This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/PQYW-fI83eP_2ozihVN7n1dxJM8.roa File: PQYW-fI83eP_2ozihVN7n1dxJM8.roa (raw, json) Hash identifier: H3fcYH9FUIKWRSPN6O9tYDgQYIdSAPwR2TIyzxV1Zzk= Subject key identifier: 3D:06:16:F9:F2:3C:DD:E3:FF:DA:8C:E2:85:53:7B:9F:57:71:24:CF Certificate issuer: /CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0 Certificate serial: 019B797F4B5209B817CD5700F79B892C654D Authority key identifier: D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/PQYW-fI83eP_2ozihVN7n1dxJM8.roa Signing time: Thu 01 Jan 2026 12:19:04 +0000 ROA not before: Thu 01 Jan 2026 12:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52042 IP address blocks: 2a13:3fc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.mft rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:4b:52:09:b8:17:cd:57:00:f7:9b:89:2c:65:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d83713fd7b4cdfa6cba016a87eaf8b31c891beb0 Validity Not Before: Jan 1 12:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d0616f9f23cdde3ffda8ce285537b9f577124cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:14:94:8f:41:89:e8:25:5c:bc:87:b8:6f: 3c:9b:f4:bc:b4:c6:d9:34:9b:90:58:99:5f:14:87: 2d:ef:4b:45:63:15:fb:a8:5c:c7:4b:7b:72:a1:ef: f2:d7:55:32:f8:c8:8d:dc:ef:cb:ad:95:38:22:86: 30:07:4d:fa:bb:fe:ff:49:e1:d7:35:4a:38:95:03: 0f:03:67:fe:ba:86:f6:67:e6:38:bb:11:8d:bd:a3: 85:10:62:af:a4:c5:56:d9:ee:f7:4a:d8:97:5b:47: 10:cf:2a:eb:61:16:7c:01:40:38:34:cc:ab:05:8e: d6:1e:92:b2:e2:15:85:0e:9f:1f:da:e1:f7:66:51: ae:bc:86:f1:aa:f2:99:0c:7f:1f:00:d6:52:68:55: 8d:36:c1:59:2e:eb:ee:20:14:19:98:cd:11:5c:c4: c8:14:32:ab:cf:5f:51:e4:ca:ce:2a:57:90:54:b9: 21:c5:cd:7b:23:70:30:49:aa:61:45:d5:aa:e5:2d: 03:e6:6b:b2:18:5e:b0:84:16:31:a5:7d:1c:ca:c1: 14:7a:96:7f:bb:8c:4b:23:bb:ff:69:a7:72:74:3f: 6a:94:f2:2d:5d:10:9a:06:f0:96:2f:0a:d4:de:96: 03:15:66:56:5b:b4:c9:5a:c4:a5:13:f2:91:92:9d: fa:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:06:16:F9:F2:3C:DD:E3:FF:DA:8C:E2:85:53:7B:9F:57:71:24:CF X509v3 Authority Key Identifier: keyid:D8:37:13:FD:7B:4C:DF:A6:CB:A0:16:A8:7E:AF:8B:31:C8:91:BE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2DcT_XtM36bLoBaofq-LMciRvrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/PQYW-fI83eP_2ozihVN7n1dxJM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/2d2109-cfb8-4325-a0e3-058785b4a96e/1/2DcT_XtM36bLoBaofq-LMciRvrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:3fc1::/32 Signature Algorithm: sha256WithRSAEncryption 40:9b:5e:39:1e:69:7c:27:77:26:80:c7:4e:18:1c:58:7e:01: be:5a:9f:24:47:8f:4e:0b:39:4d:10:d8:9b:52:e0:cc:bc:01: 04:05:a1:15:f0:d3:ea:cb:7e:13:06:42:92:9a:5c:1b:86:bf: 25:5f:79:0e:aa:f5:b0:e2:6b:4c:dc:64:b4:14:23:7c:d2:f4: 9b:5c:af:bf:6f:94:fd:13:f8:97:b4:70:be:cb:94:64:e3:6f: 73:45:ec:a8:8b:84:67:83:7c:81:53:2f:2c:41:c9:d0:14:c8: 11:b8:13:ca:13:0c:44:3f:5e:97:4d:ab:f9:05:ce:af:9d:25: 52:26:be:2e:e3:78:d1:8d:75:73:98:71:a8:8f:a2:4b:fb:a0: 98:ef:67:ba:8d:1f:dd:ad:ac:28:e4:42:08:06:58:f7:f3:df: f0:cb:23:ec:86:9b:0c:fe:43:f9:21:05:01:a0:89:d9:19:74: fd:ac:4b:65:f7:b4:3e:c8:41:26:b8:5e:0c:29:3d:8a:c3:e5: ca:e2:38:99:52:9e:16:05:27:ea:ae:30:f4:ed:2a:89:bf:ac: 6c:6b:e3:14:d0:db:46:1e:f1:12:0e:e7:f7:3a:ae:1d:d1:6c: 4b:4b:66:2f:94:90:9e:5a:9b:16:ab:c6:b9:36:2a:10:27:90: d5:74:c0:24 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5f0tSCbgXzVcA95uJLGVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MzcxM2ZkN2I0Y2RmYTZjYmEwMTZhODdlYWY4YjMxYzg5 MWJlYjAwHhcNMjYwMTAxMTIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDA2MTZmOWYyM2NkZGUzZmZkYThjZTI4NTUzN2I5ZjU3NzEyNGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BUUlI9BieglXLyHuG88m/S8tMbZ NJuQWJlfFIct70tFYxX7qFzHS3tyoe/y11Uy+MiN3O/LrZU4IoYwB036u/7/SeHX NUo4lQMPA2f+uob2Z+Y4uxGNvaOFEGKvpMVW2e73StiXW0cQzyrrYRZ8AUA4NMyr BY7WHpKy4hWFDp8f2uH3ZlGuvIbxqvKZDH8fANZSaFWNNsFZLuvuIBQZmM0RXMTI FDKrz19R5MrOKleQVLkhxc17I3AwSaphRdWq5S0D5muyGF6whBYxpX0cysEUepZ/ u4xLI7v/aadydD9qlPItXRCaBvCWLwrU3pYDFWZWW7TJWsSlE/KRkp36mwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFD0GFvnyPN3j/9qM4oVTe59XcSTPMB8GA1UdIwQY MBaAFNg3E/17TN+my6AWqH6vizHIkb6wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMt MDU4Nzg1YjRhOTZlLzEvUFFZVy1mSTgzZVBfMm96aWhWTjduMWR4Sk04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8yZDIxMDktY2ZiOC00MzI1LWEwZTMtMDU4Nzg1YjRhOTZl LzEvMkRjVF9YdE0zNmJMb0Jhb2ZxLUxNY2lSdnJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhM/wTAN BgkqhkiG9w0BAQsFAAOCAQEAQJteOR5pfCd3JoDHThgcWH4BvlqfJEePTgs5TRDY m1LgzLwBBAWhFfDT6st+EwZCkppcG4a/JV95Dqr1sOJrTNxktBQjfNL0m1yvv2+U /RP4l7RwvsuUZONvc0XsqIuEZ4N8gVMvLEHJ0BTIEbgTyhMMRD9el02r+QXOr50l Uia+LuN40Y11c5hxqI+iS/ugmO9nuo0f3a2sKORCCAZY9/Pf8Msj7IabDP5D+SEF AaCJ2Rl0/axLZfe0PshBJrheDCk9isPlyuI4mVKeFgUn6q4w9O0qib+sbGvjFNDb Rh7xEg7n9zquHdFsS0tmL5SQnlqbFqvGuTYqECeQ1XTAJA== -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:35 2026 by rpki-client