This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa File: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (raw, json) Hash identifier: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ= Subject key identifier: 3D:5D:25:77:2B:DA:9B:25:DA:49:7C:06:59:E6:FF:88:88:FA:CF:56 Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019B79ED6060889ED6CFC92EA459EA76E8C2 Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa Signing time: Thu 01 Jan 2026 14:19:18 +0000 ROA not before: Thu 01 Jan 2026 14:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212972 IP address blocks: 2a0e:e704:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:60:60:88:9e:d6:cf:c9:2e:a4:59:ea:76:e8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jan 1 14:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d5d25772bda9b25da497c0659e6ff8888facf56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b3:97:6a:fa:35:62:87:e6:e5:ae:37:6a:3f: 63:f4:2d:d5:89:4b:80:2a:ce:57:18:6a:3f:56:96: 2b:3d:16:90:78:bd:94:f6:6b:1c:f7:94:dc:09:9a: c7:2c:31:10:66:29:e2:db:87:33:3d:7d:08:a6:9d: 3f:04:16:db:79:75:f0:88:30:76:8d:2b:47:b9:f6: 65:3f:f2:5b:a2:b8:08:65:db:3a:96:0e:ac:2e:c5: ed:b9:cd:8e:11:21:dc:c7:a9:56:be:7c:4f:d8:20: da:06:4b:4c:52:cd:4d:ad:ef:79:71:b8:87:cc:bf: 8d:68:88:30:91:da:5e:35:b8:f0:84:10:b1:a6:bc: 23:d5:dc:e2:7a:78:2f:a8:a4:35:76:40:03:b7:4b: ca:1e:75:f2:ca:3e:f8:a6:be:c2:52:39:16:76:7f: aa:15:cb:67:29:bb:2c:71:09:f0:28:fa:08:bc:a2: e6:c2:b4:3e:b5:16:89:56:88:15:29:1e:35:30:4c: 7f:51:b9:e8:3c:bf:e4:db:ea:ea:c4:6e:d8:37:eb: d4:97:d5:5d:9b:93:f4:ee:4d:0c:b6:43:73:14:12: 66:6c:cc:91:31:d0:f8:1f:46:1b:8a:30:7b:49:7e: 4c:72:43:2b:a2:df:33:92:f7:6e:d8:f0:2f:d9:e3: 97:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5D:25:77:2B:DA:9B:25:DA:49:7C:06:59:E6:FF:88:88:FA:CF:56 X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:e704:43::/48 Signature Algorithm: sha256WithRSAEncryption 07:68:38:da:bf:34:63:a9:2f:03:bf:81:22:a0:6b:cb:80:19: fd:be:76:03:ee:57:65:92:29:cb:71:b3:a7:47:ed:5d:ed:74: 85:0c:bf:48:b4:d8:36:9c:1f:b4:10:ef:6d:97:ea:0e:0a:fa: 38:a8:bc:ed:84:1b:95:2b:d2:68:59:79:5d:77:a3:8a:12:4e: 38:73:98:a3:26:26:b0:c1:71:72:16:af:f3:13:69:82:41:1c: fe:e0:a5:0f:55:a3:a2:c0:02:9f:77:b1:c1:2e:fa:4f:dd:2c: 05:4c:5e:9c:22:af:9a:24:54:19:3d:56:eb:16:24:bb:b2:64: e5:14:f8:b5:d3:d1:50:58:db:ea:e3:18:ae:26:6a:25:aa:05: 77:6e:14:79:23:85:03:29:6c:a1:87:df:ef:83:6f:ed:57:2e: a2:a4:80:29:9c:0e:11:f2:a6:87:32:80:b0:53:2a:ae:e5:8d: b1:06:9f:ff:7f:0e:93:19:cc:09:e7:08:e4:49:71:b6:22:5b: 29:57:bf:e0:54:5b:6a:3d:6a:b9:53:fc:88:e6:02:d3:cc:a4: 5b:61:1a:10:93:3b:55:4d:84:2d:9b:0c:ea:8c:13:3c:fe:aa: 81:dd:db:6b:5b:08:55:b5:6b:79:32:41:a9:3e:65:90:83:7b: cc:8b:81:b3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57WBgiJ7Wz8kupFnqdujCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwMTAxMTQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDVkMjU3NzJiZGE5YjI1ZGE0OTdjMDY1OWU2ZmY4ODg4ZmFjZjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubOXavo1Yofm5a43aj9j9C3ViUuA Ks5XGGo/VpYrPRaQeL2U9msc95TcCZrHLDEQZini24czPX0Ipp0/BBbbeXXwiDB2 jStHufZlP/JborgIZds6lg6sLsXtuc2OESHcx6lWvnxP2CDaBktMUs1Nre95cbiH zL+NaIgwkdpeNbjwhBCxprwj1dziengvqKQ1dkADt0vKHnXyyj74pr7CUjkWdn+q FctnKbsscQnwKPoIvKLmwrQ+tRaJVogVKR41MEx/UbnoPL/k2+rqxG7YN+vUl9Vd m5P07k0MtkNzFBJmbMyRMdD4H0YbijB7SX5MckMrot8zkvdu2PAv2eOX8QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD1dJXcr2psl2kl8Blnm/4iI+s9WMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvUFYwbGR5dmFteVhhU1h3R1dlYl9pSWo2ejFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg7nBABD MA0GCSqGSIb3DQEBCwUAA4IBAQAHaDjavzRjqS8Dv4EioGvLgBn9vnYD7ldlkinL cbOnR+1d7XSFDL9ItNg2nB+0EO9tl+oOCvo4qLzthBuVK9JoWXldd6OKEk44c5ij JiawwXFyFq/zE2mCQRz+4KUPVaOiwAKfd7HBLvpP3SwFTF6cIq+aJFQZPVbrFiS7 smTlFPi109FQWNvq4xiuJmolqgV3bhR5I4UDKWyhh9/vg2/tVy6ipIApnA4R8qaH MoCwUyqu5Y2xBp//fw6TGcwJ5wjkSXG2IlspV7/gVFtqPWq5U/yI5gLTzKRbYRoQ kztVTYQtmwzqjBM8/qqB3dtrWwhVtWt5MkGpPmWQg3vMi4Gz -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:53 2026 by rpki-client