This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p4luF7oGs2YEGPQDMIVTmWaTAcc.roa
File: p4luF7oGs2YEGPQDMIVTmWaTAcc.roa (raw, json)
Hash identifier: TRR7nBOkIXFt/m/Q0ImDJDa/oRr3AZcyngPYbiTCuu8=
Subject key identifier: A7:89:6E:17:BA:06:B3:66:04:18:F4:03:30:85:53:99:66:93:01:C7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019B7FF19E603B6427A34743C387630EA1C5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p4luF7oGs2YEGPQDMIVTmWaTAcc.roa
Signing time: Fri 02 Jan 2026 18:21:39 +0000
ROA not before: Fri 02 Jan 2026 18:21:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 2a13:fc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Jan 2026 18:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:f1:9e:60:3b:64:27:a3:47:43:c3:87:63:0e:a1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 18:21:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a7896e17ba06b3660418f40330855399669301c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:8f:46:2a:9a:41:d2:7f:8a:6a:ee:b1:6a:
f7:ba:ef:3a:73:6b:60:c6:03:47:07:b3:94:60:82:
9e:98:b8:d4:a0:3b:74:6c:3b:51:99:5a:a4:d1:7a:
27:55:e5:7d:22:d1:74:0a:bb:c4:6e:aa:7c:e0:f0:
16:a5:3f:e8:e7:01:70:a6:18:a7:88:dc:55:05:cc:
32:b7:90:a7:9c:f0:95:19:1f:6a:49:3f:d3:2b:d2:
fd:68:c7:5b:fb:de:16:5b:44:ed:9c:f8:b6:4a:12:
18:eb:05:86:ac:1b:5b:05:26:7f:2b:3c:01:c9:6b:
dd:f4:20:11:16:17:f2:4e:2b:d1:8d:f8:38:41:ee:
51:28:e2:20:a7:6b:5d:da:ce:e7:00:04:dd:d0:8d:
95:87:25:5f:c6:87:b8:b1:83:de:fc:0f:c2:80:3a:
76:e3:9e:27:30:85:6e:1f:59:13:83:f0:8a:37:a4:
69:60:0a:02:35:a6:50:2c:37:0d:6b:b9:d4:8d:bd:
9e:78:19:55:72:c1:fc:44:8f:59:7a:8c:d7:af:f0:
c2:b0:5c:9a:10:e1:09:ae:55:93:6f:00:37:f6:20:
3c:c6:2f:82:11:40:cb:e4:2d:8e:4c:55:c2:83:d4:
89:98:4e:f9:bc:7e:ff:9e:0f:bb:80:12:62:bc:5d:
f6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:89:6E:17:BA:06:B3:66:04:18:F4:03:30:85:53:99:66:93:01:C7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/p4luF7oGs2YEGPQDMIVTmWaTAcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
9e:24:87:d7:22:f7:66:22:bd:dc:1a:f9:ee:77:3a:ff:69:a3:
a7:16:d1:55:d8:62:41:26:08:2b:32:31:c8:c1:b1:19:7d:b7:
05:25:42:f4:4d:af:19:8e:06:4b:43:32:82:19:25:99:7c:21:
23:17:df:be:d5:05:e7:06:6a:3c:e1:dc:b9:92:60:e6:f4:4c:
f0:d2:ec:73:5f:e2:2e:63:62:91:6a:71:ac:42:1b:05:da:73:
4c:51:8f:83:3a:f7:f3:31:52:a8:77:2f:1f:9b:02:c3:97:f1:
27:74:c2:e8:56:b9:bc:be:08:6e:f4:d6:e5:2d:a0:66:39:e6:
fc:4d:2c:81:e9:18:c2:b0:30:a3:38:c7:ab:48:58:e7:9a:29:
cf:bc:cc:4b:72:4a:ab:25:d9:03:13:af:14:ed:49:12:de:ed:
68:0d:34:1d:c9:af:63:27:b0:42:61:8d:d8:58:f6:8c:cb:01:
87:d2:80:cb:d5:d5:f8:21:1f:fb:3b:5b:98:71:34:44:8c:59:
a3:52:be:17:23:7f:40:60:1c:0e:4b:66:b2:0e:f6:06:0f:8f:
7e:7a:04:46:14:dd:61:0a:af:8d:78:02:2c:89:64:4e:a4:fa:
e5:a9:d3:11:3b:e0:f4:fd:e3:f2:8e:00:24:c0:e2:ae:e1:c2:
b4:56:6b:cc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt/8Z5gO2Qno0dDw4djDqHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjYwMTAyMTgyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzg5NmUxN2JhMDZiMzY2MDQxOGY0MDMzMDg1NTM5OTY2OTMwMWM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFyPRiqaQdJ/imrusWr3uu86c2tg
xgNHB7OUYIKemLjUoDt0bDtRmVqk0XonVeV9ItF0CrvEbqp84PAWpT/o5wFwphin
iNxVBcwyt5CnnPCVGR9qST/TK9L9aMdb+94WW0TtnPi2ShIY6wWGrBtbBSZ/KzwB
yWvd9CARFhfyTivRjfg4Qe5RKOIgp2td2s7nAATd0I2VhyVfxoe4sYPe/A/CgDp2
454nMIVuH1kTg/CKN6RpYAoCNaZQLDcNa7nUjb2eeBlVcsH8RI9ZeozXr/DCsFya
EOEJrlWTbwA39iA8xi+CEUDL5C2OTFXCg9SJmE75vH7/ng+7gBJivF32kQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKeJbhe6BrNmBBj0AzCFU5lmkwHHMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvcDRsdUY3b0dzMllFR1BRRE1JVlRtV2FUQWNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhP8ADAN
BgkqhkiG9w0BAQsFAAOCAQEAniSH1yL3ZiK93Br57nc6/2mjpxbRVdhiQSYIKzIx
yMGxGX23BSVC9E2vGY4GS0MyghklmXwhIxffvtUF5wZqPOHcuZJg5vRM8NLsc1/i
LmNikWpxrEIbBdpzTFGPgzr38zFSqHcvH5sCw5fxJ3TC6Fa5vL4IbvTW5S2gZjnm
/E0sgekYwrAwozjHq0hY55opz7zMS3JKqyXZAxOvFO1JEt7taA00HcmvYyewQmGN
2Fj2jMsBh9KAy9XV+CEf+ztbmHE0RIxZo1K+FyN/QGAcDktmsg72Bg+PfnoERhTd
YQqvjXgCLIlkTqT65anTETvg9P3j8o4AJMDiruHCtFZrzA==
-----END CERTIFICATE-----
Generated at Sat Jan 17 02:49:12 2026 by rpki-client