This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pv92QomxsbG7nz8NxfWnvjaJIaM.roa File: pv92QomxsbG7nz8NxfWnvjaJIaM.roa (raw, json) Hash identifier: H6SKHRFXxpdGwSIVYoWjh1mM00v/s2j3UlOFRE3LJYQ= Subject key identifier: A6:FF:76:42:89:B1:B1:B1:BB:9F:3F:0D:C5:F5:A7:BE:36:89:21:A3 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14AD701CAE66AB45D85BF35AB21892 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pv92QomxsbG7nz8NxfWnvjaJIaM.roa Signing time: Fri 02 Jan 2026 14:20:20 +0000 ROA not before: Fri 02 Jan 2026 14:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25973 IP address blocks: 2001:668:117::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:ad:70:1c:ae:66:ab:45:d8:5b:f3:5a:b2:18:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6ff764289b1b1b1bb9f3f0dc5f5a7be368921a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:ed:a4:04:04:98:13:06:62:30:2d:81:92: d1:10:f4:43:3d:32:e2:ad:c4:bd:c3:1b:d3:60:9a: e9:93:36:e6:22:2e:a6:62:e6:52:5e:1b:d5:5d:77: ab:3a:62:72:08:ca:85:21:eb:07:c1:ae:51:21:95: cd:b9:b9:0e:fe:6f:78:62:c4:aa:73:fb:96:0a:6e: 07:cf:ed:7f:45:aa:1a:c5:f9:95:71:ea:56:e2:d4: 94:27:07:81:3d:a7:73:3e:e1:65:ac:8f:45:12:25: 8a:1b:06:33:3d:73:60:5e:57:c2:0e:75:1a:85:cf: 03:cd:a6:fe:d4:86:20:6a:b8:5d:62:55:99:14:82: 38:76:d5:50:e3:5b:fb:d1:81:34:79:73:99:cb:37: d1:69:45:9d:03:00:3c:c3:36:2f:5f:d7:cd:9e:7e: 39:01:e8:4a:4f:8f:28:9c:de:23:bb:90:67:a0:49: 85:5a:b0:14:a7:08:22:a2:fa:ae:1c:13:50:e4:a8: 5b:1d:97:49:23:e9:f9:a3:92:14:9c:65:d1:ac:ae: a5:4b:cc:dc:c9:78:42:91:5f:b2:5c:79:95:7c:60: 7e:24:e9:28:13:bc:3c:88:f4:34:81:e2:a8:3e:ff: 22:c8:c9:01:6c:63:48:09:31:5a:67:f6:de:7b:0c: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:FF:76:42:89:B1:B1:B1:BB:9F:3F:0D:C5:F5:A7:BE:36:89:21:A3 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/pv92QomxsbG7nz8NxfWnvjaJIaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:668:117::/48 Signature Algorithm: sha256WithRSAEncryption e0:26:ee:f3:5e:ef:52:ea:6d:48:8a:3f:95:b9:b8:0a:de:f4: 83:a5:17:39:74:5f:55:4f:9d:b1:c4:3e:8e:e2:14:a0:72:45: 30:94:d4:5e:92:29:59:70:6c:1a:94:3e:75:c3:5e:37:30:b7: dd:a1:33:e7:a3:8c:15:3b:fe:14:04:df:03:0f:0b:57:e7:ea: 32:1f:e3:b5:7d:79:cd:9e:50:50:f1:2d:c0:bf:80:72:ed:ed: 20:41:1e:e8:4a:b1:6d:01:87:e2:7e:04:01:46:27:7a:25:a3: 2e:3f:0e:fb:ed:5b:06:69:08:02:51:a7:c7:d6:0a:2b:b3:f8: fc:dd:b2:ca:5f:ac:c9:44:17:c5:37:dc:30:3a:e1:66:7e:5b: ad:ba:b4:0e:2b:e6:8a:c0:27:29:fe:71:35:4c:ea:90:a7:4a: 8a:9d:6f:86:ab:ee:ed:82:80:20:5c:8a:54:77:3a:12:bc:a7: e4:58:7c:2b:01:16:34:d8:d6:af:a9:35:49:16:f6:32:d1:8e: 58:85:19:2b:2d:3d:6c:68:71:38:23:d2:d1:50:ec:10:2d:cf: 8e:0d:c5:80:b6:ec:83:bc:06:70:b7:12:de:5d:7b:d2:36:57: f8:1d:5b:2e:b8:1e:57:78:c7:ce:18:50:37:be:8a:5b:43:d4: 98:d4:d3:b4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FK1wHK5mq0XYW/NashiSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmZmNzY0Mjg5YjFiMWIxYmI5ZjNmMGRjNWY1YTdiZTM2ODkyMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8ntpAQEmBMGYjAtgZLREPRDPTLi rcS9wxvTYJrpkzbmIi6mYuZSXhvVXXerOmJyCMqFIesHwa5RIZXNubkO/m94YsSq c/uWCm4Hz+1/RaoaxfmVcepW4tSUJweBPadzPuFlrI9FEiWKGwYzPXNgXlfCDnUa hc8Dzab+1IYgarhdYlWZFII4dtVQ41v70YE0eXOZyzfRaUWdAwA8wzYvX9fNnn45 AehKT48onN4ju5BnoEmFWrAUpwgiovquHBNQ5KhbHZdJI+n5o5IUnGXRrK6lS8zc yXhCkV+yXHmVfGB+JOkoE7w8iPQ0geKoPv8iyMkBbGNICTFaZ/beewxkvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKb/dkKJsbGxu58/DcX1p742iSGjMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvcHY5MlFvbXhzYkc3bno4TnhmV252amFKSWFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGaAEX MA0GCSqGSIb3DQEBCwUAA4IBAQDgJu7zXu9S6m1Iij+VubgK3vSDpRc5dF9VT52x xD6O4hSgckUwlNRekilZcGwalD51w143MLfdoTPno4wVO/4UBN8DDwtX5+oyH+O1 fXnNnlBQ8S3Av4By7e0gQR7oSrFtAYfifgQBRid6JaMuPw777VsGaQgCUafH1gor s/j83bLKX6zJRBfFN9wwOuFmfluturQOK+aKwCcp/nE1TOqQp0qKnW+Gq+7tgoAg XIpUdzoSvKfkWHwrARY02NavqTVJFvYy0Y5YhRkrLT1saHE4I9LRUOwQLc+ODcWA tuyDvAZwtxLeXXvSNlf4HVsuuB5XeMfOGFA3vopbQ9SY1NO0 -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:39 2026 by rpki-client