This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/pptDZSTJBY4CiFtORILN4Ah7Tb4.roa File: pptDZSTJBY4CiFtORILN4Ah7Tb4.roa (raw, json) Hash identifier: EhbQD/elQMKXl9c0iSPew66fQcn0JspYn5ZlKsy/Sr8= Subject key identifier: A6:9B:43:65:24:C9:05:8E:02:88:5B:4E:44:82:CD:E0:08:7B:4D:BE Certificate issuer: /CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Certificate serial: 019B452E97C667C5E436030FABB9A42A006B Authority key identifier: 02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/pptDZSTJBY4CiFtORILN4Ah7Tb4.roa Signing time: Mon 22 Dec 2025 08:30:39 +0000 ROA not before: Mon 22 Dec 2025 08:30:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 201744 IP address blocks: 45.95.171.0/24 maxlen: 24 150.40.97.0/24 maxlen: 24 150.40.109.0/24 maxlen: 24 150.40.110.0/24 maxlen: 24 150.40.111.0/24 maxlen: 24 150.40.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 05:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:2e:97:c6:67:c5:e4:36:03:0f:ab:b9:a4:2a:00:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02a962c1fe8e2e12a35576fd62987a0cbba463d4 Validity Not Before: Dec 22 08:30:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a69b436524c9058e02885b4e4482cde0087b4dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f1:b5:92:a2:91:a3:2e:6a:d8:f4:8d:2f:a2: 6a:dc:93:aa:a0:35:f2:f4:ab:15:28:20:a2:0e:24: ab:83:6d:6d:85:13:86:d5:bc:6a:ea:e3:4e:0e:8c: 2b:e7:4b:6d:43:12:9c:7e:a4:3d:36:8e:6f:1a:39: 1c:53:92:23:b7:c2:af:af:da:a4:79:bb:be:51:2d: 91:32:93:27:0d:c8:df:c6:be:4e:52:41:0d:3b:d7: 81:fe:44:02:3e:50:d9:33:80:b4:bb:c1:06:9a:1d: bd:35:00:ac:d6:0a:21:51:15:59:be:48:d0:61:33: 4a:70:e0:70:50:07:7c:c0:01:77:05:92:48:11:50: 89:15:66:a4:dd:94:84:ab:14:29:4d:54:cc:10:94: cb:aa:32:b8:fd:b5:dc:65:4b:15:f6:6f:81:0d:e8: 6b:f1:f1:c8:7d:66:23:19:8c:ab:c1:1e:9e:9f:b2: 49:f8:3a:03:07:1c:d7:65:d8:70:cc:b7:81:09:85: b3:3c:cc:29:9f:6c:e6:06:51:6b:e4:a7:48:fb:02: 08:78:0e:7f:cd:33:ee:90:43:32:3c:58:cc:4d:d0: 7b:7a:93:18:6d:28:09:6e:fb:de:87:32:e5:18:fe: 34:b8:09:ff:3c:dc:3b:a7:be:9d:76:de:92:ec:98: dc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:9B:43:65:24:C9:05:8E:02:88:5B:4E:44:82:CD:E0:08:7B:4D:BE X509v3 Authority Key Identifier: keyid:02:A9:62:C1:FE:8E:2E:12:A3:55:76:FD:62:98:7A:0C:BB:A4:63:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aqliwf6OLhKjVXb9Yph6DLukY9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/pptDZSTJBY4CiFtORILN4Ah7Tb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6179a-160d-40e2-ae86-7d134980c5be/1/Aqliwf6OLhKjVXb9Yph6DLukY9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.95.171.0/24 150.40.97.0/24 150.40.109.0-150.40.112.255 Signature Algorithm: sha256WithRSAEncryption 6b:a4:af:cf:ed:7c:a4:4c:4f:08:30:93:3c:1a:58:87:e2:2e: 48:ab:e1:23:51:07:3a:af:46:3f:39:e1:c2:41:94:3c:17:8a: 1c:40:20:c7:e9:4f:e3:7d:53:16:cf:3f:c7:ba:b6:6c:43:73: de:08:b8:fc:31:8c:17:58:88:57:2c:9a:40:fd:2e:d7:37:e5: c7:3d:b4:9b:f0:4f:a5:81:f8:a7:fc:b3:bb:98:3a:e1:39:96: 5d:f3:ae:76:d6:5f:ab:cc:89:95:64:e1:42:dc:f0:a7:0e:c3: a8:01:ea:3b:13:27:fd:88:bf:c6:1e:9a:3b:99:28:c7:72:94: 9a:e6:4d:41:1f:fc:5a:ed:b5:ad:1f:42:3b:31:e6:94:c1:2c: 83:82:69:b2:b3:07:7c:4e:99:aa:7d:ad:0d:7b:fc:5b:65:1e: 66:c6:34:58:fd:6a:26:6a:b7:44:29:5c:0e:20:14:0a:cc:ee: 82:44:53:83:95:5a:25:6c:9e:8d:7a:9e:a6:5d:4e:83:f2:79: 7b:02:3e:79:35:a1:3b:31:df:52:16:f3:bd:8d:37:32:56:cb: 89:49:92:3c:69:70:6b:78:ad:58:ab:f2:e2:00:32:5d:6b:0a: b2:19:02:76:0e:55:19:af:19:37:34:60:6a:33:3f:4a:f9:99: 25:69:5e:f2 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZtFLpfGZ8XkNgMPq7mkKgBrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYTk2MmMxZmU4ZTJlMTJhMzU1NzZmZDYyOTg3YTBjYmJh NDYzZDQwHhcNMjUxMjIyMDgzMDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjliNDM2NTI0YzkwNThlMDI4ODViNGU0NDgyY2RlMDA4N2I0ZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPG1kqKRoy5q2PSNL6Jq3JOqoDXy 9KsVKCCiDiSrg21thROG1bxq6uNODowr50ttQxKcfqQ9No5vGjkcU5Ijt8Kvr9qk ebu+US2RMpMnDcjfxr5OUkENO9eB/kQCPlDZM4C0u8EGmh29NQCs1gohURVZvkjQ YTNKcOBwUAd8wAF3BZJIEVCJFWak3ZSEqxQpTVTMEJTLqjK4/bXcZUsV9m+BDehr 8fHIfWYjGYyrwR6en7JJ+DoDBxzXZdhwzLeBCYWzPMwpn2zmBlFr5KdI+wIIeA5/ zTPukEMyPFjMTdB7epMYbSgJbvvehzLlGP40uAn/PNw7p76ddt6S7JjcJQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFKabQ2UkyQWOAohbTkSCzeAIe02+MB8GA1UdIwQY MBaAFAKpYsH+ji4So1V2/WKYegy7pGPUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYt N2QxMzQ5ODBjNWJlLzEvcHB0RFpTVEpCWTRDaUZ0T1JJTE40QWg3VGI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9jNjE3OWEtMTYwZC00MGUyLWFlODYtN2QxMzQ5ODBjNWJl LzEvQXFsaXdmNk9MaEtqVlhiOVlwaDZETHVrWTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALV+rAwQA lihhMAwDBACWKG0DBACWKHAwDQYJKoZIhvcNAQELBQADggEBAGukr8/tfKRMTwgw kzwaWIfiLkir4SNRBzqvRj854cJBlDwXihxAIMfpT+N9UxbPP8e6tmxDc94IuPwx jBdYiFcsmkD9Ltc35cc9tJvwT6WB+Kf8s7uYOuE5ll3zrnbWX6vMiZVk4ULc8KcO w6gB6jsTJ/2Iv8YemjuZKMdylJrmTUEf/Frtta0fQjsx5pTBLIOCabKzB3xOmap9 rQ17/FtlHmbGNFj9aiZqt0QpXA4gFArM7oJEU4OVWiVsno16nqZdToPyeXsCPnk1 oTsx31IW872NNzJWy4lJkjxpcGt4rVir8uIAMl1rCrIZAnYOVRmvGTc0YGozP0r5 mSVpXvI= -----END CERTIFICATE-----Generated at Wed Dec 24 10:28:34 2025 by rpki-client