This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/_pfciZ_m38T513lNmtA0Pwa9o5Q.roa File: _pfciZ_m38T513lNmtA0Pwa9o5Q.roa (raw, json) Hash identifier: APKIz+nFGp95g+RT9F18/CYBhne7Ta4WQQGn4JOIiSA= Subject key identifier: FE:97:DC:89:9F:E6:DF:C4:F9:D7:79:4D:9A:D0:34:3F:06:BD:A3:94 Certificate issuer: /CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Certificate serial: 019B7C800E81D12F60ADF8D45B31DC88F846 Authority key identifier: AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/_pfciZ_m38T513lNmtA0Pwa9o5Q.roa Signing time: Fri 02 Jan 2026 02:18:45 +0000 ROA not before: Fri 02 Jan 2026 02:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204333 IP address blocks: 2a13:5681::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.mft rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0e:81:d1:2f:60:ad:f8:d4:5b:31:dc:88:f8:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abd87bbef5943546b2a83d31ec2b99ad883d51d7 Validity Not Before: Jan 2 02:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe97dc899fe6dfc4f9d7794d9ad0343f06bda394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:1b:60:ee:be:e4:b3:07:11:aa:d5:9b:2c:ef: f7:ef:a7:0f:af:3c:51:36:fb:93:04:62:c6:51:26: d1:40:b3:7f:ee:9a:16:95:75:14:4c:ad:8f:06:3e: f0:a3:33:f5:d4:80:83:5a:dd:6f:47:94:5e:30:03: e9:8c:ac:0b:e5:e3:4d:c3:42:40:63:b4:62:fb:e7: 9b:ae:47:af:7d:f5:26:49:44:cf:2f:40:9c:2d:d0: 26:db:77:11:b1:8d:88:c0:3a:7e:6f:70:0c:63:e1: 53:43:29:3e:91:04:f4:13:44:78:8c:29:a8:f8:bd: a7:98:04:98:fa:30:27:f7:7a:6a:3c:22:b0:01:cd: 96:81:59:a7:4a:d5:ae:4e:e8:c2:8f:1f:00:96:93: 0c:73:69:47:4c:c4:fd:54:b2:ed:5a:6a:31:29:b2: 9f:a1:05:f6:10:58:94:5e:2b:bd:0d:34:75:dd:60: 07:79:cc:93:26:d9:4a:46:52:0b:68:61:f4:e3:02: 75:e6:86:75:e6:96:93:e9:94:97:79:dd:20:c9:f0: c5:36:8d:aa:01:af:a3:41:03:b4:f8:72:66:c0:48: 1b:cb:73:52:9a:7a:75:55:78:4b:e9:01:d6:00:16: 00:25:1c:f5:a7:80:0d:25:01:0a:57:79:61:85:a2: ce:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:97:DC:89:9F:E6:DF:C4:F9:D7:79:4D:9A:D0:34:3F:06:BD:A3:94 X509v3 Authority Key Identifier: keyid:AB:D8:7B:BE:F5:94:35:46:B2:A8:3D:31:EC:2B:99:AD:88:3D:51:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q9h7vvWUNUayqD0x7CuZrYg9Udc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/_pfciZ_m38T513lNmtA0Pwa9o5Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ad2e0-e3f0-4abe-bcb6-2f5c74c69ae1/1/q9h7vvWUNUayqD0x7CuZrYg9Udc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:5681::/40 Signature Algorithm: sha256WithRSAEncryption 1e:18:a3:cc:c0:66:2a:31:96:2b:4f:00:68:bd:06:0a:ff:80: 85:1e:19:bd:cd:96:63:22:81:3d:c3:0d:34:d7:24:49:b3:a6: a5:d5:8d:96:b3:40:d4:3c:75:d5:25:38:5f:19:28:d5:65:43: 82:1c:c9:21:79:e9:02:54:dc:7f:61:5f:07:7f:6a:eb:7a:99: ad:1d:7f:74:72:42:6d:b9:7a:fc:ab:3c:92:d0:2b:cd:8c:2e: 2a:09:b9:8d:46:59:7d:bc:b5:92:f1:99:18:c4:50:e6:31:4b: da:d1:9f:ef:83:8c:f1:99:a5:77:1b:4f:95:4e:75:53:b1:bb: 93:ac:c0:22:d4:be:44:46:7b:bf:e5:31:15:d0:b5:91:6d:9b: e2:6d:0d:e8:fd:80:78:f9:6d:88:2e:58:21:bf:37:29:52:56: 11:e4:dd:04:6d:39:1f:0a:fe:e9:7d:73:d4:86:a7:ab:b3:59: 92:2d:d5:6b:69:92:3a:5e:ba:31:93:ed:78:15:be:ca:a0:45: 31:0d:6c:68:50:fd:c8:76:88:03:41:73:ed:93:07:04:87:4d: 2c:5a:70:65:a6:52:63:5d:2c:38:c2:fe:e4:33:24:0f:df:69: f5:c7:d2:7f:0f:27:72:37:15:68:06:58:ec:0e:3d:d2:a9:94: c5:bb:ce:10 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8gA6B0S9grfjUWzHciPhGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiZDg3YmJlZjU5NDM1NDZiMmE4M2QzMWVjMmI5OWFkODgz ZDUxZDcwHhcNMjYwMTAyMDIxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTk3ZGM4OTlmZTZkZmM0ZjlkNzc5NGQ5YWQwMzQzZjA2YmRhMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Btg7r7kswcRqtWbLO/376cPrzxR NvuTBGLGUSbRQLN/7poWlXUUTK2PBj7wozP11ICDWt1vR5ReMAPpjKwL5eNNw0JA Y7Ri++ebrkevffUmSUTPL0CcLdAm23cRsY2IwDp+b3AMY+FTQyk+kQT0E0R4jCmo +L2nmASY+jAn93pqPCKwAc2WgVmnStWuTujCjx8AlpMMc2lHTMT9VLLtWmoxKbKf oQX2EFiUXiu9DTR13WAHecyTJtlKRlILaGH04wJ15oZ15paT6ZSXed0gyfDFNo2q Aa+jQQO0+HJmwEgby3NSmnp1VXhL6QHWABYAJRz1p4ANJQEKV3lhhaLOQwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFP6X3Imf5t/E+dd5TZrQND8GvaOUMB8GA1UdIwQY MBaAFKvYe771lDVGsqg9Mewrma2IPVHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYt MmY1Yzc0YzY5YWUxLzEvX3BmY2laX20zOFQ1MTNsTm10QTBQd2E5bzVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC84YWQyZTAtZTNmMC00YWJlLWJjYjYtMmY1Yzc0YzY5YWUx LzEvcTloN3Z2V1VOVWF5cUQweDdDdVpyWWc5VWRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhNWgQAw DQYJKoZIhvcNAQELBQADggEBAB4Yo8zAZioxlitPAGi9Bgr/gIUeGb3NlmMigT3D DTTXJEmzpqXVjZazQNQ8ddUlOF8ZKNVlQ4IcySF56QJU3H9hXwd/aut6ma0df3Ry Qm25evyrPJLQK82MLioJuY1GWX28tZLxmRjEUOYxS9rRn++DjPGZpXcbT5VOdVOx u5OswCLUvkRGe7/lMRXQtZFtm+JtDej9gHj5bYguWCG/NylSVhHk3QRtOR8K/ul9 c9SGp6uzWZIt1WtpkjpeujGT7XgVvsqgRTENbGhQ/ch2iANBc+2TBwSHTSxacGWm UmNdLDjC/uQzJA/fafXH0n8PJ3I3FWgGWOwOPdKplMW7zhA= -----END CERTIFICATE-----Generated at Mon Jan 12 03:47:53 2026 by rpki-client