This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/paj8DkvX3JY5yJbmewavbftSsEU.roa File: paj8DkvX3JY5yJbmewavbftSsEU.roa (raw, json) Hash identifier: oxEzRffKUATaKxFAdchv3n3r/z8Z9CRcjER0mcVzjBs= Subject key identifier: A5:A8:FC:0E:4B:D7:DC:96:39:C8:96:E6:7B:06:AF:6D:FB:52:B0:45 Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6D2E2D115051CBBAED84B23BF476F Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/paj8DkvX3JY5yJbmewavbftSsEU.roa Signing time: Fri 02 Jan 2026 12:20:20 +0000 ROA not before: Fri 02 Jan 2026 12:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216425 IP address blocks: 2a01:e281:a500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d2:e2:d1:15:05:1c:bb:ae:d8:4b:23:bf:47:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5a8fc0e4bd7dc9639c896e67b06af6dfb52b045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b2:3b:ff:3d:43:6e:69:c5:51:d6:cf:bd:ca: 3c:67:55:52:86:4e:5f:2e:ab:84:0e:bc:ff:76:21: fa:83:a2:f5:e3:db:af:78:35:27:aa:14:5a:08:48: 02:cf:64:0f:7d:6e:32:2e:66:2c:2c:fd:27:68:af: 8e:f4:5c:ce:d8:95:1f:21:8c:f4:3c:8d:34:82:c0: 9c:e0:08:7e:f2:c9:d7:82:4c:d0:11:9a:b2:f4:6a: 90:c9:08:3e:03:1d:a5:96:87:ee:27:3d:0d:16:17: b4:6e:e9:e8:83:13:14:86:41:eb:59:18:f7:9f:95: d7:bb:ca:79:f8:17:d4:3f:61:e3:bc:08:86:d7:f2: 2f:94:02:ed:0c:ab:9a:d0:c5:79:3c:e1:9a:a3:4d: 1a:ac:5a:f2:71:fb:bb:bd:d5:71:df:b9:e2:f7:18: d4:78:b9:ec:0e:3e:11:60:aa:f6:d1:a1:72:2a:8e: 9d:62:c3:c9:89:75:12:96:16:82:c6:2f:4a:ae:76: 07:25:31:ec:8b:85:8b:42:a8:c7:2b:f1:9b:ed:52: 80:88:57:cb:cd:79:7f:a7:e1:d0:60:51:b6:c7:aa: fc:39:ac:fa:df:bc:a3:7b:8f:43:da:51:13:b9:b9: 33:01:25:26:6a:d8:1b:95:52:d2:a5:8d:8a:6d:64: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A8:FC:0E:4B:D7:DC:96:39:C8:96:E6:7B:06:AF:6D:FB:52:B0:45 X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/paj8DkvX3JY5yJbmewavbftSsEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e281:a500::/40 Signature Algorithm: sha256WithRSAEncryption c4:32:9a:a9:24:d1:28:1b:3a:13:3a:16:44:39:48:f5:74:f1: 8a:c0:e8:9a:a8:eb:fb:1b:88:dc:e0:9f:c4:cf:4a:04:a9:b6: 3a:fc:97:89:d0:7b:d9:aa:5b:93:4c:db:eb:05:5e:f5:2c:58: e4:29:03:d7:e7:c9:a4:47:03:6f:30:1d:0b:a4:2c:29:37:29: d9:c9:20:06:11:67:66:ea:18:29:51:65:bd:46:6b:2b:f5:f5: d8:d3:82:4d:0b:e0:41:93:68:d1:4a:8e:83:90:a5:b4:81:18: 73:6d:13:ce:c5:a7:08:21:fa:7f:5e:f8:84:5c:af:84:57:84: 5f:ab:54:a1:df:08:70:07:81:98:30:c3:bd:f9:71:e3:45:3f: 20:06:b7:fe:9a:ab:ca:07:ca:03:41:5e:ab:c1:5c:c9:b7:d2: 08:8e:19:9f:60:3f:3f:35:06:6a:21:56:b2:0e:6a:aa:89:1f: 8c:57:e2:2d:00:69:e9:e4:0c:39:23:b2:a2:5e:37:d7:d5:01: f9:e9:40:ee:60:16:1e:41:cc:92:f5:3e:65:1f:0c:4a:0c:2d: dc:95:72:53:00:65:55:9b:8c:6e:84:3f:7f:cb:82:ce:83:55: 4d:02:1b:5e:89:ef:df:bb:3f:ac:5c:c4:9f:67:d8:b5:b8:97: 35:a2:45:49 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+ptLi0RUFHLuu2Esjv0dvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWE4ZmMwZTRiZDdkYzk2MzljODk2ZTY3YjA2YWY2ZGZiNTJiMDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLI7/z1DbmnFUdbPvco8Z1VShk5f LquEDrz/diH6g6L149uveDUnqhRaCEgCz2QPfW4yLmYsLP0naK+O9FzO2JUfIYz0 PI00gsCc4Ah+8snXgkzQEZqy9GqQyQg+Ax2llofuJz0NFhe0bunogxMUhkHrWRj3 n5XXu8p5+BfUP2HjvAiG1/IvlALtDKua0MV5POGao00arFrycfu7vdVx37ni9xjU eLnsDj4RYKr20aFyKo6dYsPJiXUSlhaCxi9KrnYHJTHsi4WLQqjHK/Gb7VKAiFfL zXl/p+HQYFG2x6r8Oaz637yje49D2lETubkzASUmatgblVLSpY2KbWQD4wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKWo/A5L19yWOciW5nsGr237UrBFMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvcGFqOERrdlgzSlk1eUpibWV3YXZiZnRTc0VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHigaUw DQYJKoZIhvcNAQELBQADggEBAMQymqkk0SgbOhM6FkQ5SPV08YrA6Jqo6/sbiNzg n8TPSgSptjr8l4nQe9mqW5NM2+sFXvUsWOQpA9fnyaRHA28wHQukLCk3KdnJIAYR Z2bqGClRZb1Gayv19djTgk0L4EGTaNFKjoOQpbSBGHNtE87Fpwgh+n9e+IRcr4RX hF+rVKHfCHAHgZgww735ceNFPyAGt/6aq8oHygNBXqvBXMm30giOGZ9gPz81Bmoh VrIOaqqJH4xX4i0AaenkDDkjsqJeN9fVAfnpQO5gFh5BzJL1PmUfDEoMLdyVclMA ZVWbjG6EP3/Lgs6DVU0CG16J79+7P6xcxJ9n2LW4lzWiRUk= -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:12 2026 by rpki-client