This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/PTZMdAT0hDazMuAsVI3CEFaCfvE.roa File: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (raw, json) Hash identifier: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA= Subject key identifier: 3D:36:4C:74:04:F4:84:36:B3:32:E0:2C:54:8D:C2:10:56:82:7E:F1 Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Certificate serial: 019B7AC7C6D2D1A542462752AAE2CDA7FB86 Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/PTZMdAT0hDazMuAsVI3CEFaCfvE.roa Signing time: Thu 01 Jan 2026 18:17:51 +0000 ROA not before: Thu 01 Jan 2026 18:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4785 IP address blocks: 2a06:5040:5::/48 maxlen: 48 2a06:5040:10::/48 maxlen: 48 2a06:5040:11::/48 maxlen: 48 2a06:5040:12::/48 maxlen: 48 2a06:5040:13::/48 maxlen: 48 2a06:5040:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c6:d2:d1:a5:42:46:27:52:aa:e2:cd:a7:fb:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244 Validity Not Before: Jan 1 18:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d364c7404f48436b332e02c548dc21056827ef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:92:40:86:7b:d0:a4:aa:49:5f:50:27:c2:47: ed:4c:8a:48:f3:62:7e:26:38:31:40:de:f2:29:7b: b7:21:37:3a:57:4e:39:db:d6:c0:40:20:24:2b:78: 2f:db:5e:2d:33:82:d0:7f:8a:72:73:70:dd:8e:b9: bc:5b:29:45:c8:a6:b6:bc:a3:92:c5:f1:d2:45:10: c7:7f:ca:a6:e3:e6:00:ae:7f:38:0f:0d:cb:5c:38: 5e:f1:2a:f9:31:1f:0e:e8:dc:b1:20:e0:c2:c2:c3: 9d:c4:23:38:cd:07:ec:56:97:b0:b8:d0:cf:97:19: 2a:48:1c:9c:9e:27:51:65:45:79:f8:8d:73:b2:66: 57:99:f6:61:ac:ed:c1:8e:55:0d:7d:ee:5a:4b:f4: 25:07:f3:ba:02:dd:57:b3:63:0a:86:33:e4:c9:ea: 5b:74:37:31:e4:d1:86:dd:03:63:16:52:a3:22:0d: f4:07:47:0d:0b:0f:64:bd:a6:a2:ce:5b:e0:22:f8: 06:61:7c:dd:08:c0:5f:ff:7d:6f:0d:93:1b:41:7e: f2:10:0e:b6:42:06:58:48:52:e6:6f:06:31:a0:dd: 44:bd:cd:26:43:58:fe:e0:15:36:1f:fd:b5:7d:02: 49:8d:da:ed:b8:ff:d4:4a:de:17:64:98:af:b3:ed: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:36:4C:74:04:F4:84:36:B3:32:E0:2C:54:8D:C2:10:56:82:7E:F1 X509v3 Authority Key Identifier: keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/PTZMdAT0hDazMuAsVI3CEFaCfvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:5040:5::/48 2a06:5040:10::-2a06:5040:14:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption c8:f3:f9:69:cd:e8:51:30:df:6b:cb:3c:ad:09:46:9d:90:74: 63:42:3c:c0:ff:2e:58:b2:65:97:d5:14:75:e3:2b:45:54:7a: fe:14:37:a0:0b:80:0c:bf:f2:a8:f1:66:45:f6:48:bb:4b:44: c1:ed:c2:f9:ae:12:66:59:69:1b:2c:a2:bf:ea:ce:f3:b8:76: d9:cc:d3:d2:68:29:f9:73:2b:cf:8a:00:ea:d6:a5:a4:46:ee: a0:fc:84:ee:75:e9:4b:11:d3:c8:a1:41:d6:39:0a:1a:f2:ac: 57:e5:99:83:73:a6:97:47:6e:d9:29:7a:3b:d5:dd:73:0e:38: 42:51:5e:00:aa:04:25:8d:e5:b9:a6:96:7f:2f:fe:a3:c1:7c: d8:3f:64:38:a6:2b:7c:1a:b8:8f:68:ab:99:11:94:74:ec:85: 61:56:cc:21:cd:e5:e8:d2:9c:12:be:55:25:f1:8d:ed:06:e2: 23:9b:24:5a:f6:e2:b1:83:1d:2a:3c:fd:17:5c:c3:12:0b:91: 14:0d:30:a6:41:11:da:38:b5:b0:9b:68:1c:da:25:ee:a9:9b: 79:99:74:3b:a0:7a:2f:87:8a:91:b5:7a:c4:de:15:47:53:01: 47:e4:05:b3:93:b9:4e:9b:36:14:9d:80:13:93:f2:c4:6b:dc: 2c:f9:47:83 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt6x8bS0aVCRidSquLNp/uGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1 YTYyNDQwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDM2NGM3NDA0ZjQ4NDM2YjMzMmUwMmM1NDhkYzIxMDU2ODI3ZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5JAhnvQpKpJX1AnwkftTIpI82J+ JjgxQN7yKXu3ITc6V04529bAQCAkK3gv214tM4LQf4pyc3Ddjrm8WylFyKa2vKOS xfHSRRDHf8qm4+YArn84Dw3LXDhe8Sr5MR8O6NyxIODCwsOdxCM4zQfsVpewuNDP lxkqSBycnidRZUV5+I1zsmZXmfZhrO3BjlUNfe5aS/QlB/O6At1Xs2MKhjPkyepb dDcx5NGG3QNjFlKjIg30B0cNCw9kvaaizlvgIvgGYXzdCMBf/31vDZMbQX7yEA62 QgZYSFLmbwYxoN1Evc0mQ1j+4BU2H/21fQJJjdrtuP/USt4XZJivs+1BrQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFD02THQE9IQ2szLgLFSNwhBWgn7xMB8GA1UdIwQY MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt MDg1MmNiMzUzMjkzLzEvUFRaTWRBVDBoRGF6TXVBc1ZJM0NFRmFDZnZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAAjAdAwcAKgZQQAAF MBIDBwQqBlBAABADBwAqBlBAABQwDQYJKoZIhvcNAQELBQADggEBAMjz+WnN6FEw 32vLPK0JRp2QdGNCPMD/LliyZZfVFHXjK0VUev4UN6ALgAy/8qjxZkX2SLtLRMHt wvmuEmZZaRssor/qzvO4dtnM09JoKflzK8+KAOrWpaRG7qD8hO516UsR08ihQdY5 ChryrFflmYNzppdHbtkpejvV3XMOOEJRXgCqBCWN5bmmln8v/qPBfNg/ZDimK3wa uI9oq5kRlHTshWFWzCHN5ejSnBK+VSXxje0G4iObJFr24rGDHSo8/RdcwxILkRQN MKZBEdo4tbCbaBzaJe6pm3mZdDugei+HipG1esTeFUdTAUfkBbOTuU6bNhSdgBOT 8sRr3Cz5R4M= -----END CERTIFICATE-----Generated at Wed Jan 21 13:47:07 2026 by rpki-client