This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pc2peqT1zl_Q_Fx2VaejT7xMXxA.roa File: pc2peqT1zl_Q_Fx2VaejT7xMXxA.roa (raw, json) Hash identifier: Dv4lwI/YPO2ihHLpz+AZjDd9fj2GJ/F0OOA4FkOJWzU= Subject key identifier: A5:CD:A9:7A:A4:F5:CE:5F:D0:FC:5C:76:55:A7:A3:4F:BC:4C:5F:10 Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Certificate serial: 019B7F84A51AF5CFC06F37F3ACD12F77AE2D Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pc2peqT1zl_Q_Fx2VaejT7xMXxA.roa Signing time: Fri 02 Jan 2026 16:22:37 +0000 ROA not before: Fri 02 Jan 2026 16:22:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210064 IP address blocks: 2a14:6e40:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 11:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:a5:1a:f5:cf:c0:6f:37:f3:ac:d1:2f:77:ae:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5 Validity Not Before: Jan 2 16:22:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5cda97aa4f5ce5fd0fc5c7655a7a34fbc4c5f10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ac:f2:aa:d4:2b:94:44:98:36:29:07:c8:28: 0c:5e:89:29:5f:f4:27:e6:bf:ba:2e:25:a1:4f:7f: c2:35:c8:d0:28:5a:d1:56:73:a4:5a:71:84:73:06: 8e:bc:30:7b:97:86:89:c6:ef:84:0d:bc:58:c4:4a: 6f:ed:77:6f:a7:2c:61:d0:92:94:d1:e0:d4:82:e7: ef:79:cf:8a:5b:0b:d2:16:c2:d9:4e:9c:8c:ee:44: 60:83:36:9a:02:86:ae:81:07:02:a4:88:b6:2d:7f: ba:71:1f:fd:8d:1a:d1:1c:75:16:bb:6f:eb:a2:64: bf:06:51:0b:e7:8d:b3:d0:54:25:53:d9:ea:98:24: 9f:96:0e:41:33:45:7b:af:e0:25:81:f3:a9:57:93: 70:4c:a2:61:dd:c6:c8:87:40:e5:13:a2:0c:de:c7: 34:80:5f:00:e0:99:74:94:9f:de:6d:c9:5d:04:d8: b2:57:1f:95:c3:c5:e9:44:b1:7b:01:e1:c6:d6:55: 7b:ef:3a:2f:e1:b9:32:86:6b:7e:8c:c5:93:1b:9f: 7c:1d:18:09:15:5f:5d:4b:0d:c4:08:d1:7c:f3:99: 18:8d:b0:9a:26:69:97:4c:ff:81:05:00:2a:21:b1: a2:8c:77:bc:b0:05:7a:7f:a7:fe:0f:cb:d1:0e:d2: 26:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:CD:A9:7A:A4:F5:CE:5F:D0:FC:5C:76:55:A7:A3:4F:BC:4C:5F:10 X509v3 Authority Key Identifier: keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/pc2peqT1zl_Q_Fx2VaejT7xMXxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:6e40:1::/48 Signature Algorithm: sha256WithRSAEncryption 72:ac:6f:fe:0e:2f:19:ad:ea:13:86:eb:c3:36:23:6e:4b:a6: 61:0b:2c:ac:bc:d8:98:93:c5:e1:4a:cd:d9:5e:e1:ab:fb:cc: 70:43:19:1c:03:17:bd:6a:43:f5:82:7e:5c:ec:ea:96:a5:62: 31:cc:c1:37:13:e1:40:5e:90:35:47:a7:12:a0:64:e6:9e:f3: 66:a9:48:dc:9d:a4:c4:6a:be:3d:b0:52:67:20:88:00:54:7c: ea:b6:2e:9f:39:4e:d0:e4:9a:e3:da:89:e2:5c:3a:9f:13:1f: a7:57:c1:61:06:4f:8f:35:12:2e:9f:38:15:19:d1:56:b0:97: b1:e9:6b:76:37:d3:9e:4e:18:20:85:0c:ba:59:89:78:63:18: 24:92:a8:97:55:00:57:59:bf:43:a3:fe:5d:b8:6b:42:82:52: 04:39:d3:30:57:7b:c5:b0:92:ae:29:76:60:aa:cb:1e:fb:7d: 35:c3:cd:32:ae:29:69:33:03:f8:2c:15:3c:c1:ef:d0:6d:92: 1b:84:ff:14:f9:46:a7:9f:53:74:70:d7:c5:e7:6a:29:fa:af: ab:ce:b7:04:5b:2a:a9:9f:db:43:ec:ad:3a:7d:42:47:27:f6: 70:fa:48:22:9c:15:2a:ad:f4:27:dd:c6:58:0e:2b:d3:cb:0c: f5:dd:30:07 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hKUa9c/AbzfzrNEvd64tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMWIwOTVmYWI2NzYzM2MwMTI3ZDYxZmY2ODU3ODY0ZWE2 YjI1YzUwHhcNMjYwMTAyMTYyMjM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWNkYTk3YWE0ZjVjZTVmZDBmYzVjNzY1NWE3YTM0ZmJjNGM1ZjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqzyqtQrlESYNikHyCgMXokpX/Qn 5r+6LiWhT3/CNcjQKFrRVnOkWnGEcwaOvDB7l4aJxu+EDbxYxEpv7Xdvpyxh0JKU 0eDUgufvec+KWwvSFsLZTpyM7kRggzaaAoaugQcCpIi2LX+6cR/9jRrRHHUWu2/r omS/BlEL542z0FQlU9nqmCSflg5BM0V7r+AlgfOpV5NwTKJh3cbIh0DlE6IM3sc0 gF8A4Jl0lJ/ebcldBNiyVx+Vw8XpRLF7AeHG1lV77zov4bkyhmt+jMWTG598HRgJ FV9dSw3ECNF885kYjbCaJmmXTP+BBQAqIbGijHe8sAV6f6f+D8vRDtImUwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKXNqXqk9c5f0PxcdlWno0+8TF8QMB8GA1UdIwQY MBaAFE8bCV+rZ2M8ASfWH/aFeGTqayXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYt YjgxMWNmY2I5ZmQ1LzEvcGMycGVxVDF6bF9RX0Z4MlZhZWpUN3hNWHhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81MTFmOTUtZTRiZi00M2YxLWFmMmYtYjgxMWNmY2I5ZmQ1 LzEvVHhzSlg2dG5ZendCSjlZZjlvVjRaT3BySmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRuQAAB MA0GCSqGSIb3DQEBCwUAA4IBAQByrG/+Di8ZreoThuvDNiNuS6ZhCyysvNiYk8Xh Ss3ZXuGr+8xwQxkcAxe9akP1gn5c7OqWpWIxzME3E+FAXpA1R6cSoGTmnvNmqUjc naTEar49sFJnIIgAVHzqti6fOU7Q5Jrj2oniXDqfEx+nV8FhBk+PNRIunzgVGdFW sJex6Wt2N9OeThgghQy6WYl4YxgkkqiXVQBXWb9Do/5duGtCglIEOdMwV3vFsJKu KXZgqsse+301w80yrilpMwP4LBU8we/QbZIbhP8U+Uann1N0cNfF52op+q+rzrcE Wyqpn9tD7K06fUJHJ/Zw+kginBUqrfQn3cZYDivTywz13TAH -----END CERTIFICATE-----Generated at Mon Jan 5 14:36:32 2026 by rpki-client