This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa File: ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa (raw, json) Hash identifier: mVPD346A3srmdFGJdgacd5EA7ZXTURNtKW04Yxreb0M= Subject key identifier: A6:D2:2F:9F:61:B8:E2:79:A3:33:3E:0E:A1:33:CC:BC:31:A6:43:88 Certificate issuer: /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c Certificate serial: 019B797EF99848DDFBD0F74632D410E9A256 Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208464 IP address blocks: 212.46.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f9:98:48:dd:fb:d0:f7:46:32:d4:10:e9:a2:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6d22f9f61b8e279a3333e0ea133ccbc31a64388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2b:0a:5f:07:0a:52:64:be:38:eb:b6:07:8e: c7:b0:70:32:fc:85:03:f9:e7:d2:f6:9a:05:9b:d1: d4:88:98:07:b5:18:ea:05:32:68:df:ee:9a:80:a7: 95:d7:e2:ab:82:4c:fa:9c:2c:f0:17:2e:e8:b3:8f: 14:be:a7:71:04:c0:46:61:11:3d:38:b4:5f:c9:da: e0:c4:13:f3:a6:d0:32:64:ed:b4:88:c4:a9:98:89: d9:2d:27:ee:2a:66:99:bb:9c:a7:cf:a6:82:55:c9: a4:47:e2:ce:9f:a5:0c:8f:a8:56:7d:29:9b:68:8b: 9a:81:44:f8:e3:34:24:cd:15:ab:d9:eb:1a:6d:f7: f3:c2:b8:e2:22:f4:94:65:80:15:08:ac:e6:a0:c1: 17:8d:e4:9a:d7:92:6b:2b:99:ca:4c:e0:25:c7:3b: 16:73:19:b0:ca:4c:82:d7:56:5f:c7:88:22:c5:2b: 65:3e:75:5f:4e:12:3a:66:da:c8:e9:68:0a:06:42: e8:1a:8a:4b:9d:a8:76:2b:01:1d:fd:8d:9e:50:59: 36:65:22:3b:95:45:3a:71:31:77:d9:4c:a8:6d:c4: 1a:d5:57:db:23:de:cf:39:57:9a:13:62:c2:66:5d: fc:9e:60:07:e1:2c:b7:6b:5b:9a:22:69:03:eb:cc: d1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D2:2F:9F:61:B8:E2:79:A3:33:3E:0E:A1:33:CC:BC:31:A6:43:88 X509v3 Authority Key Identifier: keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.52.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:f8:12:5b:c1:ac:b1:0d:24:f1:c4:3a:7e:18:3f:83:01:1f: 9b:96:01:72:2e:05:8c:f8:d3:a7:c7:40:4a:39:d3:f1:d7:e2: 1b:2f:f3:a1:7a:38:de:19:f6:16:2b:13:53:1b:bd:24:fd:04: ba:47:a5:35:74:38:73:e7:cd:96:ea:d5:83:16:4b:d3:a4:5b: 2f:2a:05:0c:05:e3:7c:9b:44:56:e5:f3:3b:8e:e8:b4:d9:45: 1f:b5:d3:e4:6a:85:c5:6b:c6:99:39:ce:c1:8e:db:2a:19:d1: fa:74:2e:9a:32:c3:ca:94:fc:22:cb:13:38:41:fb:33:91:14: ed:2d:cd:f8:2d:67:07:7f:18:4e:d9:e7:53:45:e1:44:23:3a: 50:fc:ff:99:db:d6:59:32:6c:1f:45:cd:0e:90:f8:8e:b8:dc: 79:52:d7:0c:9d:79:67:f4:32:fe:d8:86:a1:4f:69:67:44:18: d1:e7:9b:d6:21:fc:93:a2:35:a2:67:fc:27:3d:2b:36:3f:5e: 47:20:14:c4:ae:ad:56:53:8c:6d:09:0e:f2:1f:61:a3:07:cf: c2:ce:16:fe:6a:6c:50:57:8a:36:e0:15:21:63:a7:6b:5b:bf: 2c:81:51:51:0f:63:e4:c1:d4:af:74:50:16:c8:ce:35:62:ab: a7:89:3f:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fvmYSN370PdGMtQQ6aJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NDMxYmQ3M2UwYTdmMDM3ZGViOTdkODJkMWE5NWZjZDY3 MTA1MWMwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmQyMmY5ZjYxYjhlMjc5YTMzMzNlMGVhMTMzY2NiYzMxYTY0Mzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ysKXwcKUmS+OOu2B47HsHAy/IUD +efS9poFm9HUiJgHtRjqBTJo3+6agKeV1+Krgkz6nCzwFy7os48UvqdxBMBGYRE9 OLRfydrgxBPzptAyZO20iMSpmInZLSfuKmaZu5ynz6aCVcmkR+LOn6UMj6hWfSmb aIuagUT44zQkzRWr2esabffzwrjiIvSUZYAVCKzmoMEXjeSa15JrK5nKTOAlxzsW cxmwykyC11Zfx4gixStlPnVfThI6ZtrI6WgKBkLoGopLnah2KwEd/Y2eUFk2ZSI7 lUU6cTF32UyobcQa1VfbI97POVeaE2LCZl38nmAH4Sy3a1uaImkD68zRvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKbSL59huOJ5ozM+DqEzzLwxpkOIMB8GA1UdIwQY MBaAFLVDG9c+Cn8DfeuX2C0alfzWcQUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFVNYjF6NEtmd045NjVmWUxScVZfTlp4QlJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hMTI2MjktOGJkZi00Y2RkLTg2NzIt MWZkOWYyYzk4OTU2LzEvcHRJdm4yRzQ0bm1qTXo0T29UUE12REdtUTRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9hMTI2MjktOGJkZi00Y2RkLTg2NzItMWZkOWYyYzk4OTU2 LzEvdFVNYjF6NEtmd045NjVmWUxScVZfTlp4QlJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C40MA0G CSqGSIb3DQEBCwUAA4IBAQB/+BJbwayxDSTxxDp+GD+DAR+blgFyLgWM+NOnx0BK OdPx1+IbL/OhejjeGfYWKxNTG70k/QS6R6U1dDhz582W6tWDFkvTpFsvKgUMBeN8 m0RW5fM7jui02UUftdPkaoXFa8aZOc7BjtsqGdH6dC6aMsPKlPwiyxM4QfszkRTt Lc34LWcHfxhO2edTReFEIzpQ/P+Z29ZZMmwfRc0OkPiOuNx5UtcMnXln9DL+2Iah T2lnRBjR55vWIfyTojWiZ/wnPSs2P15HIBTErq1WU4xtCQ7yH2GjB8/Czhb+amxQ V4o24BUhY6drW78sgVFRD2PkwdSvdFAWyM41YquniT+2 -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:24 2026 by rpki-client