This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/_PZxNVK3ihOQkmmWbE5y4TLIF2A.roa File: _PZxNVK3ihOQkmmWbE5y4TLIF2A.roa (raw, json) Hash identifier: /xcnI68M7th+zMKJZ1ErNPWPaooK8PDshecxHkOyACQ= Subject key identifier: FC:F6:71:35:52:B7:8A:13:90:92:69:96:6C:4E:72:E1:32:C8:17:60 Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Certificate serial: 019B78355566C07E3036D91DF8C0B860A396 Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/_PZxNVK3ihOQkmmWbE5y4TLIF2A.roa Signing time: Thu 01 Jan 2026 06:18:39 +0000 ROA not before: Thu 01 Jan 2026 06:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215828 IP address blocks: 2a13:ccc5::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:55:66:c0:7e:30:36:d9:1d:f8:c0:b8:60:a3:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d Validity Not Before: Jan 1 06:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcf6713552b78a13909269966c4e72e132c81760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:5d:dd:78:ec:dd:1a:80:6d:ae:a1:ce:c2: 07:25:ea:84:1d:38:29:70:a8:1b:a7:09:33:30:cf: ae:b4:8e:eb:90:01:68:fe:34:6b:22:0c:81:71:fb: 5d:55:ec:1c:38:77:39:12:7c:5f:01:f1:d7:d8:6b: b0:76:a4:9f:bc:9b:cc:28:8e:85:31:3d:b3:e0:a7: 65:27:94:ee:50:fe:ce:ed:0e:69:70:55:6f:81:e7: ef:ac:46:49:6f:f3:15:27:d7:f8:48:a1:9e:9e:e4: 4b:da:6d:50:de:16:76:cc:46:96:8d:56:ff:91:95: d8:46:ed:bc:7d:2b:16:e1:b5:9a:b7:10:0a:9e:40: 31:8f:b2:ad:26:f0:fe:2f:93:95:6f:f3:bb:3b:01: f1:a8:b7:2c:5b:ed:8c:9e:9a:83:7d:1d:33:a4:98: ca:37:14:92:03:64:8a:ef:93:be:3e:eb:c3:20:2a: f0:08:55:37:16:be:e4:70:a1:32:32:5d:a8:f5:70: 4e:b2:93:92:81:85:25:62:3a:90:bc:db:ca:eb:82: 1f:2d:bf:cb:f5:bc:76:cc:5c:03:46:57:39:f2:1c: 56:10:36:06:af:a5:50:80:23:5b:cf:4b:7c:07:85: c2:62:e8:fb:20:c3:51:eb:a7:72:e7:22:a0:73:cb: 63:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F6:71:35:52:B7:8A:13:90:92:69:96:6C:4E:72:E1:32:C8:17:60 X509v3 Authority Key Identifier: keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/_PZxNVK3ihOQkmmWbE5y4TLIF2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:ccc5::/32 Signature Algorithm: sha256WithRSAEncryption 52:90:27:12:3c:b2:75:de:eb:78:25:7f:17:4e:9f:9d:f9:96: fa:20:dc:02:b8:f4:e2:b6:61:87:c8:c7:11:d8:27:78:64:b3: 1b:dc:91:5f:d8:a6:5b:ea:d7:c1:01:1e:44:03:df:33:db:91: 6a:88:04:6c:88:e5:0b:c5:6d:90:a4:1e:0d:27:25:12:74:cc: 37:de:fa:f8:e4:a8:c9:f5:f9:d8:1f:70:80:2f:98:b8:3a:e4: c5:04:bf:eb:5d:c8:15:ad:41:bc:69:c3:5c:7d:6b:a3:ff:ab: 69:fa:1a:39:e7:3e:b4:7e:b1:5a:25:2a:6e:0c:40:5a:c8:f2: dc:49:d6:39:87:ea:c4:e6:b7:5d:a2:ba:59:3a:c5:9a:15:22: 36:0d:57:de:ef:40:0f:97:50:60:6e:6f:80:cd:33:f3:c4:f2: bf:2b:9b:b5:6b:73:df:5c:13:ae:03:70:b1:21:b4:62:73:03: 7b:77:e8:72:3f:8c:db:38:08:55:1f:d0:88:e6:01:90:09:9c: 55:b0:a1:2e:51:9c:b2:4e:3c:59:67:02:e2:f9:7c:79:5d:bc: 02:3a:cb:65:8d:60:74:1e:8e:a3:53:b8:07:89:5a:f8:10:35: 95:a1:21:02:7a:44:97:75:c2:0b:d6:51:a4:e8:46:b8:b8:10: 02:93:0a:9e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt4NVVmwH4wNtkd+MC4YKOWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2 ZjVlM2QwHhcNMjYwMTAxMDYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2Y2NzEzNTUyYjc4YTEzOTA5MjY5OTY2YzRlNzJlMTMyYzgxNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu55d3Xjs3RqAba6hzsIHJeqEHTgp cKgbpwkzMM+utI7rkAFo/jRrIgyBcftdVewcOHc5EnxfAfHX2GuwdqSfvJvMKI6F MT2z4KdlJ5TuUP7O7Q5pcFVvgefvrEZJb/MVJ9f4SKGenuRL2m1Q3hZ2zEaWjVb/ kZXYRu28fSsW4bWatxAKnkAxj7KtJvD+L5OVb/O7OwHxqLcsW+2MnpqDfR0zpJjK NxSSA2SK75O+PuvDICrwCFU3Fr7kcKEyMl2o9XBOspOSgYUlYjqQvNvK64IfLb/L 9bx2zFwDRlc58hxWEDYGr6VQgCNbz0t8B4XCYuj7IMNR66dy5yKgc8tjfQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPz2cTVSt4oTkJJplmxOcuEyyBdgMB8GA1UdIwQY MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt YzUxOTUxNjJlM2JlLzEvX1BaeE5WSzNpaE9Ra21tV2JFNXk0VExJRjJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPMxTAN BgkqhkiG9w0BAQsFAAOCAQEAUpAnEjyydd7reCV/F06fnfmW+iDcArj04rZhh8jH EdgneGSzG9yRX9imW+rXwQEeRAPfM9uRaogEbIjlC8VtkKQeDSclEnTMN976+OSo yfX52B9wgC+YuDrkxQS/613IFa1BvGnDXH1ro/+rafoaOec+tH6xWiUqbgxAWsjy 3EnWOYfqxOa3XaK6WTrFmhUiNg1X3u9AD5dQYG5vgM0z88TyvyubtWtz31wTrgNw sSG0YnMDe3focj+M2zgIVR/QiOYBkAmcVbChLlGcsk48WWcC4vl8eV28AjrLZY1g dB6Oo1O4B4la+BA1laEhAnpEl3XCC9ZRpOhGuLgQApMKng== -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:47 2026 by rpki-client