This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pvjfoBuXln2vHk-RdeajB-RnrQs.roa File: pvjfoBuXln2vHk-RdeajB-RnrQs.roa (raw, json) Hash identifier: kwkOU9Yobn091dpW01N1BZQYSC22QVk0b6z8XYWw4Hg= Subject key identifier: A6:F8:DF:A0:1B:97:96:7D:AF:1E:4F:91:75:E6:A3:07:E4:67:AD:0B Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA710D3D45C8C57AB11A012BF0D58CA Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pvjfoBuXln2vHk-RdeajB-RnrQs.roa Signing time: Fri 02 Jan 2026 12:20:36 +0000 ROA not before: Fri 02 Jan 2026 12:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215362 IP address blocks: 2a0c:9a40:8610::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:10:d3:d4:5c:8c:57:ab:11:a0:12:bf:0d:58:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6f8dfa01b97967daf1e4f9175e6a307e467ad0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:80:ce:77:4a:84:6b:82:1f:75:a4:f7:d9:4d: 7e:cc:a9:91:38:1a:03:5d:69:f4:b8:15:11:e4:2d: 5c:67:8a:9b:55:7e:af:07:4a:c1:e9:88:d5:2a:b2: ab:eb:5b:d1:31:52:6b:87:a4:42:8a:39:f5:55:42: 17:ad:42:49:db:19:52:3f:cb:64:90:56:d9:55:f3: 5a:78:d4:b8:86:42:00:9d:ed:7e:3e:01:6f:86:0b: 01:ec:11:e0:7a:8d:b2:99:61:99:c6:78:f9:4b:98: d8:e8:c4:14:71:3e:53:48:45:4a:31:6d:9c:23:83: 18:17:64:74:3b:39:58:75:ef:4f:2d:1e:dd:a4:13: bf:98:a9:8c:0d:80:93:e0:66:b4:93:52:99:5f:9e: ac:91:2e:3a:b8:49:92:a5:03:2b:da:b1:9f:c3:ed: a4:af:df:bd:03:92:10:f0:27:47:91:9f:46:39:bc: 7d:a7:bd:a7:bc:95:ab:38:a1:e6:6c:44:87:09:a5: 39:8d:33:55:c5:69:67:e8:56:c7:c1:43:41:c3:3f: fb:c8:88:cb:2e:4f:7c:a8:b8:e8:69:06:64:e4:aa: 3b:e8:c2:ef:65:39:b6:84:f2:66:2e:69:70:07:a6: fc:a4:06:81:fe:9e:ef:23:83:0f:18:c6:90:08:c0: 25:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F8:DF:A0:1B:97:96:7D:AF:1E:4F:91:75:E6:A3:07:E4:67:AD:0B X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/pvjfoBuXln2vHk-RdeajB-RnrQs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8610::/44 Signature Algorithm: sha256WithRSAEncryption 4d:a4:cb:80:9d:0a:56:ea:c9:85:02:36:b5:d5:7a:b8:6c:e5: 15:f7:95:46:3d:ae:36:44:8d:0d:7e:3b:00:e3:00:74:37:88: e1:1f:72:c4:ef:ea:06:2d:27:50:af:c3:7d:e5:72:16:f7:b3: 67:06:63:0a:02:fa:48:bf:23:01:2b:a2:ec:ae:e2:9c:a7:37: c9:fc:83:64:c5:08:f0:1f:b1:47:66:a9:b8:68:15:d2:83:83: 75:20:49:80:ab:04:c7:e2:85:b0:33:95:ba:42:9d:c3:c7:bb: 51:76:f5:30:de:ba:ae:f1:10:60:cf:53:18:32:90:1f:bd:08: a2:33:e6:53:2b:98:21:32:41:08:f7:2d:4f:0d:b8:19:bd:77: e2:75:94:69:a8:57:23:f3:15:b8:b4:b9:6e:74:a7:e2:83:cd: 33:68:8a:86:9a:c1:26:97:ee:a8:89:9c:07:82:72:15:cc:2c: ee:17:1a:f9:4d:08:58:ed:99:c9:f9:50:3a:73:99:d1:22:14: cb:a9:71:d0:15:2b:85:f7:41:26:50:0c:c6:1a:94:ad:40:7d: 8b:45:94:b0:90:4c:40:78:3a:14:04:22:31:f4:4e:fb:73:0d: 6d:55:98:1e:fd:2f:0c:41:37:7e:ac:7f:5c:02:d4:00:a4:df: d4:b7:10:f3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pxDT1FyMV6sRoBK/DVjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmY4ZGZhMDFiOTc5NjdkYWYxZTRmOTE3NWU2YTMwN2U0NjdhZDBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IDOd0qEa4IfdaT32U1+zKmROBoD XWn0uBUR5C1cZ4qbVX6vB0rB6YjVKrKr61vRMVJrh6RCijn1VUIXrUJJ2xlSP8tk kFbZVfNaeNS4hkIAne1+PgFvhgsB7BHgeo2ymWGZxnj5S5jY6MQUcT5TSEVKMW2c I4MYF2R0OzlYde9PLR7dpBO/mKmMDYCT4Ga0k1KZX56skS46uEmSpQMr2rGfw+2k r9+9A5IQ8CdHkZ9GObx9p72nvJWrOKHmbESHCaU5jTNVxWln6FbHwUNBwz/7yIjL Lk98qLjoaQZk5Ko76MLvZTm2hPJmLmlwB6b8pAaB/p7vI4MPGMaQCMAlpQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKb436Abl5Z9rx5PkXXmowfkZ60LMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvcHZqZm9CdVhsbjJ2SGstUmRlYWpCLVJuclFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIYQ MA0GCSqGSIb3DQEBCwUAA4IBAQBNpMuAnQpW6smFAja11Xq4bOUV95VGPa42RI0N fjsA4wB0N4jhH3LE7+oGLSdQr8N95XIW97NnBmMKAvpIvyMBK6LsruKcpzfJ/INk xQjwH7FHZqm4aBXSg4N1IEmAqwTH4oWwM5W6Qp3Dx7tRdvUw3rqu8RBgz1MYMpAf vQiiM+ZTK5ghMkEI9y1PDbgZvXfidZRpqFcj8xW4tLludKfig80zaIqGmsEml+6o iZwHgnIVzCzuFxr5TQhY7ZnJ+VA6c5nRIhTLqXHQFSuF90EmUAzGGpStQH2LRZSw kExAeDoUBCIx9E77cw1tVZge/S8MQTd+rH9cAtQApN/UtxDz -----END CERTIFICATE-----Generated at Mon Jan 19 11:06:00 2026 by rpki-client