This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/paBTm9XJ_5OjOsmofXolfSOu8tI.roa File: paBTm9XJ_5OjOsmofXolfSOu8tI.roa (raw, json) Hash identifier: 0BVMqZx9bh/K7mlP8B+uwanGbjjmcCmxI2TQpqnc/3c= Subject key identifier: A5:A0:53:9B:D5:C9:FF:93:A3:3A:C9:A8:7D:7A:25:7D:23:AE:F2:D2 Certificate issuer: /CN=732944a8538355b2aec76645fd9494488ae702e7 Certificate serial: 019B77C6E3A876906B630B3EF3FFA93A9EE1 Authority key identifier: 73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/paBTm9XJ_5OjOsmofXolfSOu8tI.roa Signing time: Thu 01 Jan 2026 04:18:01 +0000 ROA not before: Thu 01 Jan 2026 04:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200559 IP address blocks: 2001:67c:2edc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.mft rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e3:a8:76:90:6b:63:0b:3e:f3:ff:a9:3a:9e:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=732944a8538355b2aec76645fd9494488ae702e7 Validity Not Before: Jan 1 04:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5a0539bd5c9ff93a33ac9a87d7a257d23aef2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:84:25:4d:23:4e:2f:7c:93:fc:d5:05:39: 04:2e:59:cf:83:f6:8a:75:f0:67:b5:13:9a:28:a1: 14:fb:07:91:6f:10:67:52:e3:5f:11:73:0b:3d:82: 70:cb:eb:d4:65:d0:1f:78:db:c3:1a:66:e8:fb:bf: fe:05:88:c8:66:69:41:6b:3b:c5:41:51:3a:50:c5: 99:99:86:2d:55:d7:9f:0c:34:ea:9a:41:0e:e8:4a: 7d:3a:c0:8d:ba:50:01:89:ab:68:5a:64:90:15:b2: 34:79:b7:ae:4b:54:aa:5f:1b:6b:a9:1e:fa:df:0a: 96:7e:ff:b5:8c:75:1b:43:02:5a:9f:ae:63:fd:fb: 62:79:a3:92:38:90:95:01:07:2d:4f:10:e6:4b:33: 4b:63:3f:e9:78:9a:22:34:9c:e7:9b:c6:57:8f:4b: 1b:1d:e1:86:ed:6b:f8:5d:b6:ec:c7:56:9f:2f:91: 25:d6:ea:12:6a:72:ad:eb:24:86:0a:5e:15:3f:87: f8:46:6a:58:db:68:49:01:a8:9e:f2:29:8c:57:3f: b0:0e:df:91:e1:a3:13:03:99:0a:e8:71:55:fa:b8: cc:17:0c:fc:c1:91:71:aa:ce:4d:09:b7:4f:22:8c: 38:a6:cb:f7:1c:44:a1:54:8f:b4:a9:9e:02:cf:93: a7:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A0:53:9B:D5:C9:FF:93:A3:3A:C9:A8:7D:7A:25:7D:23:AE:F2:D2 X509v3 Authority Key Identifier: keyid:73:29:44:A8:53:83:55:B2:AE:C7:66:45:FD:94:94:48:8A:E7:02:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cylEqFODVbKux2ZF_ZSUSIrnAuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/paBTm9XJ_5OjOsmofXolfSOu8tI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e2067c-5366-49f7-ac93-c2cf453c3e2e/1/cylEqFODVbKux2ZF_ZSUSIrnAuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2edc::/48 Signature Algorithm: sha256WithRSAEncryption a5:07:e3:31:03:c6:51:fe:90:8a:c6:2b:f6:95:94:88:bf:cc: 31:ac:6d:ed:fe:14:cf:d0:3b:42:c6:3d:a1:00:9a:16:81:2d: 6d:ed:36:73:14:7f:60:af:55:ff:04:50:84:0a:b5:85:13:8e: b9:1d:11:d9:2c:c1:aa:47:eb:85:75:96:e0:c7:86:97:94:9b: 53:24:9f:a0:99:53:69:7e:3c:da:4a:37:e9:40:d7:5c:18:03: aa:72:3b:19:43:c6:52:ce:62:d2:6c:b6:dc:a2:51:9a:fd:f6: af:07:2c:0f:4d:cd:e3:db:18:83:5e:ef:5c:74:51:02:be:60: 29:fa:2f:c8:ac:18:3f:9a:02:f1:05:3c:3d:42:37:89:97:dc: 2e:f3:56:99:30:68:6a:4a:16:2c:e0:aa:82:c2:47:33:76:e9: 8a:e1:4c:cf:43:ce:06:f0:29:c1:d1:c5:f8:06:b5:71:a3:1f: 15:b9:b9:6e:6c:97:1a:69:c7:d1:14:f4:c0:25:5f:8f:a9:c5: 95:54:5e:3c:ae:90:5a:ee:61:09:75:3e:08:69:dd:2c:9b:de: 75:49:43:64:25:ed:54:75:9c:a3:38:5c:fb:d3:f1:96:45:24: 5d:f8:fc:0d:8e:5a:62:2e:b6:3c:90:ba:05:dc:17:44:24:8c: c4:91:c5:91 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xuOodpBrYws+8/+pOp7hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMjk0NGE4NTM4MzU1YjJhZWM3NjY0NWZkOTQ5NDQ4OGFl NzAyZTcwHhcNMjYwMTAxMDQxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWEwNTM5YmQ1YzlmZjkzYTMzYWM5YTg3ZDdhMjU3ZDIzYWVmMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OWEJU0jTi98k/zVBTkELlnPg/aK dfBntROaKKEU+weRbxBnUuNfEXMLPYJwy+vUZdAfeNvDGmbo+7/+BYjIZmlBazvF QVE6UMWZmYYtVdefDDTqmkEO6Ep9OsCNulABiatoWmSQFbI0ebeuS1SqXxtrqR76 3wqWfv+1jHUbQwJan65j/ftieaOSOJCVAQctTxDmSzNLYz/peJoiNJznm8ZXj0sb HeGG7Wv4Xbbsx1afL5El1uoSanKt6ySGCl4VP4f4RmpY22hJAaie8imMVz+wDt+R 4aMTA5kK6HFV+rjMFwz8wZFxqs5NCbdPIow4psv3HEShVI+0qZ4Cz5On/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKWgU5vVyf+TozrJqH16JX0jrvLSMB8GA1UdIwQY MBaAFHMpRKhTg1WyrsdmRf2UlEiK5wLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMt YzJjZjQ1M2MzZTJlLzEvcGFCVG05WEpfNU9qT3Ntb2ZYb2xmU091OHRJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9lMjA2N2MtNTM2Ni00OWY3LWFjOTMtYzJjZjQ1M2MzZTJl LzEvY3lsRXFGT0RWYkt1eDJaRl9aU1VTSXJuQXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC7c MA0GCSqGSIb3DQEBCwUAA4IBAQClB+MxA8ZR/pCKxiv2lZSIv8wxrG3t/hTP0DtC xj2hAJoWgS1t7TZzFH9gr1X/BFCECrWFE465HRHZLMGqR+uFdZbgx4aXlJtTJJ+g mVNpfjzaSjfpQNdcGAOqcjsZQ8ZSzmLSbLbcolGa/favBywPTc3j2xiDXu9cdFEC vmAp+i/IrBg/mgLxBTw9QjeJl9wu81aZMGhqShYs4KqCwkczdumK4UzPQ84G8CnB 0cX4BrVxox8VublubJcaacfRFPTAJV+PqcWVVF48rpBa7mEJdT4Iad0sm951SUNk Je1UdZyjOFz70/GWRSRd+PwNjlpiLrY8kLoF3BdEJIzEkcWR -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:20 2026 by rpki-client