This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/PBQ90Wgy6M4SEkfQzgan77cHl-g.roa File: PBQ90Wgy6M4SEkfQzgan77cHl-g.roa (raw, json) Hash identifier: iVkZ3qKGXfgftGuOAhegIIRNsLxxhb2ssniaZrXGIi0= Subject key identifier: 3C:14:3D:D1:68:32:E8:CE:12:12:47:D0:CE:06:A7:EF:B7:07:97:E8 Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82 Certificate serial: 019B7F154AEE2A2C3015EAC6ACB0914E4CF5 Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/PBQ90Wgy6M4SEkfQzgan77cHl-g.roa Signing time: Fri 02 Jan 2026 14:21:00 +0000 ROA not before: Fri 02 Jan 2026 14:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211715 IP address blocks: 2001:67c:1350::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:4a:ee:2a:2c:30:15:ea:c6:ac:b0:91:4e:4c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82 Validity Not Before: Jan 2 14:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c143dd16832e8ce121247d0ce06a7efb70797e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:09:fe:0c:77:b5:5a:24:c0:5f:3a:89:0e:f5: d3:ea:bd:e5:ad:fc:30:c9:f7:62:fb:b6:14:47:41: 97:fd:04:50:c1:e8:b7:2e:46:05:17:0f:37:f5:b7: 9f:0c:f3:e6:19:25:e8:44:30:25:b9:98:11:35:cc: 5b:48:3c:86:22:f4:e2:61:6f:ed:92:66:0b:a1:49: 25:c3:6a:75:ae:df:b0:d9:6c:a7:c1:b1:f3:cd:d0: db:d7:9d:4f:dd:88:3a:ff:a7:37:8f:ab:65:a3:55: 52:52:0f:22:bd:48:a3:8a:10:49:24:65:4f:09:80: 1c:64:48:8d:4d:2b:6c:6e:40:5c:c0:90:87:18:49: 50:71:a7:e2:27:22:dd:91:0c:1a:66:5a:7b:8f:78: 3b:fa:4e:46:a4:4a:14:b8:99:9e:01:9c:23:ae:a8: 55:09:c8:33:a3:61:c1:9e:54:72:fb:0c:18:e4:c2: 5f:d4:1b:7b:b9:98:6d:85:78:bd:a8:56:5b:86:d8: 55:03:32:33:ae:b2:da:0b:38:47:cb:a8:44:dc:2a: 65:f5:1d:4b:8d:4a:4c:41:51:68:83:64:66:a7:71: 50:24:74:88:82:9b:52:3b:9d:ca:ae:0b:7f:50:8e: 04:d6:05:a7:ab:0a:e6:9b:6d:8d:38:b2:db:11:91: e5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:14:3D:D1:68:32:E8:CE:12:12:47:D0:CE:06:A7:EF:B7:07:97:E8 X509v3 Authority Key Identifier: keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/PBQ90Wgy6M4SEkfQzgan77cHl-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:1350::/48 Signature Algorithm: sha256WithRSAEncryption 95:71:06:31:e9:d1:db:65:87:76:58:16:d9:95:d2:7e:38:19: c0:7b:e3:d9:b5:c5:c4:4a:ad:2d:f4:05:c7:2d:2e:94:9f:95: 70:0c:e6:1e:04:56:29:ac:dc:5d:b2:a5:42:64:19:b9:07:c4: 35:1b:e2:71:88:c5:fb:0a:16:11:b9:40:e9:8c:36:70:fe:49: 5b:92:fa:82:7a:a8:90:ee:5d:98:95:43:b2:08:0a:d1:a9:1b: b8:ac:54:3f:34:75:16:8a:76:3c:70:19:d8:36:57:2b:aa:f1: b0:ac:bb:db:3d:f9:40:14:55:17:48:f8:03:c2:8c:62:02:9f: 12:02:25:73:01:68:71:38:be:5b:fa:28:c2:66:27:51:bb:d7: 08:9a:91:b9:a8:14:62:b2:85:70:ce:1a:1a:7c:72:ab:c0:71: b6:a9:4c:19:e3:4c:08:50:b2:82:8a:7b:c9:93:05:b0:2d:3b: 10:5a:c2:9b:f1:b0:dc:d6:8d:17:9f:59:ef:67:2d:46:a8:f7: 69:cb:cc:b5:ac:23:bf:37:67:1e:f9:37:c1:f1:61:80:3d:74: bf:4a:19:28:87:30:2e:5a:b4:f2:79:94:41:27:c6:f8:8b:54: d3:96:31:e2:b9:d5:cc:c7:b9:fa:80:93:58:7e:d8:39:97:77: f8:58:4a:92 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt/FUruKiwwFerGrLCRTkz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiN2YxOTFhOGRiYmYxZjEzMTQ3NDk3NTM1OGYyNDQ0ZDY5 NTBlODIwHhcNMjYwMTAyMTQyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzE0M2RkMTY4MzJlOGNlMTIxMjQ3ZDBjZTA2YTdlZmI3MDc5N2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Qn+DHe1WiTAXzqJDvXT6r3lrfww yfdi+7YUR0GX/QRQwei3LkYFFw839befDPPmGSXoRDAluZgRNcxbSDyGIvTiYW/t kmYLoUklw2p1rt+w2WynwbHzzdDb151P3Yg6/6c3j6tlo1VSUg8ivUijihBJJGVP CYAcZEiNTStsbkBcwJCHGElQcafiJyLdkQwaZlp7j3g7+k5GpEoUuJmeAZwjrqhV Ccgzo2HBnlRy+wwY5MJf1Bt7uZhthXi9qFZbhthVAzIzrrLaCzhHy6hE3Cpl9R1L jUpMQVFog2Rmp3FQJHSIgptSO53Krgt/UI4E1gWnqwrmm22NOLLbEZHlpQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFDwUPdFoMujOEhJH0M4Gp++3B5foMB8GA1UdIwQY MBaAFPt/GRqNu/HxMUdJdTWPJETWlQ6CMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zOFpHbzI3OGZFeFIwbDFOWThrUk5hVkRvSS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2QvMjJmMGE4LWI2ZjAtNDRiNi05YWEx LTg3NDdkYWE1OTNmMi8xL1BCUTkwV2d5Nk00U0VrZlF6Z2FuNzdjSGwtZy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvM2QvMjJmMGE4LWI2ZjAtNDRiNi05YWExLTg3NDdkYWE1OTNm Mi8xLzEtMzhaR28yNzhmRXhSMGwxTlk4a1JOYVZEb0kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAgAQZ8 E1AwDQYJKoZIhvcNAQELBQADggEBAJVxBjHp0dtlh3ZYFtmV0n44GcB749m1xcRK rS30BcctLpSflXAM5h4EVims3F2ypUJkGbkHxDUb4nGIxfsKFhG5QOmMNnD+SVuS +oJ6qJDuXZiVQ7IICtGpG7isVD80dRaKdjxwGdg2Vyuq8bCsu9s9+UAUVRdI+APC jGICnxICJXMBaHE4vlv6KMJmJ1G71wiakbmoFGKyhXDOGhp8cqvAcbapTBnjTAhQ soKKe8mTBbAtOxBawpvxsNzWjRefWe9nLUao92nLzLWsI783Zx75N8HxYYA9dL9K GSiHMC5atPJ5lEEnxviLVNOWMeK51czHufqAk1h+2DmXd/hYSpI= -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:13 2026 by rpki-client