This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pjtbuDDIP60490InvdLHCRHZDqQ.roa File: pjtbuDDIP60490InvdLHCRHZDqQ.roa (raw, json) Hash identifier: pAye/yqk950vMoSGLpBn5mko9lN1pnsedIX3xvnJSd0= Subject key identifier: A6:3B:5B:B8:30:C8:3F:AD:38:F7:42:27:BD:D2:C7:09:11:D9:0E:A4 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39277E55C731B6F7123971E8059FFD Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pjtbuDDIP60490InvdLHCRHZDqQ.roa Signing time: Fri 02 Jan 2026 10:20:33 +0000 ROA not before: Fri 02 Jan 2026 10:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43927 IP address blocks: 2a0c:b642:1a06::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:27:7e:55:c7:31:b6:f7:12:39:71:e8:05:9f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a63b5bb830c83fad38f74227bdd2c70911d90ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f1:26:a8:7a:da:29:99:3b:b5:1a:00:cd:8c: c6:1c:71:f3:6f:78:b3:c3:5f:2a:4c:e7:db:06:45: 93:0a:24:5e:23:4b:85:8a:49:57:1a:80:3e:08:18: d5:69:92:1f:25:f6:f7:7d:f9:6a:7e:b4:84:b0:54: c3:b8:cb:fc:7b:a2:de:ee:cc:6d:29:c9:23:7c:dc: fa:60:4c:ed:04:fb:c4:71:dd:97:d3:11:89:16:d9: e8:dc:0e:c9:9c:4e:37:51:ea:75:8e:4d:aa:41:d2: ff:17:12:f8:f4:e2:e6:82:7b:44:c0:f7:fd:85:bd: c0:13:52:05:95:60:9a:ba:89:56:59:c8:d5:18:7c: be:73:23:94:d0:6b:d2:fc:73:73:bd:1b:43:57:9e: 87:54:f2:8b:03:25:28:46:f8:3b:af:5d:9c:f7:4b: 4e:f3:52:f0:b0:b3:fd:aa:69:b4:bd:97:ef:89:24: 7b:92:1d:e7:6c:17:8e:d2:bd:c8:b6:f4:57:ec:1a: 9f:54:bc:50:7c:7e:95:0a:78:88:8b:bd:78:d9:32: 35:a4:6c:7c:2b:87:b8:b0:28:87:81:75:d7:ed:35: cb:a0:a0:f4:b3:58:5d:cf:7d:6b:31:ec:30:88:69: 59:81:fc:56:6a:48:4a:22:9a:7b:dd:86:d0:cd:6c: 8e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3B:5B:B8:30:C8:3F:AD:38:F7:42:27:BD:D2:C7:09:11:D9:0E:A4 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/pjtbuDDIP60490InvdLHCRHZDqQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b642:1a06::/48 Signature Algorithm: sha256WithRSAEncryption 44:5b:29:d7:59:34:ab:82:a9:06:b3:df:e8:08:d3:44:c4:27: 8c:6d:dd:b2:90:fc:98:45:01:02:7c:3d:1c:6b:4e:4a:da:d8: 3a:d0:2e:d1:35:a3:4c:e9:3e:d1:37:ea:fe:75:44:d3:f1:0c: 8a:27:65:86:2e:42:f2:0f:1b:33:58:63:06:6a:11:01:d9:6f: 23:78:ea:1b:6f:31:b4:71:e8:f6:0f:a6:bf:92:85:31:ca:1e: f9:84:b3:7e:02:83:cb:88:bd:bf:79:58:2d:c0:b7:43:72:bc: 68:c8:90:ea:ab:6a:ca:75:f6:29:9d:42:c2:0f:58:19:6e:60: 0e:46:e6:07:d4:f5:84:5f:17:4b:22:df:ab:7b:84:5e:22:c7: 28:13:83:da:83:a2:f2:7c:16:ad:59:ee:9f:96:59:ff:e4:1e: 77:e2:bc:5a:d8:1a:24:f7:6c:c2:7c:cf:f1:1b:5a:2b:96:77: 22:34:3a:5f:65:43:41:77:38:b5:15:b1:a0:4b:ea:32:bf:6a: a7:ae:93:99:33:65:0e:23:4d:b7:bb:55:b1:e4:66:f3:2a:03: a7:e1:17:99:45:75:50:35:b3:db:de:52:b6:0e:8f:ac:d4:66: 5c:c0:1d:11:90:57:53:37:eb:e1:6b:56:e4:fb:c5:57:d4:ad: da:62:1f:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OSd+VccxtvcSOXHoBZ/9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjNiNWJiODMwYzgzZmFkMzhmNzQyMjdiZGQyYzcwOTExZDkwZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/EmqHraKZk7tRoAzYzGHHHzb3iz w18qTOfbBkWTCiReI0uFiklXGoA+CBjVaZIfJfb3fflqfrSEsFTDuMv8e6Le7sxt KckjfNz6YEztBPvEcd2X0xGJFtno3A7JnE43Uep1jk2qQdL/FxL49OLmgntEwPf9 hb3AE1IFlWCauolWWcjVGHy+cyOU0GvS/HNzvRtDV56HVPKLAyUoRvg7r12c90tO 81LwsLP9qmm0vZfviSR7kh3nbBeO0r3ItvRX7BqfVLxQfH6VCniIi7142TI1pGx8 K4e4sCiHgXXX7TXLoKD0s1hdz31rMewwiGlZgfxWakhKIpp73YbQzWyOhQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKY7W7gwyD+tOPdCJ73SxwkR2Q6kMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvcGp0YnVERElQNjA0OTBJbnZkTEhDUkhaRHFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgy2QhoG MA0GCSqGSIb3DQEBCwUAA4IBAQBEWynXWTSrgqkGs9/oCNNExCeMbd2ykPyYRQEC fD0ca05K2tg60C7RNaNM6T7RN+r+dUTT8QyKJ2WGLkLyDxszWGMGahEB2W8jeOob bzG0cej2D6a/koUxyh75hLN+AoPLiL2/eVgtwLdDcrxoyJDqq2rKdfYpnULCD1gZ bmAORuYH1PWEXxdLIt+re4ReIscoE4Pag6LyfBatWe6flln/5B534rxa2Bok92zC fM/xG1orlnciNDpfZUNBdzi1FbGgS+oyv2qnrpOZM2UOI023u1Wx5GbzKgOn4ReZ RXVQNbPb3lK2Do+s1GZcwB0RkFdTN+vha1bk+8VX1K3aYh/N -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:57 2026 by rpki-client