This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa File: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (raw, json) Hash identifier: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80= Subject key identifier: 3D:0D:56:B2:02:7C:33:94:A1:92:5A:D5:E1:C5:AB:5E:0B:11:93:DF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019B79ED5F4BF395C17C75D989E3B4F13F4D Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212970 IP address blocks: 2a0e:e704:45::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:5f:4b:f3:95:c1:7c:75:d9:89:e3:b4:f1:3f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d0d56b2027c3394a1925ad5e1c5ab5e0b1193df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9c:40:f2:86:26:45:e6:5a:ef:d3:47:e7:a3: 93:d5:78:ff:9e:33:1c:f1:3b:3b:d2:72:9b:c8:3b: 35:9f:66:c9:fc:6b:62:aa:09:dc:c8:39:e7:36:4a: 86:8f:5f:e7:d5:8f:ad:1c:c9:fd:2f:b5:b5:d5:48: 73:5a:50:fd:31:e4:99:80:c3:36:9e:2a:f8:5f:42: 73:0f:bb:3b:c0:8d:b5:a3:bf:4a:2d:9c:e4:01:9f: 6f:f0:aa:6d:08:8b:87:43:16:14:72:78:74:36:24: fa:01:9e:14:6a:de:cf:49:50:84:a3:88:ff:cd:49: 9a:c6:d3:12:f9:0a:11:8c:c3:55:93:56:2c:f6:65: 71:a8:03:4a:08:bc:df:7b:86:2e:df:e7:7d:ed:00: fc:85:2a:c4:80:6b:54:21:34:87:f2:9c:17:3f:4e: 0f:04:dc:c3:a8:9f:bd:10:fd:38:2e:df:37:b9:e8: 88:7c:3b:64:fa:aa:9d:40:d8:2d:7b:f7:93:3d:df: c5:46:4b:4a:e5:e4:b2:6a:a5:6f:5b:c2:17:94:dd: fd:8e:51:ec:7d:6c:27:09:d8:f5:f3:f9:8c:0a:c8: a3:03:64:85:ac:d3:97:86:0a:61:37:09:6c:09:60: 7c:99:d0:fc:41:a6:06:e0:ec:ae:a1:27:fa:c1:55: 2e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:0D:56:B2:02:7C:33:94:A1:92:5A:D5:E1:C5:AB:5E:0B:11:93:DF X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e704:45::/48 Signature Algorithm: sha256WithRSAEncryption b1:e0:c5:50:1d:db:eb:ef:77:3c:2a:4a:73:60:02:83:ae:e4: 3d:e3:c4:19:aa:28:52:9d:75:dc:0d:58:ed:7b:d9:72:51:e4: 4b:13:99:99:73:ab:1e:28:71:3b:c5:57:87:a4:82:84:f5:d0: 43:07:de:b9:f2:68:8d:88:9a:59:8c:3a:73:77:d5:60:b3:2b: 7f:52:19:10:19:26:57:43:e4:19:82:b0:d0:7f:c7:39:bb:f8: 4e:f5:14:f8:93:05:c3:56:a1:d8:19:33:bf:26:8e:9b:f8:b8: b3:72:bc:7f:37:f2:c7:ba:a7:c5:76:4f:4a:47:2a:52:86:00: d8:f1:5f:2b:61:c2:16:e8:2d:4d:d6:fa:76:b4:fa:b5:e4:9f: 92:7b:de:25:b6:fb:68:41:23:2d:12:65:f4:2e:f5:78:c0:f8: 7c:73:08:e3:82:08:a4:49:10:9c:19:21:08:f5:dd:65:47:01: 1e:ae:a1:6a:07:bc:86:6c:f6:f7:b0:26:b4:d4:72:68:ee:cb: 17:68:42:58:8b:70:c3:9c:49:3c:bd:b6:52:1c:aa:86:65:bc: cf:af:f7:eb:67:f9:9f:87:e8:17:b6:d1:03:77:c4:c1:ce:87: 38:ba:51:89:55:07:ec:5d:ab:a2:ac:10:2f:02:e2:ce:60:91: 75:1e:fd:f8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57V9L85XBfHXZieO08T9NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDBkNTZiMjAyN2MzMzk0YTE5MjVhZDVlMWM1YWI1ZTBiMTE5M2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZxA8oYmReZa79NH56OT1Xj/njMc 8Ts70nKbyDs1n2bJ/GtiqgncyDnnNkqGj1/n1Y+tHMn9L7W11UhzWlD9MeSZgMM2 nir4X0JzD7s7wI21o79KLZzkAZ9v8KptCIuHQxYUcnh0NiT6AZ4Uat7PSVCEo4j/ zUmaxtMS+QoRjMNVk1Ys9mVxqANKCLzfe4Yu3+d97QD8hSrEgGtUITSH8pwXP04P BNzDqJ+9EP04Lt83ueiIfDtk+qqdQNgte/eTPd/FRktK5eSyaqVvW8IXlN39jlHs fWwnCdj18/mMCsijA2SFrNOXhgphNwlsCWB8mdD8QaYG4OyuoSf6wVUuvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD0NVrICfDOUoZJa1eHFq14LEZPfMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvUFExV3NnSjhNNVNoa2xyVjRjV3JYZ3NSazk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7nBABF MA0GCSqGSIb3DQEBCwUAA4IBAQCx4MVQHdvr73c8KkpzYAKDruQ948QZqihSnXXc DVjte9lyUeRLE5mZc6seKHE7xVeHpIKE9dBDB9658miNiJpZjDpzd9Vgsyt/UhkQ GSZXQ+QZgrDQf8c5u/hO9RT4kwXDVqHYGTO/Jo6b+Lizcrx/N/LHuqfFdk9KRypS hgDY8V8rYcIW6C1N1vp2tPq15J+Se94ltvtoQSMtEmX0LvV4wPh8cwjjggikSRCc GSEI9d1lRwEerqFqB7yGbPb3sCa01HJo7ssXaEJYi3DDnEk8vbZSHKqGZbzPr/fr Z/mfh+gXttEDd8TBzoc4ulGJVQfsXauirBAvAuLOYJF1Hv34 -----END CERTIFICATE-----Generated at Mon Jan 26 11:29:28 2026 by rpki-client