This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/pcwBdWeogQWKGBKaJvlkeUygt1Y.roa File: pcwBdWeogQWKGBKaJvlkeUygt1Y.roa (raw, json) Hash identifier: FyjOSrsEYcBQx6MNH4viXYO5bDrfzFXdgEpostcNkrE= Subject key identifier: A5:CC:01:75:67:A8:81:05:8A:18:12:9A:26:F9:64:79:4C:A0:B7:56 Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Certificate serial: 019B7EA55200AC211A6EC440CCF3F16FB0AE Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/pcwBdWeogQWKGBKaJvlkeUygt1Y.roa Signing time: Fri 02 Jan 2026 12:18:42 +0000 ROA not before: Fri 02 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47157 IP address blocks: 2a10:4646:12::/48 maxlen: 48 2a10:4646:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:52:00:ac:21:1a:6e:c4:40:cc:f3:f1:6f:b0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02 Validity Not Before: Jan 2 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5cc017567a881058a18129a26f964794ca0b756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cb:94:f8:70:dc:9f:ac:99:c5:74:b4:0d:a4: e0:d8:68:59:6b:b4:59:c8:a2:41:6f:4e:5d:bd:0a: 0e:96:3e:1b:49:d8:d8:d3:88:49:bc:b9:a6:f5:16: 20:7b:20:fe:37:64:0f:82:d7:e3:87:4f:94:df:83: 2c:4b:a0:35:26:6e:74:a8:7e:56:c2:e7:9f:f9:86: e0:79:c0:5f:62:ff:78:80:1e:ff:50:09:da:fd:9c: 56:87:ad:5d:df:e4:b4:42:f7:be:da:b8:80:09:de: 33:fc:78:6e:4f:70:7a:33:cd:73:e4:5f:1e:c2:da: 79:9c:ae:6c:ba:76:25:c5:ad:ca:7a:d1:57:dd:62: 79:88:b2:4c:3f:ae:11:3a:4c:d9:82:81:5d:d6:31: 82:2d:9c:94:ad:58:09:a3:16:42:ce:a3:d5:9c:c0: 4b:8c:91:0e:96:e1:63:79:e4:4a:c5:79:cc:2b:76: e2:73:a4:67:d9:89:e5:55:43:05:b6:72:47:b8:c9: a9:7b:5f:63:13:5b:88:bc:82:b9:87:a9:21:83:8e: 39:07:7e:53:19:3e:92:32:c8:f1:63:96:04:8c:7f: 77:25:50:21:f2:c8:19:69:7a:dc:92:41:a8:aa:eb: c4:87:ee:a3:7b:2c:29:23:7b:e8:24:30:39:57:c8: 38:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CC:01:75:67:A8:81:05:8A:18:12:9A:26:F9:64:79:4C:A0:B7:56 X509v3 Authority Key Identifier: keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/pcwBdWeogQWKGBKaJvlkeUygt1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:4646:12::/47 Signature Algorithm: sha256WithRSAEncryption a1:75:9d:5e:47:27:2e:06:6a:4c:ac:9b:cd:fc:c3:13:b1:48: 4f:89:99:88:8d:94:42:97:c4:97:02:83:81:dd:fb:7c:7a:d7: 1d:27:62:c0:fc:b3:98:af:f7:44:6c:3e:63:d4:3b:1e:04:39: c5:7e:32:b9:19:cf:5f:29:43:db:8e:5b:6c:0c:a1:da:95:60: e7:84:15:32:42:55:58:a1:7c:6a:7d:59:75:0e:15:eb:86:35: c2:e9:25:66:12:4d:db:2b:92:4d:13:fb:20:87:d1:6c:f2:69: 16:dc:8e:ce:cc:63:86:db:cf:36:a9:0e:86:d4:35:25:24:3e: 12:f9:9d:e9:80:8b:79:d2:a1:84:c9:b0:05:4f:9c:d8:4c:f1: 15:8f:3a:a3:33:8b:90:5f:8c:dc:10:34:de:ad:a4:8e:a0:6f: 20:c0:c5:ab:d7:d4:ea:5c:83:e0:47:42:3b:1d:06:dd:75:13: 8e:4c:59:5f:9d:90:aa:03:c7:41:f8:f2:0d:43:26:b6:d1:1d: 84:c4:07:fe:be:2a:dc:42:41:79:7c:84:51:8f:24:4e:2b:6a: eb:0b:cd:1a:d8:aa:cf:fb:ca:e6:11:25:36:06:e3:d9:f8:15: b0:1a:d9:57:f9:64:f7:69:42:92:bc:a6:ed:c7:b1:94:84:73: 2f:24:3f:47 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pVIArCEabsRAzPPxb7CuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNmQyODE3NDkxZGQyY2QwNjc4MDY4ZTM1YTllZmM2ODY2 N2RmMDIwHhcNMjYwMTAyMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWNjMDE3NTY3YTg4MTA1OGExODEyOWEyNmY5NjQ3OTRjYTBiNzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3suU+HDcn6yZxXS0DaTg2GhZa7RZ yKJBb05dvQoOlj4bSdjY04hJvLmm9RYgeyD+N2QPgtfjh0+U34MsS6A1Jm50qH5W wuef+YbgecBfYv94gB7/UAna/ZxWh61d3+S0Qve+2riACd4z/HhuT3B6M81z5F8e wtp5nK5sunYlxa3KetFX3WJ5iLJMP64ROkzZgoFd1jGCLZyUrVgJoxZCzqPVnMBL jJEOluFjeeRKxXnMK3bic6Rn2YnlVUMFtnJHuMmpe19jE1uIvIK5h6khg445B35T GT6SMsjxY5YEjH93JVAh8sgZaXrckkGoquvEh+6jeywpI3voJDA5V8g4RQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKXMAXVnqIEFihgSmib5ZHlMoLdWMB8GA1UdIwQY MBaAFEptKBdJHdLNBngGjjWp78aGZ98CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt YWU5MjgzZTc5NjRlLzEvcGN3QmRXZW9nUVdLR0JLYUp2bGtlVXlndDFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl LzEvU20wb0Ywa2QwczBHZUFhT05hbnZ4b1puM3dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKhBGRgAS MA0GCSqGSIb3DQEBCwUAA4IBAQChdZ1eRycuBmpMrJvN/MMTsUhPiZmIjZRCl8SX AoOB3ft8etcdJ2LA/LOYr/dEbD5j1DseBDnFfjK5Gc9fKUPbjltsDKHalWDnhBUy QlVYoXxqfVl1DhXrhjXC6SVmEk3bK5JNE/sgh9Fs8mkW3I7OzGOG2882qQ6G1DUl JD4S+Z3pgIt50qGEybAFT5zYTPEVjzqjM4uQX4zcEDTeraSOoG8gwMWr19TqXIPg R0I7HQbddROOTFlfnZCqA8dB+PINQya20R2ExAf+vircQkF5fIRRjyROK2rrC80a 2KrP+8rmESU2BuPZ+BWwGtlX+WT3aUKSvKbtx7GUhHMvJD9H -----END CERTIFICATE-----Generated at Sun Jan 25 20:49:17 2026 by rpki-client