This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/PTCMrplImxOgq7lJht86Y-t_Eak.roa File: PTCMrplImxOgq7lJht86Y-t_Eak.roa (raw, json) Hash identifier: 9R2VT/PVVrXj1Rc0/sfW6xX45E2jhiDWxXoT3COdeoA= Subject key identifier: 3D:30:8C:AE:99:48:9B:13:A0:AB:B9:49:86:DF:3A:63:EB:7F:11:A9 Certificate issuer: /CN=6b03584bce542e554e3227909443f6822c3e4f03 Certificate serial: 019B7A59F21C3B7DF9BD5525C95DFA248F21 Authority key identifier: 6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/PTCMrplImxOgq7lJht86Y-t_Eak.roa Signing time: Thu 01 Jan 2026 16:17:53 +0000 ROA not before: Thu 01 Jan 2026 16:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29682 IP address blocks: 193.22.0.0/24 maxlen: 24 2001:67c:21b8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.mft rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 22:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:f2:1c:3b:7d:f9:bd:55:25:c9:5d:fa:24:8f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b03584bce542e554e3227909443f6822c3e4f03 Validity Not Before: Jan 1 16:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d308cae99489b13a0abb94986df3a63eb7f11a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:63:d5:07:de:59:f5:ec:34:39:a7:4b:5d:09: 5d:9e:89:99:1a:89:8c:07:7c:b2:fa:9f:b3:49:db: b2:9d:84:d3:de:fc:11:f8:31:2e:25:ae:7e:dc:8f: b0:27:35:52:51:f1:39:84:58:1e:e2:6d:98:a3:00: 51:bf:bd:56:a9:30:1a:7c:0f:2b:b3:6c:4a:be:20: 85:49:34:87:34:b5:3b:a2:cb:42:28:a4:0d:e5:da: ea:8d:35:5e:0c:c6:89:0f:84:f7:ba:32:3c:db:e3: 66:a3:3b:f3:66:62:50:f7:25:7f:d3:aa:2e:cd:46: 6f:64:54:17:c3:6f:ea:a6:83:bf:15:6b:a0:ba:69: 92:d5:7a:ef:80:7b:29:77:50:e2:9a:38:e5:0f:27: d0:30:50:0b:33:3e:b4:a4:80:41:25:98:f3:bd:75: 98:e1:02:b3:63:1f:16:db:5a:21:45:c3:29:18:5a: d7:41:35:94:de:6f:95:8f:c1:1f:60:15:ca:70:85: c9:42:fa:8d:a9:41:72:f9:86:30:af:43:8c:99:e3: 5f:31:88:19:ef:3e:e3:29:c5:d9:8c:8e:26:10:b2: 9e:37:52:97:a5:dd:62:ca:9c:49:d9:88:65:78:95: ef:e4:52:6a:3b:d1:85:6c:c0:f5:69:4b:4a:d8:1b: 0a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:30:8C:AE:99:48:9B:13:A0:AB:B9:49:86:DF:3A:63:EB:7F:11:A9 X509v3 Authority Key Identifier: keyid:6B:03:58:4B:CE:54:2E:55:4E:32:27:90:94:43:F6:82:2C:3E:4F:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/awNYS85ULlVOMieQlEP2giw-TwM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/PTCMrplImxOgq7lJht86Y-t_Eak.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/777038-31ac-4ef7-988a-35b19cf92df9/1/awNYS85ULlVOMieQlEP2giw-TwM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.22.0.0/24 IPv6: 2001:67c:21b8::/48 Signature Algorithm: sha256WithRSAEncryption 6a:6a:28:0b:d4:61:14:7d:d4:79:fd:cf:ac:e0:5d:bb:e1:6c: 2f:2f:f0:f5:f6:58:b4:1d:38:07:70:bc:18:10:5d:d4:82:67: 44:a2:3e:9d:4e:82:8d:29:2d:5d:1a:bb:0a:c5:5a:cb:44:e4: a9:6e:9d:95:d5:cc:ad:ba:b5:0f:4a:ea:6b:d0:67:37:50:14: 37:d5:22:79:c0:df:a8:ae:f3:ff:fc:a6:99:c7:07:a6:0c:14: 32:cf:84:f4:c1:2e:17:e4:23:59:25:fd:0c:e1:cd:58:63:4a: fb:a3:41:41:ef:c5:ea:cc:77:a4:a9:e6:21:da:18:3a:7e:fa: e6:01:50:9a:c1:9d:95:6f:9b:44:89:3f:16:3c:b0:54:0c:90: 49:6c:cf:2a:9d:2f:98:b1:31:9a:e3:c7:3f:3c:a9:fd:85:c9: cb:66:5b:b0:4e:17:a2:68:fb:37:7b:68:d9:2b:3e:17:aa:8d: 55:f0:96:d0:df:71:40:3f:4c:1b:c2:fb:51:76:b1:38:6d:eb: 94:e5:83:26:84:7f:9f:f9:e1:0d:d9:60:39:57:7b:52:cc:77: 44:9f:4d:be:0c:1a:bc:7c:26:46:4b:12:ca:62:f7:ed:ac:fb: 5c:3d:2d:4d:9d:62:fb:e6:ab:8f:80:3d:80:63:d1:10:8a:7d: e3:5f:62:a4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WfIcO335vVUlyV36JI8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMDM1ODRiY2U1NDJlNTU0ZTMyMjc5MDk0NDNmNjgyMmMz ZTRmMDMwHhcNMjYwMTAxMTYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDMwOGNhZTk5NDg5YjEzYTBhYmI5NDk4NmRmM2E2M2ViN2YxMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGPVB95Z9ew0OadLXQldnomZGomM B3yy+p+zSduynYTT3vwR+DEuJa5+3I+wJzVSUfE5hFge4m2YowBRv71WqTAafA8r s2xKviCFSTSHNLU7ostCKKQN5drqjTVeDMaJD4T3ujI82+NmozvzZmJQ9yV/06ou zUZvZFQXw2/qpoO/FWugummS1XrvgHspd1DimjjlDyfQMFALMz60pIBBJZjzvXWY 4QKzYx8W21ohRcMpGFrXQTWU3m+Vj8EfYBXKcIXJQvqNqUFy+YYwr0OMmeNfMYgZ 7z7jKcXZjI4mELKeN1KXpd1iypxJ2YhleJXv5FJqO9GFbMD1aUtK2BsKuwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFD0wjK6ZSJsToKu5SYbfOmPrfxGpMB8GA1UdIwQY MBaAFGsDWEvOVC5VTjInkJRD9oIsPk8DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEt MzViMTljZjkyZGY5LzEvUFRDTXJwbElteE9ncTdsSmh0ODZZLXRfRWFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy83NzcwMzgtMzFhYy00ZWY3LTk4OGEtMzViMTljZjkyZGY5 LzEvYXdOWVM4NVVMbFZPTWllUWxFUDJnaXctVHdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwRYAMA8E AgACMAkDBwAgAQZ8IbgwDQYJKoZIhvcNAQELBQADggEBAGpqKAvUYRR91Hn9z6zg XbvhbC8v8PX2WLQdOAdwvBgQXdSCZ0SiPp1Ogo0pLV0auwrFWstE5KlunZXVzK26 tQ9K6mvQZzdQFDfVInnA36iu8//8ppnHB6YMFDLPhPTBLhfkI1kl/QzhzVhjSvuj QUHvxerMd6Sp5iHaGDp++uYBUJrBnZVvm0SJPxY8sFQMkElszyqdL5ixMZrjxz88 qf2FyctmW7BOF6Jo+zd7aNkrPheqjVXwltDfcUA/TBvC+1F2sTht65TlgyaEf5/5 4Q3ZYDlXe1LMd0SfTb4MGrx8JkZLEspi9+2s+1w9LU2dYvvmq4+APYBj0RCKfeNf YqQ= -----END CERTIFICATE-----Generated at Wed Jan 7 07:46:51 2026 by rpki-client