This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa File: ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa (raw, json) Hash identifier: 561YCOwWidkLUNxZ27ftIMouBGOfKq4wJsC6Y9JLTu0= Subject key identifier: A6:CE:63:F2:2C:9F:64:7E:5B:27:4E:2C:DC:37:F6:E0:E6:BE:67:DD Certificate issuer: /CN=0b1c6d0de70cc51805b63a5e2327622525d075b1 Certificate serial: 019B7DCA9DC76BC38FB60CA1EEEA98BF7566 Authority key identifier: 0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa Signing time: Fri 02 Jan 2026 08:19:49 +0000 ROA not before: Fri 02 Jan 2026 08:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202940 IP address blocks: 2a02:ce8:556::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.mft rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:9d:c7:6b:c3:8f:b6:0c:a1:ee:ea:98:bf:75:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b1c6d0de70cc51805b63a5e2327622525d075b1 Validity Not Before: Jan 2 08:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6ce63f22c9f647e5b274e2cdc37f6e0e6be67dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b3:88:ad:7d:c4:72:39:53:62:a1:41:f9:71: 02:53:47:fa:0a:de:de:4d:5b:e2:91:90:18:69:1c: 66:9f:f1:55:23:96:a1:72:d4:e8:b2:22:05:b6:90: 7e:aa:4a:36:f1:21:99:4d:51:20:83:7a:0b:8c:e3: ad:50:16:b7:a5:f2:4a:0c:fc:07:a9:98:df:28:81: 54:44:e9:d2:26:9b:0d:7a:83:c5:91:c2:54:b8:06: 1b:1d:a6:d7:da:9d:83:82:e5:cd:18:f7:1f:78:5b: 75:f2:19:70:a7:1c:a7:34:d7:d1:fc:29:aa:26:d6: e5:89:c5:7b:12:87:00:5c:b9:e6:da:61:d1:f0:f4: 79:41:85:17:93:1d:47:aa:9d:ad:6c:e8:eb:2d:15: de:f6:2d:19:74:8e:60:fa:8c:11:57:87:ef:83:9d: 41:ee:7f:4e:e8:e0:cc:65:c5:9a:de:8e:d7:a2:29: 33:36:e1:c9:e4:db:a0:2d:4e:8f:cc:56:1d:62:41: b9:c9:d1:d5:53:6b:51:5b:3e:d3:31:05:4e:33:00: 5a:e5:70:cb:9e:a6:21:cd:e8:b3:02:89:0f:25:b3: e7:0f:98:73:63:96:67:7d:b1:25:e0:1d:6f:3c:a2: b2:20:c8:d6:28:a8:2c:9e:32:c3:45:22:e7:38:56: 79:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:CE:63:F2:2C:9F:64:7E:5B:27:4E:2C:DC:37:F6:E0:E6:BE:67:DD X509v3 Authority Key Identifier: keyid:0B:1C:6D:0D:E7:0C:C5:18:05:B6:3A:5E:23:27:62:25:25:D0:75:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CxxtDecMxRgFtjpeIydiJSXQdbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/ps5j8iyfZH5bJ04s3Df24Oa-Z90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1972a-9e18-4791-8530-f774f1eafbff/1/CxxtDecMxRgFtjpeIydiJSXQdbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:ce8:556::/48 Signature Algorithm: sha256WithRSAEncryption 46:94:ea:90:56:a4:79:2e:a5:f5:06:98:5c:8c:fd:4c:92:65: 67:19:0d:69:24:ec:28:05:ff:d5:07:d1:08:db:92:04:ad:cd: 77:de:57:59:8b:a4:e7:43:e4:4e:1c:fe:d3:50:66:e4:9c:18: ad:6c:f7:3f:4b:31:bd:15:98:84:8c:c9:2a:a9:d0:bf:89:d9: bb:ec:64:09:fb:da:fa:4c:8f:12:4c:f5:1b:11:cc:08:0b:46: 6d:b3:5b:e0:7a:a7:91:ef:5e:2d:45:6c:2c:2b:15:42:2f:4d: bf:84:ec:32:fb:4f:56:58:ae:f3:81:b2:ae:4c:bb:99:69:ce: cc:61:7d:f2:1d:66:34:d5:c6:54:4d:4f:5d:cf:39:b9:e3:bc: cd:e0:78:94:ca:d4:71:42:a6:8c:d5:24:08:24:d5:bb:5e:d5: f2:0a:b0:ac:3e:cd:b6:99:28:40:bb:26:83:92:5e:aa:a0:fe: 18:05:ed:e7:8f:49:87:ca:e1:cb:70:96:05:90:e5:16:08:d2: aa:fc:eb:0f:24:46:9a:78:30:cf:c0:1a:39:79:76:64:06:70: 24:dd:ff:3a:68:da:14:69:24:57:ee:7b:79:34:e5:69:f6:3d: c9:57:a0:55:27:7d:d5:8d:19:95:78:40:fa:ae:23:7b:ca:8d: 82:d5:d1:ca -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9yp3Ha8OPtgyh7uqYv3VmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMWM2ZDBkZTcwY2M1MTgwNWI2M2E1ZTIzMjc2MjI1MjVk MDc1YjEwHhcNMjYwMTAyMDgxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmNlNjNmMjJjOWY2NDdlNWIyNzRlMmNkYzM3ZjZlMGU2YmU2N2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7OIrX3EcjlTYqFB+XECU0f6Ct7e TVvikZAYaRxmn/FVI5ahctTosiIFtpB+qko28SGZTVEgg3oLjOOtUBa3pfJKDPwH qZjfKIFUROnSJpsNeoPFkcJUuAYbHabX2p2DguXNGPcfeFt18hlwpxynNNfR/Cmq JtblicV7EocAXLnm2mHR8PR5QYUXkx1Hqp2tbOjrLRXe9i0ZdI5g+owRV4fvg51B 7n9O6ODMZcWa3o7XoikzNuHJ5NugLU6PzFYdYkG5ydHVU2tRWz7TMQVOMwBa5XDL nqYhzeizAokPJbPnD5hzY5ZnfbEl4B1vPKKyIMjWKKgsnjLDRSLnOFZ59QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKbOY/Isn2R+WydOLNw39uDmvmfdMB8GA1UdIwQY MBaAFAscbQ3nDMUYBbY6XiMnYiUl0HWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAt Zjc3NGYxZWFmYmZmLzEvcHM1ajhpeWZaSDViSjA0czNEZjI0T2EtWjkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMTk3MmEtOWUxOC00NzkxLTg1MzAtZjc3NGYxZWFmYmZm LzEvQ3h4dERlY014UmdGdGpwZUl5ZGlKU1hRZGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIM6AVW MA0GCSqGSIb3DQEBCwUAA4IBAQBGlOqQVqR5LqX1BphcjP1MkmVnGQ1pJOwoBf/V B9EI25IErc133ldZi6TnQ+ROHP7TUGbknBitbPc/SzG9FZiEjMkqqdC/idm77GQJ +9r6TI8STPUbEcwIC0Zts1vgeqeR714tRWwsKxVCL02/hOwy+09WWK7zgbKuTLuZ ac7MYX3yHWY01cZUTU9dzzm547zN4HiUytRxQqaM1SQIJNW7XtXyCrCsPs22mShA uyaDkl6qoP4YBe3nj0mHyuHLcJYFkOUWCNKq/OsPJEaaeDDPwBo5eXZkBnAk3f86 aNoUaSRX7nt5NOVp9j3JV6BVJ33VjRmVeED6riN7yo2C1dHK -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:35 2026 by rpki-client