This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/PDxQWyYqgaGOkX5GZzt20B-Uems.roa File: PDxQWyYqgaGOkX5GZzt20B-Uems.roa (raw, json) Hash identifier: B+Ao0KhpwV0cvFRAJ4KyvfBL5J8+ktllkURKL/vgcAg= Subject key identifier: 3C:3C:50:5B:26:2A:81:A1:8E:91:7E:46:67:3B:76:D0:1F:94:7A:6B Certificate issuer: /CN=bdd768249d73658071f9345603939ab9d620c35b Certificate serial: 019B775964687A5F3E9A4ED181FD6605D475 Authority key identifier: BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/PDxQWyYqgaGOkX5GZzt20B-Uems.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35196 IP address blocks: 2001:67c:af4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.mft rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:64:68:7a:5f:3e:9a:4e:d1:81:fd:66:05:d4:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd768249d73658071f9345603939ab9d620c35b Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c3c505b262a81a18e917e46673b76d01f947a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8c:58:b4:d6:13:a2:28:f8:5b:52:a2:77:a7: 47:a1:6c:fb:42:0f:d5:b5:43:9e:a5:60:fe:60:20: 3a:03:0c:85:4b:85:91:b7:46:e4:81:45:99:4d:fd: 4e:9f:c2:22:57:d5:32:31:0a:dd:66:0a:69:c2:73: d8:e5:f0:ad:dc:3b:12:93:af:a7:f5:57:3a:a7:72: c1:08:c6:f7:42:69:0f:00:78:0f:fd:99:ea:73:41: fb:62:ac:eb:a1:21:af:a7:33:56:50:02:22:cf:0a: e7:75:70:9b:53:3a:73:eb:80:15:5b:7d:ed:81:f3: 47:4d:01:94:ff:16:32:19:12:86:36:47:03:c5:2a: 27:f6:ec:f9:1e:fc:d6:64:7b:a6:b4:3b:55:5b:f5: b5:6f:ca:0a:22:bd:fc:74:ab:36:4d:00:e3:a5:bc: ea:ff:b4:c5:de:18:8d:b8:96:1c:2f:33:8d:8e:b8: 26:de:bd:a4:17:5e:ce:36:95:d7:c2:c4:d9:ee:04: 9d:47:7a:9e:c2:ca:22:aa:75:59:f0:be:49:11:43: 3d:17:60:a2:47:e0:33:84:40:52:06:75:bf:9e:95: 1c:ce:5c:6a:3f:29:98:71:dd:c5:c2:8b:82:2b:e5: 86:e6:03:20:7d:c5:c9:35:02:a5:64:d2:92:1c:c2: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3C:50:5B:26:2A:81:A1:8E:91:7E:46:67:3B:76:D0:1F:94:7A:6B X509v3 Authority Key Identifier: keyid:BD:D7:68:24:9D:73:65:80:71:F9:34:56:03:93:9A:B9:D6:20:C3:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vddoJJ1zZYBx-TRWA5OaudYgw1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/PDxQWyYqgaGOkX5GZzt20B-Uems.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/360a84-8bfd-418e-9e77-069606441514/1/vddoJJ1zZYBx-TRWA5OaudYgw1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:af4::/48 Signature Algorithm: sha256WithRSAEncryption c7:3d:bf:ff:48:6f:97:6b:08:a2:82:67:f6:79:7e:2c:dd:71: 51:d2:06:c6:97:0c:9e:df:dc:97:4c:e9:e6:84:59:bf:a3:3c: 34:c8:df:93:62:d0:ec:a2:78:00:46:40:a2:c8:09:57:65:5d: 20:45:7a:ab:b5:ab:45:3c:38:26:17:65:a2:fc:64:f0:dc:fc: 79:3a:c3:4a:98:41:84:85:00:c8:80:41:39:60:61:aa:e7:b3: ce:71:43:54:eb:6e:4d:81:33:d0:43:fe:b0:e9:53:f0:6c:3c: ca:2e:1b:2e:76:4d:06:b0:6b:bc:df:9b:4d:81:55:4f:bf:81: 2f:ce:d8:db:c2:dc:bf:ea:cb:0f:26:54:a6:d8:f8:41:35:49: f4:5a:fe:52:ab:13:68:f9:12:d0:6c:fd:aa:1d:aa:a3:3b:39: 65:4b:07:95:bc:f0:86:93:5e:d4:b9:0c:95:a1:cd:e7:fa:d4: 68:58:d4:32:d3:d9:0e:b1:33:da:13:13:55:66:4e:2d:0e:e6: 3a:c4:30:13:4b:0f:41:3b:e0:ab:64:50:d8:79:d1:d5:52:81: 3c:bc:d8:e0:d9:5e:26:0e:78:50:28:f9:35:eb:c5:aa:38:59: 04:f6:0b:99:a7:62:7e:79:5c:83:f1:28:37:73:af:82:0c:d2: da:38:ce:eb -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WWRoel8+mk7Rgf1mBdR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDc2ODI0OWQ3MzY1ODA3MWY5MzQ1NjAzOTM5YWI5ZDYy MGMzNWIwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzNjNTA1YjI2MmE4MWExOGU5MTdlNDY2NzNiNzZkMDFmOTQ3YTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIxYtNYToij4W1Kid6dHoWz7Qg/V tUOepWD+YCA6AwyFS4WRt0bkgUWZTf1On8IiV9UyMQrdZgppwnPY5fCt3DsSk6+n 9Vc6p3LBCMb3QmkPAHgP/Znqc0H7YqzroSGvpzNWUAIizwrndXCbUzpz64AVW33t gfNHTQGU/xYyGRKGNkcDxSon9uz5HvzWZHumtDtVW/W1b8oKIr38dKs2TQDjpbzq /7TF3hiNuJYcLzONjrgm3r2kF17ONpXXwsTZ7gSdR3qewsoiqnVZ8L5JEUM9F2Ci R+AzhEBSBnW/npUczlxqPymYcd3FwouCK+WG5gMgfcXJNQKlZNKSHMJvvQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDw8UFsmKoGhjpF+Rmc7dtAflHprMB8GA1UdIwQY MBaAFL3XaCSdc2WAcfk0VgOTmrnWIMNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzct MDY5NjA2NDQxNTE0LzEvUER4UVd5WXFnYUdPa1g1R1p6dDIwQi1VZW1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8zNjBhODQtOGJmZC00MThlLTllNzctMDY5NjA2NDQxNTE0 LzEvdmRkb0pKMXpaWUJ4LVRSV0E1T2F1ZFlndzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAr0 MA0GCSqGSIb3DQEBCwUAA4IBAQDHPb//SG+Xawiigmf2eX4s3XFR0gbGlwye39yX TOnmhFm/ozw0yN+TYtDsongARkCiyAlXZV0gRXqrtatFPDgmF2Wi/GTw3Px5OsNK mEGEhQDIgEE5YGGq57POcUNU625NgTPQQ/6w6VPwbDzKLhsudk0GsGu835tNgVVP v4Evztjbwty/6ssPJlSm2PhBNUn0Wv5SqxNo+RLQbP2qHaqjOzllSweVvPCGk17U uQyVoc3n+tRoWNQy09kOsTPaExNVZk4tDuY6xDATSw9BO+CrZFDYedHVUoE8vNjg 2V4mDnhQKPk168WqOFkE9guZp2J+eVyD8Sg3c6+CDNLaOM7r -----END CERTIFICATE-----Generated at Mon Jan 26 18:19:40 2026 by rpki-client