This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/PGDw99LFu8cUJWnydQ7BWcOhXTI.roa File: PGDw99LFu8cUJWnydQ7BWcOhXTI.roa (raw, json) Hash identifier: x69/sh35YI+yTa5z+lbFr8Vns/76h1dYMvcCscIlmMQ= Subject key identifier: 3C:60:F0:F7:D2:C5:BB:C7:14:25:69:F2:75:0E:C1:59:C3:A1:5D:32 Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2 Certificate serial: 019B7F8201383EC76B99B0008BEA5D386225 Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/PGDw99LFu8cUJWnydQ7BWcOhXTI.roa Signing time: Fri 02 Jan 2026 16:19:45 +0000 ROA not before: Fri 02 Jan 2026 16:19:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34661 IP address blocks: 45.130.244.0/22 maxlen: 22 45.140.44.0/22 maxlen: 22 45.147.140.0/22 maxlen: 22 178.159.108.0/22 maxlen: 22 185.71.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:01:38:3e:c7:6b:99:b0:00:8b:ea:5d:38:62:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2 Validity Not Before: Jan 2 16:19:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c60f0f7d2c5bbc7142569f2750ec159c3a15d32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:7c:3c:dd:39:dc:8c:b6:88:0b:22:a8:0b: 13:e0:e6:ec:55:37:b9:f9:4f:dc:ee:30:80:a2:31: 30:dd:04:4d:f8:34:83:aa:00:3f:0d:ad:94:cc:43: 7a:03:1a:60:7b:34:67:17:8a:71:7f:12:c8:81:ae: ac:1d:a5:c8:43:aa:81:fb:02:4a:c7:27:0f:1c:4c: d1:8a:1e:58:19:ed:b6:30:09:b1:a7:90:f6:0d:42: c1:5e:28:e0:08:95:e6:04:5f:a6:ad:ea:10:d3:96: 7d:a5:73:e3:10:87:e9:26:d2:0d:d1:ee:ff:31:3b: ef:a1:82:33:d5:22:7f:13:97:3f:94:1d:5a:0d:5b: 10:d0:30:b1:ca:01:d2:82:55:1d:13:1f:46:cb:c3: 8a:8d:60:14:68:72:08:6d:0d:e4:14:73:88:c8:0f: b8:d7:5a:36:f3:9d:97:f1:72:7e:5d:60:7c:9b:32: d3:bc:35:bb:cd:4d:fe:54:45:a5:5c:d5:7e:a7:27: 1e:4a:b6:a2:eb:35:e1:90:cd:f3:1f:67:cd:34:dd: 5b:a4:53:95:89:56:df:8e:f2:5f:c7:b4:5d:e4:af: 13:20:c6:36:f1:26:50:11:33:39:3b:c4:df:80:73: 4f:e1:d0:79:6e:72:c1:40:bb:13:e8:1f:fa:6f:71: 86:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:60:F0:F7:D2:C5:BB:C7:14:25:69:F2:75:0E:C1:59:C3:A1:5D:32 X509v3 Authority Key Identifier: keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/PGDw99LFu8cUJWnydQ7BWcOhXTI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.244.0/22 45.140.44.0/22 45.147.140.0/22 178.159.108.0/22 185.71.0.0/22 Signature Algorithm: sha256WithRSAEncryption 56:6b:8d:09:fa:0a:f6:81:8a:4a:fe:5b:71:21:56:ab:1a:9b: d9:37:8e:bf:8a:c6:30:26:69:07:4a:ff:6d:f7:7c:ca:3a:28: 52:7a:26:60:8a:ed:ae:51:d5:9a:d8:54:44:0a:72:fb:db:eb: 90:5c:d0:49:fd:b0:24:fd:85:66:09:6b:ed:ef:31:40:2b:e2: 58:56:df:e5:2c:c1:e0:5a:0a:93:5d:d9:86:26:0b:52:1f:24: 4d:fd:e3:f5:77:19:a1:04:8d:99:c7:69:cd:88:0c:80:15:28: e9:89:c6:4f:6a:a4:d4:15:5b:7b:a5:c4:5b:55:17:6a:b0:d5: 0e:7d:da:3c:3c:60:b3:cb:47:b7:a9:fc:5e:35:98:05:58:82: 49:36:1d:0f:4b:95:be:05:1f:22:61:1f:44:b9:c8:a0:83:2b: ea:b1:fd:3f:57:46:d3:66:ee:c3:be:5d:5e:da:08:19:97:37: d4:31:de:19:7c:25:e0:b4:bf:66:0e:32:c9:eb:34:17:4a:31: 0b:ab:66:16:14:a5:8a:61:20:cb:53:f2:7a:59:a4:8d:95:7c: aa:ab:7e:2a:dd:39:bb:d6:fd:66:14:b2:a6:87:da:3d:04:46: 02:54:d6:04:88:52:99:0a:a9:c5:df:6c:64:c3:fa:d4:88:ca: 25:ba:12:38 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt/ggE4PsdrmbAAi+pdOGIlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3 NDFmZjIwHhcNMjYwMTAyMTYxOTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzYwZjBmN2QyYzViYmM3MTQyNTY5ZjI3NTBlYzE1OWMzYTE1ZDMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3x8PN053Iy2iAsiqAsT4ObsVTe5 +U/c7jCAojEw3QRN+DSDqgA/Da2UzEN6AxpgezRnF4pxfxLIga6sHaXIQ6qB+wJK xycPHEzRih5YGe22MAmxp5D2DULBXijgCJXmBF+mreoQ05Z9pXPjEIfpJtIN0e7/ MTvvoYIz1SJ/E5c/lB1aDVsQ0DCxygHSglUdEx9Gy8OKjWAUaHIIbQ3kFHOIyA+4 11o2852X8XJ+XWB8mzLTvDW7zU3+VEWlXNV+pyceSrai6zXhkM3zH2fNNN1bpFOV iVbfjvJfx7Rd5K8TIMY28SZQETM5O8TfgHNP4dB5bnLBQLsT6B/6b3GGowIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDxg8PfSxbvHFCVp8nUOwVnDoV0yMB8GA1UdIwQY MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt YWFkZmE5YzA2NzQyLzEvUEdEdzk5TEZ1OGNVSldueWRRN0JXY09oWFRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLYL0AwQC LYwsAwQCLZOMAwQCsp9sAwQCuUcAMA0GCSqGSIb3DQEBCwUAA4IBAQBWa40J+gr2 gYpK/ltxIVarGpvZN46/isYwJmkHSv9t93zKOihSeiZgiu2uUdWa2FRECnL72+uQ XNBJ/bAk/YVmCWvt7zFAK+JYVt/lLMHgWgqTXdmGJgtSHyRN/eP1dxmhBI2Zx2nN iAyAFSjpicZPaqTUFVt7pcRbVRdqsNUOfdo8PGCzy0e3qfxeNZgFWIJJNh0PS5W+ BR8iYR9Euciggyvqsf0/V0bTZu7Dvl1e2ggZlzfUMd4ZfCXgtL9mDjLJ6zQXSjEL q2YWFKWKYSDLU/J6WaSNlXyqq34q3Tm71v1mFLKmh9o9BEYCVNYEiFKZCqnF32xk w/rUiMoluhI4 -----END CERTIFICATE-----Generated at Mon Jan 12 01:05:27 2026 by rpki-client