This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/PTGVKq0rtp-W0LQXrCMcfxye3TY.roa File: PTGVKq0rtp-W0LQXrCMcfxye3TY.roa (raw, json) Hash identifier: CHD9DCCggVJLAY5cygmu9cgDCvnD2GXCe9SYsLHbrlA= Subject key identifier: 3D:31:95:2A:AD:2B:B6:9F:96:D0:B4:17:AC:23:1C:7F:1C:9E:DD:36 Certificate issuer: /CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc Certificate serial: 019B79EC9938D73EA0F79E4691A8E1C0DF32 Authority key identifier: F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/PTGVKq0rtp-W0LQXrCMcfxye3TY.roa Signing time: Thu 01 Jan 2026 14:18:27 +0000 ROA not before: Thu 01 Jan 2026 14:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47156 IP address blocks: 83.136.234.0/24 maxlen: 24 83.136.236.0/24 maxlen: 24 83.136.238.0/24 maxlen: 24 83.136.239.0/24 maxlen: 24 91.203.196.0/22 maxlen: 22 93.188.204.0/24 maxlen: 24 176.103.96.0/20 maxlen: 20 185.27.208.0/22 maxlen: 22 213.5.24.0/21 maxlen: 21 2a04:34c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.mft rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:99:38:d7:3e:a0:f7:9e:46:91:a8:e1:c0:df:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d6af4de89bba8118953cceebfb39f45a8ed1bc Validity Not Before: Jan 1 14:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d31952aad2bb69f96d0b417ac231c7f1c9edd36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e8:6b:a2:91:cd:84:91:63:b8:0c:36:c7:bf: bf:66:79:6a:86:01:4f:6b:38:a6:cc:06:50:6e:2b: 6e:b5:e3:95:20:31:13:69:d4:34:aa:b2:95:81:9e: a2:bf:80:4a:4b:b6:f8:19:c4:0f:b1:ef:37:bc:6b: 87:83:e5:11:cf:25:1b:01:a1:93:fe:00:06:86:df: b3:af:0e:83:f4:d5:c3:23:19:d2:b4:45:be:9a:f0: c0:77:f4:96:83:40:2f:eb:37:df:d1:45:e1:aa:14: 7d:d7:5f:d6:d2:26:22:a2:d5:15:25:de:de:f1:ab: 7a:b6:c5:26:f3:ca:ca:72:0d:1c:0f:f8:57:dc:32: 23:b9:0b:3c:4d:38:49:0f:21:e7:cf:99:5e:f9:2e: 49:84:e4:2e:2e:79:12:d9:55:12:fc:dd:99:87:05: 22:21:fe:84:de:6e:f3:7e:9b:d2:81:13:58:ae:cd: de:5e:e2:df:4d:5e:be:15:41:54:26:9a:d7:84:0c: 0f:89:25:63:07:1d:3e:93:50:36:bd:28:99:70:8a: 29:74:3c:ef:34:be:07:43:d2:04:40:f7:a4:08:bc: 07:c6:47:e6:86:f0:11:ac:d9:d9:3c:55:be:d6:da: e1:0a:5c:7c:e1:af:6d:87:6a:b8:aa:e7:0c:1a:9f: 9f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:95:2A:AD:2B:B6:9F:96:D0:B4:17:AC:23:1C:7F:1C:9E:DD:36 X509v3 Authority Key Identifier: keyid:F4:D6:AF:4D:E8:9B:BA:81:18:95:3C:CE:EB:FB:39:F4:5A:8E:D1:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NavTeibuoEYlTzO6_s59FqO0bw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/PTGVKq0rtp-W0LQXrCMcfxye3TY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/dd37cf-a466-4354-a171-d8df8e4c65fe/1/9NavTeibuoEYlTzO6_s59FqO0bw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.234.0/24 83.136.236.0/24 83.136.238.0/23 91.203.196.0/22 93.188.204.0/24 176.103.96.0/20 185.27.208.0/22 213.5.24.0/21 IPv6: 2a04:34c0::/29 Signature Algorithm: sha256WithRSAEncryption 62:56:8e:f0:a0:7c:f8:da:16:9b:85:73:91:a3:8f:5b:59:f9: 34:8b:71:73:50:99:84:25:b0:dc:d1:d7:77:12:a2:65:9a:46: 6c:35:8c:e7:20:a2:6b:9e:43:61:66:81:32:95:fd:9d:a8:ee: 8d:85:a6:c8:8d:11:a2:55:13:e4:79:73:98:2d:52:ea:b2:65: b2:17:76:b6:d8:5b:b7:f0:e3:7a:0e:a8:88:a4:28:e0:e5:37: 57:00:5b:72:68:86:15:19:44:65:f4:bc:cc:d9:f0:37:eb:35: 39:0e:60:87:21:af:93:76:9b:69:cd:c4:94:a4:b8:75:e0:db: 7e:0f:66:5e:86:01:d0:9a:66:30:ab:18:4d:f4:4c:0e:68:6e: 55:54:69:46:32:08:4c:dc:83:c2:1e:ff:16:6b:5b:f1:f4:42: 16:58:a9:22:75:c1:b8:28:ee:6c:86:0a:b4:dc:ff:84:2f:48: ec:e5:9c:ea:46:75:ef:20:b2:fd:97:91:7e:93:2a:25:91:7b: ab:a8:30:8f:d9:cc:00:3c:3d:b8:f3:61:40:d2:08:38:e6:81: 53:52:3a:fb:19:0e:4c:eb:89:18:9f:d6:a8:c5:09:20:e3:ca: 34:71:2d:78:29:4b:b2:12:4c:f0:11:9e:69:18:9f:00:e7:7c: ea:35:bc:7b -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZt57Jk41z6g955GkajhwN8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDZhZjRkZTg5YmJhODExODk1M2NjZWViZmIzOWY0NWE4 ZWQxYmMwHhcNMjYwMTAxMTQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDMxOTUyYWFkMmJiNjlmOTZkMGI0MTdhYzIzMWM3ZjFjOWVkZDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhehropHNhJFjuAw2x7+/ZnlqhgFP azimzAZQbituteOVIDETadQ0qrKVgZ6iv4BKS7b4GcQPse83vGuHg+URzyUbAaGT /gAGht+zrw6D9NXDIxnStEW+mvDAd/SWg0Av6zff0UXhqhR911/W0iYiotUVJd7e 8at6tsUm88rKcg0cD/hX3DIjuQs8TThJDyHnz5le+S5JhOQuLnkS2VUS/N2ZhwUi If6E3m7zfpvSgRNYrs3eXuLfTV6+FUFUJprXhAwPiSVjBx0+k1A2vSiZcIopdDzv NL4HQ9IEQPekCLwHxkfmhvARrNnZPFW+1trhClx84a9th2q4qucMGp+fQQIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFD0xlSqtK7afltC0F6wjHH8cnt02MB8GA1UdIwQY MBaAFPTWr03om7qBGJU8zuv7OfRajtG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5hdlRlaWJ1b0VZbFR6TzZfczU5RnFPMGJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9kZDM3Y2YtYTQ2Ni00MzU0LWExNzEt ZDhkZjhlNGM2NWZlLzEvUFRHVktxMHJ0cC1XMExRWHJDTWNmeHllM1RZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9kZDM3Y2YtYTQ2Ni00MzU0LWExNzEtZDhkZjhlNGM2NWZl LzEvOU5hdlRlaWJ1b0VZbFR6TzZfczU5RnFPMGJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQAU4jqAwQA U4jsAwQBU4juAwQCW8vEAwQAXbzMAwQEsGdgAwQCuRvQAwQD1QUYMA0EAgACMAcD BQMqBDTAMA0GCSqGSIb3DQEBCwUAA4IBAQBiVo7woHz42habhXORo49bWfk0i3Fz UJmEJbDc0dd3EqJlmkZsNYznIKJrnkNhZoEylf2dqO6NhabIjRGiVRPkeXOYLVLq smWyF3a22Fu38ON6DqiIpCjg5TdXAFtyaIYVGURl9LzM2fA36zU5DmCHIa+Tdptp zcSUpLh14Nt+D2ZehgHQmmYwqxhN9EwOaG5VVGlGMghM3IPCHv8Wa1vx9EIWWKki dcG4KO5shgq03P+EL0js5ZzqRnXvILL9l5F+kyolkXurqDCP2cwAPD2482FA0gg4 5oFTUjr7GQ5M64kYn9aoxQkg48o0cS14KUuyEkzwEZ5pGJ8A53zqNbx7 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:28 2026 by rpki-client