This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PCC8qmixfmb6ui9CKh9f4GZBDyE.roa File: PCC8qmixfmb6ui9CKh9f4GZBDyE.roa (raw, json) Hash identifier: uzMvm7KFI9AJwCh4Js11mMPhDYQMwbi3jNZ0GiJcvbA= Subject key identifier: 3C:20:BC:AA:68:B1:7E:66:FA:BA:2F:42:2A:1F:5F:E0:66:41:0F:21 Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Certificate serial: 019AA13BB40C453CE7C64D0437E6DAC226F8 Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PCC8qmixfmb6ui9CKh9f4GZBDyE.roa Signing time: Thu 20 Nov 2025 12:27:15 +0000 ROA not before: Thu 20 Nov 2025 12:27:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207641 IP address blocks: 2a0f:3d86:44::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 19:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a1:3b:b4:0c:45:3c:e7:c6:4d:04:37:e6:da:c2:26:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26 Validity Not Before: Nov 20 12:27:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3c20bcaa68b17e66faba2f422a1f5fe066410f21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:43:d3:e9:47:e4:0f:59:02:8f:6a:fd:95:60: dc:04:63:9c:95:4b:90:44:06:00:81:7e:03:61:ef: 76:d0:b2:9f:38:db:2f:37:f2:3c:e2:8b:75:09:30: e6:5f:02:cb:c5:83:80:30:76:0a:62:c0:d7:54:f7: cd:1c:13:18:e8:b0:19:b4:b4:7d:4d:09:fd:3c:4d: 5e:a2:d9:40:e6:7f:88:7e:07:e6:7d:ae:36:3e:72: 1c:1a:0c:78:39:ec:40:ae:b3:56:e8:d7:64:36:13: b4:a5:f1:44:71:54:c8:30:ec:04:ad:df:24:23:9d: bd:57:75:a0:e9:c2:6c:43:ec:68:33:03:d9:f7:e2: 24:a0:e6:f4:2e:df:3a:cb:af:e8:66:61:8d:e1:46: 4f:6c:4d:f4:10:5a:7c:0e:cf:db:e2:19:ad:55:eb: e7:88:e4:8d:ec:44:6e:06:ab:e9:5e:4e:c4:0a:5a: 8e:ee:f7:55:d9:1f:53:a4:b2:61:07:ed:a4:d3:07: f8:02:b8:00:3a:32:46:d9:2d:d0:7c:6b:5d:ad:70: db:33:04:bd:9e:13:79:fc:cf:39:60:a6:4e:68:5e: 26:f2:b5:30:82:05:4b:38:71:e1:30:ad:41:2b:24: 7c:5e:84:7d:2c:ca:33:9e:b6:fa:5f:9f:da:30:e8: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:20:BC:AA:68:B1:7E:66:FA:BA:2F:42:2A:1F:5F:E0:66:41:0F:21 X509v3 Authority Key Identifier: keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PCC8qmixfmb6ui9CKh9f4GZBDyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:3d86:44::/48 Signature Algorithm: sha256WithRSAEncryption a7:48:e6:cc:1d:9f:cd:c4:f8:48:07:0f:b7:96:0d:8b:07:ed: ef:d9:55:0e:40:3e:4b:19:87:3c:25:85:af:d6:90:dd:88:b4: b9:c7:d2:f4:ad:82:61:3c:20:51:6c:18:08:1a:ed:40:4f:c1: 57:3f:0d:fd:5a:0b:9b:8c:c5:63:1c:50:d1:aa:e6:e8:c8:06: 47:5d:49:2b:98:54:03:42:f4:42:bf:58:e2:33:5e:a9:c4:b7: 7d:be:68:b2:b8:de:86:67:59:e1:7e:3c:b2:c4:81:30:2f:12: 9d:a8:d0:17:e2:3c:d5:8c:04:cd:c1:84:1a:41:58:35:a8:af: 26:bd:95:2e:93:74:d0:0f:ff:9e:69:25:1f:ec:2b:22:8b:5b: 99:03:a1:87:4f:1e:6f:e9:68:84:ae:03:01:d4:16:80:74:6a: 0f:fb:99:58:f2:67:81:32:c6:f4:c2:58:cf:2b:2a:cc:61:60: 92:c7:e7:c3:92:9a:1b:8d:51:eb:70:63:a8:c1:b4:65:8b:50: 6e:32:9c:82:9d:35:0d:b2:df:3d:a7:8d:fd:d9:b4:5e:3a:0a: 33:30:f9:ba:5d:47:4d:cd:e8:fb:db:2a:2c:41:a0:72:90:75: cd:f8:ea:b5:f0:7e:62:4d:96:09:a1:77:c3:9c:77:6e:33:87: a7:2a:7b:a9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZqhO7QMRTznxk0EN+bawib4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz ZTRjMjYwHhcNMjUxMTIwMTIyNzE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzIwYmNhYTY4YjE3ZTY2ZmFiYTJmNDIyYTFmNWZlMDY2NDEwZjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkPT6UfkD1kCj2r9lWDcBGOclUuQ RAYAgX4DYe920LKfONsvN/I84ot1CTDmXwLLxYOAMHYKYsDXVPfNHBMY6LAZtLR9 TQn9PE1eotlA5n+Ifgfmfa42PnIcGgx4OexArrNW6NdkNhO0pfFEcVTIMOwErd8k I529V3Wg6cJsQ+xoMwPZ9+IkoOb0Lt86y6/oZmGN4UZPbE30EFp8Ds/b4hmtVevn iOSN7ERuBqvpXk7EClqO7vdV2R9TpLJhB+2k0wf4ArgAOjJG2S3QfGtdrXDbMwS9 nhN5/M85YKZOaF4m8rUwggVLOHHhMK1BKyR8XoR9LMoznrb6X5/aMOgLkwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFDwgvKposX5m+rovQiofX+BmQQ8hMB8GA1UdIwQY MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt OGM1MDA3YzJhNGI2LzEvUENDOHFtaXhmbWI2dWk5Q0toOWY0R1pCRHlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2 LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg89hgBE MA0GCSqGSIb3DQEBCwUAA4IBAQCnSObMHZ/NxPhIBw+3lg2LB+3v2VUOQD5LGYc8 JYWv1pDdiLS5x9L0rYJhPCBRbBgIGu1AT8FXPw39WgubjMVjHFDRquboyAZHXUkr mFQDQvRCv1jiM16pxLd9vmiyuN6GZ1nhfjyyxIEwLxKdqNAX4jzVjATNwYQaQVg1 qK8mvZUuk3TQD/+eaSUf7Csii1uZA6GHTx5v6WiErgMB1BaAdGoP+5lY8meBMsb0 wljPKyrMYWCSx+fDkpobjVHrcGOowbRli1BuMpyCnTUNst89p4392bReOgozMPm6 XUdNzej72yosQaBykHXN+Oq18H5iTZYJoXfDnHduM4enKnup -----END CERTIFICATE-----Generated at Sat Dec 6 03:14:55 2025 by rpki-client