This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa File: PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa (raw, json) Hash identifier: DHoLARGZOB2XURSgRaiKkNOzlOwLsIfl2+CfGPfPwfU= Subject key identifier: 3C:05:FA:36:3D:2F:2D:6F:2A:04:BA:A5:7E:A0:0E:C8:44:EC:0A:0F Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be Certificate serial: 019B7911070275772B456E7F6F8DCABC0C52 Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa Signing time: Thu 01 Jan 2026 10:18:37 +0000 ROA not before: Thu 01 Jan 2026 10:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204660 IP address blocks: 2001:67c:a18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:07:02:75:77:2b:45:6e:7f:6f:8d:ca:bc:0c:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be Validity Not Before: Jan 1 10:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c05fa363d2f2d6f2a04baa57ea00ec844ec0a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:27:cf:c5:21:84:9c:7b:1a:5f:fb:8e:dd:a4: c0:49:35:45:8b:1f:de:8a:04:b6:b4:5f:31:fc:c1: de:ea:e0:d9:17:97:25:28:1b:9a:93:f4:4e:5f:b7: c2:b1:bf:6a:8a:39:20:d4:61:d2:8f:39:d4:15:d2: 94:6e:bf:8d:f5:7a:52:2f:da:2f:13:96:e3:b5:a5: 19:8d:76:2d:77:27:af:6f:01:6a:c8:73:2f:8e:f9: 70:09:6e:c1:eb:a3:42:64:02:e2:72:85:c0:31:aa: d7:31:a5:90:5f:48:f8:e3:70:a0:e9:94:ba:4d:b4: 05:44:9a:d2:85:94:6e:c1:0a:b8:3d:34:0f:39:19: f4:e7:c0:26:25:15:45:e7:cd:01:b4:38:d6:f2:c2: d7:f1:c7:bd:25:57:2e:d1:13:2a:b1:cb:e2:af:0b: 67:cc:fc:2c:a5:17:eb:fc:bc:0f:66:ae:98:79:70: 0b:a6:02:c2:7f:b2:8e:4d:2c:58:a3:7f:5c:fb:ac: 51:3a:b4:b6:c8:c3:d1:a8:b0:0e:1f:78:5b:06:56: 71:65:1d:dc:e8:06:22:61:9d:8e:f9:3e:7e:7d:c5: 1f:78:bc:47:a7:bd:38:90:9f:d1:60:c3:8a:f4:3d: 4b:0e:9e:cc:bc:8f:61:d6:7c:9a:5f:b6:c6:a7:36: d1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:05:FA:36:3D:2F:2D:6F:2A:04:BA:A5:7E:A0:0E:C8:44:EC:0A:0F X509v3 Authority Key Identifier: keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/PAX6Nj0vLW8qBLqlfqAOyETsCg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:a18::/48 Signature Algorithm: sha256WithRSAEncryption 15:40:6b:93:fd:da:80:84:68:6c:92:e5:7b:38:a1:1a:53:20: 2f:78:eb:e2:41:41:4f:2b:cd:01:7d:70:b8:b1:42:9a:7a:27: 39:9b:df:c1:2d:43:26:0b:d3:db:0c:b7:fb:88:a9:83:98:7f: 7b:35:5a:51:35:fc:4c:71:d3:e4:d9:63:87:ae:38:05:25:cc: 5b:7c:f0:a3:b8:cb:20:60:5b:12:00:c5:71:47:a6:bc:81:37: 44:3e:f2:37:d5:94:53:49:4a:5f:51:69:eb:40:cb:60:af:e8: e4:e4:46:b4:c1:32:26:36:3e:65:0a:12:81:60:92:e3:12:2b: a3:4e:5d:49:81:30:8f:94:61:14:68:31:0f:47:37:04:09:5e: 45:3d:c6:e6:70:2f:c4:5b:bb:e8:54:0a:6a:3e:cd:1f:8f:3d: 16:f2:2f:c7:c2:d2:ef:65:bc:ae:e0:4b:27:4e:b9:3e:f8:ff: 5c:18:fb:17:49:f2:af:98:5d:2b:71:da:5c:1e:30:3d:a9:9a: 44:ca:8c:52:3d:11:8c:63:a6:d3:10:63:5b:8e:7e:cd:9e:66: e0:18:39:c0:2a:79:3e:12:69:ef:8a:ad:76:56:ae:9a:3e:af: 2e:06:6e:48:df:a3:a1:a3:4e:02:98:8d:23:dc:31:e9:2d:e6: 11:77:04:44 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EQcCdXcrRW5/b43KvAxSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGU0NmQ2M2E3MTgzZjcwZGE0OTJmMDJiODA5OGMyYmZm YzI4YmUwHhcNMjYwMTAxMTAxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzA1ZmEzNjNkMmYyZDZmMmEwNGJhYTU3ZWEwMGVjODQ0ZWMwYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyfPxSGEnHsaX/uO3aTASTVFix/e igS2tF8x/MHe6uDZF5clKBuak/ROX7fCsb9qijkg1GHSjznUFdKUbr+N9XpSL9ov E5bjtaUZjXYtdyevbwFqyHMvjvlwCW7B66NCZALicoXAMarXMaWQX0j443Cg6ZS6 TbQFRJrShZRuwQq4PTQPORn058AmJRVF580BtDjW8sLX8ce9JVcu0RMqscvirwtn zPwspRfr/LwPZq6YeXALpgLCf7KOTSxYo39c+6xROrS2yMPRqLAOH3hbBlZxZR3c 6AYiYZ2O+T5+fcUfeLxHp704kJ/RYMOK9D1LDp7MvI9h1nyaX7bGpzbRSwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDwF+jY9Ly1vKgS6pX6gDshE7AoPMB8GA1UdIwQY MBaAFKYORtY6cYP3DaSS8CuAmMK//Ci+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMt M2I3ZWYyNWNmZTgzLzEvUEFYNk5qMHZMVzhxQkxxbGZxQU95RVRzQ2c4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMtM2I3ZWYyNWNmZTgz LzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAoY MA0GCSqGSIb3DQEBCwUAA4IBAQAVQGuT/dqAhGhskuV7OKEaUyAveOviQUFPK80B fXC4sUKaeic5m9/BLUMmC9PbDLf7iKmDmH97NVpRNfxMcdPk2WOHrjgFJcxbfPCj uMsgYFsSAMVxR6a8gTdEPvI31ZRTSUpfUWnrQMtgr+jk5Ea0wTImNj5lChKBYJLj EiujTl1JgTCPlGEUaDEPRzcECV5FPcbmcC/EW7voVApqPs0fjz0W8i/HwtLvZbyu 4EsnTrk++P9cGPsXSfKvmF0rcdpcHjA9qZpEyoxSPRGMY6bTEGNbjn7NnmbgGDnA Knk+Emnviq12Vq6aPq8uBm5I36Oho04CmI0j3DHpLeYRdwRE -----END CERTIFICATE-----Generated at Mon Jan 26 07:09:27 2026 by rpki-client