This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa File: ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa (raw, json) Hash identifier: eOGLE8Tlqokd5s+tmbzOxg0+2W1g2wypnR3SH77Owog= Subject key identifier: A6:D7:44:FF:9C:56:9F:E6:66:30:09:18:E0:07:6C:72:6C:AF:70:69 Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5 Certificate serial: 019B77592CED894E85A523088936E18554FF Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa Signing time: Thu 01 Jan 2026 02:18:11 +0000 ROA not before: Thu 01 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39526 IP address blocks: 193.111.29.0/24 maxlen: 32 2001:67c:2124::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:2c:ed:89:4e:85:a5:23:08:89:36:e1:85:54:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5 Validity Not Before: Jan 1 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6d744ff9c569fe666300918e0076c726caf7069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:88:f8:ff:fa:8f:1f:4a:e0:f5:cf:2c:4c:3f: 96:0d:1a:aa:42:bc:fb:a3:9d:b7:cb:19:27:c4:80: e5:03:d4:91:19:ee:29:ac:30:de:60:8f:e9:d8:d9: ad:cd:15:28:73:65:df:9c:f4:02:97:c1:ea:0a:e5: df:13:c8:b7:f2:f8:38:04:13:cf:ff:f6:8d:4c:e3: 5b:3a:5a:25:d9:b1:86:6e:4a:a5:fc:8c:30:28:22: e6:74:0c:95:0e:60:74:dd:1d:fc:ac:35:2b:2c:03: 4d:2b:bc:36:b5:aa:64:0e:97:50:ca:a9:ef:d4:35: d9:a7:61:a5:43:2b:08:8b:48:04:32:f0:2b:e3:ed: 37:bb:02:bc:92:54:7a:59:b9:1d:81:9b:76:c1:e1: 76:f9:14:b9:f1:a3:13:f5:1d:79:ee:a1:13:2d:cb: d1:ba:f9:8d:a0:92:ed:39:1d:e2:25:a6:e9:5d:9f: 78:f5:41:ab:1c:dc:cb:d7:40:d4:0d:4c:9a:6b:55: 20:dc:ca:ec:1d:b1:4b:26:01:81:d1:01:9b:9c:9c: 78:64:62:06:f1:15:93:ee:10:1d:a3:2b:71:6c:03: cb:25:d8:10:ef:c6:0c:76:13:24:65:b0:72:cd:84: b0:a5:41:46:95:2d:3a:76:96:c6:ba:48:7f:2f:c5: d5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D7:44:FF:9C:56:9F:E6:66:30:09:18:E0:07:6C:72:6C:AF:70:69 X509v3 Authority Key Identifier: keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/ptdE_5xWn-ZmMAkY4AdscmyvcGk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.29.0/24 IPv6: 2001:67c:2124::/48 Signature Algorithm: sha256WithRSAEncryption 01:c9:f8:01:94:70:d7:c4:8a:bb:e6:c9:53:49:63:83:20:fe: f7:6c:cd:bd:73:2c:7f:1f:00:dc:16:a8:3f:b4:19:79:c3:48: 04:cc:86:3f:e2:ae:69:73:65:95:4d:86:0b:f9:11:c4:0e:4b: 3c:4b:29:14:da:11:bd:00:0c:97:41:dc:1a:2b:c4:a4:26:83: 85:93:9d:83:83:f4:27:c6:a7:0f:27:c3:23:2f:34:2d:d9:33: 7d:ad:21:7d:71:43:55:af:bf:51:ce:e8:3f:24:da:2a:7c:e1: b8:97:86:c2:4f:48:12:d3:ea:f0:59:1f:9d:ec:01:64:4a:8d: a6:ff:b7:ec:9f:87:19:97:d2:6e:ea:a5:b9:08:34:5e:f8:7b: 25:1c:9b:ed:8d:2c:83:0d:76:d5:a6:2d:fb:44:a0:b9:00:b6: ed:43:ea:54:0b:19:48:9f:1d:eb:60:dd:16:a6:39:15:3f:43: 89:42:27:a0:19:f3:bd:ae:59:01:38:db:a8:8b:9e:43:97:62: 2d:36:01:e8:f3:0f:1c:9d:0f:06:f7:34:99:8f:e9:b4:93:7b: 28:3e:87:c5:79:5b:70:58:b9:76:3e:c5:8b:b1:ad:4d:7e:50: 1f:0a:ee:e3:a8:77:54:55:36:a2:5f:f9:70:70:a8:39:fc:64: 65:48:9e:a6 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WSztiU6FpSMIiTbhhVT/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDczMTI4ZGU1NDk3NmRiNjJkOWJkMTYxNGU3N2M0M2Rl ZTM5YjUwHhcNMjYwMTAxMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmQ3NDRmZjljNTY5ZmU2NjYzMDA5MThlMDA3NmM3MjZjYWY3MDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04j4//qPH0rg9c8sTD+WDRqqQrz7 o523yxknxIDlA9SRGe4prDDeYI/p2NmtzRUoc2XfnPQCl8HqCuXfE8i38vg4BBPP //aNTONbOlol2bGGbkql/IwwKCLmdAyVDmB03R38rDUrLANNK7w2tapkDpdQyqnv 1DXZp2GlQysIi0gEMvAr4+03uwK8klR6WbkdgZt2weF2+RS58aMT9R157qETLcvR uvmNoJLtOR3iJabpXZ949UGrHNzL10DUDUyaa1Ug3MrsHbFLJgGB0QGbnJx4ZGIG 8RWT7hAdoytxbAPLJdgQ78YMdhMkZbByzYSwpUFGlS06dpbGukh/L8XV5wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFKbXRP+cVp/mZjAJGOAHbHJsr3BpMB8GA1UdIwQY MBaAFLVHMSjeVJdtti2b0WFOd8Q97jm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQt ZTkwNDMxODM0MmVlLzEvcHRkRV81eFduLVptTUFrWTRBZHNjbXl2Y0drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MGRlODAtNTBlOS00YzFkLWE3YjQtZTkwNDMxODM0MmVl LzEvdFVjeEtONVVsMjIyTFp2UllVNTN4RDN1T2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwW8dMA8E AgACMAkDBwAgAQZ8ISQwDQYJKoZIhvcNAQELBQADggEBAAHJ+AGUcNfEirvmyVNJ Y4Mg/vdszb1zLH8fANwWqD+0GXnDSATMhj/irmlzZZVNhgv5EcQOSzxLKRTaEb0A DJdB3BorxKQmg4WTnYOD9CfGpw8nwyMvNC3ZM32tIX1xQ1Wvv1HO6D8k2ip84biX hsJPSBLT6vBZH53sAWRKjab/t+yfhxmX0m7qpbkINF74eyUcm+2NLIMNdtWmLftE oLkAtu1D6lQLGUifHetg3RamORU/Q4lCJ6AZ872uWQE426iLnkOXYi02AejzDxyd Dwb3NJmP6bSTeyg+h8V5W3BYuXY+xYuxrU1+UB8K7uOod1RVNqJf+XBwqDn8ZGVI nqY= -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:01 2026 by rpki-client