This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/PaB6Iu-OaufEYMBZiWD0zvYNa9Y.roa File: PaB6Iu-OaufEYMBZiWD0zvYNa9Y.roa (raw, json) Hash identifier: TjF06m/Mp/7aJVVxV+8vfqSIb8qTmO7jQ4Gg8K+F0O8= Subject key identifier: 3D:A0:7A:22:EF:8E:6A:E7:C4:60:C0:59:89:60:F4:CE:F6:0D:6B:D6 Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7 Certificate serial: 019B7CED0A6AA16CB1936F6B5807771FA5DA Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/PaB6Iu-OaufEYMBZiWD0zvYNa9Y.roa Signing time: Fri 02 Jan 2026 04:17:48 +0000 ROA not before: Fri 02 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48025 IP address blocks: 2001:678:c98::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:0a:6a:a1:6c:b1:93:6f:6b:58:07:77:1f:a5:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7 Validity Not Before: Jan 2 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3da07a22ef8e6ae7c460c0598960f4cef60d6bd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:04:6a:bd:32:84:7b:8a:66:1f:1b:c1:08:0e: dd:ad:24:f3:5c:fa:87:e4:44:9d:2c:d3:48:7c:a3: cc:c1:ec:b6:1e:1b:1b:ae:b5:6d:56:9c:8d:7f:0c: 91:a2:70:4e:b3:70:bb:a3:dc:c3:7f:70:65:f2:26: 9c:37:f3:c5:c3:4e:7d:2e:c7:ec:52:c3:1e:e3:81: 4a:71:74:e0:5e:77:da:b3:b9:f4:9a:ed:f7:ac:b8: 45:18:25:c9:de:74:25:5b:c5:dd:81:58:2c:da:4d: 12:b8:22:44:5b:12:2f:22:2d:fd:0d:2a:8d:29:e6: 3f:ce:4e:87:59:72:5b:c3:85:4a:a3:4f:0f:2c:49: e1:e0:54:74:91:ea:f8:07:b2:35:1e:e4:bc:2f:5a: 23:fc:88:d6:4c:41:0f:3e:99:4f:de:83:6b:81:ca: a5:b1:8f:3b:c8:8e:28:69:15:46:88:42:57:85:a1: 6c:c0:dd:39:39:d2:85:f0:96:8c:5e:a3:ac:f6:3e: 62:37:f6:c6:83:fa:26:63:cb:9e:6b:2a:c6:62:1a: a4:3b:c6:91:ac:9b:58:3e:6b:6a:6b:25:be:19:8a: 54:d3:6e:aa:be:c3:31:8d:cb:c3:c9:f6:5e:ab:c7: aa:98:68:f8:8d:d4:13:91:04:50:5f:a6:cb:23:fa: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A0:7A:22:EF:8E:6A:E7:C4:60:C0:59:89:60:F4:CE:F6:0D:6B:D6 X509v3 Authority Key Identifier: keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/PaB6Iu-OaufEYMBZiWD0zvYNa9Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:c98::/48 Signature Algorithm: sha256WithRSAEncryption 51:a1:b4:7f:e5:3f:45:34:e6:bd:45:6a:0b:42:4f:61:1e:ca: 4f:6d:be:fb:05:47:10:f0:74:37:bd:20:49:df:84:bb:cf:34: c8:1b:e6:76:2e:22:5e:60:e2:61:3d:31:3b:ea:79:71:3a:51: b7:b2:ce:0f:cd:5d:2b:93:3c:41:f3:5d:36:15:34:b5:61:df: 01:bc:b6:fc:b4:65:0f:35:b8:f1:96:20:eb:79:b3:f3:c6:7b: 02:d3:d0:ef:e9:31:01:77:ac:42:39:5a:8d:2b:26:cf:4b:f7: 16:52:61:08:3d:be:8a:43:b8:d0:4d:48:fc:56:b7:db:40:eb: f8:48:15:73:66:a8:5b:33:81:ce:87:c6:c5:f9:83:1a:fb:39: 7c:2d:d0:72:40:04:9a:83:93:e6:eb:52:c9:c9:32:81:81:b0: 83:86:36:6c:fa:9f:2f:9d:85:0e:1e:25:2b:2b:78:e1:48:25: e7:42:f3:07:2b:68:b6:ee:86:63:76:11:a2:33:88:6d:9d:ea: 4b:13:2f:67:d8:83:23:ae:12:e2:c7:9e:91:18:4a:ae:54:60: fa:9f:e8:e5:bc:f7:c9:d8:d9:d1:ff:b1:b1:96:1f:f3:36:b2: 9c:85:11:3f:c0:90:f9:84:f5:43:b0:cb:46:07:c5:b5:2d:cf: aa:5f:bf:45 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87QpqoWyxk29rWAd3H6XaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmFmMzMwMmY2YTQ5ZjdlYjY5MWFjNDk1OWUxYWNmOTVk YjZjZTcwHhcNMjYwMTAyMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGEwN2EyMmVmOGU2YWU3YzQ2MGMwNTk4OTYwZjRjZWY2MGQ2YmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnARqvTKEe4pmHxvBCA7drSTzXPqH 5ESdLNNIfKPMwey2HhsbrrVtVpyNfwyRonBOs3C7o9zDf3Bl8iacN/PFw059Lsfs UsMe44FKcXTgXnfas7n0mu33rLhFGCXJ3nQlW8XdgVgs2k0SuCJEWxIvIi39DSqN KeY/zk6HWXJbw4VKo08PLEnh4FR0ker4B7I1HuS8L1oj/IjWTEEPPplP3oNrgcql sY87yI4oaRVGiEJXhaFswN05OdKF8JaMXqOs9j5iN/bGg/omY8ueayrGYhqkO8aR rJtYPmtqayW+GYpU026qvsMxjcvDyfZeq8eqmGj4jdQTkQRQX6bLI/pWRQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD2geiLvjmrnxGDAWYlg9M72DWvWMB8GA1UdIwQY MBaAFBYq8zAvakn362kaxJWeGs+V22znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMt ZTc3NWQ1ZmFhOWUzLzEvUGFCNkl1LU9hdWZFWU1CWmlXRDB6dllOYTlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMtZTc3NWQ1ZmFhOWUz LzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAyY MA0GCSqGSIb3DQEBCwUAA4IBAQBRobR/5T9FNOa9RWoLQk9hHspPbb77BUcQ8HQ3 vSBJ34S7zzTIG+Z2LiJeYOJhPTE76nlxOlG3ss4PzV0rkzxB8102FTS1Yd8BvLb8 tGUPNbjxliDrebPzxnsC09Dv6TEBd6xCOVqNKybPS/cWUmEIPb6KQ7jQTUj8Vrfb QOv4SBVzZqhbM4HOh8bF+YMa+zl8LdByQASag5Pm61LJyTKBgbCDhjZs+p8vnYUO HiUrK3jhSCXnQvMHK2i27oZjdhGiM4htnepLEy9n2IMjrhLix56RGEquVGD6n+jl vPfJ2NnR/7Gxlh/zNrKchRE/wJD5hPVDsMtGB8W1Lc+qX79F -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:36 2026 by rpki-client