This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Pcz7Dliz3LaSKytN9QUGEYaE7mU.roa File: Pcz7Dliz3LaSKytN9QUGEYaE7mU.roa (raw, json) Hash identifier: 930wXICUDTbLDrUXBubgrmHOoNVvW4+zzIQc6MQtwss= Subject key identifier: 3D:CC:FB:0E:58:B3:DC:B6:92:2B:2B:4D:F5:05:06:11:86:84:EE:65 Certificate issuer: /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13 Certificate serial: 019B7AC88A4E1804C21503EEFCB8741E9D09 Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Pcz7Dliz3LaSKytN9QUGEYaE7mU.roa Signing time: Thu 01 Jan 2026 18:18:41 +0000 ROA not before: Thu 01 Jan 2026 18:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212568 IP address blocks: 2a11:e487:42::/48 maxlen: 48 2a11:e487:affe::/48 maxlen: 48 2a11:e487:cafe::/48 maxlen: 48 2a11:e487:dead::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8a:4e:18:04:c2:15:03:ee:fc:b8:74:1e:9d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13 Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dccfb0e58b3dcb6922b2b4df50506118684ee65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c1:a9:87:f4:fc:fa:1b:72:18:de:7a:5e:da: b1:20:78:09:c6:58:cc:a7:69:25:08:aa:0b:77:a7: 21:13:ef:ef:2a:2e:79:ce:bf:da:9e:ff:ae:0e:12: 8c:3b:34:75:64:41:13:5b:98:55:9a:06:11:99:0d: a4:33:f3:fa:a2:e1:21:0f:55:79:1b:b3:b9:b5:00: 8b:1b:0f:03:07:c2:92:21:e8:2f:ab:e2:da:09:1d: 04:b1:46:c3:03:da:a0:a1:91:10:84:ef:72:54:37: 55:9a:74:87:f0:5d:b5:36:63:fb:38:cb:ef:ef:51: ed:28:5c:f5:00:62:3c:06:18:58:28:64:74:e7:09: 32:00:18:af:b8:8e:a1:ef:6b:a7:72:84:d9:83:9d: 3c:3c:86:41:ad:08:7d:05:77:4e:3e:c8:94:51:d7: d9:ae:2c:b1:33:be:a6:f0:04:0d:c8:db:a7:13:62: e4:56:3e:b2:2a:db:2c:e3:ec:55:9e:f1:98:ba:f5: 4b:51:b3:5e:d8:10:c2:17:e8:81:3d:d3:dc:b6:5c: 76:1b:97:56:9f:91:f6:2c:4c:bf:ba:03:77:ed:e5: f7:76:40:eb:22:ef:1b:90:ba:0b:8b:b1:c0:9b:5b: 9b:50:17:ae:71:a6:3e:dd:3f:73:d0:c6:d2:8e:da: 37:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CC:FB:0E:58:B3:DC:B6:92:2B:2B:4D:F5:05:06:11:86:84:EE:65 X509v3 Authority Key Identifier: keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Pcz7Dliz3LaSKytN9QUGEYaE7mU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:e487:42::/48 2a11:e487:affe::/48 2a11:e487:cafe::/48 2a11:e487:dead::/48 Signature Algorithm: sha256WithRSAEncryption 31:53:62:7c:7f:6a:31:1d:fe:fa:2e:48:72:a6:96:83:f2:b7: d0:44:17:21:a2:11:5b:6b:20:6a:ba:96:2d:67:13:3c:a8:84: f0:85:7c:66:dc:9b:cc:fd:61:eb:fc:d0:15:7a:45:1d:16:7b: f6:ec:44:56:09:8b:4c:1e:b6:96:8c:91:da:3a:6d:5d:54:6f: 0e:d9:7d:8e:7e:87:b4:d8:bf:39:f9:b1:be:6c:3e:6b:e2:58: 33:90:72:3a:f8:9a:16:9f:a7:d7:ea:e3:3f:1a:d9:53:ce:33: 99:f4:b4:92:9d:23:d9:84:01:42:a4:cd:29:2b:f6:7a:31:a4: f3:f8:b0:16:12:01:13:f9:4f:03:3d:a2:a9:78:18:9b:19:82: db:a9:73:9f:85:f6:47:09:2b:65:d3:74:00:cd:ee:2a:f4:8e: 35:83:14:18:08:53:98:db:a7:98:b4:b0:dd:4d:32:cd:42:32: 18:61:29:85:7b:25:16:0b:d3:90:c1:38:5f:42:cb:52:45:09: b1:e2:20:64:99:96:f8:39:3f:61:d3:19:a8:b3:90:81:99:49: 28:eb:8f:61:1d:f3:6b:d7:18:42:b2:61:a8:b4:17:ec:49:f7: 43:aa:e2:ba:fd:7c:c4:66:f9:b8:64:91:1e:86:e2:8e:80:f7: 5e:b7:53:06 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6yIpOGATCFQPu/Lh0Hp0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YWZjZDhmYjQwYWFlMWQyNDNjMmE4Y2UyNTQxYTY5OTg3 ZWVkMTMwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGNjZmIwZTU4YjNkY2I2OTIyYjJiNGRmNTA1MDYxMTg2ODRlZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMGph/T8+htyGN56XtqxIHgJxljM p2klCKoLd6chE+/vKi55zr/anv+uDhKMOzR1ZEETW5hVmgYRmQ2kM/P6ouEhD1V5 G7O5tQCLGw8DB8KSIegvq+LaCR0EsUbDA9qgoZEQhO9yVDdVmnSH8F21NmP7OMvv 71HtKFz1AGI8BhhYKGR05wkyABivuI6h72uncoTZg508PIZBrQh9BXdOPsiUUdfZ riyxM76m8AQNyNunE2LkVj6yKtss4+xVnvGYuvVLUbNe2BDCF+iBPdPctlx2G5dW n5H2LEy/ugN37eX3dkDrIu8bkLoLi7HAm1ubUBeucaY+3T9z0MbSjto3YwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFD3M+w5Ys9y2kisrTfUFBhGGhO5lMB8GA1UdIwQY MBaAFFavzY+0Cq4dJDwqjOJUGmmYfu0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYt MjM3YmU3NzMwMDdhLzEvUGN6N0RsaXozTGFTS3l0TjlRVUdFWWFFN21VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYtMjM3YmU3NzMwMDdh LzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKhHkhwBC AwcAKhHkh6/+AwcAKhHkh8r+AwcAKhHkh96tMA0GCSqGSIb3DQEBCwUAA4IBAQAx U2J8f2oxHf76LkhyppaD8rfQRBchohFbayBqupYtZxM8qITwhXxm3JvM/WHr/NAV ekUdFnv27ERWCYtMHraWjJHaOm1dVG8O2X2Ofoe02L85+bG+bD5r4lgzkHI6+JoW n6fX6uM/GtlTzjOZ9LSSnSPZhAFCpM0pK/Z6MaTz+LAWEgET+U8DPaKpeBibGYLb qXOfhfZHCStl03QAze4q9I41gxQYCFOY26eYtLDdTTLNQjIYYSmFeyUWC9OQwThf QstSRQmx4iBkmZb4OT9h0xmos5CBmUko649hHfNr1xhCsmGotBfsSfdDquK6/XzE Zvm4ZJEehuKOgPdet1MG -----END CERTIFICATE-----Generated at Tue Jan 20 09:41:01 2026 by rpki-client