This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/pExaAwfSYwr_lBTN5B-h28Hzx-Q.roa File: pExaAwfSYwr_lBTN5B-h28Hzx-Q.roa (raw, json) Hash identifier: j5/WDKSKaukoZPKqhJSK8kewWRgRB7Z/9X/2kscz69Q= Subject key identifier: A4:4C:5A:03:07:D2:63:0A:FF:94:14:CD:E4:1F:A1:DB:C1:F3:C7:E4 Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Certificate serial: 019B7A5B4BB4D5EA4412975877523988585E Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/pExaAwfSYwr_lBTN5B-h28Hzx-Q.roa Signing time: Thu 01 Jan 2026 16:19:22 +0000 ROA not before: Thu 01 Jan 2026 16:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216447 IP address blocks: 2a12:f8c2:900::/40 maxlen: 40 2a12:f8c2:900::/44 maxlen: 44 2a12:f8c2:9e0::/44 maxlen: 44 2a12:f8c2:9f0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 21:21:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:4b:b4:d5:ea:44:12:97:58:77:52:39:88:58:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a Validity Not Before: Jan 1 16:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a44c5a0307d2630aff9414cde41fa1dbc1f3c7e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a3:9e:91:4d:45:36:00:8f:28:f0:f7:28:65: df:48:5f:bd:08:67:ef:65:06:b0:79:25:d8:59:01: 4c:12:2b:1b:f9:d5:da:0c:45:42:5a:2d:da:f2:be: fb:7f:fc:b3:14:7f:78:f0:f1:60:40:26:a3:6c:68: ca:cd:d5:bb:9b:9a:5a:8d:16:42:93:94:bd:39:78: 51:fa:7b:0d:e3:b4:aa:cf:74:8b:46:5c:f4:a0:b6: a9:d1:11:36:40:77:6f:14:18:b5:ac:1f:8e:c1:01: 42:53:b8:52:2f:01:1b:a0:cd:5e:24:f5:74:f5:fb: 73:36:eb:01:e1:e4:90:b3:48:b9:ec:2d:ff:fc:c1: d4:98:0d:05:63:5d:6e:4f:09:bd:88:a8:0b:34:43: 3b:76:d1:cb:22:4b:9c:de:5e:ba:45:e8:fc:e0:20: d2:59:e1:d0:56:f6:e2:c5:79:d3:d5:8b:eb:b7:d9: d4:2e:e2:19:91:98:7a:76:23:29:4f:48:27:3c:98: 35:4b:e9:c2:53:b3:fb:d6:a1:11:4a:fe:de:e4:bb: b6:19:38:a7:1f:fe:ae:f5:20:74:d7:82:a7:ad:68: 1b:71:45:50:89:9a:44:10:8b:45:fb:47:39:30:ba: fa:25:3e:47:d1:f5:9e:54:19:6f:31:4c:11:ed:88: 24:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:4C:5A:03:07:D2:63:0A:FF:94:14:CD:E4:1F:A1:DB:C1:F3:C7:E4 X509v3 Authority Key Identifier: keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/pExaAwfSYwr_lBTN5B-h28Hzx-Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f8c2:900::/40 Signature Algorithm: sha256WithRSAEncryption 01:49:ac:c7:fc:48:38:0d:d9:e4:2a:41:b6:22:27:b6:72:85: 74:0e:18:ba:af:b6:28:63:33:88:bc:9e:e7:db:76:72:13:d1: 3d:27:cd:2f:a5:61:60:cc:5e:66:10:6b:eb:94:00:5c:20:0f: 06:2b:2b:8b:82:cd:19:e0:ee:4c:8c:08:02:85:93:91:72:6f: 37:03:0a:b1:a9:c4:4b:a3:29:7c:81:80:8d:01:39:fd:10:c4: 26:0e:cf:ed:f2:30:22:2f:ce:b2:58:7c:fa:9b:9f:ba:ba:d2: 9c:f8:a2:12:ca:50:94:1e:3b:1a:c3:ab:2b:49:d1:56:32:10: 86:53:7d:cf:ad:9c:62:3b:80:7a:56:a3:91:d1:29:da:a2:45: 95:ca:e7:37:e6:f8:94:3c:32:9e:6c:8f:d4:55:d4:dd:5f:bb: b0:f6:dd:f0:91:d9:57:5f:c2:76:0a:0f:96:a8:97:7d:f0:28: fa:f5:4d:b4:da:e4:43:aa:3b:fa:26:a0:9c:80:33:68:ad:14: 3c:ca:0f:25:1a:30:53:63:2d:40:96:dc:45:0a:76:ba:5b:3f: b0:a2:36:80:4e:fa:f2:0e:d4:ec:e2:de:8f:f1:20:1e:b0:ec: 6f:bb:50:9e:09:53:58:db:55:11:ad:a6:ec:1b:a2:8b:c0:eb: 4e:e6:e1:89 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt6W0u01epEEpdYd1I5iFheMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzMzkyZTkyOTMxN2FlNmJkZTA4YTVhM2I5OGEyYjcwMWRk Yjg5M2EwHhcNMjYwMTAxMTYxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDRjNWEwMzA3ZDI2MzBhZmY5NDE0Y2RlNDFmYTFkYmMxZjNjN2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36OekU1FNgCPKPD3KGXfSF+9CGfv ZQaweSXYWQFMEisb+dXaDEVCWi3a8r77f/yzFH948PFgQCajbGjKzdW7m5pajRZC k5S9OXhR+nsN47Sqz3SLRlz0oLap0RE2QHdvFBi1rB+OwQFCU7hSLwEboM1eJPV0 9ftzNusB4eSQs0i57C3//MHUmA0FY11uTwm9iKgLNEM7dtHLIkuc3l66Rej84CDS WeHQVvbixXnT1Yvrt9nULuIZkZh6diMpT0gnPJg1S+nCU7P71qERSv7e5Lu2GTin H/6u9SB014KnrWgbcUVQiZpEEItF+0c5MLr6JT5H0fWeVBlvMUwR7YgktwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFKRMWgMH0mMK/5QUzeQfodvB88fkMB8GA1UdIwQY MBaAFGM5LpKTF65r3gilo7mKK3Ad24k6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEt ODcyNTBmNWEwN2NjLzEvcEV4YUF3ZlNZd3JfbEJUTjVCLWgyOEh6eC1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mZTcwMmUtYzI2Yi00NDI5LTk5YzEtODcyNTBmNWEwN2Nj LzEvWXprdWtwTVhybXZlQ0tXanVZb3JjQjNiaVRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhL4wgkw DQYJKoZIhvcNAQELBQADggEBAAFJrMf8SDgN2eQqQbYiJ7ZyhXQOGLqvtihjM4i8 nufbdnIT0T0nzS+lYWDMXmYQa+uUAFwgDwYrK4uCzRng7kyMCAKFk5FybzcDCrGp xEujKXyBgI0BOf0QxCYOz+3yMCIvzrJYfPqbn7q60pz4ohLKUJQeOxrDqytJ0VYy EIZTfc+tnGI7gHpWo5HRKdqiRZXK5zfm+JQ8Mp5sj9RV1N1fu7D23fCR2VdfwnYK D5aol33wKPr1TbTa5EOqO/omoJyAM2itFDzKDyUaMFNjLUCW3EUKdrpbP7CiNoBO +vIO1Ozi3o/xIB6w7G+7UJ4JU1jbVRGtpuwboovA607m4Yk= -----END CERTIFICATE-----Generated at Tue Feb 3 03:31:18 2026 by rpki-client