This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/PPbDqXTI2oLfXrOdBjzamnjf-Is.roa File: PPbDqXTI2oLfXrOdBjzamnjf-Is.roa (raw, json) Hash identifier: exsR5Q3c8hhnVYhW0MoOSEpqsmdyDC5TxI3F+Ib3Uig= Subject key identifier: 3C:F6:C3:A9:74:C8:DA:82:DF:5E:B3:9D:06:3C:DA:9A:78:DF:F8:8B Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Certificate serial: 019B7EA6C896F6A4A4D3644B9AFFA0129518 Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/PPbDqXTI2oLfXrOdBjzamnjf-Is.roa Signing time: Fri 02 Jan 2026 12:20:18 +0000 ROA not before: Fri 02 Jan 2026 12:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 2a01:e284::/32 maxlen: 32 2a01:e285::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:c8:96:f6:a4:a4:d3:64:4b:9a:ff:a0:12:95:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81 Validity Not Before: Jan 2 12:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cf6c3a974c8da82df5eb39d063cda9a78dff88b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:38:5b:33:59:a2:47:b9:cf:1c:ca:a2:c7:74: c2:ec:b6:9f:1d:21:07:ba:9d:5d:1c:91:7e:76:1a: f5:29:0f:b8:1b:3f:5c:bd:f4:3b:1f:b1:bd:4f:b2: d4:3b:3a:05:b7:52:7f:e0:3a:68:c8:1f:98:3a:2c: e7:cc:f8:cd:86:68:a4:56:17:0f:58:ea:92:4a:e8: ce:fa:2f:9c:be:c9:3d:9f:48:d5:d5:a7:42:d1:01: 97:61:34:00:6c:8a:d9:c2:d8:fa:39:01:b9:b4:d0: ea:60:94:3d:b0:86:49:a4:1c:ec:26:8d:f4:c5:76: d6:3c:b9:98:a9:d2:a5:3a:17:99:19:31:cb:5f:90: 83:e3:6f:90:ef:1b:5b:e7:ab:f6:57:43:86:ef:16: 3e:0b:fb:8b:1a:29:b7:2d:83:95:40:77:69:dd:31: 55:a5:b7:dc:63:a4:ab:46:1d:9b:ee:90:a2:6c:9f: c2:d9:34:64:68:88:6a:6d:13:e2:2e:2d:46:dd:6e: 00:1b:16:6d:c6:79:4f:c9:88:07:52:5f:a2:59:f3: de:d7:99:39:56:3b:16:9f:ff:2d:15:c5:02:90:59: c9:22:7d:b9:6b:75:e2:7f:e9:6d:87:18:95:95:7e: 68:2d:d1:22:fe:cb:56:01:2c:71:8d:db:89:2b:6b: ea:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F6:C3:A9:74:C8:DA:82:DF:5E:B3:9D:06:3C:DA:9A:78:DF:F8:8B X509v3 Authority Key Identifier: keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/PPbDqXTI2oLfXrOdBjzamnjf-Is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e284::/31 Signature Algorithm: sha256WithRSAEncryption 83:37:b8:00:85:97:4e:f3:7b:88:d8:4d:28:9b:54:c9:e5:25: 3f:b3:66:3d:f0:98:c8:a0:56:e9:9f:be:a0:61:ed:ec:a3:f3: c6:4b:5e:bc:bc:14:3e:80:aa:f1:20:ac:46:67:bb:fc:96:6f: b3:e1:77:71:81:ae:49:17:01:64:c9:bd:0e:26:fa:56:77:5a: 55:55:34:58:67:59:51:8a:e7:f9:5d:95:cd:6c:0c:00:05:b7: 21:df:af:3b:f9:1a:2a:2f:ed:3c:4b:65:4d:80:7f:b6:85:d2: 9c:d1:a4:d4:6c:a8:73:24:89:d3:da:27:d9:e1:c7:83:86:6c: df:85:fc:aa:86:ed:2b:3f:d2:cd:00:6f:62:a2:c8:bc:cb:ae: 25:8b:bc:87:fc:fb:ea:11:06:81:6c:b8:67:ea:47:d4:34:6f: d7:20:22:e1:b1:68:04:a9:8c:a6:5d:cd:38:df:6b:9c:fe:1b: f2:34:b7:db:e8:10:af:fb:bd:c3:de:89:79:df:0b:3a:9e:be: f8:93:d0:6f:80:e2:01:df:f5:22:98:29:26:3a:3a:86:5a:dd: 12:1d:07:c5:b8:98:0b:ea:8c:3c:48:f8:d5:84:94:04:0d:62: 35:61:bf:77:64:97:d6:62:8d:ae:cc:da:c4:b6:4e:d6:2c:13: 37:f8:f6:af -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+psiW9qSk02RLmv+gEpUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZGJlMWU3ZDllODdkNjg3MDFhNDAzNWE3NmM1MWJmZWNk ODhkODEwHhcNMjYwMTAyMTIyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2Y2YzNhOTc0YzhkYTgyZGY1ZWIzOWQwNjNjZGE5YTc4ZGZmODhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DhbM1miR7nPHMqix3TC7LafHSEH up1dHJF+dhr1KQ+4Gz9cvfQ7H7G9T7LUOzoFt1J/4DpoyB+YOiznzPjNhmikVhcP WOqSSujO+i+cvsk9n0jV1adC0QGXYTQAbIrZwtj6OQG5tNDqYJQ9sIZJpBzsJo30 xXbWPLmYqdKlOheZGTHLX5CD42+Q7xtb56v2V0OG7xY+C/uLGim3LYOVQHdp3TFV pbfcY6SrRh2b7pCibJ/C2TRkaIhqbRPiLi1G3W4AGxZtxnlPyYgHUl+iWfPe15k5 VjsWn/8tFcUCkFnJIn25a3Xif+lthxiVlX5oLdEi/stWASxxjduJK2vqlwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFDz2w6l0yNqC316znQY82pp43/iLMB8GA1UdIwQY MBaAFGnb4efZ6H1ocBpANadsUb/s2I2BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWIt OGQ5NDU1M2I3NWUxLzEvUFBiRHFYVEkyb0xmWHJPZEJqemFtbmpmLUlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83MjcwMTUtZTE0ZS00ZDQxLWIwNWItOGQ5NDU1M2I3NWUx LzEvYWR2aDU5bm9mV2h3R2tBMXAyeFJ2LXpZallFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKgHihDAN BgkqhkiG9w0BAQsFAAOCAQEAgze4AIWXTvN7iNhNKJtUyeUlP7NmPfCYyKBW6Z++ oGHt7KPzxktevLwUPoCq8SCsRme7/JZvs+F3cYGuSRcBZMm9Dib6VndaVVU0WGdZ UYrn+V2VzWwMAAW3Id+vO/kaKi/tPEtlTYB/toXSnNGk1GyocySJ09on2eHHg4Zs 34X8qobtKz/SzQBvYqLIvMuuJYu8h/z76hEGgWy4Z+pH1DRv1yAi4bFoBKmMpl3N ON9rnP4b8jS32+gQr/u9w96Jed8LOp6++JPQb4DiAd/1IpgpJjo6hlrdEh0HxbiY C+qMPEj41YSUBA1iNWG/d2SX1mKNrszaxLZO1iwTN/j2rw== -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:18 2026 by rpki-client