This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/pIfCPX8CwCcqgk6tqTYDYzHyzBU.roa File: pIfCPX8CwCcqgk6tqTYDYzHyzBU.roa (raw, json) Hash identifier: x0yoL4GYRvH3Sj7/+JiV11canWDMxuLSopg5Rmf4bZQ= Subject key identifier: A4:87:C2:3D:7F:02:C0:27:2A:82:4E:AD:A9:36:03:63:31:F2:CC:15 Certificate issuer: /CN=7a80fe5635e6d65cede93b23d4e101d4075337a1 Certificate serial: 019B797DF2F9D838D00C38FB64DF96A51B82 Authority key identifier: 7A:80:FE:56:35:E6:D6:5C:ED:E9:3B:23:D4:E1:01:D4:07:53:37:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/pIfCPX8CwCcqgk6tqTYDYzHyzBU.roa Signing time: Thu 01 Jan 2026 12:17:35 +0000 ROA not before: Thu 01 Jan 2026 12:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211854 IP address blocks: 2001:678:1088::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.crl rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.mft rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f2:f9:d8:38:d0:0c:38:fb:64:df:96:a5:1b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a80fe5635e6d65cede93b23d4e101d4075337a1 Validity Not Before: Jan 1 12:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a487c23d7f02c0272a824eada936036331f2cc15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:66:1a:3a:cb:14:f2:b6:1a:e6:59:8a:7e: 73:53:db:e8:75:3d:96:55:1d:b9:12:4c:9f:61:03: f3:a9:bb:1b:73:2c:20:80:55:01:0c:d1:99:bc:b1: ad:6d:5b:48:0b:54:a3:78:93:f8:24:92:74:f1:a2: d1:b7:d5:4c:01:e3:18:92:87:68:35:db:74:63:f2: b9:a0:63:a9:59:3a:9a:df:ce:ed:e0:f3:f4:e2:47: 10:6c:92:61:7d:50:71:e6:0d:10:96:fe:0c:a9:f1: 19:9f:57:17:25:09:46:6c:53:20:9a:91:2d:bb:2e: a9:df:47:9d:b1:0f:26:62:cd:01:be:d6:b6:3b:18: a7:df:64:63:68:21:70:a7:62:04:d4:c7:f5:09:ae: 35:aa:13:db:65:76:af:38:1c:d2:2f:90:91:18:f4: 2f:a9:c2:34:e7:57:25:0c:5d:f2:6b:af:1c:89:56: 14:98:c3:72:2d:16:63:d6:24:a2:2b:d0:31:fb:61: 9a:b7:18:0d:49:95:45:fa:ab:ee:03:de:93:17:04: a9:6e:39:3b:f7:2f:f7:c7:ae:b6:76:22:93:51:cf: 7c:10:3f:da:63:6c:4d:b9:a6:55:a7:4f:11:1a:15: 06:29:cd:00:a2:ac:35:66:b8:50:8e:35:18:b6:2a: 9f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:87:C2:3D:7F:02:C0:27:2A:82:4E:AD:A9:36:03:63:31:F2:CC:15 X509v3 Authority Key Identifier: keyid:7A:80:FE:56:35:E6:D6:5C:ED:E9:3B:23:D4:E1:01:D4:07:53:37:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/pIfCPX8CwCcqgk6tqTYDYzHyzBU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1088::/48 Signature Algorithm: sha256WithRSAEncryption b7:8e:73:4e:3a:70:47:03:85:b3:29:b0:57:20:ad:44:d5:a0: 74:35:53:6f:66:dd:5a:32:49:a9:f5:e5:cb:88:b3:c2:70:c7: 7b:25:45:0c:25:d8:23:61:b4:ed:7f:26:1d:71:b1:6a:7d:5a: fe:ca:25:1d:86:13:db:9f:1b:57:e2:63:0c:ad:0a:8f:b7:3f: 28:82:ec:ef:dc:14:3a:6d:2f:3d:6e:53:91:99:1f:82:b2:53: 26:05:b3:d4:c0:5d:75:12:9c:20:0d:dd:28:73:4d:6f:9e:6e: 98:a7:23:19:d3:55:f6:38:65:d3:ba:11:44:c4:e0:ce:20:56: e8:e4:dd:10:48:51:a4:32:80:84:05:8a:e7:42:c6:50:99:76: c3:23:13:1b:33:60:6a:ef:ad:c4:05:37:4e:9f:9c:1c:50:77: 17:19:94:d9:7d:c1:c8:7a:47:c8:16:aa:19:53:63:34:19:17: 14:83:f3:9b:b5:28:f7:58:61:bd:f9:34:75:ce:b2:79:69:90: 11:95:f1:c4:6f:69:03:b5:ec:d2:50:6a:77:33:10:32:1c:ae: ac:be:dc:3a:fb:f9:0c:aa:de:2d:28:b4:8c:6c:3f:cf:ab:ba: 3a:4c:f8:81:74:20:4b:40:1f:6a:87:93:08:99:02:89:00:55: 66:49:8b:43 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ffL52DjQDDj7ZN+WpRuCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODBmZTU2MzVlNmQ2NWNlZGU5M2IyM2Q0ZTEwMWQ0MDc1 MzM3YTEwHhcNMjYwMTAxMTIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDg3YzIzZDdmMDJjMDI3MmE4MjRlYWRhOTM2MDM2MzMxZjJjYzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXRmGjrLFPK2GuZZin5zU9vodT2W VR25EkyfYQPzqbsbcywggFUBDNGZvLGtbVtIC1SjeJP4JJJ08aLRt9VMAeMYkodo Ndt0Y/K5oGOpWTqa387t4PP04kcQbJJhfVBx5g0Qlv4MqfEZn1cXJQlGbFMgmpEt uy6p30edsQ8mYs0Bvta2Oxin32RjaCFwp2IE1Mf1Ca41qhPbZXavOBzSL5CRGPQv qcI051clDF3ya68ciVYUmMNyLRZj1iSiK9Ax+2GatxgNSZVF+qvuA96TFwSpbjk7 9y/3x662diKTUc98ED/aY2xNuaZVp08RGhUGKc0Aoqw1ZrhQjjUYtiqfuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKSHwj1/AsAnKoJOrak2A2Mx8swVMB8GA1UdIwQY MBaAFHqA/lY15tZc7ek7I9ThAdQHUzehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9ELVZqWG0xbHp0NlRzajFPRUIxQWRUTjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82ZjA4YTctM2QyYy00ZjgzLTk4NjEt MzI4MWMwZThlOWZlLzEvcElmQ1BYOEN3Q2NxZ2s2dHFUWURZekh5ekJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS82ZjA4YTctM2QyYy00ZjgzLTk4NjEtMzI4MWMwZThlOWZl LzEvZW9ELVZqWG0xbHp0NlRzajFPRUIxQWRUTjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBCI MA0GCSqGSIb3DQEBCwUAA4IBAQC3jnNOOnBHA4WzKbBXIK1E1aB0NVNvZt1aMkmp 9eXLiLPCcMd7JUUMJdgjYbTtfyYdcbFqfVr+yiUdhhPbnxtX4mMMrQqPtz8oguzv 3BQ6bS89blORmR+CslMmBbPUwF11EpwgDd0oc01vnm6YpyMZ01X2OGXTuhFExODO IFbo5N0QSFGkMoCEBYrnQsZQmXbDIxMbM2Bq763EBTdOn5wcUHcXGZTZfcHIekfI FqoZU2M0GRcUg/ObtSj3WGG9+TR1zrJ5aZARlfHEb2kDtezSUGp3MxAyHK6svtw6 +/kMqt4tKLSMbD/Pq7o6TPiBdCBLQB9qh5MImQKJAFVmSYtD -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:27 2026 by rpki-client