This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Pg1EPByBXRpb1_RpBxeTNM69s5M.roa File: Pg1EPByBXRpb1_RpBxeTNM69s5M.roa (raw, json) Hash identifier: fIewH5tWkVkVy5vSsaEt4dSw3xh4e1/aY2qc/7F3Du8= Subject key identifier: 3E:0D:44:3C:1C:81:5D:1A:5B:D7:F4:69:07:17:93:34:CE:BD:B3:93 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CB845A47BA446553B93FB31D8DAD Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Pg1EPByBXRpb1_RpBxeTNM69s5M.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197616 IP address blocks: 80.233.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cb:84:5a:47:ba:44:65:53:b9:3f:b3:1d:8d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e0d443c1c815d1a5bd7f46907179334cebdb393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4b:fd:16:1d:cd:3f:2d:2e:13:30:01:81:b0: 4e:80:2f:f7:cd:15:46:26:71:b2:3a:2d:c1:88:60: bf:32:2d:92:63:0f:6a:07:9f:6a:9c:fb:12:1a:e1: 24:f0:37:74:2d:ec:d9:86:5c:e7:98:6a:e8:95:1e: a2:6f:f4:88:5e:da:84:39:d6:99:93:4b:4d:86:d1: 45:3b:a4:1a:fb:31:c7:b0:8d:e7:69:40:5b:b2:09: 45:da:bc:d4:d9:7a:d4:e4:13:00:25:e3:33:3a:55: 9f:b0:f9:a5:b7:76:d3:6a:75:bd:de:4a:f6:d1:3e: 10:b5:ae:e4:ab:b4:71:54:4f:7c:84:42:01:22:ea: f7:5f:4f:d6:49:ce:7a:a3:91:04:c3:77:08:9a:89: b9:97:cf:5a:9f:19:bb:68:5f:8f:85:b2:29:8e:fa: be:ba:30:ca:b9:0f:23:3a:f3:0c:52:e5:6b:ca:0e: 82:40:43:3d:70:00:e1:3d:ec:83:07:1d:c2:54:ed: 3f:8c:40:b2:b4:11:d9:88:2c:2a:7d:46:2d:71:c6: 67:2f:03:ad:8e:26:17:b2:4c:1a:cd:ba:02:fd:fa: 5c:35:9a:ef:e5:0d:3b:95:d4:53:3a:c1:c9:d7:e4: 4c:b4:7f:dc:63:c3:70:93:7a:85:ae:a8:0c:b3:25: 3c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0D:44:3C:1C:81:5D:1A:5B:D7:F4:69:07:17:93:34:CE:BD:B3:93 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/Pg1EPByBXRpb1_RpBxeTNM69s5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.233.240.0/22 Signature Algorithm: sha256WithRSAEncryption 49:1d:c8:3a:4e:c8:7b:81:17:32:ce:1a:f1:f6:2a:c5:a4:54: 16:1a:1f:44:2f:15:3f:31:10:31:de:3c:9f:e3:67:99:74:cd: 74:cf:b5:e1:61:a6:79:d3:9b:70:42:34:82:f5:80:72:45:2d: 7c:85:5a:1d:e2:b1:ba:3b:d6:4e:43:d8:d5:44:a3:df:50:fc: e4:09:12:06:df:24:b1:e9:74:09:4b:8e:d7:af:02:77:11:b3: b4:dc:df:5c:60:9f:1c:14:3e:cb:f2:f5:6c:44:79:2d:69:a2: 43:d8:55:be:bb:bc:cb:db:e6:11:26:be:67:d0:fc:17:00:13: 40:46:3a:15:a0:29:55:31:56:a9:8a:dc:bc:6f:89:a7:5c:21: 2e:15:0f:bc:20:94:6d:8b:ca:df:1b:1b:58:b5:87:30:01:fe: 04:34:77:b0:a6:7a:ed:46:f1:71:e5:39:40:37:97:a4:45:17: 07:81:4f:a1:45:4a:1e:bc:62:ce:83:6d:01:08:51:9f:69:be: fc:22:1c:c2:41:ee:1b:31:6f:d7:1c:5d:ac:3c:db:d2:39:5a: 74:7e:ab:e0:e3:3c:5e:e1:cc:44:fc:09:cb:06:58:a7:5c:b7: ad:f8:ce:ce:24:2d:04:0c:d1:4e:c1:e7:12:58:c3:9e:c5:a8: 11:7e:06:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yMuEWke6RGVTuT+zHY2tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTBkNDQzYzFjODE1ZDFhNWJkN2Y0NjkwNzE3OTMzNGNlYmRiMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEv9Fh3NPy0uEzABgbBOgC/3zRVG JnGyOi3BiGC/Mi2SYw9qB59qnPsSGuEk8Dd0LezZhlznmGrolR6ib/SIXtqEOdaZ k0tNhtFFO6Qa+zHHsI3naUBbsglF2rzU2XrU5BMAJeMzOlWfsPmlt3bTanW93kr2 0T4Qta7kq7RxVE98hEIBIur3X0/WSc56o5EEw3cImom5l89anxm7aF+PhbIpjvq+ ujDKuQ8jOvMMUuVryg6CQEM9cADhPeyDBx3CVO0/jECytBHZiCwqfUYtccZnLwOt jiYXskwazboC/fpcNZrv5Q07ldRTOsHJ1+RMtH/cY8Nwk3qFrqgMsyU8xwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD4NRDwcgV0aW9f0aQcXkzTOvbOTMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvUGcxRVBCeUJYUnBiMV9ScEJ4ZVROTTY5czVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUOnwMA0G CSqGSIb3DQEBCwUAA4IBAQBJHcg6Tsh7gRcyzhrx9irFpFQWGh9ELxU/MRAx3jyf 42eZdM10z7XhYaZ505twQjSC9YByRS18hVod4rG6O9ZOQ9jVRKPfUPzkCRIG3ySx 6XQJS47XrwJ3EbO03N9cYJ8cFD7L8vVsRHktaaJD2FW+u7zL2+YRJr5n0PwXABNA RjoVoClVMVapity8b4mnXCEuFQ+8IJRti8rfGxtYtYcwAf4ENHewpnrtRvFx5TlA N5ekRRcHgU+hRUoevGLOg20BCFGfab78IhzCQe4bMW/XHF2sPNvSOVp0fqvg4zxe 4cxE/AnLBlinXLet+M7OJC0EDNFOwecSWMOexagRfgbM -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:28 2026 by rpki-client