This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/PTk-Qm4SRO2CGZKyMh3pPECOku4.roa File: PTk-Qm4SRO2CGZKyMh3pPECOku4.roa (raw, json) Hash identifier: iHUYxSng1eYpsnCjK8T+uznexsa7QiF4CgUQAgbQr4k= Subject key identifier: 3D:39:3E:42:6E:12:44:ED:82:19:92:B2:32:1D:E9:3C:40:8E:92:EE Certificate issuer: /CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Certificate serial: 019B791113B9C62E32038ECD2D4E7519BE4E Authority key identifier: CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/PTk-Qm4SRO2CGZKyMh3pPECOku4.roa Signing time: Thu 01 Jan 2026 10:18:40 +0000 ROA not before: Thu 01 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204193 IP address blocks: 185.110.180.0/24 maxlen: 24 185.110.181.0/24 maxlen: 24 185.110.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.mft rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:13:b9:c6:2e:32:03:8e:cd:2d:4e:75:19:be:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbdfce3a5355f861fdc48c32012c78c9daf9a5a4 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d393e426e1244ed821992b2321de93c408e92ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:60:a7:9e:f0:b2:ee:b9:e0:d3:e9:a8:b2: d2:91:26:f6:00:43:46:99:04:cf:ac:01:ce:38:39: 04:33:af:b8:c3:85:a9:48:c5:31:8f:94:21:b1:3f: 84:f7:59:f4:0d:6c:38:f9:22:29:e7:91:2c:13:23: 0c:53:5a:7c:6b:c5:af:c4:1c:ab:05:71:c6:b1:73: fd:f0:9d:2c:32:08:07:4d:90:25:a6:5f:67:75:fd: 39:ea:cd:66:b4:ea:97:f6:89:fa:18:80:bd:d2:e6: 15:59:79:04:2c:30:bb:c6:b8:ca:68:2f:e1:cd:59: 2f:45:55:31:b7:ae:84:ce:fb:df:63:a6:18:e4:fd: 3b:d6:df:42:5a:a2:3c:2a:17:05:71:d6:13:73:58: 44:2f:c9:43:e5:00:81:91:81:5b:1a:98:09:76:74: 00:71:22:87:d1:ce:89:05:78:5c:2d:91:de:1f:32: ae:f7:1b:d8:03:13:cf:21:03:e1:3e:52:a6:59:a1: 48:b8:37:bb:62:1d:df:b6:81:7e:92:0f:9c:d8:ae: 8b:b0:f5:e0:93:80:de:f2:6b:48:fb:e0:64:51:b2: 91:6b:30:ae:ab:01:76:9f:6d:7c:72:2a:ae:50:26: f6:ef:f9:c6:55:89:6f:3d:95:a1:07:de:d7:cf:98: a3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:39:3E:42:6E:12:44:ED:82:19:92:B2:32:1D:E9:3C:40:8E:92:EE X509v3 Authority Key Identifier: keyid:CB:DF:CE:3A:53:55:F8:61:FD:C4:8C:32:01:2C:78:C9:DA:F9:A5:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9_OOlNV-GH9xIwyASx4ydr5paQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/PTk-Qm4SRO2CGZKyMh3pPECOku4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/74a1b5-3c2e-48e2-90fd-b49d89e30ddd/1/y9_OOlNV-GH9xIwyASx4ydr5paQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.110.180.0-185.110.182.255 Signature Algorithm: sha256WithRSAEncryption 05:82:c7:40:9a:2c:33:bb:9b:f9:74:39:36:f4:6a:fc:98:a9: 23:54:72:eb:86:5e:e2:da:e2:70:e7:62:12:ae:75:a2:8b:00: 1f:ec:c7:d0:eb:b9:98:eb:13:3d:f2:c3:62:59:a4:fa:1d:0b: 80:e4:69:16:74:8b:88:31:71:e2:54:ed:70:ab:ab:75:86:0a: 22:20:88:16:bf:1b:84:61:e9:e0:4a:43:b6:a7:a3:88:9e:4c: 2a:c3:87:92:7a:b8:e0:d0:e2:03:34:36:38:2c:b8:3e:5f:1a: 5b:07:fe:54:a6:65:84:83:b4:21:0a:d1:8b:6b:28:12:0d:14: 99:54:ca:81:1c:db:10:de:13:b3:4d:9f:01:b7:a1:0a:c7:ed: a9:a7:42:05:e5:77:3a:14:22:4c:1a:ab:7f:f1:80:fe:5b:ac: 12:ba:02:39:fc:cc:65:0e:31:99:a9:da:25:fc:83:68:d5:d6: 93:b2:e7:23:1c:5b:3b:9e:5e:d5:2c:57:5b:9a:ce:77:38:fe: 01:a0:ee:6f:43:89:27:79:73:b7:e0:f0:55:a1:0b:f1:00:15: b1:8d:cb:25:c4:ee:56:f6:b8:28:78:db:19:b3:97:fd:f9:0c: ba:b5:a5:6f:61:eb:28:d6:fa:be:ed:31:73:47:71:b2:8d:31: 60:59:49:33 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt5ERO5xi4yA47NLU51Gb5OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNiZGZjZTNhNTM1NWY4NjFmZGM0OGMzMjAxMmM3OGM5ZGFm OWE1YTQwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDM5M2U0MjZlMTI0NGVkODIxOTkyYjIzMjFkZTkzYzQwOGU5MmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptdgp57wsu654NPpqLLSkSb2AENG mQTPrAHOODkEM6+4w4WpSMUxj5QhsT+E91n0DWw4+SIp55EsEyMMU1p8a8WvxByr BXHGsXP98J0sMggHTZAlpl9ndf056s1mtOqX9on6GIC90uYVWXkELDC7xrjKaC/h zVkvRVUxt66EzvvfY6YY5P071t9CWqI8KhcFcdYTc1hEL8lD5QCBkYFbGpgJdnQA cSKH0c6JBXhcLZHeHzKu9xvYAxPPIQPhPlKmWaFIuDe7Yh3ftoF+kg+c2K6LsPXg k4De8mtI++BkUbKRazCuqwF2n218ciquUCb27/nGVYlvPZWhB97Xz5ijPQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFD05PkJuEkTtghmSsjId6TxAjpLuMB8GA1UdIwQY MBaAFMvfzjpTVfhh/cSMMgEseMna+aWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQt YjQ5ZDg5ZTMwZGRkLzEvUFRrLVFtNFNSTzJDR1pLeU1oM3BQRUNPa3U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi83NGExYjUtM2MyZS00OGUyLTkwZmQtYjQ5ZDg5ZTMwZGRk LzEveTlfT09sTlYtR0g5eEl3eUFTeDR5ZHI1cGFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5brQD BAC5brYwDQYJKoZIhvcNAQELBQADggEBAAWCx0CaLDO7m/l0OTb0avyYqSNUcuuG XuLa4nDnYhKudaKLAB/sx9DruZjrEz3yw2JZpPodC4DkaRZ0i4gxceJU7XCrq3WG CiIgiBa/G4Rh6eBKQ7ano4ieTCrDh5J6uODQ4gM0NjgsuD5fGlsH/lSmZYSDtCEK 0YtrKBINFJlUyoEc2xDeE7NNnwG3oQrH7amnQgXldzoUIkwaq3/xgP5brBK6Ajn8 zGUOMZmp2iX8g2jV1pOy5yMcWzueXtUsV1uaznc4/gGg7m9DiSd5c7fg8FWhC/EA FbGNyyXE7lb2uCh42xmzl/35DLq1pW9h6yjW+r7tMXNHcbKNMWBZSTM= -----END CERTIFICATE-----Generated at Mon Jan 26 03:57:17 2026 by rpki-client