This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pTtq6Vm93jWh_3tfoQ5EvI1iPVE.roa File: pTtq6Vm93jWh_3tfoQ5EvI1iPVE.roa (raw, json) Hash identifier: cFl004qiH6dGspvv9FIjQRRYzFoBQx86Z3N38ptYoKM= Subject key identifier: A5:3B:6A:E9:59:BD:DE:35:A1:FF:7B:5F:A1:0E:44:BC:8D:62:3D:51 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AEA0393442871708D964FCF8D8F58 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pTtq6Vm93jWh_3tfoQ5EvI1iPVE.roa Signing time: Thu 01 Jan 2026 16:18:57 +0000 ROA not before: Thu 01 Jan 2026 16:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396356 IP address blocks: 81.5.156.0/24 maxlen: 24 81.168.41.0/24 maxlen: 24 82.153.137.0/24 maxlen: 24 82.153.139.0/24 maxlen: 24 82.153.140.0/24 maxlen: 24 82.153.221.0/24 maxlen: 24 82.153.223.0/24 maxlen: 24 82.153.240.0/24 maxlen: 24 82.153.249.0/24 maxlen: 24 82.153.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ea:03:93:44:28:71:70:8d:96:4f:cf:8d:8f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a53b6ae959bdde35a1ff7b5fa10e44bc8d623d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:32:d3:f2:85:5c:1a:f4:24:90:9f:91:31: 4a:b8:f3:f6:28:9d:c3:49:8e:46:85:9e:d2:db:2e: 64:66:36:79:6e:52:fb:52:d8:97:19:be:55:56:3a: 8e:e3:9c:f1:38:b8:02:c0:bd:a5:5a:38:67:ea:00: 4b:4f:91:a7:26:3c:5a:20:ba:e8:74:44:30:ec:e6: 63:ae:4e:e8:05:1b:2e:06:ed:d0:f1:80:e5:93:3d: 7e:78:23:74:0a:e3:bd:e2:0e:af:9a:cc:a5:c6:60: 5c:24:bb:9d:c5:8e:a4:cb:74:84:09:cc:07:2d:33: 97:d8:03:a5:b4:b9:8c:c5:37:0d:46:47:e2:93:ae: fa:28:4d:0d:ad:2d:a3:3f:ad:60:d4:40:a8:17:75: 46:c8:6c:89:cb:8c:f7:7d:2c:b3:f7:0b:44:9b:cc: 50:8b:38:0d:1a:18:e7:28:58:0b:36:f2:47:99:d7: 39:85:9e:89:24:83:84:24:01:f6:58:d3:f1:44:86: 5a:16:d3:af:09:dc:b7:63:02:b7:56:94:49:69:87: c2:94:ea:95:51:46:30:5d:6c:58:e9:60:c0:7f:73: dd:8d:92:88:c1:6b:2c:34:bd:a3:7b:98:7c:82:0f: 79:9b:87:3f:50:68:b9:13:e7:87:d8:a9:af:28:c1: ee:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3B:6A:E9:59:BD:DE:35:A1:FF:7B:5F:A1:0E:44:BC:8D:62:3D:51 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/pTtq6Vm93jWh_3tfoQ5EvI1iPVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.5.156.0/24 81.168.41.0/24 82.153.137.0/24 82.153.139.0-82.153.140.255 82.153.221.0/24 82.153.223.0/24 82.153.240.0/24 82.153.249.0-82.153.250.255 Signature Algorithm: sha256WithRSAEncryption 9b:f5:5a:e2:c5:bf:19:84:43:14:22:85:8b:f2:80:ed:b4:71: 6f:2e:ec:37:db:67:9f:16:72:c1:37:57:b3:71:ab:65:de:1a: 80:51:8c:7c:21:8b:11:68:ed:2a:84:05:99:af:9e:78:41:05: d5:2c:a0:77:df:e4:f6:10:3c:8d:6c:c6:05:1f:c8:3c:f6:34: 2b:1b:9e:2f:95:5c:c3:58:0d:88:66:61:a1:8a:7e:96:5a:22: 87:2d:15:5f:a1:e6:24:b4:c1:00:11:e8:0f:37:a7:fb:ca:59: 57:f6:52:65:f0:4c:6a:41:db:fe:fe:dd:f2:57:3b:bc:e7:2a: 4e:b0:c5:20:e6:6c:ad:98:ea:e1:20:eb:9b:88:8e:bd:d0:c0: 0e:2f:38:5e:b5:7e:da:14:3a:17:2f:d8:96:da:69:33:79:7d: cf:b8:47:24:ac:bf:00:0f:2a:0e:a1:89:17:16:bd:37:4c:c6: da:e5:2f:9e:da:c8:df:52:6f:d5:2c:e0:b1:6d:6d:33:3e:62: 30:be:33:f0:46:ad:1c:57:50:b1:ff:d7:5b:d6:f3:8c:ca:04: 2a:67:63:2f:dd:18:f2:ee:54:94:27:11:33:04:4c:61:41:12: 3a:0f:fe:bf:3a:4a:00:eb:13:4d:d9:1d:43:79:d2:4a:ad:33: 8d:8a:b4:9f -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt6WuoDk0QocXCNlk/PjY9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTNiNmFlOTU5YmRkZTM1YTFmZjdiNWZhMTBlNDRiYzhkNjIzZDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV8y0/KFXBr0JJCfkTFKuPP2KJ3D SY5GhZ7S2y5kZjZ5blL7UtiXGb5VVjqO45zxOLgCwL2lWjhn6gBLT5GnJjxaILro dEQw7OZjrk7oBRsuBu3Q8YDlkz1+eCN0CuO94g6vmsylxmBcJLudxY6ky3SECcwH LTOX2AOltLmMxTcNRkfik676KE0NrS2jP61g1ECoF3VGyGyJy4z3fSyz9wtEm8xQ izgNGhjnKFgLNvJHmdc5hZ6JJIOEJAH2WNPxRIZaFtOvCdy3YwK3VpRJaYfClOqV UUYwXWxY6WDAf3PdjZKIwWssNL2je5h8gg95m4c/UGi5E+eH2KmvKMHujwIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFKU7aulZvd41of97X6EORLyNYj1RMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvcFR0cTZWbTkzaldoXzN0Zm9RNUV2STFpUFZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQAUQWcAwQA UagpAwQAUpmJMAwDBABSmYsDBABSmYwDBABSmd0DBABSmd8DBABSmfAwDAMEAFKZ +QMEAFKZ+jANBgkqhkiG9w0BAQsFAAOCAQEAm/Va4sW/GYRDFCKFi/KA7bRxby7s N9tnnxZywTdXs3GrZd4agFGMfCGLEWjtKoQFma+eeEEF1Sygd9/k9hA8jWzGBR/I PPY0KxueL5Vcw1gNiGZhoYp+lloihy0VX6HmJLTBABHoDzen+8pZV/ZSZfBMakHb /v7d8lc7vOcqTrDFIOZsrZjq4SDrm4iOvdDADi84XrV+2hQ6Fy/YltppM3l9z7hH JKy/AA8qDqGJFxa9N0zG2uUvntrI31Jv1SzgsW1tMz5iML4z8EatHFdQsf/XW9bz jMoEKmdjL90Y8u5UlCcRMwRMYUESOg/+vzpKAOsTTdkdQ3nSSq0zjYq0nw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:10:37 2026 by rpki-client