This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/ptpESvCaANuAjqvqXUxI5HHGe_w.roa File: ptpESvCaANuAjqvqXUxI5HHGe_w.roa (raw, json) Hash identifier: BKbDkhXGfyqf4HQQHEEaQwdwndmWSF1S29dHGNtQ/XM= Subject key identifier: A6:DA:44:4A:F0:9A:00:DB:80:8E:AB:EA:5D:4C:48:E4:71:C6:7B:FC Certificate issuer: /CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Certificate serial: 019BE243271E93BEF400A1AC3DF71B20A96E Authority key identifier: DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/ptpESvCaANuAjqvqXUxI5HHGe_w.roa Signing time: Wed 21 Jan 2026 20:33:30 +0000 ROA not before: Wed 21 Jan 2026 20:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206336 IP address blocks: 2a01:e5c0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.mft rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e2:43:27:1e:93:be:f4:00:a1:ac:3d:f7:1b:20:a9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da7d5fca1e469929d4a8b6f57af3cbcdc639a35e Validity Not Before: Jan 21 20:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6da444af09a00db808eabea5d4c48e471c67bfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0d:76:04:d0:54:00:37:3d:54:0b:15:18:d4: 21:23:3a:eb:8f:bd:f4:8f:1a:e9:84:79:1f:4f:23: 72:c5:1d:37:7b:cc:6a:8d:14:a3:7e:e7:05:ef:73: 5d:6a:c2:2f:e7:5c:6a:0c:be:09:dd:4a:43:64:86: b5:17:13:a6:44:aa:b3:5a:c9:51:ef:7a:ea:3c:bf: 0d:99:7b:0a:c5:c8:b6:ba:8e:a0:d3:7f:dc:0e:ad: 34:78:8e:74:3f:fb:cc:f8:b4:d1:f2:50:47:9f:e7: 47:33:8f:cf:a1:4b:c8:83:32:61:e6:1c:d3:f8:4d: 44:ec:b3:b8:e2:43:19:24:21:3d:fa:5f:09:cb:98: 40:16:c1:db:e9:4a:db:30:4c:91:fa:55:f8:04:b4: cf:56:05:ec:e7:5d:88:90:d0:c4:d5:2d:6f:c4:85: e5:55:d5:5c:e9:3b:09:fc:b3:43:46:ec:39:20:ef: 08:78:e9:9f:5d:f7:36:2a:15:80:ed:a0:4e:71:6e: 9d:2c:5b:bc:17:22:92:12:cd:2c:c7:c7:40:f8:00: 25:73:9c:86:09:80:19:4e:ae:54:eb:cc:66:a9:ee: 70:10:6f:27:d6:31:db:1f:ef:15:b7:c1:83:1b:b9: 96:da:17:2c:73:fa:6f:d2:60:ba:ec:c4:76:e3:31: 30:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DA:44:4A:F0:9A:00:DB:80:8E:AB:EA:5D:4C:48:E4:71:C6:7B:FC X509v3 Authority Key Identifier: keyid:DA:7D:5F:CA:1E:46:99:29:D4:A8:B6:F5:7A:F3:CB:CD:C6:39:A3:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2n1fyh5GmSnUqLb1evPLzcY5o14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/ptpESvCaANuAjqvqXUxI5HHGe_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/060f32-a48b-4657-a58b-41b730327c78/1/2n1fyh5GmSnUqLb1evPLzcY5o14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e5c0:f000::/36 Signature Algorithm: sha256WithRSAEncryption ae:a1:96:d3:f2:89:b6:b0:57:3c:a5:8d:2a:9c:45:85:95:19: 09:01:eb:92:58:aa:2a:eb:f1:76:18:de:6b:dc:99:3a:82:f7: c0:39:ef:8f:1f:3c:c8:60:fd:57:db:3d:d1:fd:c8:c0:74:89: 1b:e5:a7:2a:98:8c:c3:e7:92:7d:1c:1e:5a:83:f3:44:99:69: f2:4e:06:77:1a:ec:83:a9:ad:6d:0c:53:99:66:fb:2e:d7:1c: 39:42:75:66:f1:3a:4d:1d:e2:26:40:69:ea:de:1d:ef:0e:96: f1:ca:1f:55:41:ea:ea:e3:8d:63:d4:2b:de:12:32:63:6d:d0: ce:0b:12:f4:e3:f8:28:bd:79:32:6e:a2:c7:52:0c:d9:bc:3d: 70:f8:b0:33:bd:ea:4c:c8:47:06:b0:2c:b6:63:32:48:3f:02: 21:4e:0e:3b:dc:28:04:9c:5a:31:08:8e:9b:f6:ad:84:93:87: 12:25:8f:11:57:91:4d:55:95:1a:f2:31:93:f4:89:70:77:5e: 48:40:cb:9f:00:67:14:75:c5:19:40:6a:66:0f:27:e5:06:33: 73:38:ce:15:52:04:89:5d:1b:39:fe:1f:9a:f1:e3:49:39:7e: 72:c1:96:63:5e:7f:09:9d:00:3c:33:13:52:5f:8b:d0:c9:e6: 4c:47:27:79 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZviQycek770AKGsPfcbIKluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhN2Q1ZmNhMWU0Njk5MjlkNGE4YjZmNTdhZjNjYmNkYzYz OWEzNWUwHhcNMjYwMTIxMjAzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmRhNDQ0YWYwOWEwMGRiODA4ZWFiZWE1ZDRjNDhlNDcxYzY3YmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww12BNBUADc9VAsVGNQhIzrrj730 jxrphHkfTyNyxR03e8xqjRSjfucF73NdasIv51xqDL4J3UpDZIa1FxOmRKqzWslR 73rqPL8NmXsKxci2uo6g03/cDq00eI50P/vM+LTR8lBHn+dHM4/PoUvIgzJh5hzT +E1E7LO44kMZJCE9+l8Jy5hAFsHb6UrbMEyR+lX4BLTPVgXs512IkNDE1S1vxIXl VdVc6TsJ/LNDRuw5IO8IeOmfXfc2KhWA7aBOcW6dLFu8FyKSEs0sx8dA+AAlc5yG CYAZTq5U68xmqe5wEG8n1jHbH+8Vt8GDG7mW2hcsc/pv0mC67MR24zEw6wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKbaRErwmgDbgI6r6l1MSORxxnv8MB8GA1UdIwQY MBaAFNp9X8oeRpkp1Ki29Xrzy83GOaNeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGIt NDFiNzMwMzI3Yzc4LzEvcHRwRVN2Q2FBTnVBanF2cVhVeEk1SEhHZV93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8wNjBmMzItYTQ4Yi00NjU3LWE1OGItNDFiNzMwMzI3Yzc4 LzEvMm4xZnloNUdtU25VcUxiMWV2UEx6Y1k1bzE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEKgHlwPAw DQYJKoZIhvcNAQELBQADggEBAK6hltPyibawVzyljSqcRYWVGQkB65JYqirr8XYY 3mvcmTqC98A5748fPMhg/VfbPdH9yMB0iRvlpyqYjMPnkn0cHlqD80SZafJOBnca 7IOprW0MU5lm+y7XHDlCdWbxOk0d4iZAaereHe8OlvHKH1VB6urjjWPUK94SMmNt 0M4LEvTj+Ci9eTJuosdSDNm8PXD4sDO96kzIRwawLLZjMkg/AiFODjvcKAScWjEI jpv2rYSThxIljxFXkU1VlRryMZP0iXB3XkhAy58AZxR1xRlAamYPJ+UGM3M4zhVS BIldGzn+H5rx40k5fnLBlmNefwmdADwzE1Jfi9DJ5kxHJ3k= -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:29 2026 by rpki-client