This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/pxjxLqbdPKMXnfYH2mej8-qFwLQ.roa File: pxjxLqbdPKMXnfYH2mej8-qFwLQ.roa (raw, json) Hash identifier: wYSQv1VfP8JlL0OjNiuifDqK5UY4N2rWiXsEx4vZrtk= Subject key identifier: A7:18:F1:2E:A6:DD:3C:A3:17:9D:F6:07:DA:67:A3:F3:EA:85:C0:B4 Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc Certificate serial: 019B7FF25DD9A48D26723E56CACA660A11E4 Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/pxjxLqbdPKMXnfYH2mej8-qFwLQ.roa Signing time: Fri 02 Jan 2026 18:22:28 +0000 ROA not before: Fri 02 Jan 2026 18:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35704 IP address blocks: 2a02:11ff:400::/46 maxlen: 46 2a02:11ff:404::/46 maxlen: 46 2a02:11ff:408::/46 maxlen: 46 2a02:11ff:40c::/46 maxlen: 46 2a02:11ff:410::/46 maxlen: 46 2a02:11ff:414::/46 maxlen: 46 2a02:11ff:418::/46 maxlen: 46 2a02:11ff:41c::/46 maxlen: 46 2a02:11ff:420::/46 maxlen: 46 2a02:11ff:424::/46 maxlen: 46 2a02:11ff:428::/46 maxlen: 46 2a02:11ff:42c::/46 maxlen: 46 2a02:11ff:430::/46 maxlen: 46 2a02:11ff:434::/46 maxlen: 46 2a02:11ff:438::/46 maxlen: 46 2a02:11ff:43c::/46 maxlen: 46 2a02:11ff:440::/46 maxlen: 46 2a02:11ff:444::/46 maxlen: 46 2a02:11ff:448::/46 maxlen: 46 2a02:11ff:44c::/46 maxlen: 46 2a02:11ff:450::/46 maxlen: 46 2a02:11ff:454::/46 maxlen: 46 2a02:11ff:458::/46 maxlen: 46 2a02:11ff:45c::/46 maxlen: 46 2a02:11ff:460::/46 maxlen: 46 2a02:11ff:464::/46 maxlen: 46 2a02:11ff:468::/46 maxlen: 46 2a02:11ff:46c::/46 maxlen: 46 2a02:11ff:470::/46 maxlen: 46 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:5d:d9:a4:8d:26:72:3e:56:ca:ca:66:0a:11:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc Validity Not Before: Jan 2 18:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a718f12ea6dd3ca3179df607da67a3f3ea85c0b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e7:35:e1:d5:44:9a:ca:d5:38:54:54:01:87: 6b:ec:13:fd:63:29:2c:3b:cc:fe:89:90:f8:48:2b: 15:86:75:96:be:e2:d7:a9:b5:35:c7:db:bd:f4:76: ea:c4:d3:21:0d:b0:b7:77:83:62:dc:35:8d:d5:a2: b2:97:94:c1:84:56:4a:ea:c7:c0:9e:0d:83:d2:91: 0c:5c:9e:75:c4:c9:68:21:9c:39:0c:fc:11:c9:87: 1f:4e:aa:3f:11:d7:a2:1d:06:3a:2b:64:d3:e3:96: ba:4f:05:27:55:5a:5c:5d:63:ea:a8:55:c3:1d:ca: 72:95:ba:85:21:65:4e:fc:ab:0d:41:21:9d:55:fb: b7:61:6a:98:c2:44:dc:7b:cd:ab:55:b4:e0:5e:a9: d7:fa:3f:77:fc:bc:37:19:01:67:3f:ac:7d:a5:1a: 5f:2f:13:c5:ed:6c:fe:6a:0a:80:98:60:96:de:3c: 38:66:fe:de:ad:20:d7:94:c7:a8:1b:4c:7c:73:e5: 08:45:8d:f0:60:90:fc:ae:58:56:19:f4:9b:cf:d4: 24:8e:d6:5c:fd:b4:7e:9f:c1:32:1d:ae:25:f9:ba: cc:4d:81:a1:a6:12:c6:5f:b7:84:d2:42:94:34:e2: 1a:ca:99:2e:d7:b1:41:62:8a:5c:e2:ad:3a:f6:fb: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:18:F1:2E:A6:DD:3C:A3:17:9D:F6:07:DA:67:A3:F3:EA:85:C0:B4 X509v3 Authority Key Identifier: keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/pxjxLqbdPKMXnfYH2mej8-qFwLQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:11ff:400::-2a02:11ff:473:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption c2:93:73:c5:17:65:56:06:bc:5e:f3:38:9a:f8:a7:12:da:85: ea:92:e8:f9:8b:81:39:e5:08:0e:a5:18:5f:6f:8a:e7:9e:46: aa:2a:d8:89:3c:e3:ac:6d:84:a8:0b:27:87:e3:7d:2a:68:35: 41:a4:1b:2e:52:f8:a6:eb:88:fd:10:e1:48:92:2e:33:05:6f: af:b9:8c:9c:9a:71:10:93:b6:b9:4f:4e:41:54:b9:5c:36:9f: 31:23:5e:bc:48:61:00:f1:0e:8a:07:97:d8:ce:0e:7e:cc:43: a2:7e:46:c1:27:f3:24:e0:66:d8:24:67:55:89:66:0e:d4:c4: 7f:70:e5:b1:eb:ca:a5:4f:3c:a7:ff:e6:80:20:80:c0:15:d7: e3:50:4f:d2:40:0e:f7:07:9f:31:5f:c6:10:c4:4b:ce:57:a0: d7:f3:0b:4c:48:2f:db:fe:f9:8d:d0:fe:47:89:7e:93:2d:fb: ab:94:dc:67:90:8f:0e:a9:f7:4a:a0:3c:fc:49:98:97:03:81: 32:99:18:ee:b2:1b:ec:87:92:17:22:c3:89:48:59:16:29:63: 0a:9b:db:6a:56:e3:95:e5:89:de:1c:40:b7:de:bb:32:b7:2d: fd:21:41:f8:e6:bc:f6:15:20:74:93:18:bb:5d:73:2e:7f:f2: 23:ad:e1:ff -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt/8l3ZpI0mcj5WyspmChHkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl OTc3YmMwHhcNMjYwMTAyMTgyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzE4ZjEyZWE2ZGQzY2EzMTc5ZGY2MDdkYTY3YTNmM2VhODVjMGI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOc14dVEmsrVOFRUAYdr7BP9Yyks O8z+iZD4SCsVhnWWvuLXqbU1x9u99HbqxNMhDbC3d4Ni3DWN1aKyl5TBhFZK6sfA ng2D0pEMXJ51xMloIZw5DPwRyYcfTqo/EdeiHQY6K2TT45a6TwUnVVpcXWPqqFXD HcpylbqFIWVO/KsNQSGdVfu3YWqYwkTce82rVbTgXqnX+j93/Lw3GQFnP6x9pRpf LxPF7Wz+agqAmGCW3jw4Zv7erSDXlMeoG0x8c+UIRY3wYJD8rlhWGfSbz9QkjtZc /bR+n8EyHa4l+brMTYGhphLGX7eE0kKUNOIaypku17FBYopc4q069vsyeQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFKcY8S6m3TyjF532B9pno/PqhcC0MB8GA1UdIwQY MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt YTk2YzYyNjZhYmRiLzEvcHhqeExxYmRQS01YbmZZSDJtZWo4LXFGd0xRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgIqAhH/ BAMHAioCEf8EcDANBgkqhkiG9w0BAQsFAAOCAQEAwpNzxRdlVga8XvM4mvinEtqF 6pLo+YuBOeUIDqUYX2+K555GqirYiTzjrG2EqAsnh+N9Kmg1QaQbLlL4puuI/RDh SJIuMwVvr7mMnJpxEJO2uU9OQVS5XDafMSNevEhhAPEOigeX2M4OfsxDon5GwSfz JOBm2CRnVYlmDtTEf3DlsevKpU88p//mgCCAwBXX41BP0kAO9wefMV/GEMRLzleg 1/MLTEgv2/75jdD+R4l+ky37q5TcZ5CPDqn3SqA8/EmYlwOBMpkY7rIb7IeSFyLD iUhZFiljCpvbalbjleWJ3hxAt967Mrct/SFB+Oa89hUgdJMYu11zLn/yI63h/w== -----END CERTIFICATE-----Generated at Wed Jan 21 15:08:06 2026 by rpki-client