This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/P14uHlGf2lrMoUspqcAN6H9BcUc.roa File: P14uHlGf2lrMoUspqcAN6H9BcUc.roa (raw, json) Hash identifier: qn6hIwu5/DuOQPvMM2Oe2W+KkeROqHy0+cq0AjAaLwQ= Subject key identifier: 3F:5E:2E:1E:51:9F:DA:5A:CC:A1:4B:29:A9:C0:0D:E8:7F:41:71:47 Certificate issuer: /CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9 Certificate serial: 019B7C11DF665C8299FEAC78113986FFDB4D Authority key identifier: E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/P14uHlGf2lrMoUspqcAN6H9BcUc.roa Signing time: Fri 02 Jan 2026 00:18:24 +0000 ROA not before: Fri 02 Jan 2026 00:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213003 IP address blocks: 2001:678:d7c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 18:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:df:66:5c:82:99:fe:ac:78:11:39:86:ff:db:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4fb640946d8cfaefe5648948702ad6034a0e8b9 Validity Not Before: Jan 2 00:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f5e2e1e519fda5acca14b29a9c00de87f417147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:16:ec:b3:2f:92:38:2a:6e:92:3a:87:17:09: 5b:9b:2b:fd:f0:d3:1d:c1:56:a4:58:71:e2:bb:e9: 56:98:b8:7a:38:ce:06:a2:c1:72:07:ca:12:bc:5b: 9d:d9:d4:41:f1:71:17:67:e1:28:a7:bd:9e:36:f3: 1c:02:4a:5e:2c:c9:3c:16:79:fa:90:df:71:fd:dc: 76:10:64:4a:f3:f5:ca:b0:a6:87:ea:6d:2f:b0:e8: 4d:e4:a4:54:49:4e:ee:48:41:39:eb:76:0d:16:7c: f7:50:7f:e4:fb:81:50:04:99:6f:63:5b:4c:2e:25: 9a:45:2f:ad:38:fb:8a:1a:b7:fd:f4:1d:b1:60:cc: 1b:ee:44:9d:88:19:6c:52:bb:7f:5d:1c:6e:e9:fe: 56:41:6a:bd:e3:c6:60:50:de:a8:a5:74:0c:d8:6e: c4:4c:62:57:82:be:03:0e:43:d8:08:fa:a5:9d:5d: e2:2b:5e:56:91:c0:3e:83:54:91:7d:4e:29:99:5b: 87:09:fc:a8:10:7f:2b:c6:db:f2:57:36:1c:d0:ab: 80:98:2c:dd:c2:bd:54:8e:d2:c4:1e:4e:28:f9:27: d3:66:bb:41:84:91:db:fd:cb:96:a3:ce:64:8e:3e: a3:e2:d5:cf:86:eb:49:a2:a5:4f:4b:db:5f:48:1c: 88:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:5E:2E:1E:51:9F:DA:5A:CC:A1:4B:29:A9:C0:0D:E8:7F:41:71:47 X509v3 Authority Key Identifier: keyid:E4:FB:64:09:46:D8:CF:AE:FE:56:48:94:87:02:AD:60:34:A0:E8:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5PtkCUbYz67-VkiUhwKtYDSg6Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/P14uHlGf2lrMoUspqcAN6H9BcUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0dbf3d-98d2-4ec4-8b80-076dd6bd124a/1/5PtkCUbYz67-VkiUhwKtYDSg6Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:d7c::/48 Signature Algorithm: sha256WithRSAEncryption 0b:70:2a:f6:cf:23:f4:b5:81:66:d8:0e:ff:d4:b3:fc:d6:10: d7:e5:82:37:dc:92:2e:85:69:3b:5f:90:2c:42:00:55:16:2f: 73:3e:d8:8a:40:71:dc:26:76:f5:b2:ea:cc:76:ec:96:b7:3a: 28:41:49:44:6c:d7:06:03:3e:7f:b5:dd:51:ff:5f:8f:8e:2a: 31:6b:be:5e:10:61:fd:69:bb:10:c7:fc:f0:df:af:4e:72:7c: 3f:3c:dc:27:de:b5:fc:ee:40:96:7c:62:2c:4c:0e:70:06:b5: ae:3b:05:80:2f:12:ac:a8:06:96:6c:3e:ca:40:c4:8e:3e:76: e3:d4:d5:7f:cd:2a:c7:83:97:3a:fd:30:f2:94:8e:8c:45:7e: d9:13:98:52:17:66:e2:25:86:85:89:6b:f7:29:2d:d4:f1:37: f1:3a:fe:49:a8:49:f2:00:99:4c:de:3d:72:3c:05:d3:22:aa: 76:cf:86:0b:41:c2:8e:14:12:75:a8:7e:47:1f:21:ab:8d:fd: e0:b2:41:f4:14:b8:68:7f:4a:11:d9:d1:1b:68:81:47:81:1b: ce:cc:0b:c9:45:76:7f:a2:a1:cc:9c:e8:fb:41:d0:44:a2:14: 67:e3:01:ca:3c:5a:be:5d:c4:ec:5e:f8:6c:19:4e:ee:76:43: 06:f4:0f:e9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Ed9mXIKZ/qx4ETmG/9tNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZmI2NDA5NDZkOGNmYWVmZTU2NDg5NDg3MDJhZDYwMzRh MGU4YjkwHhcNMjYwMTAyMDAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjVlMmUxZTUxOWZkYTVhY2NhMTRiMjlhOWMwMGRlODdmNDE3MTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhbssy+SOCpukjqHFwlbmyv98NMd wVakWHHiu+lWmLh6OM4GosFyB8oSvFud2dRB8XEXZ+Eop72eNvMcAkpeLMk8Fnn6 kN9x/dx2EGRK8/XKsKaH6m0vsOhN5KRUSU7uSEE563YNFnz3UH/k+4FQBJlvY1tM LiWaRS+tOPuKGrf99B2xYMwb7kSdiBlsUrt/XRxu6f5WQWq948ZgUN6opXQM2G7E TGJXgr4DDkPYCPqlnV3iK15WkcA+g1SRfU4pmVuHCfyoEH8rxtvyVzYc0KuAmCzd wr1UjtLEHk4o+SfTZrtBhJHb/cuWo85kjj6j4tXPhutJoqVPS9tfSByICQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD9eLh5Rn9pazKFLKanADeh/QXFHMB8GA1UdIwQY MBaAFOT7ZAlG2M+u/lZIlIcCrWA0oOi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVB0a0NVYll6NjctVmtpVWh3S3RZRFNnNkxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wZGJmM2QtOThkMi00ZWM0LThiODAt MDc2ZGQ2YmQxMjRhLzEvUDE0dUhsR2YybHJNb1VzcHFjQU42SDlCY1VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8wZGJmM2QtOThkMi00ZWM0LThiODAtMDc2ZGQ2YmQxMjRh LzEvNVB0a0NVYll6NjctVmtpVWh3S3RZRFNnNkxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA18 MA0GCSqGSIb3DQEBCwUAA4IBAQALcCr2zyP0tYFm2A7/1LP81hDX5YI33JIuhWk7 X5AsQgBVFi9zPtiKQHHcJnb1surMduyWtzooQUlEbNcGAz5/td1R/1+Pjioxa75e EGH9absQx/zw369Ocnw/PNwn3rX87kCWfGIsTA5wBrWuOwWALxKsqAaWbD7KQMSO Pnbj1NV/zSrHg5c6/TDylI6MRX7ZE5hSF2biJYaFiWv3KS3U8TfxOv5JqEnyAJlM 3j1yPAXTIqp2z4YLQcKOFBJ1qH5HHyGrjf3gskH0FLhof0oR2dEbaIFHgRvOzAvJ RXZ/oqHMnOj7QdBEohRn4wHKPFq+XcTsXvhsGU7udkMG9A/p -----END CERTIFICATE-----Generated at Tue Jan 27 03:52:36 2026 by rpki-client