This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/PTGFtop819nPl01gzng3ViiDuyQ.roa File: PTGFtop819nPl01gzng3ViiDuyQ.roa (raw, json) Hash identifier: MsdxqZiMITKpL1yel8PLmuFTlbpZRDQiLbP60VZOUKg= Subject key identifier: 3D:31:85:B6:8A:7C:D7:D9:CF:97:4D:60:CE:78:37:56:28:83:BB:24 Certificate issuer: /CN=562e8e050d384502eb797f5e944931a66fdd555a Certificate serial: 019B7B36759DB1870520E57048D86CB7648E Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/PTGFtop819nPl01gzng3ViiDuyQ.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21100 IP address blocks: 91.235.129.0/24 maxlen: 24 185.174.172.0/22 maxlen: 22 185.237.206.0/23 maxlen: 23 195.54.162.0/24 maxlen: 24 2a06:c6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:75:9d:b1:87:05:20:e5:70:48:d8:6c:b7:64:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d3185b68a7cd7d9cf974d60ce7837562883bb24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:8d:14:89:bf:56:60:b1:87:0c:c0:cf:d9: db:f9:a1:fe:c2:ba:8e:ac:fc:99:be:39:88:11:b7: 6a:b1:93:38:cf:34:3e:bc:f7:9d:92:a9:1d:9f:3e: 75:bf:db:5a:29:cb:a1:af:cd:db:e8:1e:b3:33:9c: 11:d5:12:33:c1:dd:18:fd:1c:b3:fc:81:b5:ac:64: 30:0e:94:e7:32:54:ce:c3:83:0a:3a:09:2b:c8:af: 7d:37:7e:a5:18:ac:30:51:80:51:29:09:7e:e6:8f: 68:97:af:09:a3:6c:77:59:c2:a1:ed:fb:63:4e:56: 76:7b:cf:4c:83:db:54:b4:53:04:05:c7:83:60:14: 75:6c:26:4b:99:8d:b9:9b:80:2e:8c:10:c4:03:e6: 39:d6:f1:57:34:11:10:c7:be:4c:ab:4d:54:91:86: 4e:a7:e2:16:23:9d:2c:3c:e3:b3:a2:53:84:c3:40: b0:90:01:5d:44:b6:89:6f:5b:a4:c9:be:a9:cd:4b: f8:65:ad:20:45:7c:08:cc:14:d9:12:8b:b9:f2:7e: 05:71:2d:9f:5f:7a:9c:31:b0:85:98:7d:f6:a1:a3: 58:21:b1:bd:d7:f6:ae:0b:88:fc:3b:a5:84:51:97: cc:81:bb:7d:e6:f5:21:92:b3:bb:3b:86:b1:a5:6b: f0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:85:B6:8A:7C:D7:D9:CF:97:4D:60:CE:78:37:56:28:83:BB:24 X509v3 Authority Key Identifier: keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/PTGFtop819nPl01gzng3ViiDuyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.129.0/24 185.174.172.0/22 185.237.206.0/23 195.54.162.0/24 IPv6: 2a06:c6c0::/48 Signature Algorithm: sha256WithRSAEncryption 67:2e:a5:a2:0e:f7:6d:44:d5:43:39:6a:77:df:d1:ca:72:8b: d3:23:c8:95:15:36:17:0b:18:8f:26:05:1d:48:9c:31:82:63: ae:d6:82:7d:ce:06:8d:7c:20:e0:52:fb:fc:a1:ad:60:30:d1: 5e:ac:2b:3d:60:70:3a:ee:9f:3e:87:fb:23:71:83:38:89:cd: 91:67:10:8d:61:c2:e8:46:78:51:d1:92:1a:fe:8b:2a:57:38: 8b:8d:89:f3:07:b3:45:17:a7:63:c5:73:cd:90:bf:1a:35:be: 2d:8d:68:13:70:04:0b:7d:2f:33:98:b8:df:d2:a3:e7:8f:b0: 90:f0:36:10:5e:5d:f8:1f:95:78:85:33:ff:db:a6:0e:8d:ff: d4:ae:ba:9a:4f:c2:c1:50:cf:e7:12:79:f6:f5:b9:d3:ea:59: 65:5c:d1:77:a6:b2:39:fd:6a:87:9a:c3:92:da:32:91:0f:ff: b8:1d:5d:62:10:4e:0a:03:1c:70:01:d8:77:65:d1:23:d3:0b: ad:de:50:ec:a8:75:95:bd:25:59:5e:fa:df:3c:65:92:28:92: 4f:e4:a3:c9:50:bb:35:39:b1:c4:fb:39:82:1d:cd:47:5c:6f: 75:0b:26:21:d0:6c:3a:90:63:cc:3f:35:8a:a6:e3:05:ec:6f: 30:83:96:78 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7NnWdsYcFIOVwSNhst2SOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2MmU4ZTA1MGQzODQ1MDJlYjc5N2Y1ZTk0NDkzMWE2NmZk ZDU1NWEwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDMxODViNjhhN2NkN2Q5Y2Y5NzRkNjBjZTc4Mzc1NjI4ODNiYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmyNFIm/VmCxhwzAz9nb+aH+wrqO rPyZvjmIEbdqsZM4zzQ+vPedkqkdnz51v9taKcuhr83b6B6zM5wR1RIzwd0Y/Ryz /IG1rGQwDpTnMlTOw4MKOgkryK99N36lGKwwUYBRKQl+5o9ol68Jo2x3WcKh7ftj TlZ2e89Mg9tUtFMEBceDYBR1bCZLmY25m4AujBDEA+Y51vFXNBEQx75Mq01UkYZO p+IWI50sPOOzolOEw0CwkAFdRLaJb1ukyb6pzUv4Za0gRXwIzBTZEou58n4FcS2f X3qcMbCFmH32oaNYIbG91/auC4j8O6WEUZfMgbt95vUhkrO7O4axpWvwJwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFD0xhbaKfNfZz5dNYM54N1Yog7skMB8GA1UdIwQY MBaAFFYujgUNOEUC63l/XpRJMaZv3VVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUt OTVjNTAwMWJmYzcwLzEvUFRHRnRvcDgxOW5QbDAxZ3puZzNWaWlEdXlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUtOTVjNTAwMWJmYzcw LzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAW+uBAwQC ua6sAwQBue3OAwQAwzaiMA8EAgACMAkDBwAqBsbAAAAwDQYJKoZIhvcNAQELBQAD ggEBAGcupaIO921E1UM5anff0cpyi9MjyJUVNhcLGI8mBR1InDGCY67Wgn3OBo18 IOBS+/yhrWAw0V6sKz1gcDrunz6H+yNxgziJzZFnEI1hwuhGeFHRkhr+iypXOIuN ifMHs0UXp2PFc82Qvxo1vi2NaBNwBAt9LzOYuN/So+ePsJDwNhBeXfgflXiFM//b pg6N/9SuuppPwsFQz+cSefb1udPqWWVc0Xemsjn9aoeaw5LaMpEP/7gdXWIQTgoD HHAB2Hdl0SPTC63eUOyodZW9JVle+t88ZZIokk/ko8lQuzU5scT7OYIdzUdcb3UL JiHQbDqQY8w/NYqm4wXsbzCDlng= -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:06 2026 by rpki-client