This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/po-2fAbrxn1TWHjF6lzfDqmjBe8.roa File: po-2fAbrxn1TWHjF6lzfDqmjBe8.roa (raw, json) Hash identifier: n5ne50VyAbgwdMwDDV/0gHtMCzE24KrtorYTaAIAz7k= Subject key identifier: A6:8F:B6:7C:06:EB:C6:7D:53:58:78:C5:EA:5C:DF:0E:A9:A3:05:EF Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Certificate serial: 019B77C6FF6A4590FFC317930A22A77FCEC2 Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/po-2fAbrxn1TWHjF6lzfDqmjBe8.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214720 IP address blocks: 2a0a:d686:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ff:6a:45:90:ff:c3:17:93:0a:22:a7:7f:ce:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a68fb67c06ebc67d535878c5ea5cdf0ea9a305ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:4e:52:80:19:74:11:0b:93:fa:55:93:88:4c: d9:39:43:ba:62:fd:00:d6:8e:dd:59:4a:f8:31:25: ea:91:7d:b8:0c:7b:81:10:23:4a:56:52:3d:78:a9: 45:a9:21:52:a8:05:4b:93:05:c4:18:be:06:92:2a: 71:04:0d:e8:60:b3:2e:2c:5a:be:c6:ff:fd:d6:0a: bb:ac:6e:4f:ec:fc:3b:d0:ae:64:03:54:d9:b0:5f: 66:6c:b4:a4:a7:0d:86:43:04:fa:4a:c6:27:ea:62: fc:e6:82:91:e1:e7:77:39:d5:64:84:20:9c:c9:0c: 3d:4a:23:22:12:70:d6:71:40:f7:d2:0f:3d:83:28: 50:8a:b3:1a:3d:c1:b9:03:81:19:10:fb:0a:41:ad: 98:3c:53:94:32:8a:ff:37:a6:f0:ad:ca:96:ea:51: d1:18:1b:1c:16:5c:0e:12:3d:ca:2b:51:09:ef:18: 9f:cc:e3:63:a5:23:05:26:6c:93:41:1c:4c:25:92: 51:aa:60:78:d3:40:48:25:84:95:dc:c3:c4:ac:56: 03:e9:6b:48:5c:7a:da:73:35:6b:18:3e:7f:eb:c6: 59:c7:d3:fd:12:83:e0:bc:61:44:bb:90:ec:91:f6: ee:d0:8b:f1:97:5f:76:19:ca:88:45:46:87:ce:93: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8F:B6:7C:06:EB:C6:7D:53:58:78:C5:EA:5C:DF:0E:A9:A3:05:EF X509v3 Authority Key Identifier: keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/po-2fAbrxn1TWHjF6lzfDqmjBe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d686:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 87:ad:8c:6c:d3:9a:2d:ed:ce:07:de:d8:bf:7f:a8:da:ca:27: 2e:cc:d9:dc:46:4e:1f:5c:24:73:d0:a7:6f:bf:fa:e2:b0:20: 80:69:a2:08:8a:a4:f2:7a:28:7f:41:fb:75:57:da:74:aa:e0: 15:bc:2c:cb:cb:cc:cc:97:7f:2e:48:6a:30:f5:de:7a:e6:09: 90:21:82:5f:ec:d3:02:ca:7a:31:8c:3a:02:4e:56:fc:a1:6c: 34:cd:20:97:58:24:dc:01:40:d4:5d:d2:a9:25:71:cb:2d:2b: ed:df:d6:96:5a:65:5e:24:75:44:99:83:1b:16:68:6e:5d:22: 75:e8:aa:ee:ae:81:c9:53:8a:80:7b:61:a2:3e:1e:2e:53:b4: 1e:bb:73:fb:27:21:85:3a:30:12:c1:f0:8f:50:a4:7e:26:5e: b4:3d:64:91:fe:b3:48:5c:02:09:e7:7d:40:a6:da:5b:52:d9: 3d:a4:7a:27:ff:79:d5:f4:8e:00:15:57:85:2a:0c:70:1f:9a: a6:c5:f5:0a:38:97:75:12:88:90:65:b7:ed:10:7e:71:c5:f7: a7:86:65:77:d4:f0:37:4e:41:c0:a2:50:12:c1:cd:6c:6b:15: 49:03:6e:c0:2a:49:38:19:3d:80:46:f3:c4:d8:4f:55:d3:35: 46:8e:24:a3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3xv9qRZD/wxeTCiKnf87CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNzQ0ZGE3OWYwNTMxYTczYWQ2ZjRiYWYwODM3ZTkzZWI2 ODAxYjEwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjhmYjY3YzA2ZWJjNjdkNTM1ODc4YzVlYTVjZGYwZWE5YTMwNWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8E5SgBl0EQuT+lWTiEzZOUO6Yv0A 1o7dWUr4MSXqkX24DHuBECNKVlI9eKlFqSFSqAVLkwXEGL4GkipxBA3oYLMuLFq+ xv/91gq7rG5P7Pw70K5kA1TZsF9mbLSkpw2GQwT6SsYn6mL85oKR4ed3OdVkhCCc yQw9SiMiEnDWcUD30g89gyhQirMaPcG5A4EZEPsKQa2YPFOUMor/N6bwrcqW6lHR GBscFlwOEj3KK1EJ7xifzONjpSMFJmyTQRxMJZJRqmB400BIJYSV3MPErFYD6WtI XHraczVrGD5/68ZZx9P9EoPgvGFEu5Dskfbu0Ivxl192GcqIRUaHzpNNwwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKaPtnwG68Z9U1h4xepc3w6powXvMB8GA1UdIwQY MBaAFJt0TaefBTGnOtb0uvCDfpPraAGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUt OTJhYjgwZTJlZmQ1LzEvcG8tMmZBYnJ4bjFUV0hqRjZsemZEcW1qQmU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUtOTJhYjgwZTJlZmQ1 LzEvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgrWhv// MA0GCSqGSIb3DQEBCwUAA4IBAQCHrYxs05ot7c4H3ti/f6jayicuzNncRk4fXCRz 0Kdvv/risCCAaaIIiqTyeih/Qft1V9p0quAVvCzLy8zMl38uSGow9d565gmQIYJf 7NMCynoxjDoCTlb8oWw0zSCXWCTcAUDUXdKpJXHLLSvt39aWWmVeJHVEmYMbFmhu XSJ16KruroHJU4qAe2GiPh4uU7Qeu3P7JyGFOjASwfCPUKR+Jl60PWSR/rNIXAIJ 531AptpbUtk9pHon/3nV9I4AFVeFKgxwH5qmxfUKOJd1EoiQZbftEH5xxfenhmV3 1PA3TkHAolASwc1saxVJA27AKkk4GT2ARvPE2E9V0zVGjiSj -----END CERTIFICATE-----Generated at Thu Jan 22 12:06:43 2026 by rpki-client