This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/PNkKw2xJH8Do6hBPz76HNUSe_0c.roa File: PNkKw2xJH8Do6hBPz76HNUSe_0c.roa (raw, json) Hash identifier: ZRWM9d4kjtShN3wXm5ejMvvbYNTiLa0407wdRrmMin4= Subject key identifier: 3C:D9:0A:C3:6C:49:1F:C0:E8:EA:10:4F:CF:BE:87:35:44:9E:FF:47 Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce Certificate serial: 019B7CEDEB1A106F727E3081E781D48D0F19 Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/PNkKw2xJH8Do6hBPz76HNUSe_0c.roa Signing time: Fri 02 Jan 2026 04:18:45 +0000 ROA not before: Fri 02 Jan 2026 04:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60326 IP address blocks: 2a0c:e642::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.mft rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:eb:1a:10:6f:72:7e:30:81:e7:81:d4:8d:0f:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce Validity Not Before: Jan 2 04:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cd90ac36c491fc0e8ea104fcfbe8735449eff47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:bb:ee:1e:f5:d7:fb:c8:61:ea:7b:ec:a2: a8:85:20:88:c4:cd:d3:bb:6b:6c:54:e1:b3:13:43: 62:50:08:35:15:7c:08:be:27:f4:58:41:a6:9c:f5: 33:82:8a:78:ea:24:ae:f4:39:69:4f:a7:26:43:62: 17:74:bd:5d:57:b7:c0:63:11:3a:73:07:0b:af:af: 3d:0b:ad:b0:84:1b:d6:f0:3d:9a:73:1c:f0:be:5b: 14:ad:ec:00:33:fa:ea:cc:d7:27:cb:ef:58:df:78: e8:aa:62:71:45:ed:bd:a6:f1:14:7e:a2:33:38:39: 74:08:a4:04:ac:de:58:7d:ab:e9:21:6d:70:ce:7f: ff:7e:cf:3e:1f:dc:61:f2:e5:0f:11:46:1a:ab:cf: 3f:b9:37:20:57:2c:dd:ba:4d:22:b0:33:94:99:0f: 7b:0f:a7:0d:00:46:3b:19:e8:78:ef:9f:8d:e0:d8: 23:e3:7c:73:91:bd:68:d4:48:7f:d2:80:53:d1:c3: 14:78:78:ee:0d:3c:f1:8b:9c:3a:91:11:5b:84:38: ef:05:0a:36:60:5d:f5:6d:58:bd:e3:b7:6a:49:0a: a1:8a:5f:ae:60:e8:70:35:f2:c4:1e:38:10:91:e2: d3:14:b0:83:18:06:bc:74:a1:0c:31:c9:34:f5:61: ba:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D9:0A:C3:6C:49:1F:C0:E8:EA:10:4F:CF:BE:87:35:44:9E:FF:47 X509v3 Authority Key Identifier: keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/PNkKw2xJH8Do6hBPz76HNUSe_0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:e642::/32 Signature Algorithm: sha256WithRSAEncryption b4:90:4b:8d:e2:73:fc:3b:a3:10:3c:30:9d:9f:d6:0e:58:08: 44:d5:e2:8d:b8:4b:16:5f:40:bb:73:15:b3:fd:ce:45:21:1d: b5:b1:2d:f0:9b:d3:f7:7f:eb:b9:95:3e:de:81:6c:93:71:f1: 8d:ed:04:06:cb:36:93:5d:43:f3:51:4e:3b:99:eb:76:b0:e0: e8:a1:0c:c1:2c:36:c2:90:b1:21:dc:11:7f:d1:58:df:2f:cb: 82:32:29:51:e0:e0:6f:f2:ad:92:c8:56:22:e5:dd:c1:be:9d: b8:54:24:2f:18:d1:02:2e:12:38:79:12:83:26:a9:16:33:bb: 79:6e:96:2f:2a:6d:bc:76:06:68:fa:6b:1a:66:34:f1:16:53: ce:d0:c6:5a:b5:ce:40:cf:86:ca:c8:56:10:06:5c:4a:b0:c4: 82:14:10:02:37:f0:b5:68:83:bd:5c:55:48:be:8d:41:0f:1d: c0:be:c5:5b:28:52:be:64:03:44:b4:26:42:2e:39:28:14:c4: 98:56:2b:3a:c4:e3:b9:b6:29:be:71:29:a0:d0:00:6f:47:51: 05:39:2a:10:92:bc:9f:a0:0e:1b:67:61:b9:e1:dc:12:2d:db: f5:c3:4b:4e:27:df:67:29:31:e9:34:7b:95:d9:77:e3:37:54: 4c:8d:99:2d -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87esaEG9yfjCB54HUjQ8ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi Yjg2Y2UwHhcNMjYwMTAyMDQxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2Q5MGFjMzZjNDkxZmMwZThlYTEwNGZjZmJlODczNTQ0OWVmZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy277h711/vIYep77KKohSCIxM3T u2tsVOGzE0NiUAg1FXwIvif0WEGmnPUzgop46iSu9DlpT6cmQ2IXdL1dV7fAYxE6 cwcLr689C62whBvW8D2acxzwvlsUrewAM/rqzNcny+9Y33joqmJxRe29pvEUfqIz ODl0CKQErN5YfavpIW1wzn//fs8+H9xh8uUPEUYaq88/uTcgVyzduk0isDOUmQ97 D6cNAEY7Geh475+N4Ngj43xzkb1o1Eh/0oBT0cMUeHjuDTzxi5w6kRFbhDjvBQo2 YF31bVi947dqSQqhil+uYOhwNfLEHjgQkeLTFLCDGAa8dKEMMck09WG6gwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDzZCsNsSR/A6OoQT8++hzVEnv9HMB8GA1UdIwQY MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt ZjljYjBhN2IyMDZjLzEvUE5rS3cyeEpIOERvNmhCUHo3NkhOVVNlXzBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgzmQjAN BgkqhkiG9w0BAQsFAAOCAQEAtJBLjeJz/DujEDwwnZ/WDlgIRNXijbhLFl9Au3MV s/3ORSEdtbEt8JvT93/ruZU+3oFsk3Hxje0EBss2k11D81FOO5nrdrDg6KEMwSw2 wpCxIdwRf9FY3y/LgjIpUeDgb/KtkshWIuXdwb6duFQkLxjRAi4SOHkSgyapFjO7 eW6WLyptvHYGaPprGmY08RZTztDGWrXOQM+GyshWEAZcSrDEghQQAjfwtWiDvVxV SL6NQQ8dwL7FWyhSvmQDRLQmQi45KBTEmFYrOsTjubYpvnEpoNAAb0dRBTkqEJK8 n6AOG2dhueHcEi3b9cNLTiffZykx6TR7ldl34zdUTI2ZLQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:43 2026 by rpki-client