This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa File: PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa (raw, json) Hash identifier: gS+7X+RhiaD/Wpkqye3btlKeUsU6cdg4vX6kC9nPKmY= Subject key identifier: 3D:3A:AA:B5:3E:3F:B4:FD:11:00:E8:6A:A5:A7:9A:57:BA:85:B2:83 Certificate issuer: /CN=b49bd84da17997cbb286af9022ab2e05ba08b442 Certificate serial: 019B7A5ACCA32B5F00B03EF96C5F985C7500 Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 185.230.181.0/24 maxlen: 24 185.230.182.0/24 maxlen: 24 185.230.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cc:a3:2b:5f:00:b0:3e:f9:6c:5f:98:5c:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d3aaab53e3fb4fd1100e86aa5a79a57ba85b283 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:99:ba:3e:84:5a:a5:49:df:64:e4:28:d5: e4:87:64:42:ec:40:0e:9c:5e:64:91:c8:38:e3:1a: 70:f6:3e:2f:a2:dc:28:e8:70:2c:10:56:29:d2:c2: ef:70:84:f0:5c:06:0a:e3:ff:f4:78:7e:51:29:b5: 4d:03:60:39:9c:30:9b:7d:28:1e:5e:62:81:d1:50: cd:09:d9:1d:29:88:e8:c7:15:e2:ea:17:11:7b:a2: ce:23:41:be:b3:08:e1:6a:f8:16:2f:e2:8e:98:b7: 46:04:85:41:7e:72:77:5e:96:07:db:68:8f:36:ad: 58:e6:6d:23:13:06:7c:5a:37:4b:78:06:31:0c:63: 35:57:ea:ad:70:54:44:27:3a:1d:c0:56:45:4c:c4: bc:c1:5f:f1:52:fa:93:b5:53:61:4d:80:40:e7:32: 02:1d:2a:68:e7:f1:dd:0a:97:cd:6b:9a:ef:71:10: f9:0b:f6:5b:22:20:9f:f4:4c:ce:e0:a6:21:e0:ea: de:35:61:04:87:e3:33:c4:2f:b3:f3:86:2f:a4:77: ed:cb:4d:18:67:13:7b:1a:61:bb:94:8e:49:7b:ac: f6:43:0d:bf:e9:4d:65:49:bd:ab:2b:15:48:4f:c0: 16:0c:d6:7f:ac:2c:34:e2:db:b6:8c:c3:5d:f9:16: cb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3A:AA:B5:3E:3F:B4:FD:11:00:E8:6A:A5:A7:9A:57:BA:85:B2:83 X509v3 Authority Key Identifier: keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.230.181.0-185.230.183.255 Signature Algorithm: sha256WithRSAEncryption 0d:7d:ea:3a:fd:a7:77:99:4d:54:0d:4e:0d:ed:54:33:3a:75: 06:b5:64:2a:73:8a:56:0e:de:45:91:63:6b:92:54:b1:56:af: 14:d4:cd:0a:8d:56:84:36:99:e6:4d:4a:9b:2d:1f:70:fc:f1: 9b:5a:63:10:ec:48:4f:e0:65:2b:f5:0c:c6:1e:e6:b3:94:5f: 19:31:cf:e4:b4:16:6b:60:f5:46:e2:30:1b:84:90:01:1f:e7: 0d:58:c1:80:db:11:33:d2:14:e7:75:1d:f4:21:2c:95:72:35: 9c:bc:d3:f0:80:10:51:2f:40:37:14:a2:8d:a9:71:df:ff:55: 2f:7c:97:46:86:3e:b7:29:66:a7:8c:67:90:ec:77:21:18:59: ee:21:a3:32:e4:29:27:d1:b6:95:3e:9b:4a:a2:18:3f:8f:7c: 07:8a:5f:b4:4f:13:e7:74:96:2c:85:69:bb:f1:e6:94:3e:8b: 86:07:6e:8f:c7:2f:b4:7e:5d:e9:07:9a:f0:fb:3d:96:4a:ae: 26:b3:d5:2e:ff:fc:3d:d8:a9:65:1a:07:f6:7a:47:97:30:95: 9f:d9:85:73:4c:8c:53:36:75:3e:11:73:15:7f:c6:d0:be:e4: fe:d7:35:3f:2d:0d:12:f1:f8:77:bb:0b:ad:e4:7a:96:18:5c: 95:9d:1e:1b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt6WsyjK18AsD75bF+YXHUAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0OWJkODRkYTE3OTk3Y2JiMjg2YWY5MDIyYWIyZTA1YmEw OGI0NDIwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDNhYWFiNTNlM2ZiNGZkMTEwMGU4NmFhNWE3OWE1N2JhODViMjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunOZuj6EWqVJ32TkKNXkh2RC7EAO nF5kkcg44xpw9j4votwo6HAsEFYp0sLvcITwXAYK4//0eH5RKbVNA2A5nDCbfSge XmKB0VDNCdkdKYjoxxXi6hcRe6LOI0G+swjhavgWL+KOmLdGBIVBfnJ3XpYH22iP Nq1Y5m0jEwZ8WjdLeAYxDGM1V+qtcFREJzodwFZFTMS8wV/xUvqTtVNhTYBA5zIC HSpo5/HdCpfNa5rvcRD5C/ZbIiCf9EzO4KYh4OreNWEEh+MzxC+z84YvpHfty00Y ZxN7GmG7lI5Je6z2Qw2/6U1lSb2rKxVIT8AWDNZ/rCw04tu2jMNd+RbLEQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFD06qrU+P7T9EQDoaqWnmle6hbKDMB8GA1UdIwQY MBaAFLSb2E2heZfLsoavkCKrLgW6CLRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2It MGM5MDliZjViZTRkLzEvUFRxcXRUNF90UDBSQU9ocXBhZWFWN3FGc29NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lZTU0ZDEtNWIxNS00ZjkzLTg5N2ItMGM5MDliZjViZTRk LzEvdEp2WVRhRjVsOHV5aHEtUUlxc3VCYm9JdEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC55rUD BAO55rAwDQYJKoZIhvcNAQELBQADggEBAA196jr9p3eZTVQNTg3tVDM6dQa1ZCpz ilYO3kWRY2uSVLFWrxTUzQqNVoQ2meZNSpstH3D88ZtaYxDsSE/gZSv1DMYe5rOU Xxkxz+S0Fmtg9UbiMBuEkAEf5w1YwYDbETPSFOd1HfQhLJVyNZy80/CAEFEvQDcU oo2pcd//VS98l0aGPrcpZqeMZ5DsdyEYWe4hozLkKSfRtpU+m0qiGD+PfAeKX7RP E+d0liyFabvx5pQ+i4YHbo/HL7R+XekHmvD7PZZKriaz1S7//D3YqWUaB/Z6R5cw lZ/ZhXNMjFM2dT4RcxV/xtC+5P7XNT8tDRLx+He7C63kepYYXJWdHhs= -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:27 2026 by rpki-client