This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/ptwMESCTQKh1eUKxKNaUBcvAXoc.roa File: ptwMESCTQKh1eUKxKNaUBcvAXoc.roa (raw, json) Hash identifier: NHN88OkqeyC7hTU3lW2dshn//WH3lw/b1C5FyuT4/rM= Subject key identifier: A6:DC:0C:11:20:93:40:A8:75:79:42:B1:28:D6:94:05:CB:C0:5E:87 Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c Certificate serial: 019B7759075D140600D2253538B470E69370 Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/ptwMESCTQKh1eUKxKNaUBcvAXoc.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3209 IP address blocks: 2a09:c580:1611::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:07:5d:14:06:00:d2:25:35:38:b4:70:e6:93:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6dc0c11209340a8757942b128d69405cbc05e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:36:fe:aa:dc:f2:69:a1:69:25:be:7c:d8:93: 7c:b6:9e:1b:5e:6a:bd:3b:bc:55:cc:60:b3:a2:8a: 95:47:b2:26:ed:34:d6:3f:f0:95:48:13:f7:47:85: f7:9c:1b:61:c5:2c:22:fc:cd:98:78:1e:30:35:96: 93:b7:1f:c3:5a:27:06:32:40:4c:0b:95:2a:0e:7c: 87:54:c9:8a:85:99:81:c4:43:9d:32:b8:e5:a7:1d: 15:71:0f:8a:ab:5f:fa:23:b7:4c:2a:9a:11:b3:89: 72:5a:8f:bc:ce:be:f8:25:da:a8:9f:b6:34:da:d8: a2:c5:fd:27:f7:70:68:82:6f:23:09:48:0b:7e:b6: cf:42:1e:4e:01:ef:eb:57:95:2b:09:1a:02:e7:45: 3d:d5:0a:91:d8:30:8d:9e:27:d5:d7:f0:3a:cf:5d: 17:c8:5f:63:9e:c9:4a:37:8e:04:c9:46:f9:b1:2f: 58:18:78:39:aa:61:4d:e7:d4:91:4e:19:5c:47:0d: 21:52:24:8c:8f:d1:ba:a4:4c:81:3d:9c:96:01:04: dc:e5:35:1b:e8:c6:88:2e:06:6e:76:91:6f:47:9d: b7:bd:fa:86:7f:c8:89:72:39:c6:46:10:2d:93:de: 49:15:9a:69:73:7e:b8:f5:02:e0:22:f0:1a:ad:4f: 27:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DC:0C:11:20:93:40:A8:75:79:42:B1:28:D6:94:05:CB:C0:5E:87 X509v3 Authority Key Identifier: keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/ptwMESCTQKh1eUKxKNaUBcvAXoc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:c580:1611::/48 Signature Algorithm: sha256WithRSAEncryption 5e:1e:c5:17:83:56:37:bc:87:86:a5:56:28:ce:c8:7a:df:b9: 01:aa:2a:c2:96:86:88:e5:e8:b6:11:6b:d6:59:64:78:d1:2f: 27:99:22:56:ae:62:12:24:fc:a2:78:d1:40:16:b5:be:e8:f9: 67:e9:c6:56:9d:7c:d6:5c:1c:38:47:3d:73:ef:80:17:45:ec: 93:26:f3:e4:94:90:8e:5e:4b:fd:6a:3c:ed:e0:64:17:da:b8: e3:20:5f:d9:60:55:63:97:da:f4:3a:eb:1b:46:63:ea:76:19: 92:44:69:04:fd:7b:28:25:b6:e0:bf:30:20:8b:09:76:9a:6e: 73:33:be:81:6f:84:1a:04:bb:54:d0:c5:9e:4b:34:a2:ce:8e: 82:7d:19:85:57:89:30:b5:7f:52:bd:a3:82:26:74:8a:de:45: 64:93:96:bf:37:f9:55:30:6d:b0:11:d1:c7:ff:27:27:20:50: fe:93:d4:a2:03:94:98:4d:e9:d6:a3:b7:30:46:88:15:df:f2: b5:3b:4e:d7:dc:bf:d0:6d:81:ce:d2:71:75:11:5d:e1:7f:6f: 04:95:2f:7e:1a:44:ca:b7:d8:f0:97:6d:f1:cc:f1:ea:96:36: a8:df:f1:25:9b:09:89:d5:30:7c:ac:b5:ba:f2:3c:9c:74:9d: a4:ab:67:be -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WQddFAYA0iU1OLRw5pNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxZGQ3OTViZTM2ZTRiNWIzMDllYmM4ZTA0ZWE3Mzk0MTM1 YzcxNGMwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmRjMGMxMTIwOTM0MGE4NzU3OTQyYjEyOGQ2OTQwNWNiYzA1ZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzb+qtzyaaFpJb582JN8tp4bXmq9 O7xVzGCzooqVR7Im7TTWP/CVSBP3R4X3nBthxSwi/M2YeB4wNZaTtx/DWicGMkBM C5UqDnyHVMmKhZmBxEOdMrjlpx0VcQ+Kq1/6I7dMKpoRs4lyWo+8zr74Jdqon7Y0 2tiixf0n93Bogm8jCUgLfrbPQh5OAe/rV5UrCRoC50U91QqR2DCNnifV1/A6z10X yF9jnslKN44EyUb5sS9YGHg5qmFN59SRThlcRw0hUiSMj9G6pEyBPZyWAQTc5TUb 6MaILgZudpFvR523vfqGf8iJcjnGRhAtk95JFZppc3649QLgIvAarU8nvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKbcDBEgk0CodXlCsSjWlAXLwF6HMB8GA1UdIwQY MBaAFPHdeVvjbktbMJ68jgTqc5QTXHFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYt ZmU0NDc3MmQ1YWUxLzEvcHR3TUVTQ1RRS2gxZVVLeEtOYVVCY3ZBWG9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYtZmU0NDc3MmQ1YWUx LzEvOGQxNVctTnVTMXN3bnJ5T0JPcHpsQk5jY1V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgnFgBYR MA0GCSqGSIb3DQEBCwUAA4IBAQBeHsUXg1Y3vIeGpVYozsh637kBqirCloaI5ei2 EWvWWWR40S8nmSJWrmISJPyieNFAFrW+6Pln6cZWnXzWXBw4Rz1z74AXReyTJvPk lJCOXkv9ajzt4GQX2rjjIF/ZYFVjl9r0OusbRmPqdhmSRGkE/XsoJbbgvzAgiwl2 mm5zM76Bb4QaBLtU0MWeSzSizo6CfRmFV4kwtX9SvaOCJnSK3kVkk5a/N/lVMG2w EdHH/ycnIFD+k9SiA5SYTenWo7cwRogV3/K1O07X3L/QbYHO0nF1EV3hf28ElS9+ GkTKt9jwl23xzPHqljao3/ElmwmJ1TB8rLW68jycdJ2kq2e+ -----END CERTIFICATE-----Generated at Sun Jan 25 15:12:12 2026 by rpki-client