi8DqC9b 98Tdf3pr28Obz2R0NAOtDgK+PlX8rpZct2MsrqWgmx5gjilunxwNsYMiAQurgLKH MteudbV+XOqzsyLLHNyWO0MH+6IqjLznlR5rt6yJp2qihdC9jxP56j50SeX+S6nr 8q1IOTdn54VHCdsG6PFPhDnyuLYCZk3OE9Z0Ch1PKaFV -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:09 2026 by rpki-client