This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/PTI5qNiMxJTaYsRviRjCASyPtOI.roa File: PTI5qNiMxJTaYsRviRjCASyPtOI.roa (raw, json) Hash identifier: PgMrdxB9fQmJxz2ju9KDJjW/D8w0BstDoOfXkw+BC8M= Subject key identifier: 3D:32:39:A8:D8:8C:C4:94:DA:62:C4:6F:89:18:C2:01:2C:8F:B4:E2 Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6 Certificate serial: 019B7BA4F607350F46F054EA54478CCDF754 Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/PTI5qNiMxJTaYsRviRjCASyPtOI.roa Signing time: Thu 01 Jan 2026 22:19:27 +0000 ROA not before: Thu 01 Jan 2026 22:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44558 IP address blocks: 159.255.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f6:07:35:0f:46:f0:54:ea:54:47:8c:cd:f7:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6 Validity Not Before: Jan 1 22:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d3239a8d88cc494da62c46f8918c2012c8fb4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ca:d3:e9:c9:9d:62:ec:5c:00:df:f8:80:fc: fe:9f:5b:ea:09:31:9a:dd:4a:61:4c:60:f3:e7:d1: be:38:53:7f:cb:55:4a:1d:97:b8:d5:61:ef:5c:b1: 29:ac:40:a5:93:3a:02:a1:69:e3:a1:48:22:7a:4e: 29:e9:82:95:5d:c7:dc:cf:20:d3:eb:af:62:e7:64: 87:db:bd:c8:4e:9b:74:75:8e:87:c4:ec:bd:65:cc: 71:e9:53:88:ec:f8:90:35:5c:d3:23:b2:b2:59:29: 9c:7b:78:f3:68:3f:ed:c1:02:c9:44:8c:7b:2d:a1: 9a:2b:0f:40:ef:86:f8:57:c0:70:af:ec:7d:af:2e: f2:63:cd:2d:45:9b:93:ec:19:c9:3a:54:29:1f:9b: bb:6a:56:50:d4:a3:da:28:60:9c:0f:4b:ee:5e:b4: dc:7e:7f:80:34:9a:c2:f9:28:eb:3b:b0:86:13:0b: 59:a2:b5:03:69:b9:6f:6f:ab:99:bb:8d:4b:28:9f: 1c:10:45:3c:d8:88:59:b7:57:cf:6f:ec:f5:5e:7e: e8:1c:4c:b5:66:f6:d1:b0:bb:f6:e9:0d:2e:1b:26: 04:de:89:94:c3:9a:0e:75:50:d1:ba:08:ff:ab:7f: 67:c5:31:8d:c9:1a:3f:a4:1e:e5:61:81:75:51:77: 6c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:32:39:A8:D8:8C:C4:94:DA:62:C4:6F:89:18:C2:01:2C:8F:B4:E2 X509v3 Authority Key Identifier: keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/PTI5qNiMxJTaYsRviRjCASyPtOI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.255.40.0/21 Signature Algorithm: sha256WithRSAEncryption 60:37:2e:03:b1:77:42:41:96:85:9f:7f:fc:e7:7a:1a:e4:78: 0d:bc:a9:1a:7f:fa:e5:3a:34:91:7e:23:5d:51:75:96:ff:56: 6d:db:23:d3:50:e9:b6:0b:ae:7e:d1:d3:5b:41:3e:e9:a4:42: fd:e2:e2:b7:7b:15:69:51:71:65:ff:5c:97:b2:c5:d3:ba:ec: 4c:89:6e:ed:79:82:2b:08:04:47:bc:bb:d5:18:5d:28:a5:69: 1c:62:c1:de:c5:4e:dd:10:38:84:d8:ef:e7:8f:64:5a:95:d4: 63:ba:f1:96:34:3e:b1:e0:df:82:ed:4c:d8:87:4b:7a:70:f7: eb:c8:f5:f0:9a:31:f2:bb:ad:3b:b1:35:e5:02:03:3d:af:38: 8d:f7:44:2b:21:10:7f:f9:4d:ec:5d:d5:d7:9f:1a:f4:5e:98: 2f:d7:94:8b:d5:63:de:ca:fa:3c:fe:ec:f2:26:ef:f9:d5:7b: ea:20:03:5b:f6:fa:37:a7:1d:3d:cd:d1:e5:60:4d:80:7c:71: 8e:9f:c7:81:69:31:eb:65:89:dc:ca:31:1e:9f:3e:9b:a6:6e: 30:00:87:02:68:f6:b8:51:bd:b5:a9:aa:1e:ed:90:be:00:c6: f3:f9:c1:6b:7f:ee:d8:98:12:88:05:d2:01:f6:6b:66:cd:a7: f0:bf:e0:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pPYHNQ9G8FTqVEeMzfdUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTA0Y2M2N2VmOTZkOTAyMmYzZDBiZmM1MWVhZGI0YTRi NjNlZTYwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDMyMzlhOGQ4OGNjNDk0ZGE2MmM0NmY4OTE4YzIwMTJjOGZiNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48rT6cmdYuxcAN/4gPz+n1vqCTGa 3UphTGDz59G+OFN/y1VKHZe41WHvXLEprEClkzoCoWnjoUgiek4p6YKVXcfczyDT 669i52SH273ITpt0dY6HxOy9Zcxx6VOI7PiQNVzTI7KyWSmce3jzaD/twQLJRIx7 LaGaKw9A74b4V8Bwr+x9ry7yY80tRZuT7BnJOlQpH5u7alZQ1KPaKGCcD0vuXrTc fn+ANJrC+SjrO7CGEwtZorUDablvb6uZu41LKJ8cEEU82IhZt1fPb+z1Xn7oHEy1 ZvbRsLv26Q0uGyYE3omUw5oOdVDRugj/q39nxTGNyRo/pB7lYYF1UXdsGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD0yOajYjMSU2mLEb4kYwgEsj7TiMB8GA1UdIwQY MBaAFHygTMZ++W2QIvPQv8UerbSktj7mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEt YTU1NjhlMGZiYjZkLzEvUFRJNXFOaU14SlRhWXNSdmlSakNBU3lQdE9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85Yjk0ZTItZDIxZC00ZDgxLThhZWEtYTU1NjhlMGZiYjZk LzEvZktCTXhuNzViWkFpODlDX3hSNnR0S1MyUHVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDn/8oMA0G CSqGSIb3DQEBCwUAA4IBAQBgNy4DsXdCQZaFn3/853oa5HgNvKkaf/rlOjSRfiNd UXWW/1Zt2yPTUOm2C65+0dNbQT7ppEL94uK3exVpUXFl/1yXssXTuuxMiW7teYIr CARHvLvVGF0opWkcYsHexU7dEDiE2O/nj2RaldRjuvGWND6x4N+C7UzYh0t6cPfr yPXwmjHyu607sTXlAgM9rziN90QrIRB/+U3sXdXXnxr0Xpgv15SL1WPeyvo8/uzy Ju/51XvqIANb9vo3px09zdHlYE2AfHGOn8eBaTHrZYncyjEenz6bpm4wAIcCaPa4 Ub21qaoe7ZC+AMbz+cFrf+7YmBKIBdIB9mtmzafwv+AF -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:40 2026 by rpki-client