This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/ptikDTRhjTNxZI8dkI54eJbGFTA.roa File: ptikDTRhjTNxZI8dkI54eJbGFTA.roa (raw, json) Hash identifier: 3SdSmJMo+FOvr1IMdnku5tDe7K6GsQTnPIBl17tgA08= Subject key identifier: A6:D8:A4:0D:34:61:8D:33:71:64:8F:1D:90:8E:78:78:96:C6:15:30 Certificate issuer: /CN=87db71f6919b0ef98eefc9964928a87510236a03 Certificate serial: 019B7C805061821B5683A2C6A914E1051106 Authority key identifier: 87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/ptikDTRhjTNxZI8dkI54eJbGFTA.roa Signing time: Fri 02 Jan 2026 02:19:02 +0000 ROA not before: Fri 02 Jan 2026 02:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24951 IP address blocks: 185.154.36.0/22 maxlen: 22 185.154.38.0/24 maxlen: 24 195.144.7.0/24 maxlen: 24 212.71.96.0/20 maxlen: 24 212.71.102.0/24 maxlen: 24 212.71.107.0/24 maxlen: 24 212.71.112.0/20 maxlen: 24 212.71.112.0/22 maxlen: 22 212.71.116.0/24 maxlen: 24 212.71.117.0/24 maxlen: 24 212.71.118.0/24 maxlen: 24 212.71.119.0/24 maxlen: 24 212.71.120.0/21 maxlen: 21 217.20.192.0/20 maxlen: 24 217.20.192.0/24 maxlen: 24 217.71.80.0/20 maxlen: 24 217.71.85.0/24 maxlen: 24 217.71.87.0/24 maxlen: 24 217.71.88.0/24 maxlen: 24 217.71.89.0/24 maxlen: 24 217.71.93.0/24 maxlen: 24 2a00:fb00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.mft rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:50:61:82:1b:56:83:a2:c6:a9:14:e1:05:11:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87db71f6919b0ef98eefc9964928a87510236a03 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6d8a40d34618d3371648f1d908e787896c61530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:83:a6:c2:8f:83:4e:93:a7:35:14:ab:67:b5: 13:f2:03:df:0a:d6:36:dd:20:88:4f:c9:7b:05:a0: 26:d2:98:fb:87:8e:35:eb:17:0f:82:8f:2a:fa:ed: 67:be:d0:8a:8e:70:bc:44:ed:5b:f0:8f:dc:28:c8: 24:e9:72:5c:6c:2e:45:62:a9:bb:18:bc:a5:a6:d2: 32:db:4f:4b:fb:cc:ab:3d:fc:7d:d4:ea:16:9a:ba: fc:4c:fd:cb:27:fa:dd:8f:b9:3f:2a:f4:92:35:b6: 05:07:8e:3b:bc:f4:b6:4b:ee:2f:b3:16:c3:e7:e0: 8d:76:6a:d6:dd:e8:c9:57:f5:99:cc:1c:de:3d:7f: 3e:21:08:93:ef:66:fb:ac:e5:62:37:d2:20:d9:08: 03:56:35:fa:e1:e5:f1:98:66:9a:99:ed:a5:8f:4a: 7a:62:bb:a9:1d:1e:32:54:17:9b:f5:c7:b9:11:28: 97:63:62:ee:10:a5:51:11:0c:36:03:26:25:c0:57: 7f:02:bd:fa:a3:9d:21:39:50:c9:e5:1e:cd:38:2d: 70:5e:b3:18:4e:89:e1:43:70:78:59:f2:a5:c1:33: f6:17:cf:17:41:fa:e5:fd:cc:9f:4f:29:24:31:74: de:41:59:83:69:bf:1d:22:e1:5a:3e:b2:78:28:0b: 73:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D8:A4:0D:34:61:8D:33:71:64:8F:1D:90:8E:78:78:96:C6:15:30 X509v3 Authority Key Identifier: keyid:87:DB:71:F6:91:9B:0E:F9:8E:EF:C9:96:49:28:A8:75:10:23:6A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h9tx9pGbDvmO78mWSSiodRAjagM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/ptikDTRhjTNxZI8dkI54eJbGFTA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ef6277-70b5-4348-a582-904a08031a9f/1/h9tx9pGbDvmO78mWSSiodRAjagM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.36.0/22 195.144.7.0/24 212.71.96.0/19 217.20.192.0/20 217.71.80.0/20 IPv6: 2a00:fb00::/29 Signature Algorithm: sha256WithRSAEncryption 2c:af:9c:96:b4:33:02:c1:57:c0:20:dd:95:86:11:b6:d3:d2: 9b:39:a9:b6:97:60:82:d6:5d:74:70:7b:ae:16:48:4a:9a:72: 40:19:7e:b2:7c:19:27:c0:23:3c:a5:36:06:59:27:70:98:4b: 1b:c4:26:3f:96:63:27:b6:ac:4c:90:7b:f4:e8:e4:ba:f3:f3: ea:4e:1c:4f:a3:9c:d8:25:b9:53:c5:d7:09:88:09:9f:72:17: ec:ba:a9:a8:0e:f0:bb:cc:26:3f:f2:ea:e6:40:ad:92:fa:94: 7a:82:5b:c4:47:44:f0:3c:f9:20:7f:e3:00:49:e2:8d:43:91: f6:f5:c2:b0:bf:e0:4d:39:2f:72:fd:0f:b8:97:d7:c5:f5:b3: c5:5b:11:cb:a6:78:40:70:a8:89:73:36:8c:ad:d5:24:9b:e2: 88:42:88:6a:5e:7d:70:8c:52:5c:83:45:a0:d7:33:9a:53:af: 2f:33:a3:f0:e8:88:5f:25:0c:d2:0a:b0:73:44:4f:8f:0f:c2: 54:bd:0b:e1:82:cb:b0:cc:e7:aa:36:6e:fd:12:23:ce:a1:61: f9:ee:77:df:1b:3c:b7:06:b3:12:0a:23:b9:08:50:f5:ba:94: ba:65:f6:b0:62:0a:f6:48:9d:6f:39:96:14:a5:22:92:36:e4: a7:fb:08:f8 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt8gFBhghtWg6LGqRThBREGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3ZGI3MWY2OTE5YjBlZjk4ZWVmYzk5NjQ5MjhhODc1MTAy MzZhMDMwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmQ4YTQwZDM0NjE4ZDMzNzE2NDhmMWQ5MDhlNzg3ODk2YzYxNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Omwo+DTpOnNRSrZ7UT8gPfCtY2 3SCIT8l7BaAm0pj7h4416xcPgo8q+u1nvtCKjnC8RO1b8I/cKMgk6XJcbC5FYqm7 GLylptIy209L+8yrPfx91OoWmrr8TP3LJ/rdj7k/KvSSNbYFB447vPS2S+4vsxbD 5+CNdmrW3ejJV/WZzBzePX8+IQiT72b7rOViN9Ig2QgDVjX64eXxmGaame2lj0p6 YrupHR4yVBeb9ce5ESiXY2LuEKVREQw2AyYlwFd/Ar36o50hOVDJ5R7NOC1wXrMY TonhQ3B4WfKlwTP2F88XQfrl/cyfTykkMXTeQVmDab8dIuFaPrJ4KAtzCQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFKbYpA00YY0zcWSPHZCOeHiWxhUwMB8GA1UdIwQY MBaAFIfbcfaRmw75ju/JlkkoqHUQI2oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDl0eDlwR2JEdm1PNzhtV1NTaW9kUkFqYWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9lZjYyNzctNzBiNS00MzQ4LWE1ODIt OTA0YTA4MDMxYTlmLzEvcHRpa0RUUmhqVE54Wkk4ZGtJNTRlSmJHRlRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9lZjYyNzctNzBiNS00MzQ4LWE1ODItOTA0YTA4MDMxYTlm LzEvaDl0eDlwR2JEdm1PNzhtV1NTaW9kUkFqYWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCuZokAwQA w5AHAwQF1EdgAwQE2RTAAwQE2UdQMA0EAgACMAcDBQMqAPsAMA0GCSqGSIb3DQEB CwUAA4IBAQAsr5yWtDMCwVfAIN2VhhG209KbOam2l2CC1l10cHuuFkhKmnJAGX6y fBknwCM8pTYGWSdwmEsbxCY/lmMntqxMkHv06OS68/PqThxPo5zYJblTxdcJiAmf chfsuqmoDvC7zCY/8urmQK2S+pR6glvER0TwPPkgf+MASeKNQ5H29cKwv+BNOS9y /Q+4l9fF9bPFWxHLpnhAcKiJczaMrdUkm+KIQohqXn1wjFJcg0Wg1zOaU68vM6Pw 6IhfJQzSCrBzRE+PD8JUvQvhgsuwzOeqNm79EiPOoWH57nffGzy3BrMSCiO5CFD1 upS6ZfawYgr2SJ1vOZYUpSKSNuSn+wj4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:26 2026 by rpki-client