This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PE_sJNK6KfJ3aPPgde7Q1rwYZWI.roa File: PE_sJNK6KfJ3aPPgde7Q1rwYZWI.roa (raw, json) Hash identifier: U/VpAlymMAECMUXRhG4bOiOgogqFYu327Z3S6ZlPli0= Subject key identifier: 3C:4F:EC:24:D2:BA:29:F2:77:68:F3:E0:75:EE:D0:D6:BC:18:65:62 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA716593F8F6C5ECB7168E914170A67 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PE_sJNK6KfJ3aPPgde7Q1rwYZWI.roa Signing time: Fri 02 Jan 2026 12:20:38 +0000 ROA not before: Fri 02 Jan 2026 12:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215715 IP address blocks: 2a0c:9a40:8adc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:16:59:3f:8f:6c:5e:cb:71:68:e9:14:17:0a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c4fec24d2ba29f27768f3e075eed0d6bc186562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:59:e7:fa:ff:e3:7c:56:f5:c4:f5:71:f7:17: 0e:04:a4:d9:cc:50:17:f4:53:cf:de:40:a1:8d:9e: f4:11:b4:ac:72:2c:3b:2b:95:db:6c:1d:7f:e0:0a: cf:18:a4:ea:51:a2:95:f2:f9:83:fb:53:fc:60:a9: ee:0c:e4:b7:96:fa:3a:76:9f:cd:d7:72:c4:8e:12: d0:74:b7:91:73:57:64:52:29:dc:98:e4:46:22:55: c5:b4:67:a5:ba:d6:ae:10:ea:32:ae:5d:5b:1f:f8: 49:76:b6:bc:40:8a:f4:ab:2e:49:16:4e:0a:af:7b: da:c5:8d:86:bb:ca:fa:36:4f:04:2c:7f:7b:7a:d6: 88:32:54:74:53:81:a6:63:1f:c3:7b:7e:10:0f:ed: 8c:4f:fe:7f:8a:47:6f:f6:e4:5f:6c:f9:ba:f8:00: 05:27:81:87:2c:f7:64:d1:9d:11:98:e9:4a:91:49: 6f:a3:3f:a4:7b:14:42:64:12:f4:4a:cb:29:58:1f: bb:1c:85:45:61:32:ab:d1:28:66:50:62:f0:9e:04: 86:d6:47:f0:ff:8b:93:1e:e1:b2:a9:30:f5:3b:3f: 05:b4:ad:b7:b9:dc:9d:df:bd:4a:5a:cc:5b:86:6b: 9f:11:36:03:85:27:8c:15:79:a4:73:0d:c2:5f:3d: 41:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:4F:EC:24:D2:BA:29:F2:77:68:F3:E0:75:EE:D0:D6:BC:18:65:62 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/PE_sJNK6KfJ3aPPgde7Q1rwYZWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8adc::/48 Signature Algorithm: sha256WithRSAEncryption 65:99:9c:ef:8f:b5:8d:45:0f:a7:fc:1d:9e:b5:a0:e5:09:11: 88:44:8e:04:ac:66:90:7f:f5:3c:55:25:bf:97:21:7c:c5:ee: 43:1c:9a:5a:6b:aa:07:2f:37:71:9e:8c:97:00:cc:b9:26:67: 19:31:cd:9c:7c:ca:2d:3b:db:e1:47:d5:e0:4d:91:b8:82:f1: 1a:80:b2:13:bb:e2:5e:14:41:68:05:3c:22:73:72:e4:be:70: a1:8b:71:4e:3e:9e:ac:16:1c:9f:6a:6e:7c:43:27:c8:55:a2: 1a:92:4b:24:f6:85:48:33:a0:cc:64:74:86:2c:9f:56:dd:a1: 51:38:94:9b:cf:56:4a:39:78:03:51:32:ec:e2:2f:e0:d3:01: 7e:7b:1a:78:01:28:1f:ec:c3:a3:4b:24:a0:f4:be:06:66:8a: bb:1d:ce:5a:f4:92:52:9a:8a:41:aa:b3:ed:b7:15:22:db:ea: e4:6c:93:c6:e7:3c:b4:ab:e6:82:cf:05:c1:23:d1:e7:08:2a: ad:e1:f6:b6:2d:a6:2c:bc:97:c9:be:68:8d:08:64:23:1a:27: 08:5a:88:95:11:76:6f:47:39:59:da:3c:91:62:e0:af:e8:46: 43:93:aa:f8:3e:92:2d:35:8e:f6:f8:75:46:fd:79:ed:4a:1a: 54:46:d2:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxZZP49sXstxaOkUFwpnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzRmZWMyNGQyYmEyOWYyNzc2OGYzZTA3NWVlZDBkNmJjMTg2NTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01nn+v/jfFb1xPVx9xcOBKTZzFAX 9FPP3kChjZ70EbSsciw7K5XbbB1/4ArPGKTqUaKV8vmD+1P8YKnuDOS3lvo6dp/N 13LEjhLQdLeRc1dkUincmORGIlXFtGelutauEOoyrl1bH/hJdra8QIr0qy5JFk4K r3vaxY2Gu8r6Nk8ELH97etaIMlR0U4GmYx/De34QD+2MT/5/ikdv9uRfbPm6+AAF J4GHLPdk0Z0RmOlKkUlvoz+kexRCZBL0SsspWB+7HIVFYTKr0ShmUGLwngSG1kfw /4uTHuGyqTD1Oz8FtK23udyd371KWsxbhmufETYDhSeMFXmkcw3CXz1BeQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDxP7CTSuinyd2jz4HXu0Na8GGViMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvUEVfc0pOSzZLZkozYVBQZ2RlN1ExcndZWldJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQIrc MA0GCSqGSIb3DQEBCwUAA4IBAQBlmZzvj7WNRQ+n/B2etaDlCRGIRI4ErGaQf/U8 VSW/lyF8xe5DHJpaa6oHLzdxnoyXAMy5JmcZMc2cfMotO9vhR9XgTZG4gvEagLIT u+JeFEFoBTwic3LkvnChi3FOPp6sFhyfam58QyfIVaIakksk9oVIM6DMZHSGLJ9W 3aFROJSbz1ZKOXgDUTLs4i/g0wF+exp4ASgf7MOjSySg9L4GZoq7Hc5a9JJSmopB qrPttxUi2+rkbJPG5zy0q+aCzwXBI9HnCCqt4fa2LaYsvJfJvmiNCGQjGicIWoiV EXZvRzlZ2jyRYuCv6EZDk6r4PpItNY72+HVG/XntShpURtLs -----END CERTIFICATE-----Generated at Tue Jan 20 09:03:35 2026 by rpki-client