This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/pIP-J3Hr0bjQHlp_icnps7koRX4.roa File: pIP-J3Hr0bjQHlp_icnps7koRX4.roa (raw, json) Hash identifier: wHGf3sOGDCSkFAvYxU0RGmIHZCDG9ji0dNgVFOg+Lwk= Subject key identifier: A4:83:FE:27:71:EB:D1:B8:D0:1E:5A:7F:89:C9:E9:B3:B9:28:45:7E Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38BEB5213EE8A5A09A720E70009A6F Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/pIP-J3Hr0bjQHlp_icnps7koRX4.roa Signing time: Fri 02 Jan 2026 10:20:06 +0000 ROA not before: Fri 02 Jan 2026 10:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214880 IP address blocks: 2a13:a5c7:1500::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:be:b5:21:3e:e8:a5:a0:9a:72:0e:70:00:9a:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a483fe2771ebd1b8d01e5a7f89c9e9b3b928457e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b0:bc:fd:09:dd:3c:b7:39:d4:46:52:b0:9c: ed:65:0b:b7:b0:87:4e:40:a7:d7:52:c5:19:92:ee: a3:10:20:a9:b5:ec:60:af:96:bc:cc:ec:6e:0e:0e: 46:35:d3:ad:90:a7:40:a8:6f:af:6c:57:1f:8a:92: 50:5a:2e:72:43:17:52:a1:23:27:f9:32:09:78:e3: 06:7a:ef:43:9f:1f:7c:1b:47:2b:95:9f:3d:8d:72: 66:f8:0b:45:fd:f6:d9:c9:a6:a8:6a:76:a1:ff:95: bf:b6:24:7e:b3:23:96:d6:72:ac:0b:46:80:ba:0a: 7e:fa:1b:63:26:5e:ba:f4:98:0f:5b:31:ea:36:e9: c1:5c:32:08:85:5b:a3:d7:c6:5a:01:c2:30:9d:05: 8a:c8:ad:88:ba:c8:a4:de:8f:e4:c7:19:0a:74:79: 99:68:b5:5b:73:46:ed:93:15:8e:40:34:fd:5e:39: 79:81:70:96:31:2b:c0:95:50:1b:82:c8:dc:cf:80: 67:ac:2e:e7:6b:c7:68:da:4c:23:be:30:fd:21:37: c1:04:9b:49:bb:89:5b:57:61:de:73:99:26:99:01: 6f:d6:86:64:d8:50:67:2e:5c:ed:ed:de:cf:b8:ff: 39:de:54:25:eb:21:7d:ff:85:0c:6a:05:3b:f8:40: 2f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:83:FE:27:71:EB:D1:B8:D0:1E:5A:7F:89:C9:E9:B3:B9:28:45:7E X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/pIP-J3Hr0bjQHlp_icnps7koRX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c7:1500::/40 Signature Algorithm: sha256WithRSAEncryption a0:a2:36:bf:ee:be:2c:f6:c6:88:03:44:df:54:24:eb:7d:dc: ec:6f:fe:19:c9:70:64:26:69:99:1f:ab:4f:42:fb:43:1e:47: 77:ef:72:9c:e5:28:30:2e:af:18:7c:7c:24:af:00:b7:9b:b5: c9:8b:15:6f:38:21:47:f4:92:06:46:9c:df:97:36:11:d8:bb: 1a:c6:19:f5:46:e9:22:46:65:ae:3c:c2:8f:10:86:18:7c:e3: 89:a3:1a:39:38:07:fd:7f:0e:65:b0:55:14:94:7f:27:02:b9: f9:d3:20:f9:e5:9a:93:7b:7c:75:bd:cf:a2:8f:eb:83:bb:f7: 4a:34:ea:fb:56:e7:cd:2a:d1:11:04:eb:db:72:98:c1:69:0c: d5:1f:ec:08:96:3b:08:f0:e0:a0:65:0d:45:54:e2:d1:bd:2f: db:b1:ea:a5:b7:94:56:dd:25:f3:bd:40:ba:e3:27:5f:70:df: 56:95:8c:1f:74:3f:3f:b9:6b:80:b1:ff:a0:35:18:47:e1:ff: 3f:8f:52:ac:95:75:2e:3d:01:27:f7:56:e9:78:28:9a:b9:27: 90:81:ef:73:fa:cf:71:47:8c:cf:9a:a0:eb:e0:1d:4d:33:80: cb:e2:a1:a8:55:58:bf:85:80:0c:f4:57:f6:00:3f:a2:ac:aa: 8b:21:16:57 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OL61IT7opaCacg5wAJpvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDgzZmUyNzcxZWJkMWI4ZDAxZTVhN2Y4OWM5ZTliM2I5Mjg0NTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rC8/QndPLc51EZSsJztZQu3sIdO QKfXUsUZku6jECCptexgr5a8zOxuDg5GNdOtkKdAqG+vbFcfipJQWi5yQxdSoSMn +TIJeOMGeu9Dnx98G0crlZ89jXJm+AtF/fbZyaaoanah/5W/tiR+syOW1nKsC0aA ugp++htjJl669JgPWzHqNunBXDIIhVuj18ZaAcIwnQWKyK2Iusik3o/kxxkKdHmZ aLVbc0btkxWOQDT9Xjl5gXCWMSvAlVAbgsjcz4BnrC7na8do2kwjvjD9ITfBBJtJ u4lbV2Hec5kmmQFv1oZk2FBnLlzt7d7PuP853lQl6yF9/4UMagU7+EAvSwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKSD/idx69G40B5af4nJ6bO5KEV+MB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvcElQLUozSHIwYmpRSGxwX2ljbnBzN2tvUlg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhOlxxUw DQYJKoZIhvcNAQELBQADggEBAKCiNr/uviz2xogDRN9UJOt93Oxv/hnJcGQmaZkf q09C+0MeR3fvcpzlKDAurxh8fCSvALebtcmLFW84IUf0kgZGnN+XNhHYuxrGGfVG 6SJGZa48wo8Qhhh844mjGjk4B/1/DmWwVRSUfycCufnTIPnlmpN7fHW9z6KP64O7 90o06vtW580q0REE69tymMFpDNUf7AiWOwjw4KBlDUVU4tG9L9ux6qW3lFbdJfO9 QLrjJ19w31aVjB90Pz+5a4Cx/6A1GEfh/z+PUqyVdS49ASf3Vul4KJq5J5CB73P6 z3FHjM+aoOvgHU0zgMvioahVWL+FgAz0V/YAP6KsqoshFlc= -----END CERTIFICATE-----Generated at Mon Jan 5 03:48:38 2026 by rpki-client