This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/pttNsriY8yChB9BrtVjJhNIJyPY.roa File: pttNsriY8yChB9BrtVjJhNIJyPY.roa (raw, json) Hash identifier: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY= Subject key identifier: A6:DB:4D:B2:B8:98:F3:20:A1:07:D0:6B:B5:58:C9:84:D2:09:C8:F6 Certificate issuer: /CN=0195727f07b758f9868476c13cf977654bf380ee Certificate serial: 019B7F138B678842C75AC584F9D052428F51 Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/pttNsriY8yChB9BrtVjJhNIJyPY.roa Signing time: Fri 02 Jan 2026 14:19:05 +0000 ROA not before: Fri 02 Jan 2026 14:19:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198086 IP address blocks: 31.44.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:8b:67:88:42:c7:5a:c5:84:f9:d0:52:42:8f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee Validity Not Before: Jan 2 14:19:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6db4db2b898f320a107d06bb558c984d209c8f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:04:dd:8e:d7:77:6b:4a:08:8f:72:ac:89:05: 48:d8:90:88:21:5e:c2:e5:f3:00:d7:8f:3e:40:45: 13:71:22:42:d4:8d:96:98:b2:a2:73:ff:3b:fc:27: 9a:26:79:2f:73:3d:fe:38:a7:19:4b:da:d7:49:09: 17:87:e4:46:23:02:5a:82:40:12:e0:8d:aa:f9:1a: c1:e6:c0:8c:b8:dd:e1:c5:3b:4d:0b:91:ac:a1:15: ab:f7:65:0b:f8:25:b2:74:59:b3:3b:ff:a1:6a:f7: ca:5a:48:de:21:3e:85:e7:49:92:5a:b1:83:98:cf: bb:60:f6:15:db:53:a5:7e:e9:ff:9a:98:b8:63:a6: 63:0a:a5:6f:d8:8b:8d:19:13:1c:de:8d:5f:16:cf: 1c:9c:fe:fc:31:b2:32:a6:f7:78:1f:10:5e:68:25: 79:ca:d2:79:25:53:05:a9:22:7c:25:99:06:5a:0e: 0f:28:d8:6f:b5:1a:9f:94:2a:62:01:40:f9:7b:56: ce:a5:6e:34:62:39:22:f8:9d:7e:9d:ef:72:e2:42: a8:5b:95:34:a5:79:14:22:66:40:87:19:59:30:bb: fc:8a:12:95:1e:74:ae:f5:e1:33:b7:3f:e0:b9:e9: 62:a8:ec:d2:44:78:92:c8:a8:bb:45:30:6b:98:7c: 96:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DB:4D:B2:B8:98:F3:20:A1:07:D0:6B:B5:58:C9:84:D2:09:C8:F6 X509v3 Authority Key Identifier: keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/pttNsriY8yChB9BrtVjJhNIJyPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.44.249.0/24 Signature Algorithm: sha256WithRSAEncryption 13:cf:31:a8:97:02:4a:a0:68:69:69:02:66:a7:3f:b1:6a:e3: d9:c0:16:23:b0:ae:36:6e:69:59:60:3f:68:a6:c7:39:98:90: 1f:10:ce:0e:de:3e:d6:6d:d7:f6:34:78:48:16:ec:1b:5e:17: b0:b3:a8:25:df:3b:38:45:e3:a7:84:2c:35:a6:64:29:e2:bb: 1a:c2:de:53:b3:66:6b:8b:18:fc:b8:9b:7b:f4:76:d8:b2:26: d3:0f:8e:49:8e:ee:49:cf:cd:1d:55:3b:98:c4:63:8f:a9:46: 5f:e8:47:44:ff:7e:31:d8:70:d7:3f:0c:ca:a0:b0:d6:9c:b3: 35:0f:68:e3:5c:00:5d:48:e6:02:4e:12:31:33:bc:0f:d1:7e: 78:36:5c:d1:dc:3c:ef:1a:3f:d8:69:37:b7:4f:f7:97:72:ab: 92:5a:2a:a3:19:70:96:a8:5b:ec:ea:04:c7:81:b6:d3:bf:78: 82:2f:cb:c1:d4:b0:5b:f8:05:b3:82:c6:f0:77:2b:69:31:98: 48:bc:42:08:77:6e:fb:c9:e4:11:51:14:df:08:eb:70:bc:19: 79:93:28:9f:d5:72:d4:5c:e3:7c:26:9b:0c:8f:eb:f3:ec:17: 88:1f:17:94:82:12:eb:a0:9b:37:d7:30:84:71:c8:d8:8b:36: 83:da:70:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E4tniELHWsWE+dBSQo9RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTU3MjdmMDdiNzU4Zjk4Njg0NzZjMTNjZjk3NzY1NGJm MzgwZWUwHhcNMjYwMTAyMTQxOTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmRiNGRiMmI4OThmMzIwYTEwN2QwNmJiNTU4Yzk4NGQyMDljOGY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtATdjtd3a0oIj3KsiQVI2JCIIV7C 5fMA148+QEUTcSJC1I2WmLKic/87/CeaJnkvcz3+OKcZS9rXSQkXh+RGIwJagkAS 4I2q+RrB5sCMuN3hxTtNC5GsoRWr92UL+CWydFmzO/+havfKWkjeIT6F50mSWrGD mM+7YPYV21Olfun/mpi4Y6ZjCqVv2IuNGRMc3o1fFs8cnP78MbIypvd4HxBeaCV5 ytJ5JVMFqSJ8JZkGWg4PKNhvtRqflCpiAUD5e1bOpW40Yjki+J1+ne9y4kKoW5U0 pXkUImZAhxlZMLv8ihKVHnSu9eEztz/gueliqOzSRHiSyKi7RTBrmHyWiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKbbTbK4mPMgoQfQa7VYyYTSCcj2MB8GA1UdIwQY MBaAFAGVcn8Ht1j5hoR2wTz5d2VL84DuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAt NjQ4MzhkZjM5NzdhLzEvcHR0TnNyaVk4eUNoQjlCcnRWakpoTklKeVBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kZGVkOTUtY2I4Yy00MzM1LWFlZDAtNjQ4MzhkZjM5Nzdh LzEvQVpWeWZ3ZTNXUG1HaEhiQlBQbDNaVXZ6Z080LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHyz5MA0G CSqGSIb3DQEBCwUAA4IBAQATzzGolwJKoGhpaQJmpz+xauPZwBYjsK42bmlZYD9o psc5mJAfEM4O3j7Wbdf2NHhIFuwbXhews6gl3zs4ReOnhCw1pmQp4rsawt5Ts2Zr ixj8uJt79HbYsibTD45Jju5Jz80dVTuYxGOPqUZf6EdE/34x2HDXPwzKoLDWnLM1 D2jjXABdSOYCThIxM7wP0X54NlzR3DzvGj/YaTe3T/eXcquSWiqjGXCWqFvs6gTH gbbTv3iCL8vB1LBb+AWzgsbwdytpMZhIvEIId277yeQRURTfCOtwvBl5kyif1XLU XON8JpsMj+vz7BeIHxeUghLroJs31zCEccjYizaD2nA/ -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:38 2026 by rpki-client