This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/p6jyfQcKh_7urtZCXFFZHxQLNAU.roa File: p6jyfQcKh_7urtZCXFFZHxQLNAU.roa (raw, json) Hash identifier: 17hXAcCpVFiA3XxPVxSAF84J11pXBVVEl5UnV5vUWt0= Subject key identifier: A7:A8:F2:7D:07:0A:87:FE:EE:AE:D6:42:5C:51:59:1F:14:0B:34:05 Certificate issuer: /CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Certificate serial: 019B7D5BED180EBD83006E23393A5F839DFB Authority key identifier: 36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/p6jyfQcKh_7urtZCXFFZHxQLNAU.roa Signing time: Fri 02 Jan 2026 06:18:55 +0000 ROA not before: Fri 02 Jan 2026 06:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203252 IP address blocks: 2a02:eb00:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.mft rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ed:18:0e:bd:83:00:6e:23:39:3a:5f:83:9d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363769f8644a5a718ae62b058dd1fb62cb5a3c20 Validity Not Before: Jan 2 06:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7a8f27d070a87feeeaed6425c51591f140b3405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:6b:cf:9f:4e:4d:60:95:0f:64:09:55:ee: 9f:56:b6:39:67:b4:81:33:8f:a6:a6:a0:81:a6:86: 7d:e8:bd:8d:eb:34:7f:66:56:dc:9f:e7:b9:a7:f1: 99:97:8d:55:68:83:66:a5:d1:84:01:4b:c4:d4:6d: e1:1d:3e:e6:8f:f1:9c:2d:3a:3b:09:7c:e2:68:0f: b5:c3:69:23:ce:af:a9:e1:85:a3:ca:a1:55:57:cf: 1e:c4:ae:f3:73:82:a3:12:54:63:46:2d:59:fd:a2: 3f:69:40:a4:15:69:8b:f6:09:8a:e5:a0:c3:05:a3: a3:92:2f:f6:5e:73:f2:b7:3d:e4:58:fa:c6:4d:6a: 57:cc:5d:bf:4e:5d:54:2a:5f:9d:20:87:27:eb:32: 90:97:ba:05:dc:8b:a9:b4:08:01:a7:30:8d:01:b7: 78:4c:58:df:e8:b5:2e:de:00:13:26:61:fa:db:bb: f0:f9:2f:94:69:c3:3f:9d:d8:92:c4:cf:82:22:7d: 4b:e0:94:87:ca:22:6e:7e:14:b9:49:71:40:08:0d: 84:28:6e:31:cf:86:b5:2e:62:cb:de:5e:c9:70:57: b9:aa:64:88:e1:0e:8b:c0:ca:3e:33:93:c2:70:dd: 48:cf:28:df:b6:b6:e8:e0:ac:89:c9:72:6c:51:84: 0c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A8:F2:7D:07:0A:87:FE:EE:AE:D6:42:5C:51:59:1F:14:0B:34:05 X509v3 Authority Key Identifier: keyid:36:37:69:F8:64:4A:5A:71:8A:E6:2B:05:8D:D1:FB:62:CB:5A:3C:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Njdp-GRKWnGK5isFjdH7YstaPCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/p6jyfQcKh_7urtZCXFFZHxQLNAU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0f8fea-f00a-4415-b396-399fc9693b22/1/Njdp-GRKWnGK5isFjdH7YstaPCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:eb00:2::/48 Signature Algorithm: sha256WithRSAEncryption 0f:b7:b9:79:40:f2:dc:10:4b:c4:66:4c:84:61:e0:1e:4d:d3: e4:eb:b7:ed:13:1a:d6:3b:5f:66:25:a7:b2:e3:a7:8b:4d:dc: d9:79:69:d4:74:34:a2:b8:d6:a3:72:00:2b:13:8d:e9:b9:cc: 75:7c:89:b6:ae:25:31:8c:82:fb:6e:05:1d:59:b3:1d:47:f7: 8a:4c:16:75:ed:7d:d5:9c:f1:08:ad:6a:1d:af:f5:b5:44:70: 51:50:f6:5b:53:21:3a:da:ae:cd:18:47:db:14:5c:3e:b5:1e: 4c:2a:25:1b:12:01:af:3e:57:8e:5a:dc:32:34:c3:4c:ea:12: eb:69:57:fc:d4:74:42:fe:e1:18:65:31:64:fe:94:ad:48:5a: 82:66:d8:26:11:1d:1a:fb:a2:fb:48:84:b4:49:52:e8:ee:04: f3:b5:47:93:42:d5:8c:ad:09:75:7b:8d:2d:da:98:70:9a:23: 54:56:d0:ef:be:39:b7:fa:1d:d4:cd:79:2e:3c:59:0e:4f:b4: 91:b3:6f:dc:c0:6f:c3:25:05:a3:f4:23:ce:a3:c5:a3:52:a4: ab:96:39:75:cc:d6:09:39:7c:60:f4:20:cc:0b:ed:da:f0:1c: 13:24:e2:c6:a2:4d:16:d8:1f:c2:96:2a:ba:ae:f5:fe:02:cd: 4d:7d:f9:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9W+0YDr2DAG4jOTpfg537MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2Mzc2OWY4NjQ0YTVhNzE4YWU2MmIwNThkZDFmYjYyY2I1 YTNjMjAwHhcNMjYwMTAyMDYxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2E4ZjI3ZDA3MGE4N2ZlZWVhZWQ2NDI1YzUxNTkxZjE0MGIzNDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYtrz59OTWCVD2QJVe6fVrY5Z7SB M4+mpqCBpoZ96L2N6zR/Zlbcn+e5p/GZl41VaINmpdGEAUvE1G3hHT7mj/GcLTo7 CXziaA+1w2kjzq+p4YWjyqFVV88exK7zc4KjElRjRi1Z/aI/aUCkFWmL9gmK5aDD BaOjki/2XnPytz3kWPrGTWpXzF2/Tl1UKl+dIIcn6zKQl7oF3IuptAgBpzCNAbd4 TFjf6LUu3gATJmH627vw+S+UacM/ndiSxM+CIn1L4JSHyiJufhS5SXFACA2EKG4x z4a1LmLL3l7JcFe5qmSI4Q6LwMo+M5PCcN1Izyjftrbo4KyJyXJsUYQMrQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKeo8n0HCof+7q7WQlxRWR8UCzQFMB8GA1UdIwQY MBaAFDY3afhkSlpxiuYrBY3R+2LLWjwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYt Mzk5ZmM5NjkzYjIyLzEvcDZqeWZRY0toXzd1cnRaQ1hGRlpIeFFMTkFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZjhmZWEtZjAwYS00NDE1LWIzOTYtMzk5ZmM5NjkzYjIy LzEvTmpkcC1HUktXbkdLNWlzRmpkSDdZc3RhUENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgLrAAAC MA0GCSqGSIb3DQEBCwUAA4IBAQAPt7l5QPLcEEvEZkyEYeAeTdPk67ftExrWO19m Jaey46eLTdzZeWnUdDSiuNajcgArE43pucx1fIm2riUxjIL7bgUdWbMdR/eKTBZ1 7X3VnPEIrWodr/W1RHBRUPZbUyE62q7NGEfbFFw+tR5MKiUbEgGvPleOWtwyNMNM 6hLraVf81HRC/uEYZTFk/pStSFqCZtgmER0a+6L7SIS0SVLo7gTztUeTQtWMrQl1 e40t2phwmiNUVtDvvjm3+h3UzXkuPFkOT7SRs2/cwG/DJQWj9CPOo8WjUqSrljl1 zNYJOXxg9CDMC+3a8BwTJOLGok0W2B/Cliq6rvX+As1Nffkt -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:48 2026 by rpki-client