This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa File: pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa (raw, json) Hash identifier: PQ1PKNsZxV3X6qzBGN7N3OlK5qglG0fuEcuBkRu5Wrg= Subject key identifier: A4:CB:65:A8:05:59:AA:F1:CE:F0:48:1F:71:27:93:AB:2E:63:18:DF Certificate issuer: /CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Certificate serial: 019B7F82E5FD71CC2CF4CD07B4CF59C94495 Authority key identifier: 34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa Signing time: Fri 02 Jan 2026 16:20:43 +0000 ROA not before: Fri 02 Jan 2026 16:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50389 IP address blocks: 2a01:b960:2303::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.mft rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:e5:fd:71:cc:2c:f4:cd:07:b4:cf:59:c9:44:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34f1726ea4bd6d3c8091ae0c8ad1a03e91e359a2 Validity Not Before: Jan 2 16:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4cb65a80559aaf1cef0481f712793ab2e6318df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:86:e0:d0:5c:6f:dd:90:24:af:4f:6b:05:88: 4c:eb:f4:a3:9e:43:b9:41:f4:61:bb:49:df:57:72: 6e:2f:b1:f3:8a:8e:5b:be:ca:15:9f:a3:74:19:9f: a1:6f:b3:9b:01:47:7f:d4:bf:d9:04:6c:4f:fb:42: c5:c8:aa:f3:2c:16:b6:4b:ee:a6:6a:27:9f:a1:44: 29:44:26:44:f9:13:b1:99:de:a7:4b:10:6d:25:c5: 82:4c:0b:4c:6d:83:27:fb:f2:2a:98:3d:cf:92:64: 92:ff:22:cb:08:0a:72:1f:f5:09:15:6c:d4:99:6b: 92:56:62:0e:a4:95:12:88:f7:fa:3a:d6:ba:3b:34: f7:28:0a:70:7a:73:5a:c2:9d:3f:d7:d7:51:ab:0c: b2:c5:6e:5f:48:02:52:37:56:73:16:9c:c7:a7:c3: e4:72:0a:d9:d8:b2:4b:9c:f8:b4:b5:f0:f1:5b:eb: f6:a3:7d:c4:7d:bb:c8:5a:4d:d7:c7:99:1c:94:26: 4d:5b:c5:c8:00:79:75:ff:37:d4:b3:88:50:f8:03: 6b:98:4e:e7:16:34:08:f5:53:9a:09:af:65:4a:8d: 9a:f5:74:68:3e:9f:86:03:36:2f:99:70:48:76:ba: 2c:e4:d9:d5:c2:e5:87:ee:6e:ca:44:a6:5a:15:eb: 2b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CB:65:A8:05:59:AA:F1:CE:F0:48:1F:71:27:93:AB:2E:63:18:DF X509v3 Authority Key Identifier: keyid:34:F1:72:6E:A4:BD:6D:3C:80:91:AE:0C:8A:D1:A0:3E:91:E3:59:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPFybqS9bTyAka4MitGgPpHjWaI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/pMtlqAVZqvHO8EgfcSeTqy5jGN8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/ef8e84-9161-402c-81ad-e8e8d2fe70fe/1/NPFybqS9bTyAka4MitGgPpHjWaI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:b960:2303::/48 Signature Algorithm: sha256WithRSAEncryption 66:98:53:76:12:d4:76:f6:80:6a:ee:96:f4:cd:d6:ed:6e:0b: 56:b1:34:d3:da:e4:33:9c:b9:d9:72:2f:f0:82:4b:f7:cf:cc: 83:62:fe:1e:54:91:dd:90:24:2b:cb:5b:53:9c:99:8e:67:6d: df:d1:e7:39:09:4a:4d:d3:4c:29:6f:f2:2d:b4:3d:1d:5d:db: 24:80:49:19:5b:3a:cf:9b:96:62:d2:ad:fa:df:ee:6e:d9:10: 1b:b1:15:fc:5e:30:24:d7:e2:7e:fb:79:ae:77:2c:ce:b7:63: 63:61:e6:4b:79:2e:cb:7e:a8:fc:87:5e:3d:a8:26:38:7b:dd: af:56:c9:c4:c5:a9:a7:06:ec:73:92:61:84:ec:e4:7d:06:3f: 48:ec:76:d4:a2:e2:62:a0:fe:73:d0:07:fa:a9:94:57:11:04: 2d:93:b5:7a:45:99:5e:b0:bf:ec:eb:1b:15:a6:29:2d:38:5f: 85:b3:bc:f2:61:9a:83:74:48:9f:28:fc:a6:bd:cc:61:09:c3: 71:2e:e2:ba:63:57:07:2c:5b:42:0a:fb:62:ad:87:db:ca:4a: 31:b4:dc:3a:81:7b:32:58:45:2b:32:a0:b7:56:ec:95:21:aa: 8a:57:5e:a3:7f:20:7e:15:7e:35:52:c8:c7:22:36:8c:b3:a2: 1a:7f:11:03 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/guX9ccws9M0HtM9ZyUSVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZjE3MjZlYTRiZDZkM2M4MDkxYWUwYzhhZDFhMDNlOTFl MzU5YTIwHhcNMjYwMTAyMTYyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGNiNjVhODA1NTlhYWYxY2VmMDQ4MWY3MTI3OTNhYjJlNjMxOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYbg0Fxv3ZAkr09rBYhM6/SjnkO5 QfRhu0nfV3JuL7Hzio5bvsoVn6N0GZ+hb7ObAUd/1L/ZBGxP+0LFyKrzLBa2S+6m aiefoUQpRCZE+ROxmd6nSxBtJcWCTAtMbYMn+/IqmD3PkmSS/yLLCApyH/UJFWzU mWuSVmIOpJUSiPf6Ota6OzT3KApwenNawp0/19dRqwyyxW5fSAJSN1ZzFpzHp8Pk cgrZ2LJLnPi0tfDxW+v2o33EfbvIWk3Xx5kclCZNW8XIAHl1/zfUs4hQ+ANrmE7n FjQI9VOaCa9lSo2a9XRoPp+GAzYvmXBIdros5NnVwuWH7m7KRKZaFesrawIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKTLZagFWarxzvBIH3Enk6suYxjfMB8GA1UdIwQY MBaAFDTxcm6kvW08gJGuDIrRoD6R41miMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQt ZThlOGQyZmU3MGZlLzEvcE10bHFBVlpxdkhPOEVnZmNTZVRxeTVqR044LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9lZjhlODQtOTE2MS00MDJjLTgxYWQtZThlOGQyZmU3MGZl LzEvTlBGeWJxUzliVHlBa2E0TWl0R2dQcEhqV2FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgG5YCMD MA0GCSqGSIb3DQEBCwUAA4IBAQBmmFN2EtR29oBq7pb0zdbtbgtWsTTT2uQznLnZ ci/wgkv3z8yDYv4eVJHdkCQry1tTnJmOZ23f0ec5CUpN00wpb/IttD0dXdskgEkZ WzrPm5Zi0q363+5u2RAbsRX8XjAk1+J++3mudyzOt2NjYeZLeS7Lfqj8h149qCY4 e92vVsnExamnBuxzkmGE7OR9Bj9I7HbUouJioP5z0Af6qZRXEQQtk7V6RZlesL/s 6xsVpiktOF+Fs7zyYZqDdEifKPymvcxhCcNxLuK6Y1cHLFtCCvtirYfbykoxtNw6 gXsyWEUrMqC3VuyVIaqKV16jfyB+FX41UsjHIjaMs6IafxED -----END CERTIFICATE-----Generated at Mon Jan 26 03:15:01 2026 by rpki-client