This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/PT2IAZHHNVcJCmieKKNFjfAAhMY.roa File: PT2IAZHHNVcJCmieKKNFjfAAhMY.roa (raw, json) Hash identifier: agA/0WQp+6KMA+QC0x+I14rMftCJ1SPngBL5Z6Msvqs= Subject key identifier: 3D:3D:88:01:91:C7:35:57:09:0A:68:9E:28:A3:45:8D:F0:00:84:C6 Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f Certificate serial: 019B508EBAEFF998911FC63CDB6811FEA8A5 Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/PT2IAZHHNVcJCmieKKNFjfAAhMY.roa Signing time: Wed 24 Dec 2025 13:31:29 +0000 ROA not before: Wed 24 Dec 2025 13:31:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48660 IP address blocks: 213.238.179.0/24 maxlen: 24 213.238.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 12:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:50:8e:ba:ef:f9:98:91:1f:c6:3c:db:68:11:fe:a8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f Validity Not Before: Dec 24 13:31:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3d3d880191c73557090a689e28a3458df00084c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:ef:98:5d:dd:ff:7c:c8:e6:18:a1:b3:54: 1d:c0:c3:ad:73:ff:df:9d:41:49:5e:ca:9e:35:c5: b1:2d:e1:68:ef:41:d1:d1:1b:77:eb:1d:7d:f0:f1: cb:89:62:d7:8d:c0:4f:9d:e9:fd:76:a5:d7:0b:cf: 8c:0f:01:91:18:0a:11:8f:a0:f9:25:b1:20:0e:86: 67:79:6c:d3:2d:09:ba:33:f3:a4:96:28:05:10:65: b7:82:8f:7e:3f:bc:da:c0:95:c5:64:1c:0f:0a:cc: 5b:3e:0b:c2:9d:04:80:ed:03:cc:13:72:d8:65:0d: 40:9a:ec:9a:e9:46:4e:35:62:c9:ea:c5:92:23:c3: d6:5f:1a:12:b6:a3:18:ca:38:a3:8b:42:5a:7d:52: 2c:a1:9d:61:39:8a:30:3a:05:7c:79:b3:5c:ae:cc: d6:44:75:5e:c6:5c:c8:f1:7f:a8:12:72:ac:bd:60: 98:a7:ac:3b:0f:dc:7f:fd:ea:ae:ec:46:ff:a1:1c: 13:81:3c:d5:51:b6:e6:63:ff:76:b3:b5:44:42:dd: a3:c1:bb:41:83:5f:d1:c3:e8:d2:bd:52:ec:08:2e: 57:c5:f1:f7:35:d6:b6:65:6b:ed:1a:73:71:1a:85: a8:fc:26:3d:dd:ac:fb:19:c0:7e:3a:2d:af:85:a3: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3D:88:01:91:C7:35:57:09:0A:68:9E:28:A3:45:8D:F0:00:84:C6 X509v3 Authority Key Identifier: keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/PT2IAZHHNVcJCmieKKNFjfAAhMY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.238.179.0/24 213.238.181.0/24 Signature Algorithm: sha256WithRSAEncryption 96:fc:ce:11:98:66:e3:9d:1b:e8:6d:93:50:cc:7a:c2:45:70: 0f:76:5c:f9:73:62:d2:e9:e1:70:89:18:f4:91:53:f4:a9:22: 3a:38:4d:5b:33:16:90:f3:67:4b:62:62:06:22:3b:fe:3e:b4: a5:33:aa:48:ac:e2:c9:70:54:38:a7:d2:97:ab:51:00:7e:89: 0c:8f:a2:cd:b5:0b:75:f2:e0:eb:09:74:96:50:8a:8a:a8:9a: 4e:e6:55:d0:55:37:11:83:b4:46:1c:e5:f1:13:41:24:31:5f: fc:25:b1:fa:b9:a4:45:f6:6e:ce:f7:82:37:3c:2f:a7:5f:02: 36:1a:a0:98:be:20:a9:35:6f:e7:a1:f4:fc:38:e5:79:ae:ae: 6f:a9:81:22:f4:16:ef:f3:9e:41:6f:02:56:ca:6d:91:dd:b3: 3f:74:b1:61:27:fe:74:b0:b5:67:14:3d:b8:dd:9b:2d:4d:6f: 9a:53:fe:ac:7c:54:21:3e:1e:74:f0:70:6b:e0:37:a8:97:d8: 0c:cc:a9:92:28:d4:a9:55:3d:f6:a0:5b:7c:9e:1c:aa:e5:69: 7d:20:0a:09:96:de:0b:d3:09:bd:c8:a9:b0:6d:0d:f7:c6:54: e2:1c:25:4c:74:57:5f:21:b9:72:f6:db:75:f6:3f:78:df:c8: 04:10:d7:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtQjrrv+ZiRH8Y822gR/qilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0 MGRlM2YwHhcNMjUxMjI0MTMzMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDNkODgwMTkxYzczNTU3MDkwYTY4OWUyOGEzNDU4ZGYwMDA4NGM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUnvmF3d/3zI5hihs1QdwMOtc//f nUFJXsqeNcWxLeFo70HR0Rt36x198PHLiWLXjcBPnen9dqXXC8+MDwGRGAoRj6D5 JbEgDoZneWzTLQm6M/OkligFEGW3go9+P7zawJXFZBwPCsxbPgvCnQSA7QPME3LY ZQ1Amuya6UZONWLJ6sWSI8PWXxoStqMYyjiji0JafVIsoZ1hOYowOgV8ebNcrszW RHVexlzI8X+oEnKsvWCYp6w7D9x//equ7Eb/oRwTgTzVUbbmY/92s7VEQt2jwbtB g1/Rw+jSvVLsCC5XxfH3Nda2ZWvtGnNxGoWo/CY93az7GcB+Oi2vhaPJ/wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD09iAGRxzVXCQponiijRY3wAITGMB8GA1UdIwQY MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt Y2QzMTYxNWQwMWE5LzEvUFQySUFaSEhOVmNKQ21pZUtLTkZqZkFBaE1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5 LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1e6zAwQA 1e61MA0GCSqGSIb3DQEBCwUAA4IBAQCW/M4RmGbjnRvobZNQzHrCRXAPdlz5c2LS 6eFwiRj0kVP0qSI6OE1bMxaQ82dLYmIGIjv+PrSlM6pIrOLJcFQ4p9KXq1EAfokM j6LNtQt18uDrCXSWUIqKqJpO5lXQVTcRg7RGHOXxE0EkMV/8JbH6uaRF9m7O94I3 PC+nXwI2GqCYviCpNW/nofT8OOV5rq5vqYEi9Bbv855BbwJWym2R3bM/dLFhJ/50 sLVnFD243ZstTW+aU/6sfFQhPh508HBr4Deol9gMzKmSKNSpVT32oFt8nhyq5Wl9 IAoJlt4L0wm9yKmwbQ33xlTiHCVMdFdfIbly9tt19j9438gEENf2 -----END CERTIFICATE-----Generated at Sun Dec 28 20:27:29 2025 by rpki-client