This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PjFFTMQjgWugJy9dk62zaC9A1CM.roa File: PjFFTMQjgWugJy9dk62zaC9A1CM.roa (raw, json) Hash identifier: 2MwV1xG9EhOZyqo6LIb55pdFuQgcSc8B4ENbjWgaIbo= Subject key identifier: 3E:31:45:4C:C4:23:81:6B:A0:27:2F:5D:93:AD:B3:68:2F:40:D4:23 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CD65AEF1CDD3539FE93A1B8AE66E8 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PjFFTMQjgWugJy9dk62zaC9A1CM.roa Signing time: Fri 02 Jan 2026 06:19:54 +0000 ROA not before: Fri 02 Jan 2026 06:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197762 IP address blocks: 2a06:de00:1330::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:d6:5a:ef:1c:dd:35:39:fe:93:a1:b8:ae:66:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e31454cc423816ba0272f5d93adb3682f40d423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:59:bb:aa:77:19:35:56:0c:10:a6:2e:64:8e: 69:7f:07:9d:69:3c:ca:b2:ab:f6:1c:40:1b:57:07: c4:11:c7:c0:14:f2:d2:d2:3e:47:01:d2:de:2e:d1: 1f:d5:c4:4a:ea:24:cb:4a:cf:69:33:db:0c:18:19: 72:a8:e5:d9:58:7b:b7:0c:ee:ad:c4:dd:a4:e2:9d: 33:48:77:76:57:04:76:ff:db:1b:89:d6:b3:84:9f: 69:fe:43:5d:c9:89:e3:62:77:56:e6:71:35:13:df: 05:c5:17:bd:fc:30:c0:a1:ca:f4:29:91:f5:82:3e: d1:09:96:5e:f0:0b:89:15:92:aa:0c:26:e2:25:be: 5b:80:1f:d5:6c:9a:0f:80:4e:d5:cd:af:2d:8e:69: ba:11:90:df:fa:30:5b:00:a6:b0:2f:00:03:7c:5c: 5b:e0:e3:d1:ad:04:b9:e6:14:08:0d:e9:88:62:b5: b4:61:b5:c1:63:ad:04:6b:0d:31:50:d3:c8:c9:7b: 1d:63:a8:f1:cd:b9:43:b9:05:d3:c0:11:53:eb:75: 4f:08:e9:d3:e6:52:71:43:5d:27:b2:a3:9a:a1:73: a9:1e:c5:a1:c2:84:bd:96:e5:22:ca:63:1a:6e:9e: 22:8e:90:ee:6f:d4:ed:dc:7a:b1:d3:25:26:4a:25: eb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:31:45:4C:C4:23:81:6B:A0:27:2F:5D:93:AD:B3:68:2F:40:D4:23 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/PjFFTMQjgWugJy9dk62zaC9A1CM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:1330::/44 Signature Algorithm: sha256WithRSAEncryption a7:d8:f6:05:8f:2f:a7:22:7f:af:83:28:01:0f:9b:1a:d0:d7: 65:87:28:9d:fe:f3:ce:a5:71:19:98:e9:bd:96:dc:24:5b:e4: 25:29:3b:c2:97:f0:ac:89:82:7f:4f:0b:76:c7:72:f9:4c:29: ba:88:55:e4:8b:9b:26:58:74:47:70:6a:0a:59:9f:bb:00:3a: ca:19:b3:52:53:8c:8e:f7:4c:98:d9:9a:db:42:bf:8e:15:79: ac:04:22:64:91:78:98:e3:96:28:21:9f:23:79:4a:d6:e5:a6: bf:e7:d4:f9:28:07:4c:42:26:29:2d:fe:f5:29:d2:dc:46:32: 81:38:33:b2:3a:96:17:e3:2d:55:a9:aa:7b:5d:83:d1:d0:15: 13:b7:24:09:7c:46:b3:8d:10:2f:75:5f:ee:8b:2d:19:eb:c4: 1b:c6:7d:ee:54:dc:69:c5:df:a0:fb:ea:94:82:fb:71:6f:2f: 26:1a:f2:4f:88:17:91:06:a3:b3:34:a2:67:0e:9e:95:0b:4f: ea:05:ba:b7:be:f1:db:e3:4f:9d:61:8e:c1:4c:da:31:10:d9: 30:fd:29:02:11:22:80:d2:95:13:43:ee:f1:79:fb:41:b5:d3: 82:2f:7f:41:66:9e:48:c5:91:a0:64:61:f1:2d:10:5b:46:a9: 27:55:06:76 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XNZa7xzdNTn+k6G4rmboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTMxNDU0Y2M0MjM4MTZiYTAyNzJmNWQ5M2FkYjM2ODJmNDBkNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFm7qncZNVYMEKYuZI5pfwedaTzK sqv2HEAbVwfEEcfAFPLS0j5HAdLeLtEf1cRK6iTLSs9pM9sMGBlyqOXZWHu3DO6t xN2k4p0zSHd2VwR2/9sbidazhJ9p/kNdyYnjYndW5nE1E98FxRe9/DDAocr0KZH1 gj7RCZZe8AuJFZKqDCbiJb5bgB/VbJoPgE7Vza8tjmm6EZDf+jBbAKawLwADfFxb 4OPRrQS55hQIDemIYrW0YbXBY60Eaw0xUNPIyXsdY6jxzblDuQXTwBFT63VPCOnT 5lJxQ10nsqOaoXOpHsWhwoS9luUiymMabp4ijpDub9Tt3Hqx0yUmSiXr3wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD4xRUzEI4FroCcvXZOts2gvQNQjMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvUGpGRlRNUWpnV3VnSnk5ZGs2MnphQzlBMUNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbeABMw MA0GCSqGSIb3DQEBCwUAA4IBAQCn2PYFjy+nIn+vgygBD5sa0Ndlhyid/vPOpXEZ mOm9ltwkW+QlKTvCl/CsiYJ/Twt2x3L5TCm6iFXki5smWHRHcGoKWZ+7ADrKGbNS U4yO90yY2ZrbQr+OFXmsBCJkkXiY45YoIZ8jeUrW5aa/59T5KAdMQiYpLf71KdLc RjKBODOyOpYX4y1Vqap7XYPR0BUTtyQJfEazjRAvdV/uiy0Z68Qbxn3uVNxpxd+g ++qUgvtxby8mGvJPiBeRBqOzNKJnDp6VC0/qBbq3vvHb40+dYY7BTNoxENkw/SkC ESKA0pUTQ+7xeftBtdOCL39BZp5IxZGgZGHxLRBbRqknVQZ2 -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:03 2026 by rpki-client