This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/PfDqVJ2AuhPLDK1F25vWraX2zng.roa File: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (raw, json) Hash identifier: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg= Subject key identifier: 3D:F0:EA:54:9D:80:BA:13:CB:0C:AD:45:DB:9B:D6:AD:A5:F6:CE:78 Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Certificate serial: 019B7C12B2BE396C026ACD9A685F69396747 Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/PfDqVJ2AuhPLDK1F25vWraX2zng.roa Signing time: Fri 02 Jan 2026 00:19:18 +0000 ROA not before: Fri 02 Jan 2026 00:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44817 IP address blocks: 2a0a:280:3300::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b2:be:39:6c:02:6a:cd:9a:68:5f:69:39:67:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f Validity Not Before: Jan 2 00:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3df0ea549d80ba13cb0cad45db9bd6ada5f6ce78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:c5:28:45:e5:46:1e:b3:c8:36:8b:75:71: 09:e5:e7:3b:f1:17:78:d8:c7:6f:90:46:02:79:d9: 89:e0:8c:c1:0d:2e:d8:0f:28:52:3e:a7:35:22:41: ba:ce:82:5e:6f:90:27:d9:df:bd:32:1f:fb:2e:56: 4c:26:77:d0:c5:92:69:b9:1b:4c:73:29:cb:90:33: 1d:e4:35:ef:1e:55:57:8e:c9:07:7c:ab:f5:9b:26: 60:5a:3b:3f:55:a0:97:cb:74:6a:8a:55:7e:74:15: ad:17:8a:17:b8:cd:99:f1:bc:e5:06:21:34:92:4e: 18:ba:55:2d:44:96:6a:99:a4:27:21:3c:90:09:56: 80:fe:c7:90:d6:f8:25:b7:a5:22:88:a4:75:c8:26: 72:fb:11:9d:56:5b:eb:88:92:03:1f:88:94:8e:28: b1:e3:88:8b:a8:fa:57:07:5b:26:1e:32:c5:d7:8f: 90:75:d7:51:d8:08:1a:53:3c:e2:4a:73:cd:b5:15: 4b:48:f8:84:9b:33:de:91:b1:55:9f:a4:46:a7:68: 20:12:68:0c:13:bf:3d:66:b6:a3:7f:de:45:18:3b: 6f:9d:7d:8e:a0:1e:86:92:ef:04:5d:5e:51:72:41: c5:18:f1:65:b1:c8:5e:d2:08:d4:a7:3c:a0:1d:59: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F0:EA:54:9D:80:BA:13:CB:0C:AD:45:DB:9B:D6:AD:A5:F6:CE:78 X509v3 Authority Key Identifier: keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/PfDqVJ2AuhPLDK1F25vWraX2zng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:280:3300::/40 Signature Algorithm: sha256WithRSAEncryption 7c:3d:ec:c1:3f:d8:fc:ef:e2:5e:2e:4d:9f:0b:9d:43:cb:f4: c2:06:38:5e:17:45:bd:5a:5c:6d:ed:39:ff:8b:71:ce:99:16: 3b:ed:1d:07:b3:1b:b7:8d:ed:68:ca:e1:7c:3f:35:10:ef:a4: 03:13:5d:95:37:48:cb:82:49:14:23:c4:15:e1:56:3e:04:75: fd:32:df:b6:80:1b:fc:da:2c:2c:d0:23:e7:78:41:ec:f8:aa: 76:0b:42:32:06:26:ce:57:07:79:11:8d:1b:54:a1:ad:ab:79: 5b:7e:3c:53:24:1f:da:3f:3f:3c:ad:a5:b8:33:52:be:e2:b8: 05:f9:7b:fd:6c:50:e3:be:63:d3:f3:e5:1e:e6:de:13:3f:0f: 52:a2:75:4f:53:f6:ee:22:ac:89:fc:e5:b7:05:d9:47:a3:b2: 2f:91:21:2e:88:cc:3a:4d:d1:a3:ec:51:22:6b:87:30:e3:7a: 30:c0:4e:40:a5:18:35:5b:12:bc:84:19:95:49:c4:f6:c7:9e: e1:f3:20:68:86:2e:9b:23:1e:63:5b:e3:4d:54:6f:ba:68:21: 44:bd:56:b1:8f:72:39:77:98:05:0e:04:1d:fb:41:fa:8a:55: 68:e2:7a:3d:19:b4:56:68:e8:96:72:43:41:45:5f:a5:24:40: 2a:04:9c:94 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8ErK+OWwCas2aaF9pOWdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi MzM2OWYwHhcNMjYwMTAyMDAxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGYwZWE1NDlkODBiYTEzY2IwY2FkNDVkYjliZDZhZGE1ZjZjZTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtobFKEXlRh6zyDaLdXEJ5ec78Rd4 2MdvkEYCedmJ4IzBDS7YDyhSPqc1IkG6zoJeb5An2d+9Mh/7LlZMJnfQxZJpuRtM cynLkDMd5DXvHlVXjskHfKv1myZgWjs/VaCXy3RqilV+dBWtF4oXuM2Z8bzlBiE0 kk4YulUtRJZqmaQnITyQCVaA/seQ1vglt6UiiKR1yCZy+xGdVlvriJIDH4iUjiix 44iLqPpXB1smHjLF14+QdddR2AgaUzziSnPNtRVLSPiEmzPekbFVn6RGp2ggEmgM E789Zrajf95FGDtvnX2OoB6Gku8EXV5RckHFGPFlsche0gjUpzygHVkRWQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFD3w6lSdgLoTywytRdub1q2l9s54MB8GA1UdIwQY MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt ZjUxYzVmYjNkZjlhLzEvUGZEcVZKMkF1aFBMREsxRjI1dldyYVgyem5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgoCgDMw DQYJKoZIhvcNAQELBQADggEBAHw97ME/2Pzv4l4uTZ8LnUPL9MIGOF4XRb1aXG3t Of+Lcc6ZFjvtHQezG7eN7WjK4Xw/NRDvpAMTXZU3SMuCSRQjxBXhVj4Edf0y37aA G/zaLCzQI+d4Qez4qnYLQjIGJs5XB3kRjRtUoa2reVt+PFMkH9o/PzytpbgzUr7i uAX5e/1sUOO+Y9Pz5R7m3hM/D1KidU9T9u4irIn85bcF2Uejsi+RIS6IzDpN0aPs USJrhzDjejDATkClGDVbEryEGZVJxPbHnuHzIGiGLpsjHmNb401Ub7poIUS9VrGP cjl3mAUOBB37QfqKVWjiej0ZtFZo6JZyQ0FFX6UkQCoEnJQ= -----END CERTIFICATE-----Generated at Wed Jan 21 17:31:30 2026 by rpki-client