This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/pgKR608oN6zximuaUEgX6MpmTUU.roa File: pgKR608oN6zximuaUEgX6MpmTUU.roa (raw, json) Hash identifier: saw7XgMmN0878UPRiyR58fLRD+GohosuFlhuOGzETeo= Subject key identifier: A6:02:91:EB:4F:28:37:AC:F1:8A:6B:9A:50:48:17:E8:CA:66:4D:45 Certificate issuer: /CN=290818f4df4a6bd125d5f22124145a69f5b6a34c Certificate serial: 019B7910F66B9885B5AC7B418FD85770DEEE Authority key identifier: 29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/pgKR608oN6zximuaUEgX6MpmTUU.roa Signing time: Thu 01 Jan 2026 10:18:33 +0000 ROA not before: Thu 01 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56682 IP address blocks: 31.192.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.mft rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f6:6b:98:85:b5:ac:7b:41:8f:d8:57:70:de:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=290818f4df4a6bd125d5f22124145a69f5b6a34c Validity Not Before: Jan 1 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a60291eb4f2837acf18a6b9a504817e8ca664d45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:01:b1:68:52:c6:5c:c6:06:f3:6f:f3:66: 73:b0:f3:c2:6a:58:6d:77:2a:33:0b:e4:cc:dd:31: 93:ba:5d:88:ca:c1:2a:6b:9c:bd:16:6f:77:0f:99: 27:a8:44:fe:8b:ba:f0:72:9a:a4:92:11:ba:0e:f6: 67:01:f8:e8:6a:2d:5f:92:8c:9c:fd:5b:d8:d0:8d: db:59:1d:49:47:66:5d:57:d7:30:a6:0d:c4:90:f5: 3b:94:f5:78:04:62:23:68:ad:c7:da:e7:15:1c:19: bd:2d:d6:2a:a1:00:d3:de:b8:ff:de:4b:a9:e6:fb: 57:97:67:59:ad:0f:53:ab:9c:dd:ba:e5:8c:4b:77: 59:fd:b7:b1:0c:c7:4a:cd:27:83:b8:c3:ff:08:f0: 8d:94:a2:c9:b9:6e:1e:90:e0:17:8a:d6:7c:ea:58: d2:a2:42:f2:b5:88:51:b2:19:13:6d:f4:44:17:8e: c6:46:03:6e:81:0e:4d:f8:91:29:71:36:64:12:6d: 5a:f0:19:7a:f7:4b:78:bd:d3:30:fc:51:bf:83:15: ec:d9:0d:02:18:e8:04:19:ba:8d:1c:7d:c8:69:d5: aa:a4:f7:e1:df:29:a8:f6:f7:09:48:e1:58:4e:b4: 5f:ea:eb:d4:28:67:24:ff:84:31:2c:2c:8c:cc:0f: 51:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:02:91:EB:4F:28:37:AC:F1:8A:6B:9A:50:48:17:E8:CA:66:4D:45 X509v3 Authority Key Identifier: keyid:29:08:18:F4:DF:4A:6B:D1:25:D5:F2:21:24:14:5A:69:F5:B6:A3:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgY9N9Ka9El1fIhJBRaafW2o0w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/pgKR608oN6zximuaUEgX6MpmTUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/e57efb-861b-4931-88d3-dd973da42721/1/KQgY9N9Ka9El1fIhJBRaafW2o0w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.192.216.0/21 Signature Algorithm: sha256WithRSAEncryption 9c:c6:e7:82:b3:ee:1b:55:d6:dc:5e:f6:76:7b:a7:a7:88:25: b9:54:73:87:44:6a:2c:06:d6:17:b0:48:c0:7b:65:1f:66:f1: 38:c5:88:cc:e4:1b:2b:9a:b5:d9:30:93:06:1c:07:da:87:b5: 29:ac:43:6a:c7:d4:47:a0:7e:a9:59:b8:64:ef:f6:f8:e7:b5: 09:48:e0:08:b0:4f:37:9d:f4:d8:11:47:fb:c1:fe:e4:bd:61: 1c:c5:0f:4e:c0:d7:7e:78:9f:6c:11:64:11:2b:96:e5:6e:33: 9c:1a:1a:05:01:38:9f:c6:4d:e8:c2:e2:92:72:e9:1d:ab:55: fc:b4:f4:f4:6c:67:ef:b6:ef:5d:7a:bf:fc:5a:96:e9:ff:16: 13:68:30:e9:cc:0e:cd:ae:b1:6d:b8:0c:43:fb:d5:03:44:2f: 16:1d:10:2e:9e:de:72:db:18:0b:78:80:a3:3b:48:39:3a:38: b9:ee:89:4a:53:bd:cc:b3:8b:b8:2d:8a:0e:04:82:ed:96:07: 30:cc:57:f0:01:f7:74:9a:02:25:a6:bf:ff:bb:a4:7c:f4:ce: 75:26:e0:b7:b7:ce:7c:a4:5f:d2:dd:e9:7d:e0:59:5c:0a:8a: f5:c9:af:ef:18:10:b3:e5:01:80:95:14:80:c8:6e:6b:d4:97: 74:01:f7:04 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPZrmIW1rHtBj9hXcN7uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDgxOGY0ZGY0YTZiZDEyNWQ1ZjIyMTI0MTQ1YTY5ZjVi NmEzNGMwHhcNMjYwMTAxMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjAyOTFlYjRmMjgzN2FjZjE4YTZiOWE1MDQ4MTdlOGNhNjY0ZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUMBsWhSxlzGBvNv82ZzsPPCalht dyozC+TM3TGTul2IysEqa5y9Fm93D5knqET+i7rwcpqkkhG6DvZnAfjoai1fkoyc /VvY0I3bWR1JR2ZdV9cwpg3EkPU7lPV4BGIjaK3H2ucVHBm9LdYqoQDT3rj/3kup 5vtXl2dZrQ9Tq5zduuWMS3dZ/bexDMdKzSeDuMP/CPCNlKLJuW4ekOAXitZ86ljS okLytYhRshkTbfREF47GRgNugQ5N+JEpcTZkEm1a8Bl690t4vdMw/FG/gxXs2Q0C GOgEGbqNHH3IadWqpPfh3ymo9vcJSOFYTrRf6uvUKGck/4QxLCyMzA9RnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKYCketPKDes8YprmlBIF+jKZk1FMB8GA1UdIwQY MBaAFCkIGPTfSmvRJdXyISQUWmn1tqNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FnWTlOOUthOUVsMWZJaEpCUmFhZlcybzB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9lNTdlZmItODYxYi00OTMxLTg4ZDMt ZGQ5NzNkYTQyNzIxLzEvcGdLUjYwOG9ONnp4aW11YVVFZ1g2TXBtVFVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9lNTdlZmItODYxYi00OTMxLTg4ZDMtZGQ5NzNkYTQyNzIx LzEvS1FnWTlOOUthOUVsMWZJaEpCUmFhZlcybzB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDH8DYMA0G CSqGSIb3DQEBCwUAA4IBAQCcxueCs+4bVdbcXvZ2e6eniCW5VHOHRGosBtYXsEjA e2UfZvE4xYjM5BsrmrXZMJMGHAfah7UprENqx9RHoH6pWbhk7/b457UJSOAIsE83 nfTYEUf7wf7kvWEcxQ9OwNd+eJ9sEWQRK5blbjOcGhoFATifxk3owuKScukdq1X8 tPT0bGfvtu9der/8Wpbp/xYTaDDpzA7NrrFtuAxD+9UDRC8WHRAunt5y2xgLeICj O0g5Oji57olKU73Ms4u4LYoOBILtlgcwzFfwAfd0mgIlpr//u6R89M51JuC3t858 pF/S3el94FlcCor1ya/vGBCz5QGAlRSAyG5r1Jd0AfcE -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:09 2026 by rpki-client