This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa File: Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa (raw, json) Hash identifier: 0Ghl85pIQUjr9ungl4JN/VBPTNlFSKD8oMqKbzB0zRU= Subject key identifier: 3E:78:FF:BE:64:1A:D1:9B:A7:90:60:C5:C3:DF:C8:B6:CB:B0:0D:AD Certificate issuer: /CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Certificate serial: 019B7B35796935190A7DCC3C0ADEA3B537FF Authority key identifier: 8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa Signing time: Thu 01 Jan 2026 20:17:40 +0000 ROA not before: Thu 01 Jan 2026 20:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 2a01:e300::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.mft rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:79:69:35:19:0a:7d:cc:3c:0a:de:a3:b5:37:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e3f1663996be1707611fdce1ddea8920dd398a3 Validity Not Before: Jan 1 20:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3e78ffbe641ad19ba79060c5c3dfc8b6cbb00dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b6:40:be:aa:ba:41:ba:55:63:7c:9d:77:4d: 61:48:be:61:8b:90:41:13:bc:57:34:f2:33:8d:bf: cf:53:71:b2:b5:e5:43:a3:74:96:aa:72:d6:5f:b6: b5:00:cc:a3:67:ee:70:2f:f4:7e:e2:88:a2:ce:81: dd:ab:31:78:96:cd:3f:cc:9f:44:c9:ca:ef:60:0a: c4:b6:64:c2:cf:ed:6e:cc:3d:dd:f2:59:99:e5:0d: e8:6c:fb:b0:d0:44:10:ea:0f:b6:c0:ef:e0:db:33: 51:4b:df:8d:62:3b:da:c3:5d:24:e0:23:15:5c:b2: f2:0e:61:af:2f:9d:63:26:71:92:82:a0:a3:93:31: 7f:6a:8b:f2:19:b2:c0:9c:75:45:ef:63:8d:5c:3b: 19:a6:7b:b7:92:da:70:2b:f1:70:74:fe:58:9c:de: d7:15:bc:8d:75:5a:f4:0c:bf:cf:d0:10:63:1a:cd: 23:78:a0:cc:98:1b:8b:80:aa:9a:df:24:b2:c5:16: 43:5f:00:06:5d:eb:41:8c:8e:23:30:71:37:e2:2b: 25:3a:d2:32:16:98:3c:a3:fa:e6:64:8d:31:a9:14: 04:93:21:14:6f:7d:30:86:41:03:49:aa:10:73:9a: 94:1c:31:de:1f:89:b9:45:98:8c:63:8f:ac:89:0a: ad:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:78:FF:BE:64:1A:D1:9B:A7:90:60:C5:C3:DF:C8:B6:CB:B0:0D:AD X509v3 Authority Key Identifier: keyid:8E:3F:16:63:99:6B:E1:70:76:11:FD:CE:1D:DE:A8:92:0D:D3:98:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jj8WY5lr4XB2Ef3OHd6okg3TmKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/Pnj_vmQa0ZunkGDFw9_ItsuwDa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cd97cc-ce2b-4264-9e79-c8f9be7d19df/1/jj8WY5lr4XB2Ef3OHd6okg3TmKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:e300::/29 Signature Algorithm: sha256WithRSAEncryption 31:29:a4:f4:77:c3:17:bc:76:a3:fd:c3:0c:28:52:7e:17:0a: ac:b2:79:6d:c9:ef:e6:8c:f2:17:da:39:06:c2:53:27:95:9e: 44:6b:cb:3f:02:22:98:5d:f6:2f:ec:3d:71:2e:0f:3a:9b:28: 28:f0:75:07:ba:ba:9f:16:2b:89:a6:f7:03:5b:96:8b:12:9f: c8:b2:b7:fc:4d:df:d5:ea:5f:88:91:8b:6f:fb:20:bc:f7:c6: 4d:27:ec:69:ab:5a:9f:e7:92:6a:fc:11:9e:fc:0e:f5:db:c6: b1:52:e3:02:7b:26:ef:09:c1:00:7a:34:67:e7:63:90:27:a1: b5:4a:33:01:7c:d5:6f:0f:19:48:d6:cc:0b:33:5b:94:19:c9: b0:16:d8:e2:4c:b6:dc:70:1a:72:e0:67:64:40:01:0d:c2:38: 9f:da:90:1a:f1:75:34:ce:03:68:dc:5b:ba:9c:c1:4c:d0:13: 43:5a:02:ea:6d:08:59:df:05:30:6b:0a:0c:e2:f4:1c:3a:f2: f5:2c:16:19:2c:9e:17:8b:81:e1:78:04:14:ec:b7:c7:1d:e2: c1:34:d1:a5:55:6c:61:7b:62:0e:8b:2f:9b:5d:96:c3:3a:24: ef:dd:ff:ac:85:0d:51:58:98:a5:e4:1e:73:ab:67:8b:73:75: 27:22:b3:62 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NXlpNRkKfcw8Ct6jtTf/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlM2YxNjYzOTk2YmUxNzA3NjExZmRjZTFkZGVhODkyMGRk Mzk4YTMwHhcNMjYwMTAxMjAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZTc4ZmZiZTY0MWFkMTliYTc5MDYwYzVjM2RmYzhiNmNiYjAwZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubZAvqq6QbpVY3ydd01hSL5hi5BB E7xXNPIzjb/PU3GyteVDo3SWqnLWX7a1AMyjZ+5wL/R+4oiizoHdqzF4ls0/zJ9E ycrvYArEtmTCz+1uzD3d8lmZ5Q3obPuw0EQQ6g+2wO/g2zNRS9+NYjvaw10k4CMV XLLyDmGvL51jJnGSgqCjkzF/aovyGbLAnHVF72ONXDsZpnu3ktpwK/FwdP5YnN7X FbyNdVr0DL/P0BBjGs0jeKDMmBuLgKqa3ySyxRZDXwAGXetBjI4jMHE34islOtIy Fpg8o/rmZI0xqRQEkyEUb30whkEDSaoQc5qUHDHeH4m5RZiMY4+siQqtYwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFD54/75kGtGbp5BgxcPfyLbLsA2tMB8GA1UdIwQY MBaAFI4/FmOZa+FwdhH9zh3eqJIN05ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzkt YzhmOWJlN2QxOWRmLzEvUG5qX3ZtUWEwWnVua0dERnc5X0l0c3V3RGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jZDk3Y2MtY2UyYi00MjY0LTllNzktYzhmOWJlN2QxOWRm LzEvamo4V1k1bHI0WEIyRWYzT0hkNm9rZzNUbUtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgHjADAN BgkqhkiG9w0BAQsFAAOCAQEAMSmk9HfDF7x2o/3DDChSfhcKrLJ5bcnv5ozyF9o5 BsJTJ5WeRGvLPwIimF32L+w9cS4POpsoKPB1B7q6nxYriab3A1uWixKfyLK3/E3f 1epfiJGLb/sgvPfGTSfsaatan+eSavwRnvwO9dvGsVLjAnsm7wnBAHo0Z+djkCeh tUozAXzVbw8ZSNbMCzNblBnJsBbY4ky23HAacuBnZEABDcI4n9qQGvF1NM4DaNxb upzBTNATQ1oC6m0IWd8FMGsKDOL0HDry9SwWGSyeF4uB4XgEFOy3xx3iwTTRpVVs YXtiDosvm12Wwzok793/rIUNUViYpeQec6tni3N1JyKzYg== -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:36 2026 by rpki-client