This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/PJdBUbgKBhgSdoiiMeIPTyM59kM.roa File: PJdBUbgKBhgSdoiiMeIPTyM59kM.roa (raw, json) Hash identifier: +cAcRGvopCgB6nUW8hVTRtRILfXgI80D1d6TR///UD8= Subject key identifier: 3C:97:41:51:B8:0A:06:18:12:76:88:A2:31:E2:0F:4F:23:39:F6:43 Certificate issuer: /CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Certificate serial: 019B7BA36D77E185DF206470E4FFADEA53B9 Authority key identifier: 29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/PJdBUbgKBhgSdoiiMeIPTyM59kM.roa Signing time: Thu 01 Jan 2026 22:17:46 +0000 ROA not before: Thu 01 Jan 2026 22:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210344 IP address blocks: 2a01:e901:104::/48 maxlen: 48 2a01:e901:114::/48 maxlen: 48 2a01:e901:124::/48 maxlen: 48 2a01:e901:134::/48 maxlen: 48 2a01:e901:144::/48 maxlen: 48 2a01:e901:154::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.mft rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:6d:77:e1:85:df:20:64:70:e4:ff:ad:ea:53:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2968b4e0ef8106f0e12ab8e501d2aa4e36b783c2 Validity Not Before: Jan 1 22:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c974151b80a0618127688a231e20f4f2339f643 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:f3:71:d6:77:bb:7d:f5:93:75:1d:53:e1: 31:e6:95:4e:fa:00:30:19:b4:03:0d:5f:42:8c:a5: ee:d7:3d:29:e7:64:7a:9f:48:63:69:af:97:cb:0d: a6:80:fd:25:ce:dd:92:87:7e:00:3f:26:75:8d:e2: 79:b6:be:bb:96:c5:84:89:1e:8a:07:36:a7:dc:d9: 6f:2a:90:e8:8e:d7:2d:90:d6:12:98:b3:d8:c6:4e: d6:d8:50:af:eb:c5:a3:59:95:57:40:6c:20:39:01: 9d:a7:5c:e5:db:fa:be:46:08:ce:07:a0:cc:79:e2: 2f:14:0f:56:df:57:55:b4:6f:c0:ed:a7:72:ba:dd: ac:e5:01:69:d9:0c:88:72:16:42:d9:59:3e:28:16: 9c:56:4b:a8:ca:0f:be:8b:c8:cd:3c:2d:59:da:7f: c3:0a:1c:c9:54:ba:39:b7:e7:82:47:45:aa:c9:b5: a1:c4:9d:d3:52:c7:70:85:5d:af:1d:f4:27:d6:72: 44:a6:6f:8e:8d:98:7c:92:13:1e:b5:c0:96:dc:3f: 37:61:4a:a7:4f:d2:35:4b:1c:a8:09:41:19:07:c6: 11:c4:4b:f4:99:8e:38:ac:06:5d:ea:45:9b:3e:ea: 25:4e:73:8a:38:ce:0b:11:7a:d3:a7:d0:0b:33:3c: 41:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:97:41:51:B8:0A:06:18:12:76:88:A2:31:E2:0F:4F:23:39:F6:43 X509v3 Authority Key Identifier: keyid:29:68:B4:E0:EF:81:06:F0:E1:2A:B8:E5:01:D2:AA:4E:36:B7:83:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWi04O-BBvDhKrjlAdKqTja3g8I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/PJdBUbgKBhgSdoiiMeIPTyM59kM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/481637-6c1c-45e8-8fbd-44f8ed5d61d7/1/KWi04O-BBvDhKrjlAdKqTja3g8I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e901:104::/48 2a01:e901:114::/48 2a01:e901:124::/48 2a01:e901:134::/48 2a01:e901:144::/48 2a01:e901:154::/48 Signature Algorithm: sha256WithRSAEncryption 9c:77:34:59:ac:86:39:cb:50:b4:f7:2b:5f:20:ac:40:f9:b3: 9e:95:34:79:60:99:33:4c:49:8d:04:bc:33:16:b5:c2:3e:74: 4a:35:1f:1d:a5:38:b3:bf:c9:de:7b:12:59:d1:36:67:04:ad: 92:a9:4b:b6:ba:44:70:9e:0f:98:cb:de:f5:4e:d1:d7:2b:6f: 36:7c:28:e7:77:e6:7c:cc:66:5c:fd:45:29:25:74:f2:b9:f6: be:43:cf:4e:5b:f4:5f:56:b1:6c:40:ae:84:5e:b2:0f:09:d3: 2a:b9:a8:af:b4:81:9f:63:ec:f2:b4:64:d1:3e:fb:97:9e:f9: 30:ff:12:42:09:f9:3a:18:ab:3c:bb:fc:45:e5:29:9d:ae:95: aa:17:19:0a:84:68:54:2d:0c:37:aa:67:b9:60:fd:8a:9a:12: 10:0d:de:2f:b3:a4:29:04:fd:51:9f:6a:52:70:7e:0b:84:dc: 20:81:a8:6c:af:6c:19:ce:b5:5b:36:74:42:55:21:b3:60:f1: 57:c2:99:70:60:8a:1b:16:91:f2:7a:ad:bf:86:0e:f8:1d:3d: de:b3:af:69:bd:44:6a:e0:a6:51:d9:e1:05:fe:07:13:2f:3b: 0e:76:42:cd:9f:d5:3a:de:44:9e:d3:76:ae:fb:43:6b:ee:7a: 77:f2:57:fb -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt7o2134YXfIGRw5P+t6lO5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NjhiNGUwZWY4MTA2ZjBlMTJhYjhlNTAxZDJhYTRlMzZi NzgzYzIwHhcNMjYwMTAxMjIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzk3NDE1MWI4MGEwNjE4MTI3Njg4YTIzMWUyMGY0ZjIzMzlmNjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcbzcdZ3u331k3UdU+Ex5pVO+gAw GbQDDV9CjKXu1z0p52R6n0hjaa+Xyw2mgP0lzt2Sh34APyZ1jeJ5tr67lsWEiR6K Bzan3NlvKpDojtctkNYSmLPYxk7W2FCv68WjWZVXQGwgOQGdp1zl2/q+RgjOB6DM eeIvFA9W31dVtG/A7adyut2s5QFp2QyIchZC2Vk+KBacVkuoyg++i8jNPC1Z2n/D ChzJVLo5t+eCR0WqybWhxJ3TUsdwhV2vHfQn1nJEpm+OjZh8khMetcCW3D83YUqn T9I1SxyoCUEZB8YRxEv0mY44rAZd6kWbPuolTnOKOM4LEXrTp9ALMzxBIQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFDyXQVG4CgYYEnaIojHiD08jOfZDMB8GA1UdIwQY MBaAFClotODvgQbw4Sq45QHSqk42t4PCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQt NDRmOGVkNWQ2MWQ3LzEvUEpkQlViZ0tCaGdTZG9paU1lSVBUeU01OWtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy80ODE2MzctNmMxYy00NWU4LThmYmQtNDRmOGVkNWQ2MWQ3 LzEvS1dpMDRPLUJCdkRoS3JqbEFkS3FUamEzZzhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAAjA2AwcAKgHpAQEE AwcAKgHpAQEUAwcAKgHpAQEkAwcAKgHpAQE0AwcAKgHpAQFEAwcAKgHpAQFUMA0G CSqGSIb3DQEBCwUAA4IBAQCcdzRZrIY5y1C09ytfIKxA+bOelTR5YJkzTEmNBLwz FrXCPnRKNR8dpTizv8neexJZ0TZnBK2SqUu2ukRwng+Yy971TtHXK282fCjnd+Z8 zGZc/UUpJXTyufa+Q89OW/RfVrFsQK6EXrIPCdMquaivtIGfY+zytGTRPvuXnvkw /xJCCfk6GKs8u/xF5SmdrpWqFxkKhGhULQw3qme5YP2KmhIQDd4vs6QpBP1Rn2pS cH4LhNwggahsr2wZzrVbNnRCVSGzYPFXwplwYIobFpHyeq2/hg74HT3es69pvURq 4KZR2eEF/gcTLzsOdkLNn9U63kSe03au+0Nr7np38lf7 -----END CERTIFICATE-----Generated at Sun Jan 25 17:20:08 2026 by rpki-client