This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PtTdWvg6Z_ZnFRP7a1DSSm0SutI.roa File: PtTdWvg6Z_ZnFRP7a1DSSm0SutI.roa (raw, json) Hash identifier: 2acSKBHPEX26cQEMZyaeznypr39Lyg/aqfiMgi6SP4s= Subject key identifier: 3E:D4:DD:5A:F8:3A:67:F6:67:15:13:FB:6B:50:D2:4A:6D:12:BA:D2 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F851289A2C95E4021B1DB8357DF57F5 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PtTdWvg6Z_ZnFRP7a1DSSm0SutI.roa Signing time: Fri 02 Jan 2026 16:23:06 +0000 ROA not before: Fri 02 Jan 2026 16:23:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212243 IP address blocks: 146.120.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:12:89:a2:c9:5e:40:21:b1:db:83:57:df:57:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:23:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ed4dd5af83a67f6671513fb6b50d24a6d12bad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:34:fe:4e:67:95:32:2f:95:77:a6:fa:18: a3:6a:90:86:0e:03:f8:b5:7d:01:fa:c8:8d:a2:9c: 37:01:c7:6c:95:75:2d:0d:03:a9:27:58:eb:46:66: 6a:d3:c5:00:34:96:69:18:25:23:cd:8e:70:77:ad: 05:13:cc:c0:05:01:c9:f6:98:f6:14:c5:06:cc:cb: ab:f1:7b:f8:9a:80:54:30:3c:c8:9f:0e:81:74:35: 10:fd:50:19:ec:0c:33:a7:99:7d:de:13:34:c5:d2: 66:80:26:0f:63:a2:a2:36:87:63:2e:fb:22:4a:ee: 02:a0:b3:0b:02:ff:42:47:d7:08:68:25:95:d2:33: 2f:3e:7f:18:c5:e3:78:80:1d:9e:d8:4a:1b:f3:86: 6f:43:f1:41:c1:13:c3:54:c4:70:2a:c5:a4:cd:d1: 93:31:51:dc:d8:99:f8:0b:ed:5b:98:2c:6f:b1:6c: fa:ed:e8:68:96:e0:74:1c:e1:e9:05:d8:7b:4a:3c: 81:c2:bd:f7:ef:f6:e6:ab:db:12:3a:14:fd:be:4a: 42:1a:b4:6b:f0:0f:53:e3:a9:9d:c4:72:2d:5e:80: de:ff:3f:7b:db:82:4d:b6:0e:24:5c:0f:a3:4c:11: e0:73:b1:a0:7c:70:4e:fb:7a:c0:08:c7:6e:90:a9: 33:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D4:DD:5A:F8:3A:67:F6:67:15:13:FB:6B:50:D2:4A:6D:12:BA:D2 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/PtTdWvg6Z_ZnFRP7a1DSSm0SutI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.171.0/24 Signature Algorithm: sha256WithRSAEncryption 81:d2:cd:4e:13:6a:db:07:1b:37:0c:8d:dc:e3:40:c4:df:c9: b5:ea:9a:5a:44:91:30:f4:5d:2d:24:f3:cb:1b:e0:6a:fb:d3: 51:9c:c3:36:4d:c9:be:8b:47:fd:53:7d:10:0c:2c:69:d0:30: b2:51:21:28:c9:d6:62:a0:dc:8f:d8:55:d6:cd:e6:d8:99:c4: 54:a8:68:a6:df:59:7d:1e:fc:13:e6:2c:fb:4d:ec:b0:86:5b: b3:1a:ab:e9:7c:a0:a2:91:29:5c:f5:9e:3b:a2:4b:30:95:e8: 2f:c9:a2:36:fc:bf:a9:a8:ea:b1:fb:b2:31:12:1c:cf:2b:13: 17:29:16:c4:29:76:ad:1b:73:2d:d6:63:4e:18:e6:07:8b:05: 7b:cc:c6:f8:81:63:3a:89:10:59:46:81:72:a2:ca:51:a0:ed: ca:0b:4e:21:ad:3e:14:93:75:2a:6c:20:19:3e:e6:57:8e:e4: 5a:62:e7:a4:35:7f:49:3b:e8:f6:32:d8:44:12:78:18:7b:68: 06:f3:48:4f:4a:04:14:cb:d0:0c:1d:b8:71:0d:7f:36:33:21: 23:a5:9b:1c:3c:e0:cc:12:ff:b3:3e:3a:e3:00:14:40:83:83: c6:1b:79:e2:07:92:3a:53:dd:44:66:fb:9a:9d:8a:a3:8c:f3: d6:25:64:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRKJosleQCGx24NX31f1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMzA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWQ0ZGQ1YWY4M2E2N2Y2NjcxNTEzZmI2YjUwZDI0YTZkMTJiYWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPU0/k5nlTIvlXem+hijapCGDgP4 tX0B+siNopw3AcdslXUtDQOpJ1jrRmZq08UANJZpGCUjzY5wd60FE8zABQHJ9pj2 FMUGzMur8Xv4moBUMDzInw6BdDUQ/VAZ7Awzp5l93hM0xdJmgCYPY6KiNodjLvsi Su4CoLMLAv9CR9cIaCWV0jMvPn8YxeN4gB2e2Eob84ZvQ/FBwRPDVMRwKsWkzdGT MVHc2Jn4C+1bmCxvsWz67eholuB0HOHpBdh7SjyBwr337/bmq9sSOhT9vkpCGrRr 8A9T46mdxHItXoDe/z9724JNtg4kXA+jTBHgc7GgfHBO+3rACMdukKkzpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD7U3Vr4Omf2ZxUT+2tQ0kptErrSMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvUHRUZFd2ZzZaX1puRlJQN2ExRFNTbTBTdXRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknirMA0G CSqGSIb3DQEBCwUAA4IBAQCB0s1OE2rbBxs3DI3c40DE38m16ppaRJEw9F0tJPPL G+Bq+9NRnMM2Tcm+i0f9U30QDCxp0DCyUSEoydZioNyP2FXWzebYmcRUqGim31l9 HvwT5iz7TeywhluzGqvpfKCikSlc9Z47okswlegvyaI2/L+pqOqx+7IxEhzPKxMX KRbEKXatG3Mt1mNOGOYHiwV7zMb4gWM6iRBZRoFyospRoO3KC04hrT4Uk3UqbCAZ PuZXjuRaYuekNX9JO+j2MthEEngYe2gG80hPSgQUy9AMHbhxDX82MyEjpZscPODM Ev+zPjrjABRAg4PGG3niB5I6U91EZvuanYqjjPPWJWT4 -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:09 2026 by rpki-client