This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa File: pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa (raw, json) Hash identifier: xSZGhc6azC4w2f74UgWS1yPxNx1RtAZpsoy3M6zVKGQ= Subject key identifier: A5:34:EC:D2:75:65:32:7E:6D:1E:9C:BB:A1:8B:94:49:F5:C3:7B:88 Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13 Certificate serial: 019B7D5CAB399BDD0AD63667E02BA747C8FE Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa Signing time: Fri 02 Jan 2026 06:19:43 +0000 ROA not before: Fri 02 Jan 2026 06:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8473 IP address blocks: 185.65.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:ab:39:9b:dd:0a:d6:36:67:e0:2b:a7:47:c8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13 Validity Not Before: Jan 2 06:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a534ecd27565327e6d1e9cbba18b9449f5c37b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:80:42:24:9e:31:bf:65:c8:45:0c:12:4e: 40:cd:29:dc:06:0a:ee:45:d8:19:cf:b0:c0:b9:9f: ac:63:8d:d6:53:3d:cf:f8:a2:9b:b0:d1:de:17:ba: 62:f5:06:ee:f6:88:6d:40:4d:8d:12:29:27:1c:18: 5b:c0:b0:22:3c:04:ab:29:84:49:5c:4a:68:b8:90: 8a:0f:ab:01:bd:c8:bc:e8:ef:9d:29:47:92:c0:1d: f5:33:58:8a:88:42:3f:48:49:84:e4:46:62:1a:a8: 4e:25:c5:47:fa:1a:7c:4a:e9:99:88:cf:38:52:ca: 0b:3a:6c:cd:ef:da:f0:b7:e6:c6:a1:ce:b1:5b:7c: 33:b5:53:75:c1:ed:42:ed:71:f5:94:e6:13:4b:7c: c6:a4:98:49:9d:58:e2:7e:29:a4:d1:25:5b:6d:20: 45:30:11:3d:d3:c9:5c:4a:be:68:8f:3f:e2:8e:32: 71:fe:9e:5f:9a:72:ef:b5:10:97:14:df:98:de:28: a9:66:51:bd:64:31:39:39:14:10:5b:f7:0e:f7:73: 5b:d0:1f:9e:79:dd:2f:4a:ec:9e:23:64:32:de:27: 7a:cc:09:7a:d0:96:40:75:eb:31:2f:f7:8a:20:c3: b3:48:87:e5:6d:25:67:2a:5f:47:41:14:8f:5d:d1: a7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:34:EC:D2:75:65:32:7E:6D:1E:9C:BB:A1:8B:94:49:F5:C3:7B:88 X509v3 Authority Key Identifier: keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/pTTs0nVlMn5tHpy7oYuUSfXDe4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.65.188.0/23 Signature Algorithm: sha256WithRSAEncryption 02:9f:f2:d9:7b:96:2c:22:7f:d2:fe:73:61:3a:a2:45:3d:1c: a2:fc:71:c0:db:52:8e:24:29:ea:c1:78:dc:68:a8:86:4d:de: 22:a2:15:0d:a4:ce:52:39:50:ab:f1:f8:2a:14:19:f0:f5:67: da:93:f1:fe:8a:75:ce:af:eb:4a:52:8f:38:c8:73:26:26:76: e5:94:b4:06:93:af:5e:8e:b2:4b:b4:41:ab:14:c4:f1:12:b7: 09:ed:91:16:8e:65:b0:a4:1f:20:76:8e:db:a1:6d:b1:f9:c4: 1e:9c:10:31:c2:cb:02:d5:a4:67:9c:0f:4a:3b:7c:22:8c:d9: 42:a5:14:3a:be:4d:5e:da:4b:b6:df:63:40:11:a5:16:b0:98: fc:cd:ae:91:81:19:1e:ad:28:43:a3:4c:6e:66:b0:8a:cb:dc: dc:b8:bd:f3:d6:5f:e7:cb:31:18:a6:d6:4c:03:b4:c6:74:2c: 0c:72:98:e9:c8:be:77:6b:ad:c7:02:8e:28:ce:82:48:ff:77: 43:7f:60:36:71:78:90:ed:c9:0d:ab:07:bd:be:9b:b6:3b:bd: c3:50:a5:bb:d8:38:f4:f8:e8:19:2c:f1:f2:90:8b:aa:cf:e5: 62:f0:95:c1:ab:50:95:c9:1d:72:36:17:68:ec:32:90:44:72: 91:96:77:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XKs5m90K1jZn4CunR8j+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZTRlNjA3NTk3OGVhOTQ3NmI2NDFjZTAwOGM3ODdhYjI4 ZTVkMTMwHhcNMjYwMTAyMDYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTM0ZWNkMjc1NjUzMjdlNmQxZTljYmJhMThiOTQ0OWY1YzM3Yjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS2AQiSeMb9lyEUMEk5AzSncBgru RdgZz7DAuZ+sY43WUz3P+KKbsNHeF7pi9Qbu9ohtQE2NEiknHBhbwLAiPASrKYRJ XEpouJCKD6sBvci86O+dKUeSwB31M1iKiEI/SEmE5EZiGqhOJcVH+hp8SumZiM84 UsoLOmzN79rwt+bGoc6xW3wztVN1we1C7XH1lOYTS3zGpJhJnVjifimk0SVbbSBF MBE908lcSr5ojz/ijjJx/p5fmnLvtRCXFN+Y3iipZlG9ZDE5ORQQW/cO93Nb0B+e ed0vSuyeI2Qy3id6zAl60JZAdesxL/eKIMOzSIflbSVnKl9HQRSPXdGnFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKU07NJ1ZTJ+bR6cu6GLlEn1w3uIMB8GA1UdIwQY MBaAFIHk5gdZeOqUdrZBzgCMeHqyjl0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC83OTM3MDktZWU1OC00Zjc2LWIzMDgt ODYyYjg2YjZlNjQyLzEvcFRUczBuVmxNbjV0SHB5N29ZdVVTZlhEZTRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC83OTM3MDktZWU1OC00Zjc2LWIzMDgtODYyYjg2YjZlNjQy LzEvZ2VUbUIxbDQ2cFIydGtIT0FJeDRlcktPWFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuUG8MA0G CSqGSIb3DQEBCwUAA4IBAQACn/LZe5YsIn/S/nNhOqJFPRyi/HHA21KOJCnqwXjc aKiGTd4iohUNpM5SOVCr8fgqFBnw9Wfak/H+inXOr+tKUo84yHMmJnbllLQGk69e jrJLtEGrFMTxErcJ7ZEWjmWwpB8gdo7boW2x+cQenBAxwssC1aRnnA9KO3wijNlC pRQ6vk1e2ku232NAEaUWsJj8za6RgRkerShDo0xuZrCKy9zcuL3z1l/nyzEYptZM A7TGdCwMcpjpyL53a63HAo4ozoJI/3dDf2A2cXiQ7ckNqwe9vpu2O73DUKW72Dj0 +OgZLPHykIuqz+Vi8JXBq1CVyR1yNhdo7DKQRHKRlndJ -----END CERTIFICATE-----Generated at Sun Jan 11 18:14:13 2026 by rpki-client