This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa File: Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa (raw, json) Hash identifier: /ND/9TFeaNgP6XF6YHep3PGuc7vk/LLfQoeSDsS92Uk= Subject key identifier: 3E:4E:9D:9A:FF:B5:87:9C:D6:21:7B:B9:3A:DC:B5:3E:9F:F7:C9:5E Certificate issuer: /CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8 Certificate serial: 019B7C12C9D2254607778FA3A373BAD9BCE3 Authority key identifier: C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa Signing time: Fri 02 Jan 2026 00:19:24 +0000 ROA not before: Fri 02 Jan 2026 00:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214404 IP address blocks: 2a0d:5480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.mft rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:c9:d2:25:46:07:77:8f:a3:a3:73:ba:d9:bc:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f3746e0c6b053147b52a4ef40c48c70a7f1cd8 Validity Not Before: Jan 2 00:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e4e9d9affb5879cd6217bb93adcb53e9ff7c95e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6c:4d:1c:5c:e4:24:79:7d:42:82:c5:8e:3f: f4:25:e5:e4:e6:18:44:a5:68:26:e3:8f:0d:e4:a0: cc:1a:90:bd:7a:c5:85:25:dd:dd:b8:3a:36:7a:af: 06:8e:68:83:a8:6d:2a:b6:1d:c1:2c:f6:2c:ac:31: 9d:04:c8:9b:55:fd:0b:44:4a:18:d4:f3:d4:f1:bb: 16:94:b3:36:21:65:fa:96:bc:a1:84:f8:39:bd:2a: 2b:6e:28:30:38:e9:0d:80:af:98:40:47:11:00:f7: f6:1f:49:40:48:7d:10:d5:15:cf:b0:41:cd:f4:ad: df:70:eb:05:9c:67:73:a0:48:92:a8:ec:27:d3:ec: ae:8b:9a:70:1f:0a:e6:03:cc:e5:bd:49:08:11:d6: cc:0a:d3:e7:b1:09:58:0e:a7:8a:fc:c6:21:bb:2e: be:b9:b0:5c:1a:4b:2d:93:da:37:2a:4f:5c:24:83: 2f:1d:df:e8:d2:84:e8:97:26:cc:a7:ca:6d:7e:29: 09:ec:8e:70:ee:b8:df:c1:c5:79:a4:a1:86:af:15: 85:a9:54:0f:7d:10:eb:59:f5:bd:3a:52:3b:13:44: 89:f5:a5:b5:1b:7a:c7:45:ca:6b:06:cc:02:eb:7e: 0e:31:21:90:0a:2a:7c:fe:48:cc:f0:4b:5d:fc:54: ba:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:4E:9D:9A:FF:B5:87:9C:D6:21:7B:B9:3A:DC:B5:3E:9F:F7:C9:5E X509v3 Authority Key Identifier: keyid:C8:F3:74:6E:0C:6B:05:31:47:B5:2A:4E:F4:0C:48:C7:0A:7F:1C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPN0bgxrBTFHtSpO9AxIxwp_HNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/Pk6dmv-1h5zWIXu5Oty1Pp_3yV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/678a96-695c-4187-9093-10c546d79ba5/1/yPN0bgxrBTFHtSpO9AxIxwp_HNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:5480::/29 Signature Algorithm: sha256WithRSAEncryption 14:19:fa:db:93:50:c2:bd:36:d6:b0:0b:c4:6f:b3:83:54:a9: c1:e8:c8:5b:72:36:c7:f5:e3:82:a0:b0:1f:ad:c3:f9:39:b6: d5:63:16:eb:8b:b8:c8:8e:f8:9f:01:11:82:94:e7:0d:6c:97: d9:46:2c:b0:b5:c4:26:f0:d1:9e:83:24:03:38:11:14:75:77: 33:75:7b:4e:51:5f:8b:ae:7b:b1:71:57:d2:f1:96:4a:ff:dd: 2b:af:fa:00:30:68:0c:48:7e:eb:d9:0c:14:be:ec:62:22:95: 7a:18:3f:93:9b:19:c3:c9:cf:a9:25:f8:46:61:5d:17:d3:ea: 65:dd:02:37:4c:5e:0b:03:f4:44:3e:85:04:4b:68:f8:48:a9: aa:f6:9d:1a:9a:05:ab:0c:38:55:0a:99:c8:ee:93:c1:aa:4a: 20:47:8f:28:b8:41:38:cb:cb:55:b6:22:3a:6b:93:e2:7d:ab: 52:3d:d2:f1:36:cb:80:31:86:fb:4c:81:bc:05:75:9a:bb:a1: 54:39:0c:00:df:93:b3:77:52:7b:00:b0:29:25:74:d0:99:a6: 73:3b:07:61:ea:4e:3b:f4:2d:cb:e5:5d:1b:05:55:10:25:3e: ae:64:4b:29:46:bf:0b:d6:94:5c:51:eb:62:a9:8e:b8:f4:a3: fc:40:1b:6d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8EsnSJUYHd4+jo3O62bzjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjM3NDZlMGM2YjA1MzE0N2I1MmE0ZWY0MGM0OGM3MGE3 ZjFjZDgwHhcNMjYwMTAyMDAxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTRlOWQ5YWZmYjU4NzljZDYyMTdiYjkzYWRjYjUzZTlmZjdjOTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmxNHFzkJHl9QoLFjj/0JeXk5hhE pWgm448N5KDMGpC9esWFJd3duDo2eq8GjmiDqG0qth3BLPYsrDGdBMibVf0LREoY 1PPU8bsWlLM2IWX6lryhhPg5vSorbigwOOkNgK+YQEcRAPf2H0lASH0Q1RXPsEHN 9K3fcOsFnGdzoEiSqOwn0+yui5pwHwrmA8zlvUkIEdbMCtPnsQlYDqeK/MYhuy6+ ubBcGkstk9o3Kk9cJIMvHd/o0oTolybMp8ptfikJ7I5w7rjfwcV5pKGGrxWFqVQP fRDrWfW9OlI7E0SJ9aW1G3rHRcprBswC634OMSGQCip8/kjM8Etd/FS6kwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFD5OnZr/tYec1iF7uTrctT6f98leMB8GA1UdIwQY MBaAFMjzdG4MawUxR7UqTvQMSMcKfxzYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMt MTBjNTQ2ZDc5YmE1LzEvUGs2ZG12LTFoNXpXSVh1NU90eTFQcF8zeVY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi82NzhhOTYtNjk1Yy00MTg3LTkwOTMtMTBjNTQ2ZDc5YmE1 LzEveVBOMGJneHJCVEZIdFNwTzlBeEl4d3BfSE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg1UgDAN BgkqhkiG9w0BAQsFAAOCAQEAFBn625NQwr021rALxG+zg1SpwejIW3I2x/XjgqCw H63D+Tm21WMW64u4yI74nwERgpTnDWyX2UYssLXEJvDRnoMkAzgRFHV3M3V7TlFf i657sXFX0vGWSv/dK6/6ADBoDEh+69kMFL7sYiKVehg/k5sZw8nPqSX4RmFdF9Pq Zd0CN0xeCwP0RD6FBEto+EipqvadGpoFqww4VQqZyO6TwapKIEePKLhBOMvLVbYi OmuT4n2rUj3S8TbLgDGG+0yBvAV1mruhVDkMAN+Ts3dSewCwKSV00JmmczsHYepO O/Qty+VdGwVVECU+rmRLKUa/C9aUXFHrYqmOuPSj/EAbbQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:07:09 2026 by rpki-client