This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa File: PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa (raw, json) Hash identifier: uNWAi4ypu2U7vKEwyptJEE3BsJukgPqN0/lL7CgpehE= Subject key identifier: 3C:17:9A:3C:63:01:7C:81:97:D2:06:F3:3E:6D:55:1C:4E:42:5D:43 Certificate issuer: /CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Certificate serial: 019B77C6684DE36779CFAD782C0EDAA8C2CF Authority key identifier: 69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa Signing time: Thu 01 Jan 2026 04:17:30 +0000 ROA not before: Thu 01 Jan 2026 04:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210094 IP address blocks: 178.251.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:68:4d:e3:67:79:cf:ad:78:2c:0e:da:a8:c2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f7352d07135623e33f5a7e62925d4bab722fc6 Validity Not Before: Jan 1 04:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c179a3c63017c8197d206f33e6d551c4e425d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c2:d8:a4:d1:23:5b:95:77:05:50:d9:3f:a4: 4b:c8:c3:a5:b0:8f:04:4a:27:8e:1c:51:b0:e6:03: 62:d8:95:03:50:cb:b0:7c:8e:92:b7:99:63:8b:e2: 4d:48:76:65:59:64:90:3e:bd:46:c7:91:45:58:96: 08:e2:4e:19:7f:90:89:16:16:74:d9:68:91:b1:80: bb:9a:08:c7:c9:82:72:5b:88:dd:a8:fd:72:ed:98: bc:7a:6c:2d:a5:4f:8d:83:b2:f6:5c:73:5e:32:97: 68:87:9a:28:a3:3f:ce:46:c9:f3:7f:45:14:dd:1c: b6:8d:5c:21:d6:67:f6:61:c0:8f:74:3b:3c:2f:92: 53:b0:b9:20:91:95:3b:58:f9:71:d9:6c:3d:64:01: eb:98:e7:da:e3:e9:3f:30:cf:97:e5:94:cf:2f:79: 89:ec:f8:5b:7c:3a:bc:a9:d1:0a:2d:62:96:bc:b3: ce:3e:02:6c:bb:c4:0c:c5:8a:e7:15:fa:f3:c1:6d: a9:0b:20:7a:fd:ec:ab:9e:f0:03:4b:ec:d3:36:f2: ce:30:e4:28:58:e5:42:e3:f9:b5:67:cf:a6:73:ed: 57:52:be:2f:6c:49:73:db:a9:7c:97:b6:89:88:24: 56:ab:60:3f:e7:e6:e7:10:77:3c:e3:11:61:41:b4: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:17:9A:3C:63:01:7C:81:97:D2:06:F3:3E:6D:55:1C:4E:42:5D:43 X509v3 Authority Key Identifier: keyid:69:F7:35:2D:07:13:56:23:E3:3F:5A:7E:62:92:5D:4B:AB:72:2F:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afc1LQcTViPjP1p-YpJdS6tyL8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/PBeaPGMBfIGX0gbzPm1VHE5CXUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/118e24-742b-4392-8dfa-071518e0573e/1/afc1LQcTViPjP1p-YpJdS6tyL8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.251.20.0/24 Signature Algorithm: sha256WithRSAEncryption 07:fd:52:cb:12:2a:4d:4d:fa:ff:9d:d0:02:25:ce:b4:c2:2d: 76:4e:2f:c8:ba:b2:7c:61:91:90:bf:e9:54:af:62:a5:40:7f: cc:75:af:d8:0c:ca:62:97:07:cc:c1:d9:f8:5f:e4:01:13:d8: e4:55:fb:55:aa:b7:6b:0f:49:93:55:cc:0a:80:b3:79:f9:4e: 3b:25:65:6c:a7:f2:23:53:7e:68:80:25:d9:98:09:a8:bd:a8: cd:aa:a8:32:22:fc:21:a8:d0:61:dc:91:bd:32:44:92:67:99: d2:16:9a:fd:d1:6b:5c:41:59:95:6a:10:eb:54:8c:72:c6:35: ff:af:7e:b1:19:c3:20:51:45:65:2b:1f:89:6a:e2:a4:82:05: 36:3c:27:b3:11:ab:99:da:ea:bf:10:e9:e9:62:93:a1:68:2d: 78:4c:17:82:92:0f:f9:a6:5b:c6:5b:f9:a8:b7:f1:6e:e4:36: 9b:da:71:5f:51:af:fb:7b:e9:8a:7e:f1:46:68:71:7d:fb:f9: ac:42:91:48:74:5d:a8:be:ec:e1:b2:f9:eb:cb:2a:61:af:bb: e0:6c:8a:03:d4:cf:5d:13:9d:6c:27:11:ef:da:df:29:f4:28: 9b:24:d9:76:ce:07:ab:ba:8c:9b:fa:f8:c0:84:02:31:cd:6d: 92:f9:9f:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xmhN42d5z614LA7aqMLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjczNTJkMDcxMzU2MjNlMzNmNWE3ZTYyOTI1ZDRiYWI3 MjJmYzYwHhcNMjYwMTAxMDQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzE3OWEzYzYzMDE3YzgxOTdkMjA2ZjMzZTZkNTUxYzRlNDI1ZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsLYpNEjW5V3BVDZP6RLyMOlsI8E SieOHFGw5gNi2JUDUMuwfI6St5lji+JNSHZlWWSQPr1Gx5FFWJYI4k4Zf5CJFhZ0 2WiRsYC7mgjHyYJyW4jdqP1y7Zi8emwtpU+Ng7L2XHNeMpdoh5oooz/ORsnzf0UU 3Ry2jVwh1mf2YcCPdDs8L5JTsLkgkZU7WPlx2Ww9ZAHrmOfa4+k/MM+X5ZTPL3mJ 7PhbfDq8qdEKLWKWvLPOPgJsu8QMxYrnFfrzwW2pCyB6/eyrnvADS+zTNvLOMOQo WOVC4/m1Z8+mc+1XUr4vbElz26l8l7aJiCRWq2A/5+bnEHc84xFhQbTT2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDwXmjxjAXyBl9IG8z5tVRxOQl1DMB8GA1UdIwQY MBaAFGn3NS0HE1Yj4z9afmKSXUurci/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEt MDcxNTE4ZTA1NzNlLzEvUEJlYVBHTUJmSUdYMGdielBtMVZIRTVDWFVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xMThlMjQtNzQyYi00MzkyLThkZmEtMDcxNTE4ZTA1NzNl LzEvYWZjMUxRY1RWaVBqUDFwLVlwSmRTNnR5TDhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsvsUMA0G CSqGSIb3DQEBCwUAA4IBAQAH/VLLEipNTfr/ndACJc60wi12Ti/IurJ8YZGQv+lU r2KlQH/Mda/YDMpilwfMwdn4X+QBE9jkVftVqrdrD0mTVcwKgLN5+U47JWVsp/Ij U35ogCXZmAmovajNqqgyIvwhqNBh3JG9MkSSZ5nSFpr90WtcQVmVahDrVIxyxjX/ r36xGcMgUUVlKx+JauKkggU2PCezEauZ2uq/EOnpYpOhaC14TBeCkg/5plvGW/mo t/Fu5Dab2nFfUa/7e+mKfvFGaHF9+/msQpFIdF2ovuzhsvnryyphr7vgbIoD1M9d E51sJxHv2t8p9CibJNl2zgeruoyb+vjAhAIxzW2S+Z8G -----END CERTIFICATE-----Generated at Thu Jan 8 23:54:26 2026 by rpki-client