This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa File: pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa (raw, json) Hash identifier: KW1x50QC1Ci4rIl9Ru/vbiHcwzJviAGG+0QbXfYDiO8= Subject key identifier: A4:61:70:CB:76:84:57:6A:A1:89:98:70:1F:BC:9A:32:B4:7C:7E:8D Certificate issuer: /CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9 Certificate serial: 019B7DC8960C30C0A8051CC26EF4040A5034 Authority key identifier: 0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa Signing time: Fri 02 Jan 2026 08:17:36 +0000 ROA not before: Fri 02 Jan 2026 08:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209525 IP address blocks: 212.78.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.mft rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:96:0c:30:c0:a8:05:1c:c2:6e:f4:04:0a:50:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1936281b86707a05d55a01f88b2e653d7b3ee9 Validity Not Before: Jan 2 08:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a46170cb7684576aa18998701fbc9a32b47c7e8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a9:e8:b1:44:07:2b:62:18:04:a1:61:4a:66: 0d:8a:87:5f:67:f4:4a:34:8e:03:57:d7:1e:69:73: 9e:63:2f:e8:28:ed:a2:76:81:46:b7:46:e9:d2:da: db:8b:7c:5f:7e:e5:e6:f8:d2:d0:01:7a:7d:de:96: bf:5d:77:3d:16:20:55:1d:7d:b0:fd:2f:56:c6:55: e6:5f:64:f0:fa:ce:4e:6c:a0:a7:01:bc:22:75:c1: 4e:5e:8b:e5:e1:90:ab:82:bd:7d:5c:0a:37:a3:36: 35:b6:1f:78:0d:e0:99:3d:5d:43:a7:29:bf:1e:94: 47:b4:ec:20:61:6f:0a:f1:43:37:54:7e:ac:0e:fb: 04:f7:f1:e5:e2:6f:1b:26:5d:af:72:dd:b3:ae:ad: 13:03:00:1c:20:ec:ac:cb:ea:1c:4e:6b:9c:e7:7b: e4:41:92:ba:da:46:b2:14:4e:31:e4:e5:ca:de:a5: 13:77:86:36:c7:4f:c1:b1:93:88:8d:7d:72:9f:38: 47:3a:7f:5c:1d:f5:40:0c:2a:1d:3f:88:63:52:59: 29:7a:2a:41:5a:28:cf:74:c4:1d:63:8d:89:98:fc: 94:cd:b3:8d:a5:50:d0:d0:86:82:66:7b:dd:6b:86: 2b:87:4f:e1:a3:75:31:9b:9c:cb:8d:28:b4:7e:12: 53:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:61:70:CB:76:84:57:6A:A1:89:98:70:1F:BC:9A:32:B4:7C:7E:8D X509v3 Authority Key Identifier: keyid:0B:19:36:28:1B:86:70:7A:05:D5:5A:01:F8:8B:2E:65:3D:7B:3E:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cxk2KBuGcHoF1VoB-IsuZT17Puk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/pGFwy3aEV2qhiZhwH7yaMrR8fo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/85ee02-6f43-4927-ab5d-ed57b24b4465/1/Cxk2KBuGcHoF1VoB-IsuZT17Puk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.78.36.0/24 Signature Algorithm: sha256WithRSAEncryption 79:e4:e4:cb:44:a6:d6:c6:37:86:ff:df:e3:d3:48:10:fd:0b: 07:d5:be:cb:3b:4a:ae:a2:53:3c:26:b4:4f:b7:8e:65:cf:16: 58:f6:9c:be:68:01:97:6f:5c:30:44:e2:0d:8d:f7:ba:5d:ee: ec:ff:53:58:44:af:d0:14:9f:a4:8e:d7:92:6d:0e:ec:25:f7: c6:13:b4:00:6a:f2:bb:7b:7e:12:d0:0b:ad:9e:77:c9:c7:0e: 6f:b8:e7:63:5d:39:fb:0b:5f:6b:e6:4f:6c:3f:49:68:b0:38: 0a:5d:e7:15:60:81:77:14:54:99:6b:f6:f4:4b:9f:11:76:be: 65:a2:ff:96:a2:33:40:1d:e7:34:1b:05:27:2f:6b:3d:a3:8f: 5d:75:8f:48:2a:90:fe:82:18:ed:3c:3c:43:80:e5:f3:7c:4e: db:2b:c0:cb:23:57:d7:f8:a7:15:59:22:33:e1:2d:e8:46:b2: 0e:cb:a8:3f:54:9c:fa:e7:5d:c2:15:81:00:2c:23:54:a9:c9: 34:3a:24:33:51:fe:04:92:58:28:7a:7b:f7:36:aa:ab:c5:d0: 0d:49:3d:e0:0c:bc:41:d7:39:11:80:30:8f:d2:55:de:cd:af: ef:2d:83:de:13:04:e6:2a:e4:35:7f:78:1e:10:8a:d3:4e:f7: 79:3f:da:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yJYMMMCoBRzCbvQEClA0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMTkzNjI4MWI4NjcwN2EwNWQ1NWEwMWY4OGIyZTY1M2Q3 YjNlZTkwHhcNMjYwMTAyMDgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDYxNzBjYjc2ODQ1NzZhYTE4OTk4NzAxZmJjOWEzMmI0N2M3ZThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76nosUQHK2IYBKFhSmYNiodfZ/RK NI4DV9ceaXOeYy/oKO2idoFGt0bp0trbi3xffuXm+NLQAXp93pa/XXc9FiBVHX2w /S9WxlXmX2Tw+s5ObKCnAbwidcFOXovl4ZCrgr19XAo3ozY1th94DeCZPV1Dpym/ HpRHtOwgYW8K8UM3VH6sDvsE9/Hl4m8bJl2vct2zrq0TAwAcIOysy+ocTmuc53vk QZK62kayFE4x5OXK3qUTd4Y2x0/BsZOIjX1ynzhHOn9cHfVADCodP4hjUlkpeipB WijPdMQdY42JmPyUzbONpVDQ0IaCZnvda4Yrh0/ho3Uxm5zLjSi0fhJTVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKRhcMt2hFdqoYmYcB+8mjK0fH6NMB8GA1UdIwQY MBaAFAsZNigbhnB6BdVaAfiLLmU9ez7pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQt ZWQ1N2IyNGI0NDY1LzEvcEdGd3kzYUVWMnFoaVpod0g3eWFNclI4Zm8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84NWVlMDItNmY0My00OTI3LWFiNWQtZWQ1N2IyNGI0NDY1 LzEvQ3hrMktCdUdjSG9GMVZvQi1Jc3VaVDE3UHVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1E4kMA0G CSqGSIb3DQEBCwUAA4IBAQB55OTLRKbWxjeG/9/j00gQ/QsH1b7LO0quolM8JrRP t45lzxZY9py+aAGXb1wwROINjfe6Xe7s/1NYRK/QFJ+kjteSbQ7sJffGE7QAavK7 e34S0AutnnfJxw5vuOdjXTn7C19r5k9sP0losDgKXecVYIF3FFSZa/b0S58Rdr5l ov+WojNAHec0GwUnL2s9o49ddY9IKpD+ghjtPDxDgOXzfE7bK8DLI1fX+KcVWSIz 4S3oRrIOy6g/VJz6513CFYEALCNUqck0OiQzUf4Eklgoenv3NqqrxdANST3gDLxB 1zkRgDCP0lXeza/vLYPeEwTmKuQ1f3geEIrTTvd5P9p/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:58:19 2026 by rpki-client