This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/PwETNKs37jeOPIwRfzmAVRCx5RA.roa File: PwETNKs37jeOPIwRfzmAVRCx5RA.roa (raw, json) Hash identifier: A7MiRy6tdF3DFHgGL2Bg1zW3IkK52EBZK26ibjcoM5o= Subject key identifier: 3F:01:13:34:AB:37:EE:37:8E:3C:8C:11:7F:39:80:55:10:B1:E5:10 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12FD95CAAF8E54DA52D782F95DDA8A Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/PwETNKs37jeOPIwRfzmAVRCx5RA.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213185 IP address blocks: 2a0d:1a40:7553::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fd:95:ca:af:8e:54:da:52:d7:82:f9:5d:da:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f011334ab37ee378e3c8c117f39805510b1e510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:62:b4:bc:20:29:d4:5c:e5:9f:e3:40:2d:ef: 52:bc:53:86:8d:6b:79:ce:6b:6d:00:78:a0:cd:d1: 7e:2a:b2:47:9a:11:21:3e:34:46:89:e4:ce:98:77: 50:71:43:2f:21:3f:f2:49:b2:57:22:02:a5:c7:25: 66:aa:d5:86:dd:71:bd:db:56:b7:cc:18:b7:29:2e: a5:b2:39:b5:a0:8e:4f:61:21:a6:dd:8b:3f:8b:b0: 04:83:66:d4:47:10:03:38:ce:fc:55:75:2e:1e:16: dc:7a:2f:88:07:af:b2:62:92:54:2a:8e:1a:41:42: 29:26:06:78:b6:29:be:f6:fb:55:74:ae:8f:73:3c: 2c:36:47:18:71:32:d5:58:05:c5:18:3b:3f:dd:ed: 20:2d:17:8c:66:94:68:0e:dc:1b:09:e6:db:92:15: 3d:ef:82:d9:98:9d:a4:83:81:9d:62:6e:44:27:ce: 72:9a:47:81:43:3d:94:82:e3:d3:2f:18:b4:a1:bc: 52:4b:c6:f2:0c:d7:b8:3b:2a:c8:b5:5d:07:a9:71: a7:bb:97:9a:41:47:f7:63:80:c8:7d:46:58:f1:e0: a7:4c:76:95:9d:d6:c0:35:cb:37:9d:e6:11:03:a5: 7d:be:f3:a6:29:bd:21:f4:61:49:0e:9f:6e:f3:ae: a3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:01:13:34:AB:37:EE:37:8E:3C:8C:11:7F:39:80:55:10:B1:E5:10 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/PwETNKs37jeOPIwRfzmAVRCx5RA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:1a40:7553::/48 Signature Algorithm: sha256WithRSAEncryption 8e:dd:c5:8e:97:78:2c:65:c5:f9:e5:27:95:e4:9b:7e:3e:a0: 7c:64:4b:f0:13:62:9c:97:35:b2:b6:88:8f:c1:9f:a3:87:20: 7e:87:44:6b:b6:98:59:f9:4c:8f:c1:10:a2:4b:aa:e4:30:f6: 71:28:45:95:42:39:56:d9:1e:01:4a:2c:2d:75:47:33:78:17: 7a:79:3b:c2:8d:fe:e8:bf:af:56:71:82:74:56:82:a8:e6:69: f8:56:cb:96:a1:ac:03:2a:fe:f6:b0:ca:40:25:4a:b1:b1:8c: ef:4c:a3:9a:59:60:f3:40:4f:04:de:a0:1d:f7:74:e7:d8:cd: 3b:86:13:14:e9:f2:92:46:7a:bb:96:5c:c7:eb:94:d9:06:5f: 55:b8:33:53:c2:44:b5:00:03:1b:82:5f:c7:01:b9:59:5d:08: 57:b7:71:cf:8b:1d:3d:d1:0c:a1:cb:f5:ee:1a:08:86:73:fa: c7:71:17:ff:e9:45:03:1a:67:4a:77:5e:80:68:03:b6:cd:6c: b9:a4:c4:b2:34:75:cf:50:7f:0b:aa:60:ad:1c:6b:d0:34:07: 06:65:41:e4:c3:a4:53:56:47:d5:14:22:05:c7:5c:00:3d:8c: d5:61:5b:f2:92:a2:ec:d7:7f:87:72:cb:59:87:22:01:d7:af: 93:6f:e5:3d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Ev2Vyq+OVNpS14L5XdqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjAxMTMzNGFiMzdlZTM3OGUzYzhjMTE3ZjM5ODA1NTEwYjFlNTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5mK0vCAp1Fzln+NALe9SvFOGjWt5 zmttAHigzdF+KrJHmhEhPjRGieTOmHdQcUMvIT/ySbJXIgKlxyVmqtWG3XG921a3 zBi3KS6lsjm1oI5PYSGm3Ys/i7AEg2bURxADOM78VXUuHhbcei+IB6+yYpJUKo4a QUIpJgZ4tim+9vtVdK6PczwsNkcYcTLVWAXFGDs/3e0gLReMZpRoDtwbCebbkhU9 74LZmJ2kg4GdYm5EJ85ymkeBQz2UguPTLxi0obxSS8byDNe4OyrItV0HqXGnu5ea QUf3Y4DIfUZY8eCnTHaVndbANcs3neYRA6V9vvOmKb0h9GFJDp9u866jLQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFD8BEzSrN+43jjyMEX85gFUQseUQMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvUHdFVE5LczM3amVPUEl3UmZ6bUFWUkN4NVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0aQHVT MA0GCSqGSIb3DQEBCwUAA4IBAQCO3cWOl3gsZcX55SeV5Jt+PqB8ZEvwE2KclzWy toiPwZ+jhyB+h0RrtphZ+UyPwRCiS6rkMPZxKEWVQjlW2R4BSiwtdUczeBd6eTvC jf7ov69WcYJ0VoKo5mn4VsuWoawDKv72sMpAJUqxsYzvTKOaWWDzQE8E3qAd93Tn 2M07hhMU6fKSRnq7llzH65TZBl9VuDNTwkS1AAMbgl/HAblZXQhXt3HPix090Qyh y/XuGgiGc/rHcRf/6UUDGmdKd16AaAO2zWy5pMSyNHXPUH8LqmCtHGvQNAcGZUHk w6RTVkfVFCIFx1wAPYzVYVvykqLs13+HcstZhyIB16+Tb+U9 -----END CERTIFICATE-----Generated at Wed Jan 7 15:55:55 2026 by rpki-client