This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/pqVBy_JjEYGo9euG10lbD9kfoPc.roa File: pqVBy_JjEYGo9euG10lbD9kfoPc.roa (raw, json) Hash identifier: RPXgn9O4fhCi6PomLx2N6apcSA2xga46Z6S9gI5YVpU= Subject key identifier: A6:A5:41:CB:F2:63:11:81:A8:F5:EB:86:D7:49:5B:0F:D9:1F:A0:F7 Certificate issuer: /CN=92f7d213fa13708e3200184ff1bc391577cc252f Certificate serial: 019B7EA44436F4F182711E827C4B595CEEEF Authority key identifier: 92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/pqVBy_JjEYGo9euG10lbD9kfoPc.roa Signing time: Fri 02 Jan 2026 12:17:33 +0000 ROA not before: Fri 02 Jan 2026 12:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 133944 IP address blocks: 2a12:f180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.mft rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:44:36:f4:f1:82:71:1e:82:7c:4b:59:5c:ee:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92f7d213fa13708e3200184ff1bc391577cc252f Validity Not Before: Jan 2 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6a541cbf2631181a8f5eb86d7495b0fd91fa0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3a:6d:5b:63:48:15:74:20:2c:d3:aa:d7:ca: e4:a4:d1:6a:9c:11:fc:c8:4b:80:33:ab:80:91:fc: c7:92:ca:7e:f0:2b:34:ed:21:25:07:8f:d9:2e:07: eb:f1:1d:08:ee:b1:45:5e:4c:7c:56:82:a0:15:78: cb:ef:1c:56:e8:e7:e1:e0:2f:b8:b8:33:23:9a:90: 62:ae:7a:c3:9e:23:7b:3b:e7:42:f3:96:ab:36:08: f9:98:70:78:15:b8:e0:1b:eb:25:97:32:86:83:b6: ec:84:04:fa:e8:ba:4e:4a:36:bb:50:fa:46:8c:e5: 8f:96:93:a0:cd:d4:ce:4d:7c:73:47:09:cf:1a:6e: bb:eb:6b:35:17:0a:78:df:e2:77:a2:06:ea:4e:09: 43:4e:f2:79:90:44:86:14:25:cf:0c:e6:2f:2e:88: d9:35:09:7e:6f:d3:df:85:c6:da:b0:4b:af:0c:4d: 09:8e:86:a0:25:6d:5a:41:b6:4c:7d:00:21:54:93: 48:ad:8f:53:9a:b5:a0:a3:ba:3e:c3:7b:23:f5:4d: f9:ec:7a:6d:43:e7:3d:80:30:a2:35:ad:47:40:a4: 2c:ad:9a:af:96:12:e5:69:68:83:05:9a:79:5f:ad: 3f:f5:26:db:95:1a:d0:70:6c:d4:2a:ed:e2:11:32: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:A5:41:CB:F2:63:11:81:A8:F5:EB:86:D7:49:5B:0F:D9:1F:A0:F7 X509v3 Authority Key Identifier: keyid:92:F7:D2:13:FA:13:70:8E:32:00:18:4F:F1:BC:39:15:77:CC:25:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvfSE_oTcI4yABhP8bw5FXfMJS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/pqVBy_JjEYGo9euG10lbD9kfoPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/482101-ac94-4f0b-9309-3e18ee6b4a5a/1/kvfSE_oTcI4yABhP8bw5FXfMJS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:f180::/29 Signature Algorithm: sha256WithRSAEncryption 64:99:74:92:db:cd:5d:77:37:f4:3f:82:49:e3:22:ff:77:c2: ee:78:30:42:4d:96:9c:af:ba:56:23:d1:52:dc:85:a3:d1:8c: 69:53:b5:f3:74:77:f5:9b:a8:b9:4c:f1:56:72:40:f3:18:64: 63:46:d2:6f:51:82:a9:9f:36:f4:a5:52:5f:45:c0:f3:b5:d9: e1:5b:8c:6f:ca:e0:6e:8e:60:ed:a9:fc:3d:1f:70:19:e1:cf: 1d:66:e4:6a:a6:8d:a5:cb:fb:f6:8b:f4:05:5a:21:09:4b:d2: d3:76:41:fe:17:06:ee:7f:1b:96:24:0d:39:1a:64:0b:3b:0c: 2f:bf:aa:42:a4:eb:ff:f5:e9:6b:0e:ad:87:f0:1a:56:3f:57: 9a:47:8b:65:4c:72:5f:b3:f1:fa:1f:4a:ab:95:88:57:b1:78: f5:00:9b:f0:b3:86:d5:bc:7b:52:17:f4:63:26:e8:97:30:97: 51:42:8f:f8:d2:b3:ff:81:f5:39:ff:de:9e:ce:4c:de:7e:ff: 00:99:e1:2d:21:40:18:d7:6b:57:97:2b:d3:05:34:74:79:5d: e8:2d:d2:26:b4:e1:5a:8a:17:80:ea:ec:52:82:98:55:a4:88: cf:d3:4f:b8:22:8e:06:b8:cd:f4:37:62:fe:8d:29:6d:2b:bc: 22:eb:75:3c -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pEQ29PGCcR6CfEtZXO7vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZjdkMjEzZmExMzcwOGUzMjAwMTg0ZmYxYmMzOTE1Nzdj YzI1MmYwHhcNMjYwMTAyMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmE1NDFjYmYyNjMxMTgxYThmNWViODZkNzQ5NWIwZmQ5MWZhMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDptW2NIFXQgLNOq18rkpNFqnBH8 yEuAM6uAkfzHksp+8Cs07SElB4/ZLgfr8R0I7rFFXkx8VoKgFXjL7xxW6Ofh4C+4 uDMjmpBirnrDniN7O+dC85arNgj5mHB4FbjgG+sllzKGg7bshAT66LpOSja7UPpG jOWPlpOgzdTOTXxzRwnPGm6762s1Fwp43+J3ogbqTglDTvJ5kESGFCXPDOYvLojZ NQl+b9PfhcbasEuvDE0JjoagJW1aQbZMfQAhVJNIrY9TmrWgo7o+w3sj9U357Hpt Q+c9gDCiNa1HQKQsrZqvlhLlaWiDBZp5X60/9SbblRrQcGzUKu3iETK7xQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFKalQcvyYxGBqPXrhtdJWw/ZH6D3MB8GA1UdIwQY MBaAFJL30hP6E3COMgAYT/G8ORV3zCUvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDkt M2UxOGVlNmI0YTVhLzEvcHFWQnlfSmpFWUdvOWV1RzEwbGJEOWtmb1BjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi80ODIxMDEtYWM5NC00ZjBiLTkzMDktM2UxOGVlNmI0YTVh LzEva3ZmU0Vfb1RjSTR5QUJoUDhidzVGWGZNSlM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLxgDAN BgkqhkiG9w0BAQsFAAOCAQEAZJl0ktvNXXc39D+CSeMi/3fC7ngwQk2WnK+6ViPR UtyFo9GMaVO183R39ZuouUzxVnJA8xhkY0bSb1GCqZ829KVSX0XA87XZ4VuMb8rg bo5g7an8PR9wGeHPHWbkaqaNpcv79ov0BVohCUvS03ZB/hcG7n8bliQNORpkCzsM L7+qQqTr//Xpaw6th/AaVj9XmkeLZUxyX7Px+h9Kq5WIV7F49QCb8LOG1bx7Uhf0 YybolzCXUUKP+NKz/4H1Of/ens5M3n7/AJnhLSFAGNdrV5cr0wU0dHld6C3SJrTh WooXgOrsUoKYVaSIz9NPuCKOBrjN9Ddi/o0pbSu8Iut1PA== -----END CERTIFICATE-----Generated at Sun Jan 25 09:19:31 2026 by rpki-client