This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/ptXyrgVvtRP3D7VtVmhZM3FWVhU.roa File: ptXyrgVvtRP3D7VtVmhZM3FWVhU.roa (raw, json) Hash identifier: PoyEOK64ZRkHmMkkLoFS8S4R0VxZJdJWksZdI9vklg4= Subject key identifier: A6:D5:F2:AE:05:6F:B5:13:F7:0F:B5:6D:56:68:59:33:71:56:56:15 Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1 Certificate serial: 019B76EACDD83C4E736FA7709D1BE99F4182 Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/ptXyrgVvtRP3D7VtVmhZM3FWVhU.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57329 IP address blocks: 31.31.40.0/21 maxlen: 21 185.151.92.0/22 maxlen: 22 2a06:d440::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:cd:d8:3c:4e:73:6f:a7:70:9d:1b:e9:9f:41:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6d5f2ae056fb513f70fb56d5668593371565615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e6:74:37:9a:a0:74:c3:95:9d:a7:74:f6:68: 34:30:9f:24:dd:31:74:0f:99:cb:23:e1:c7:ed:10: 92:11:87:76:dc:df:04:4b:c6:73:25:a8:af:d2:77: 18:aa:7d:da:98:bd:9b:65:57:60:35:c7:4f:73:12: 98:72:0d:6b:01:85:57:1a:36:b7:47:f7:df:af:35: 79:44:cb:4d:d8:30:7a:95:6e:3d:d7:9e:9b:60:20: d6:f3:19:98:01:fb:c2:7b:58:e4:24:14:77:c9:55: dd:0e:5d:1e:ed:f8:77:46:6d:da:f1:9a:cc:89:95: c2:f2:68:73:f6:6b:56:e2:31:3b:a9:42:d4:e9:e0: 78:d6:5f:1e:d2:25:7e:ba:c9:c1:c2:80:0e:b3:43: 21:b1:6c:48:67:f5:4c:99:7d:1c:ee:8f:08:9a:ed: 72:e3:d1:4e:4c:cc:76:1f:59:ed:39:5d:72:ab:24: eb:ec:5b:c0:c2:bc:8b:6a:b1:85:a9:13:bc:a1:4c: bf:a4:f8:74:61:4a:a8:68:80:1b:f0:d1:f0:f7:1c: 2c:a6:eb:ef:96:c4:6e:35:8c:88:06:1b:9e:0c:fb: ea:43:4e:98:d5:bf:32:35:e3:9f:79:44:85:3d:f1: e8:8e:e2:95:43:bf:e1:39:52:e3:91:bd:ff:b9:0c: 11:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D5:F2:AE:05:6F:B5:13:F7:0F:B5:6D:56:68:59:33:71:56:56:15 X509v3 Authority Key Identifier: keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/ptXyrgVvtRP3D7VtVmhZM3FWVhU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.40.0/21 185.151.92.0/22 IPv6: 2a06:d440::/29 Signature Algorithm: sha256WithRSAEncryption 3f:dc:de:67:7a:80:5d:cf:23:de:29:85:9b:0a:c2:0b:10:ea: a2:92:f6:ba:6d:4e:97:ac:04:0a:46:72:95:39:92:97:b8:27: 73:5c:26:d6:73:ee:81:a1:55:78:6f:08:57:94:30:97:66:4e: 57:a8:61:3d:7f:c0:d2:05:4b:61:09:ba:f7:c7:4b:44:36:e7: 01:25:a4:60:68:9a:82:01:78:66:b7:6d:9f:58:a1:09:fe:e5: 59:b3:5a:01:90:09:4f:79:7a:66:f3:0c:85:f8:2e:6b:8e:19: c1:af:f5:0d:55:c1:e9:ae:77:18:b1:43:fd:38:75:9d:ac:85: 3e:27:24:f9:75:f4:ca:2c:db:c4:c8:44:86:5d:7e:26:8f:cf: 2e:94:66:67:5b:a5:26:6d:8a:44:00:20:96:bb:c8:c1:64:08: 1b:bb:01:6a:1c:a2:65:2e:09:2f:5c:52:c3:ef:d2:5f:70:7d: d3:39:01:8e:c7:17:5d:81:bd:54:72:7d:af:eb:a0:3a:20:39: 61:f2:44:61:2b:18:65:b9:b5:2a:87:92:40:2e:18:d8:41:f2: 11:ce:06:4d:09:ab:e9:0e:49:44:7c:bd:b8:10:01:c1:2e:61: c3:aa:c2:9c:07:1a:43:97:cc:ce:97:37:03:d6:35:72:66:49: 57:1e:eb:61 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26s3YPE5zb6dwnRvpn0GCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZGVmNWE3N2RjYzlhYWM5OWMzNGUyZDcxOWI4YmEwZDA0 ZTAzZDEwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmQ1ZjJhZTA1NmZiNTEzZjcwZmI1NmQ1NjY4NTkzMzcxNTY1NjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeZ0N5qgdMOVnad09mg0MJ8k3TF0 D5nLI+HH7RCSEYd23N8ES8ZzJaiv0ncYqn3amL2bZVdgNcdPcxKYcg1rAYVXGja3 R/ffrzV5RMtN2DB6lW49156bYCDW8xmYAfvCe1jkJBR3yVXdDl0e7fh3Rm3a8ZrM iZXC8mhz9mtW4jE7qULU6eB41l8e0iV+usnBwoAOs0MhsWxIZ/VMmX0c7o8Imu1y 49FOTMx2H1ntOV1yqyTr7FvAwryLarGFqRO8oUy/pPh0YUqoaIAb8NHw9xwspuvv lsRuNYyIBhueDPvqQ06Y1b8yNeOfeUSFPfHojuKVQ7/hOVLjkb3/uQwRewIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKbV8q4Fb7UT9w+1bVZoWTNxVlYVMB8GA1UdIwQY MBaAFETe9ad9zJqsmcNOLXGbi6DQTgPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk43MXAzM01tcXladzA0dGNadUxvTkJPQTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8xYTAzMWItYTcxZi00YmVlLTkxZTIt ZDRiZDUzYzk0YjY2LzEvcHRYeXJnVnZ0UlAzRDdWdFZtaFpNM0ZXVmhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS8xYTAzMWItYTcxZi00YmVlLTkxZTItZDRiZDUzYzk0YjY2 LzEvUk43MXAzM01tcXladzA0dGNadUxvTkJPQTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDHx8oAwQC uZdcMA0EAgACMAcDBQMqBtRAMA0GCSqGSIb3DQEBCwUAA4IBAQA/3N5neoBdzyPe KYWbCsILEOqikva6bU6XrAQKRnKVOZKXuCdzXCbWc+6BoVV4bwhXlDCXZk5XqGE9 f8DSBUthCbr3x0tENucBJaRgaJqCAXhmt22fWKEJ/uVZs1oBkAlPeXpm8wyF+C5r jhnBr/UNVcHprncYsUP9OHWdrIU+JyT5dfTKLNvEyESGXX4mj88ulGZnW6UmbYpE ACCWu8jBZAgbuwFqHKJlLgkvXFLD79JfcH3TOQGOxxddgb1Ucn2v66A6IDlh8kRh KxhlubUqh5JALhjYQfIRzgZNCavpDklEfL24EAHBLmHDqsKcBxpDl8zOlzcD1jVy ZklXHuth -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:16 2026 by rpki-client