This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/p_0XKV3exhd9uWdO5Cc3FmTs35I.roa File: p_0XKV3exhd9uWdO5Cc3FmTs35I.roa (raw, json) Hash identifier: vHzaqcFQuYBAr6NOnDqMX/4qIu/wE1PoUiKrWppcY/A= Subject key identifier: A7:FD:17:29:5D:DE:C6:17:7D:B9:67:4E:E4:27:37:16:64:EC:DF:92 Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e Certificate serial: 019B7B35C3DA7139B541C294349225AFA5A0 Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/p_0XKV3exhd9uWdO5Cc3FmTs35I.roa Signing time: Thu 01 Jan 2026 20:17:59 +0000 ROA not before: Thu 01 Jan 2026 20:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202731 IP address blocks: 2001:678:1e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:c3:da:71:39:b5:41:c2:94:34:92:25:af:a5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e Validity Not Before: Jan 1 20:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7fd17295ddec6177db9674ee427371664ecdf92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fa:b1:98:8f:b3:d6:f8:1e:13:eb:87:df:76: 05:fb:45:ef:a5:1b:e6:98:1a:5d:8f:1c:29:8d:c6: 7b:2f:6c:ac:d2:81:bd:54:de:5e:dd:60:54:ae:dc: 2c:74:24:54:09:a8:ce:4c:6f:95:59:a1:b9:a0:26: 52:96:34:3b:02:67:ba:26:2b:d5:80:07:52:af:56: c7:55:47:25:2f:7e:fb:af:81:bb:4a:5e:26:b5:ca: 90:d1:d4:f8:e4:33:38:a0:fb:0e:d8:a0:c4:ff:b4: 35:94:98:9c:66:df:7c:71:7e:59:fd:4b:f5:ed:87: 14:e4:a8:32:5d:ef:05:c9:af:97:65:8e:36:5a:c3: b0:14:ed:23:75:c0:49:1a:33:10:20:68:b4:0b:30: 66:ed:c8:2f:6f:b5:c5:63:03:53:c7:74:6a:36:ce: 6e:02:55:e1:c8:35:d2:85:e5:c2:07:58:e4:f3:5a: 27:7c:a9:8b:f4:b0:40:bd:95:97:52:2d:8a:99:f0: ce:88:b4:ba:21:48:33:08:2f:bc:e5:d9:7b:f8:34: 92:4f:58:2a:91:2a:db:cd:be:b6:dc:4f:3a:38:3a: ec:5b:7c:09:50:e0:8d:ce:8e:b6:ae:76:ed:fd:c6: 99:8e:28:55:36:f8:6c:2b:db:51:ee:0e:29:73:3b: cc:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FD:17:29:5D:DE:C6:17:7D:B9:67:4E:E4:27:37:16:64:EC:DF:92 X509v3 Authority Key Identifier: keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/p_0XKV3exhd9uWdO5Cc3FmTs35I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:1e4::/48 Signature Algorithm: sha256WithRSAEncryption b5:05:75:8c:d2:f0:6e:91:55:07:f1:0c:b0:15:38:89:aa:58: b9:b8:07:98:3b:22:30:97:91:82:3c:68:38:0b:66:44:ae:03: 48:f8:7e:13:63:95:b5:dc:ee:fa:a9:b9:7e:d4:b2:39:68:2a: e2:67:b2:76:f6:af:2c:3c:6b:47:7e:f0:60:4e:e8:77:f0:d5: d3:21:e0:f8:a9:d3:8b:6a:df:8c:14:f2:f6:98:16:9d:12:96: b9:62:86:c8:5d:ad:9c:21:d5:37:b9:d0:18:45:cb:95:34:40: 52:e0:02:e5:57:71:87:86:c8:f9:4c:d9:9e:76:be:12:d5:77: 6c:11:05:f6:1e:53:25:12:f1:2b:0a:66:33:4b:3d:f0:b5:e3: 60:53:80:95:74:7e:93:5e:a2:2d:18:2f:c2:9b:28:c5:49:7d: 8e:ad:42:2d:07:c9:8f:06:13:46:42:64:f1:a0:6f:fe:19:8e: 6f:c9:9d:35:c1:94:cc:50:cc:98:18:45:79:7d:9c:21:8b:66: 09:49:2c:eb:67:db:56:4f:28:96:4b:7b:c1:2d:ae:73:21:d6: b6:20:ff:64:b3:64:7c:a1:8c:f7:5d:bf:12:5f:36:d5:5d:aa: cc:3f:f2:a3:35:d0:e7:53:80:f4:c8:c3:dd:04:8d:a4:9e:7c: f0:35:e6:9d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt7NcPacTm1QcKUNJIlr6WgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTVhMTdmNTBjMTM1YjE4NTFjZWMyYzc2YjBmZDcwZjlk Y2M3OWUwHhcNMjYwMTAxMjAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZkMTcyOTVkZGVjNjE3N2RiOTY3NGVlNDI3MzcxNjY0ZWNkZjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/qxmI+z1vgeE+uH33YF+0XvpRvm mBpdjxwpjcZ7L2ys0oG9VN5e3WBUrtwsdCRUCajOTG+VWaG5oCZSljQ7Ame6JivV gAdSr1bHVUclL377r4G7Sl4mtcqQ0dT45DM4oPsO2KDE/7Q1lJicZt98cX5Z/Uv1 7YcU5KgyXe8Fya+XZY42WsOwFO0jdcBJGjMQIGi0CzBm7cgvb7XFYwNTx3RqNs5u AlXhyDXSheXCB1jk81onfKmL9LBAvZWXUi2KmfDOiLS6IUgzCC+85dl7+DSST1gq kSrbzb623E86ODrsW3wJUOCNzo62rnbt/caZjihVNvhsK9tR7g4pczvM/QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKf9Fyld3sYXfblnTuQnNxZk7N+SMB8GA1UdIwQY MBaAFOGloX9QwTWxhRzsLHaw/XD53MeeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQt OTEzNTc1YzU4ZjRhLzEvcF8wWEtWM2V4aGQ5dVdkTzVDYzNGbVRzMzVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi9mOWY4ZmEtMjk4OC00NDVjLWJlOTQtOTEzNTc1YzU4ZjRh LzEvNGFXaGYxREJOYkdGSE93c2RyRDljUG5jeDU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAHk MA0GCSqGSIb3DQEBCwUAA4IBAQC1BXWM0vBukVUH8QywFTiJqli5uAeYOyIwl5GC PGg4C2ZErgNI+H4TY5W13O76qbl+1LI5aCriZ7J29q8sPGtHfvBgTuh38NXTIeD4 qdOLat+MFPL2mBadEpa5YobIXa2cIdU3udAYRcuVNEBS4ALlV3GHhsj5TNmedr4S 1XdsEQX2HlMlEvErCmYzSz3wteNgU4CVdH6TXqItGC/CmyjFSX2OrUItB8mPBhNG QmTxoG/+GY5vyZ01wZTMUMyYGEV5fZwhi2YJSSzrZ9tWTyiWS3vBLa5zIda2IP9k s2R8oYz3Xb8SXzbVXarMP/KjNdDnU4D0yMPdBI2knnzwNead -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:13 2026 by rpki-client