This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/PGdzQPbVNWOAAR-X1BVXtgxofwg.roa File: PGdzQPbVNWOAAR-X1BVXtgxofwg.roa (raw, json) Hash identifier: dnLVHCkUAzZBzW5KJgWgdjrJ3f9Bmjq6lfV0HEQ9YaI= Subject key identifier: 3C:67:73:40:F6:D5:35:63:80:01:1F:97:D4:15:57:B6:0C:68:7F:08 Certificate issuer: /CN=4b529a4d22faef23135d6eff8912266623c49255 Certificate serial: 019B7EA6BE889469D4D1BD274395D9B080E2 Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/PGdzQPbVNWOAAR-X1BVXtgxofwg.roa Signing time: Fri 02 Jan 2026 12:20:15 +0000 ROA not before: Fri 02 Jan 2026 12:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42705 IP address blocks: 5.11.16.0/22 maxlen: 22 5.11.16.0/23 maxlen: 23 5.11.16.0/24 maxlen: 24 5.11.17.0/24 maxlen: 24 5.11.18.0/23 maxlen: 23 5.11.18.0/24 maxlen: 24 5.11.21.0/24 maxlen: 24 5.11.22.0/24 maxlen: 24 5.11.24.0/21 maxlen: 21 5.11.24.0/22 maxlen: 22 5.11.24.0/23 maxlen: 23 5.11.24.0/24 maxlen: 24 5.11.25.0/24 maxlen: 24 5.11.26.0/23 maxlen: 23 5.11.26.0/24 maxlen: 24 5.11.27.0/24 maxlen: 24 80.251.10.0/24 maxlen: 24 80.251.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:be:88:94:69:d4:d1:bd:27:43:95:d9:b0:80:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255 Validity Not Before: Jan 2 12:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c677340f6d5356380011f97d41557b60c687f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7f:34:c7:9d:7c:db:1c:67:54:dd:8d:c6:eb: a5:d9:17:ad:85:4b:4c:a6:78:68:3b:ce:d4:9e:1b: da:22:f5:88:b8:22:19:75:4f:bf:f7:61:40:7a:79: f5:ec:ab:15:d6:a5:cb:d0:52:e3:6e:d6:b2:26:ec: 9d:e0:12:b6:1b:8e:1a:7c:c6:ee:44:3d:b3:87:1c: 78:f2:89:b9:51:12:94:3d:28:22:02:b0:67:3b:f0: 13:1b:0d:43:6f:6d:37:7d:18:31:59:f6:53:bb:df: e6:7f:ae:f5:50:5b:e2:7f:ed:06:f4:6e:cf:4a:77: 7b:7f:2c:11:65:7b:43:04:17:ed:26:68:bd:e8:a6: 41:e0:7a:55:b5:11:d4:74:58:c7:a7:70:66:ab:5a: 33:e3:25:d3:01:5f:b5:06:ff:05:0e:0d:7d:6a:df: 3a:0e:44:52:90:6a:1d:6e:33:f1:e8:21:15:b4:43: 42:2f:05:9f:0f:f6:77:d4:5a:1d:b3:48:f9:cd:29: a9:f4:b6:33:3b:75:b9:93:9a:08:79:dc:9a:ee:ab: 0a:a2:d9:5d:d0:f4:9d:e5:93:0a:98:0a:ac:c8:db: c5:86:7f:f8:f1:f4:a1:15:7d:e1:e9:ec:48:dc:72: f6:36:9f:c7:6a:3b:b5:49:6e:65:fb:dd:67:a0:d2: a2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:67:73:40:F6:D5:35:63:80:01:1F:97:D4:15:57:B6:0C:68:7F:08 X509v3 Authority Key Identifier: keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/PGdzQPbVNWOAAR-X1BVXtgxofwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.11.16.0/22 5.11.21.0-5.11.22.255 5.11.24.0/21 80.251.10.0/23 Signature Algorithm: sha256WithRSAEncryption 07:88:cc:1e:70:82:de:1e:86:13:47:ac:5b:37:1c:b0:09:77: 50:82:58:a4:3c:a2:08:7e:89:5d:b3:42:14:2e:e9:2b:e2:ee: bd:b5:9a:7f:63:09:b6:4b:9f:3b:49:7f:86:b1:88:2e:e0:f3: 7c:ae:db:14:60:6e:14:84:5a:f8:a9:b7:58:7b:5c:0b:dd:07: 7a:2f:cb:60:73:65:3a:ae:30:7a:a7:9b:00:93:20:78:f5:b8: 14:be:97:47:dd:a1:cf:e2:af:c9:ff:03:fa:ea:4b:7d:ec:f3: 76:95:31:7e:6e:8e:1b:39:1c:e2:20:54:fa:a6:f4:2d:a7:4f: 8b:29:45:0c:b9:87:5f:65:af:3b:aa:b5:aa:b2:bc:97:25:43: 16:4e:88:5d:9e:7c:6d:7c:03:c7:10:62:8d:40:9f:f5:c9:a3: 85:4f:a8:ca:bb:6e:50:54:29:eb:99:c2:a8:0d:2b:9f:a1:5b: 4d:aa:99:77:c3:28:12:1c:aa:04:b4:e1:98:e6:2f:1d:ed:1e: dc:d4:c0:ec:39:97:d6:9c:2e:6e:00:48:c4:19:e9:00:16:a4: 6a:ce:92:06:c1:58:7a:6a:98:eb:f0:e5:7a:ac:0f:1b:06:32: db:a2:de:ea:51:97:04:36:43:3d:96:0b:78:49:20:87:c6:b7: 59:bd:f0:9d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt+pr6IlGnU0b0nQ5XZsIDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNTI5YTRkMjJmYWVmMjMxMzVkNmVmZjg5MTIyNjY2MjNj NDkyNTUwHhcNMjYwMTAyMTIyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzY3NzM0MGY2ZDUzNTYzODAwMTFmOTdkNDE1NTdiNjBjNjg3ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2X80x5182xxnVN2Nxuul2RethUtM pnhoO87UnhvaIvWIuCIZdU+/92FAenn17KsV1qXL0FLjbtayJuyd4BK2G44afMbu RD2zhxx48om5URKUPSgiArBnO/ATGw1Db203fRgxWfZTu9/mf671UFvif+0G9G7P Snd7fywRZXtDBBftJmi96KZB4HpVtRHUdFjHp3Bmq1oz4yXTAV+1Bv8FDg19at86 DkRSkGodbjPx6CEVtENCLwWfD/Z31Fods0j5zSmp9LYzO3W5k5oIedya7qsKotld 0PSd5ZMKmAqsyNvFhn/48fShFX3h6exI3HL2Np/Haju1SW5l+91noNKiEwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFDxnc0D21TVjgAEfl9QVV7YMaH8IMB8GA1UdIwQY MBaAFEtSmk0i+u8jE11u/4kSJmYjxJJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTct MzZhZTc2ZWU5ODNlLzEvUEdkelFQYlZOV09BQVItWDFCVlh0Z3hvZndnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTctMzZhZTc2ZWU5ODNl LzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCBQsQMAwD BAAFCxUDBAAFCxYDBAMFCxgDBAFQ+wowDQYJKoZIhvcNAQELBQADggEBAAeIzB5w gt4ehhNHrFs3HLAJd1CCWKQ8ogh+iV2zQhQu6Svi7r21mn9jCbZLnztJf4axiC7g 83yu2xRgbhSEWvipt1h7XAvdB3ovy2BzZTquMHqnmwCTIHj1uBS+l0fdoc/ir8n/ A/rqS33s83aVMX5ujhs5HOIgVPqm9C2nT4spRQy5h19lrzuqtaqyvJclQxZOiF2e fG18A8cQYo1An/XJo4VPqMq7blBUKeuZwqgNK5+hW02qmXfDKBIcqgS04ZjmLx3t HtzUwOw5l9acLm4ASMQZ6QAWpGrOkgbBWHpqmOvw5XqsDxsGMtui3upRlwQ2Qz2W C3hJIIfGt1m98J0= -----END CERTIFICATE-----Generated at Tue Jan 20 07:32:33 2026 by rpki-client