This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/pTKY06gWgEXaIu_OYznOKa1SCYQ.roa File: pTKY06gWgEXaIu_OYznOKa1SCYQ.roa (raw, json) Hash identifier: DO+JIn1Z+CZdkSG19VC8thtAj3bTLW7VrZO6RWhGcRE= Subject key identifier: A5:32:98:D3:A8:16:80:45:DA:22:EF:CE:63:39:CE:29:AD:52:09:84 Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c Certificate serial: 019B7E379AD9EACD07B83C2841B39514843E Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/pTKY06gWgEXaIu_OYznOKa1SCYQ.roa Signing time: Fri 02 Jan 2026 10:18:51 +0000 ROA not before: Fri 02 Jan 2026 10:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30417 IP address blocks: 91.208.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:9a:d9:ea:cd:07:b8:3c:28:41:b3:95:14:84:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c Validity Not Before: Jan 2 10:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a53298d3a8168045da22efce6339ce29ad520984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:1f:4a:19:56:c3:94:f5:ae:e9:fa:1f:5f: 34:b5:d0:3a:9a:02:69:11:d7:a5:89:fe:76:01:07: 91:c7:0e:55:69:44:f6:dc:cc:fb:c1:6c:96:ca:20: d2:44:82:15:16:f2:c4:ac:a1:c8:66:bd:39:dd:f1: 4d:d7:f2:35:7e:03:62:54:90:ee:69:52:dc:26:4b: dd:8c:4f:ac:96:1c:31:1d:b6:44:77:d9:b8:0b:a2: a7:57:ea:98:af:d6:f7:69:b1:d5:06:5e:36:38:54: ff:46:8b:5a:25:f2:15:5f:0b:a4:84:7e:df:82:5a: 44:ce:61:92:e4:9b:c3:68:da:65:b8:bd:f5:85:ea: b0:21:76:7b:86:14:fb:f7:84:bc:53:b2:81:a4:85: f8:95:e8:5a:ac:b5:ab:16:f2:3a:9f:6f:74:75:32: 51:f9:2d:dc:05:83:e0:6b:05:0a:44:3f:3c:31:fe: 89:8e:40:6f:6f:6e:32:f2:88:dd:73:4a:92:6a:3e: 95:94:61:f2:95:75:e6:5c:66:d8:2a:b7:a0:de:8b: 56:5a:e1:2e:d6:b9:ad:ba:fb:b9:73:fd:d1:c8:09: 6c:1f:ab:43:66:c0:cd:be:86:11:4e:69:14:d2:27: dd:6f:08:71:93:b0:c7:c4:bb:5f:32:83:cb:d5:be: 3a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:32:98:D3:A8:16:80:45:DA:22:EF:CE:63:39:CE:29:AD:52:09:84 X509v3 Authority Key Identifier: keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/pTKY06gWgEXaIu_OYznOKa1SCYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.208.252.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:cf:a7:1f:d9:e0:71:61:44:71:f2:e2:8a:64:54:fe:32:b7: ef:d5:7f:47:b4:d0:5d:3f:69:38:99:80:76:4b:1b:aa:64:c4: 13:d1:4f:cf:f6:1e:48:bc:a9:3c:0f:8a:2e:d9:d9:c2:7a:f0: cb:08:78:3b:ad:01:5f:ef:e5:40:0b:ad:78:79:20:c7:1b:37: 1d:3a:4d:39:d9:7a:d2:b4:4e:9a:47:d8:4c:b5:20:16:99:2e: 84:45:f5:33:1a:cb:c1:57:cd:71:b8:24:28:08:fb:72:6a:31: b9:51:04:c0:ba:2b:f9:d5:62:5e:d5:be:27:7d:67:e1:45:72: a0:27:68:30:9b:f4:9b:30:62:37:85:bf:60:2c:56:04:a6:4b: 5f:f4:95:3a:61:15:ae:df:f1:30:18:96:1c:47:2d:8c:ed:c5: 94:75:80:48:8e:ea:6b:6a:dd:d8:11:4d:3d:6b:18:cc:1f:b3: d0:f7:31:ba:1d:40:3a:b8:4b:70:ad:2f:67:84:95:fd:88:c1: 33:ae:e6:ee:2c:e4:30:57:b3:0e:30:e1:12:37:04:7a:40:2a: 1b:66:87:79:12:e9:8e:d5:66:a5:7a:3e:51:9c:78:a8:c8:9c: 09:f3:0b:6d:b6:28:be:36:8b:55:10:6b:82:6a:ab:14:56:f0: df:5f:51:45 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N5rZ6s0HuDwoQbOVFIQ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MGFmOTQyNDY1ZmYyNjViODk2ZjBkMWI3NjI0OTBmMjdk YzMyMmMwHhcNMjYwMTAyMTAxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTMyOThkM2E4MTY4MDQ1ZGEyMmVmY2U2MzM5Y2UyOWFkNTIwOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nsfShlWw5T1run6H180tdA6mgJp Edelif52AQeRxw5VaUT23Mz7wWyWyiDSRIIVFvLErKHIZr053fFN1/I1fgNiVJDu aVLcJkvdjE+slhwxHbZEd9m4C6KnV+qYr9b3abHVBl42OFT/RotaJfIVXwukhH7f glpEzmGS5JvDaNpluL31heqwIXZ7hhT794S8U7KBpIX4leharLWrFvI6n290dTJR +S3cBYPgawUKRD88Mf6JjkBvb24y8ojdc0qSaj6VlGHylXXmXGbYKreg3otWWuEu 1rmtuvu5c/3RyAlsH6tDZsDNvoYRTmkU0ifdbwhxk7DHxLtfMoPL1b46tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKUymNOoFoBF2iLvzmM5zimtUgmEMB8GA1UdIwQY MBaAFNcK+UJGX/JluJbw0bdiSQ8n3DIsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYt ZjQ0OWJhZDI5ODU1LzEvcFRLWTA2Z1dnRVhhSXVfT1l6bk9LYTFTQ1lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9lOTIwM2QtY2RjZi00ZjIzLWEzYmYtZjQ0OWJhZDI5ODU1 LzEvMXdyNVFrWmY4bVc0bHZEUnQySkpEeWZjTWl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9D8MA0G CSqGSIb3DQEBCwUAA4IBAQBPz6cf2eBxYURx8uKKZFT+Mrfv1X9HtNBdP2k4mYB2 SxuqZMQT0U/P9h5IvKk8D4ou2dnCevDLCHg7rQFf7+VAC614eSDHGzcdOk052XrS tE6aR9hMtSAWmS6ERfUzGsvBV81xuCQoCPtyajG5UQTAuiv51WJe1b4nfWfhRXKg J2gwm/SbMGI3hb9gLFYEpktf9JU6YRWu3/EwGJYcRy2M7cWUdYBIjuprat3YEU09 axjMH7PQ9zG6HUA6uEtwrS9nhJX9iMEzrubuLOQwV7MOMOESNwR6QCobZod5EumO 1Walej5RnHioyJwJ8wtttii+NotVEGuCaqsUVvDfX1FF -----END CERTIFICATE-----Generated at Sat Jan 10 23:35:59 2026 by rpki-client