This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/PGilyYWIAdJXl1Z4a7mDUWcc6hY.roa File: PGilyYWIAdJXl1Z4a7mDUWcc6hY.roa (raw, json) Hash identifier: OyU3lX3y+vevyB1v8G/5Shvc1n4shWouA9CyTHgNWTA= Subject key identifier: 3C:68:A5:C9:85:88:01:D2:57:97:56:78:6B:B9:83:51:67:1C:EA:16 Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Certificate serial: 019B7D5AD4DCD31438440DC5203A8B3DECF7 Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/PGilyYWIAdJXl1Z4a7mDUWcc6hY.roa Signing time: Fri 02 Jan 2026 06:17:43 +0000 ROA not before: Fri 02 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13110 IP address blocks: 46.228.80.0/20 maxlen: 20 46.238.64.0/18 maxlen: 18 62.21.0.0/17 maxlen: 17 77.65.0.0/17 maxlen: 17 80.87.32.0/20 maxlen: 20 85.221.128.0/17 maxlen: 17 88.151.136.0/21 maxlen: 21 94.127.104.0/21 maxlen: 21 109.173.128.0/17 maxlen: 17 151.249.80.0/21 maxlen: 21 185.14.72.0/22 maxlen: 22 185.44.172.0/22 maxlen: 22 193.169.208.0/24 maxlen: 24 194.114.148.0/22 maxlen: 22 194.116.138.0/23 maxlen: 23 194.150.206.0/23 maxlen: 23 195.160.180.0/23 maxlen: 23 217.113.128.0/20 maxlen: 20 2001:4020::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d4:dc:d3:14:38:44:0d:c5:20:3a:8b:3d:ec:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078 Validity Not Before: Jan 2 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c68a5c9858801d2579756786bb98351671cea16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b2:9b:63:0e:90:72:53:e5:b5:4a:ec:fe:14: 87:cf:87:46:7f:aa:02:61:f6:53:75:18:f9:92:e9: 8a:38:83:5d:7d:98:2f:41:ae:3d:76:0e:4e:25:29: bf:de:d5:0e:3c:20:f7:57:bf:c7:9f:a9:06:9e:f1: 1f:0d:f5:6f:70:f9:a8:00:b7:17:78:f8:39:49:9c: 37:b7:c6:47:d5:ce:d3:53:fa:a7:cb:1a:35:e0:bd: e3:4a:28:4c:81:72:4b:a1:e0:00:d7:ef:be:41:ab: 5b:3e:c3:06:db:04:97:a8:f9:b3:f1:46:2c:93:7b: a7:ea:f6:1d:d8:3d:54:1f:47:de:4e:d3:16:50:66: 51:87:1f:79:cd:16:02:74:e9:76:00:1a:f8:20:ac: 2c:2c:62:64:c1:8b:6f:6f:87:b2:e3:4d:24:9a:05: b3:1a:94:7d:96:44:b1:21:5c:b7:f2:21:b4:12:20: 8c:37:72:24:35:99:3d:c8:5b:e1:70:04:19:f5:8f: e1:68:77:44:a3:6a:d2:b3:fc:48:f5:17:1b:2b:1c: ef:97:8a:5b:92:55:70:c5:7f:08:9a:af:0e:b5:5c: d6:37:1f:e2:0a:31:8c:99:70:1e:b6:39:8c:ae:50: d7:60:d6:93:70:65:0d:2f:7f:e8:00:bd:a5:68:0c: cc:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:68:A5:C9:85:88:01:D2:57:97:56:78:6B:B9:83:51:67:1C:EA:16 X509v3 Authority Key Identifier: keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/PGilyYWIAdJXl1Z4a7mDUWcc6hY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.80.0/20 46.238.64.0/18 62.21.0.0/17 77.65.0.0/17 80.87.32.0/20 85.221.128.0/17 88.151.136.0/21 94.127.104.0/21 109.173.128.0/17 151.249.80.0/21 185.14.72.0/22 185.44.172.0/22 193.169.208.0/24 194.114.148.0/22 194.116.138.0/23 194.150.206.0/23 195.160.180.0/23 217.113.128.0/20 IPv6: 2001:4020::/32 Signature Algorithm: sha256WithRSAEncryption 6e:64:d5:78:d1:12:8d:ce:e6:d6:46:77:f0:64:60:59:e9:15: 2a:2e:61:38:c5:46:a3:d7:91:d6:9b:7a:dc:29:52:68:90:f2: b3:70:82:1d:e8:cf:05:b8:e4:29:93:68:1b:ba:82:80:fb:51: 37:37:12:51:e3:53:8a:f8:9a:87:c3:78:28:ca:0f:b4:56:3c: f4:3d:45:e2:a9:0b:c2:cd:6c:be:29:e8:5b:9a:e6:6e:1f:25: 14:f6:9d:a6:b9:e6:c3:b3:ab:bc:37:ee:24:0f:a6:9e:bf:2d: 9b:45:ea:49:f5:e1:69:c4:d7:3f:8c:2d:54:26:3e:c9:5c:28: 28:5c:53:0b:ef:54:0f:f2:fc:43:05:79:88:a7:52:40:dd:03: 81:9f:a0:ee:3e:17:43:f9:75:3b:40:d2:23:e5:43:2f:4f:d1: 29:7c:ff:fb:90:d4:f4:a7:35:71:fd:ae:74:68:fd:2f:ab:35: 82:fd:e9:0f:02:10:bb:dd:98:52:5f:25:31:ff:a2:c7:fc:ab: d9:0b:61:71:7d:a6:07:49:b5:97:bd:aa:be:d0:fb:95:96:44: 33:e7:76:5c:74:55:98:43:aa:30:b0:5b:83:4f:07:8a:a1:f7: 01:dc:53:95:a4:7e:d0:cd:23:77:31:09:0b:a8:20:c7:30:d0: be:d8:6e:c0 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt9WtTc0xQ4RA3FIDqLPez3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNmI3YjNlYTYwZWZiNGE1NzlhNGY1ZTIzN2VhN2E4OGQz YmMwNzgwHhcNMjYwMTAyMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzY4YTVjOTg1ODgwMWQyNTc5NzU2Nzg2YmI5ODM1MTY3MWNlYTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbKbYw6QclPltUrs/hSHz4dGf6oC YfZTdRj5kumKOINdfZgvQa49dg5OJSm/3tUOPCD3V7/Hn6kGnvEfDfVvcPmoALcX ePg5SZw3t8ZH1c7TU/qnyxo14L3jSihMgXJLoeAA1+++QatbPsMG2wSXqPmz8UYs k3un6vYd2D1UH0feTtMWUGZRhx95zRYCdOl2ABr4IKwsLGJkwYtvb4ey400kmgWz GpR9lkSxIVy38iG0EiCMN3IkNZk9yFvhcAQZ9Y/haHdEo2rSs/xI9RcbKxzvl4pb klVwxX8Imq8OtVzWNx/iCjGMmXAetjmMrlDXYNaTcGUNL3/oAL2laAzMDwIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFDxopcmFiAHSV5dWeGu5g1FnHOoWMB8GA1UdIwQY MBaAFJtrez6mDvtKV5pPXiN+p6iNO8B4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAt ZTc0ZDhkMWQ0ZTAyLzEvUEdpbHlZV0lBZEpYbDFaNGE3bURVV2NjNmhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9lMjdkNzEtZWZiYy00N2VmLTk4NDAtZTc0ZDhkMWQ0ZTAy LzEvbTJ0N1BxWU8tMHBYbWs5ZUkzNm5xSTA3d0hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwQELuRQ AwQGLu5AAwQHPhUAAwQHTUEAAwQEUFcgAwQHVd2AAwQDWJeIAwQDXn9oAwQHba2A AwQDl/lQAwQCuQ5IAwQCuSysAwQAwanQAwQCwnKUAwQBwnSKAwQBwpbOAwQBw6C0 AwQE2XGAMA0EAgACMAcDBQAgAUAgMA0GCSqGSIb3DQEBCwUAA4IBAQBuZNV40RKN zubWRnfwZGBZ6RUqLmE4xUaj15HWm3rcKVJokPKzcIId6M8FuOQpk2gbuoKA+1E3 NxJR41OK+JqHw3goyg+0Vjz0PUXiqQvCzWy+KehbmuZuHyUU9p2muebDs6u8N+4k D6aevy2bRepJ9eFpxNc/jC1UJj7JXCgoXFML71QP8vxDBXmIp1JA3QOBn6DuPhdD +XU7QNIj5UMvT9EpfP/7kNT0pzVx/a50aP0vqzWC/ekPAhC73ZhSXyUx/6LH/KvZ C2FxfaYHSbWXvaq+0PuVlkQz53ZcdFWYQ6owsFuDTweKofcB3FOVpH7QzSN3MQkL qCDHMNC+2G7A -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:53 2026 by rpki-client