This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/PTr_xLhLcnvTFVipGw3CUMEPXjY.roa File: PTr_xLhLcnvTFVipGw3CUMEPXjY.roa (raw, json) Hash identifier: JBHsIcKHiwsHSBwzyO5y4DSKBgdwzbxJQ0ol4khS4A0= Subject key identifier: 3D:3A:FF:C4:B8:4B:72:7B:D3:15:58:A9:1B:0D:C2:50:C1:0F:5E:36 Certificate issuer: /CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Certificate serial: 019B0D08A73DDCE9961F239AC61931FE0566 Authority key identifier: B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/PTr_xLhLcnvTFVipGw3CUMEPXjY.roa Signing time: Thu 11 Dec 2025 10:50:29 +0000 ROA not before: Thu 11 Dec 2025 10:50:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2116 IP address blocks: 77.223.160.0/24 maxlen: 24 213.138.184.0/22 maxlen: 22 213.138.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.mft rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:08:a7:3d:dc:e9:96:1f:23:9a:c6:19:31:fe:05:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ac49d1ccdcaedd9a13f4803df1aedce6dc1112 Validity Not Before: Dec 11 10:50:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3d3affc4b84b727bd31558a91b0dc250c10f5e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:3d:f8:8a:fb:35:2d:81:16:9d:64:cd:c5: 99:e7:88:6c:66:46:3e:c5:05:44:96:75:ed:f2:28: 9b:42:c9:e7:d6:f8:86:79:e8:9c:d8:15:c6:ed:09: c5:a5:50:96:cc:f0:0b:eb:9f:eb:26:ab:eb:8c:67: b8:9a:39:24:04:94:13:66:f7:ed:6c:1a:14:79:90: f4:a8:64:ab:4b:9b:54:57:c0:30:9a:52:b4:15:0b: 2b:bc:6e:66:d4:41:f9:da:0d:ec:55:5f:3f:7f:8c: 87:9d:bd:f2:56:0a:44:14:84:5e:90:07:f7:ce:06: 5c:5b:e3:2e:f0:13:29:6a:f0:17:66:4b:71:c3:29: 54:db:6d:0e:62:b2:3f:3f:24:bc:07:d2:a3:34:f5: 94:d5:80:1e:9b:72:06:ac:b6:ad:00:ef:12:dd:f4: c2:d8:54:e9:14:38:e4:b5:78:a1:2e:78:56:7b:f7: a8:b5:7f:62:1a:fc:d4:c4:c4:8e:24:46:6d:33:2f: cb:01:b1:12:ba:1f:bc:d9:10:b6:b8:ba:84:1f:f9: 16:7c:10:ab:f2:d0:3f:6d:cb:03:1c:28:36:62:d6: 1e:7d:67:c0:c2:3d:00:2f:bd:a3:23:97:1c:d8:1f: 58:ca:04:19:52:6d:5f:bf:de:38:da:0e:11:0c:d5: 9b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3A:FF:C4:B8:4B:72:7B:D3:15:58:A9:1B:0D:C2:50:C1:0F:5E:36 X509v3 Authority Key Identifier: keyid:B9:AC:49:D1:CC:DC:AE:DD:9A:13:F4:80:3D:F1:AE:DC:E6:DC:11:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uaxJ0czcrt2aE_SAPfGu3ObcERI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/PTr_xLhLcnvTFVipGw3CUMEPXjY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/537191-1179-48ec-ad9f-ffe43a52d3f6/1/uaxJ0czcrt2aE_SAPfGu3ObcERI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.223.160.0/24 213.138.184.0/21 Signature Algorithm: sha256WithRSAEncryption 65:c7:95:8a:29:cc:9e:e1:dd:93:03:ad:75:db:da:51:81:7b: 84:95:eb:c4:cd:8b:95:a3:21:6f:a7:52:6b:bc:b1:98:d5:2d: 25:da:3b:18:f9:fc:dd:1e:e1:b4:4e:51:30:3a:97:d2:cd:6e: 28:b3:80:20:b4:7e:cd:bd:6f:e0:8a:e3:9e:f2:95:d8:14:a9: fa:1e:49:fc:bd:bc:db:4e:09:de:18:ee:ce:a0:47:e4:d3:e5: a1:bf:09:52:60:e9:4f:69:1e:8d:5e:b1:47:24:e3:31:98:f2: 25:f4:6d:11:19:7f:1e:ad:6e:ea:7e:d0:6b:21:d3:ac:9d:80: b1:1f:98:bc:7a:fa:97:26:ff:f3:89:3b:88:ae:c6:c6:29:90: 07:c1:d2:57:c4:c7:bb:f4:53:89:4b:3e:94:c9:81:97:a3:63: ee:25:23:7f:1c:77:30:6f:5c:ea:66:a9:e2:64:61:55:dc:15: f7:4c:a5:eb:3c:6f:a1:ae:98:f9:3a:e1:cc:a1:b3:da:db:5e: 00:cf:de:ee:e3:29:92:10:f7:70:e5:b6:1e:92:aa:0f:3d:7c: 37:f3:c2:f9:a5:8a:f8:14:16:58:5f:64:4d:6e:e9:90:de:82: 92:ca:70:58:e7:fc:86:ab:b0:48:b0:7f:ce:e3:9d:5e:2d:a1: 72:2e:b0:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsNCKc93OmWHyOaxhkx/gVmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5YWM0OWQxY2NkY2FlZGQ5YTEzZjQ4MDNkZjFhZWRjZTZk YzExMTIwHhcNMjUxMjExMTA1MDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDNhZmZjNGI4NGI3MjdiZDMxNTU4YTkxYjBkYzI1MGMxMGY1ZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz389+Ir7NS2BFp1kzcWZ54hsZkY+ xQVElnXt8iibQsnn1viGeeic2BXG7QnFpVCWzPAL65/rJqvrjGe4mjkkBJQTZvft bBoUeZD0qGSrS5tUV8AwmlK0FQsrvG5m1EH52g3sVV8/f4yHnb3yVgpEFIRekAf3 zgZcW+Mu8BMpavAXZktxwylU220OYrI/PyS8B9KjNPWU1YAem3IGrLatAO8S3fTC 2FTpFDjktXihLnhWe/eotX9iGvzUxMSOJEZtMy/LAbESuh+82RC2uLqEH/kWfBCr 8tA/bcsDHCg2YtYefWfAwj0AL72jI5cc2B9YygQZUm1fv9442g4RDNWbVwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD06/8S4S3J70xVYqRsNwlDBD142MB8GA1UdIwQY MBaAFLmsSdHM3K7dmhP0gD3xrtzm3BESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYt ZmZlNDNhNTJkM2Y2LzEvUFRyX3hMaExjbnZURlZpcEd3M0NVTUVQWGpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC81MzcxOTEtMTE3OS00OGVjLWFkOWYtZmZlNDNhNTJkM2Y2 LzEvdWF4SjBjemNydDJhRV9TQVBmR3UzT2JjRVJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATd+gAwQD 1Yq4MA0GCSqGSIb3DQEBCwUAA4IBAQBlx5WKKcye4d2TA61129pRgXuElevEzYuV oyFvp1JrvLGY1S0l2jsY+fzdHuG0TlEwOpfSzW4os4AgtH7NvW/giuOe8pXYFKn6 Hkn8vbzbTgneGO7OoEfk0+WhvwlSYOlPaR6NXrFHJOMxmPIl9G0RGX8erW7qftBr IdOsnYCxH5i8evqXJv/ziTuIrsbGKZAHwdJXxMe79FOJSz6UyYGXo2PuJSN/HHcw b1zqZqniZGFV3BX3TKXrPG+hrpj5OuHMobPa214Az97u4ymSEPdw5bYekqoPPXw3 88L5pYr4FBZYX2RNbumQ3oKSynBY5/yGq7BIsH/O451eLaFyLrCc -----END CERTIFICATE-----Generated at Fri Dec 12 01:31:51 2025 by rpki-client