This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/s_fFGKkdoPY4H1Bk6AxKzsE-Q_I.roa File: s_fFGKkdoPY4H1Bk6AxKzsE-Q_I.roa (raw, json) Hash identifier: cs192Uj5wZuvh8PfKqLA67RkACFGCXlLRR7mvgs7Eo0= Subject key identifier: B3:F7:C5:18:A9:1D:A0:F6:38:1F:50:64:E8:0C:4A:CE:C1:3E:43:F2 Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Certificate serial: 019B7FF1C63E2C1C8DCC6D1ADAB0F07DDDF0 Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/s_fFGKkdoPY4H1Bk6AxKzsE-Q_I.roa Signing time: Fri 02 Jan 2026 18:21:49 +0000 ROA not before: Fri 02 Jan 2026 18:21:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215397 IP address blocks: 2a03:5840:12a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:c6:3e:2c:1c:8d:cc:6d:1a:da:b0:f0:7d:dd:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a Validity Not Before: Jan 2 18:21:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3f7c518a91da0f6381f5064e80c4acec13e43f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8e:f8:dd:cb:6a:26:e4:48:22:03:7b:3f:68: ac:83:14:71:59:6c:7c:84:32:59:d4:f2:6c:04:00: 40:a6:61:da:ab:9e:03:fd:39:1f:9e:0b:48:1d:09: 49:e2:9c:5f:31:a5:39:20:e0:cd:5a:e9:0c:ee:f8: 36:74:a6:8e:fd:11:8e:3b:4f:c7:76:b4:9f:6c:19: 58:b3:3a:ea:92:c1:a4:71:78:1f:0f:53:bb:db:cb: b7:01:e1:40:31:a4:90:8b:b4:ae:5d:3a:44:18:5b: 1a:bf:8d:c0:86:ac:c0:13:d6:ce:92:d9:ae:7e:db: d1:4e:48:5e:75:1f:6d:e0:de:85:b1:6e:1e:c0:d1: 24:50:37:d0:f1:1d:90:09:e7:ab:c8:88:ca:a4:89: 4f:b0:54:bb:dd:9b:1d:28:ef:cd:54:5d:ff:f3:72: cc:f5:d0:c4:78:b1:cb:c4:21:34:b0:25:e6:ab:5d: a9:ce:43:50:58:34:f4:a8:30:35:c7:ce:32:84:dc: d0:ae:df:76:56:0f:9c:24:e7:da:95:fa:c3:7e:5a: 15:cc:c9:7a:b7:e8:27:34:86:01:9b:f3:27:2e:ad: 12:9c:3e:c5:20:4b:e1:ab:af:b4:45:17:f3:0e:fb: bb:7e:a8:60:78:97:83:c1:c7:48:f6:24:c6:42:00: a4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F7:C5:18:A9:1D:A0:F6:38:1F:50:64:E8:0C:4A:CE:C1:3E:43:F2 X509v3 Authority Key Identifier: keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/s_fFGKkdoPY4H1Bk6AxKzsE-Q_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a03:5840:12a::/48 Signature Algorithm: sha256WithRSAEncryption 12:d0:3f:ec:70:81:b4:20:76:8d:c8:3b:3f:ac:d0:e0:5a:d7: c0:f7:04:95:83:b6:f8:11:4f:63:7b:0e:6d:57:ab:ba:d9:e6: 08:92:72:84:ca:f3:74:0c:7a:26:14:bd:b6:5c:d0:4d:a8:08: 89:1a:0c:ca:de:76:64:0a:a8:82:f7:d1:06:6f:b0:ca:63:1c: 8a:b2:40:bd:c8:82:bf:1c:c8:90:7c:d1:b8:1f:63:ba:92:79: 08:ed:37:33:5f:89:ee:b6:5a:a8:a0:9a:e9:00:be:0a:11:14: c9:f1:0e:cf:f2:2d:de:76:1c:15:0f:a5:03:f1:c8:74:9a:26: e1:98:62:47:0d:52:3d:15:0d:80:ff:a3:1c:97:27:36:ec:de: 19:48:1d:9b:14:5c:81:84:77:c5:ed:04:7b:f4:c2:c6:4f:79: c2:a1:72:98:7b:cd:de:14:78:aa:d0:93:c4:c9:be:67:9d:22: d1:6b:05:05:c5:62:63:e0:a8:fc:0c:e8:1c:a2:c1:23:87:43: 81:f0:4d:44:01:b9:8b:97:27:af:40:92:5e:ed:de:1b:8d:54: a0:2b:85:3b:e6:18:62:81:82:5d:2a:77:ca:71:02:cb:27:b1: ee:08:bd:81:78:b1:64:12:5a:e5:11:31:22:74:5a:74:69:6d: af:f8:eb:68 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8cY+LByNzG0a2rDwfd3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3NzcwNWU4OWJiNjViNDcyZTRlMDE4NGQ2ZmU5YmZiOGM1 ODYzNWEwHhcNMjYwMTAyMTgyMTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2Y3YzUxOGE5MWRhMGY2MzgxZjUwNjRlODBjNGFjZWMxM2U0M2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04743ctqJuRIIgN7P2isgxRxWWx8 hDJZ1PJsBABApmHaq54D/TkfngtIHQlJ4pxfMaU5IODNWukM7vg2dKaO/RGOO0/H drSfbBlYszrqksGkcXgfD1O728u3AeFAMaSQi7SuXTpEGFsav43AhqzAE9bOktmu ftvRTkhedR9t4N6FsW4ewNEkUDfQ8R2QCeeryIjKpIlPsFS73ZsdKO/NVF3/83LM 9dDEeLHLxCE0sCXmq12pzkNQWDT0qDA1x84yhNzQrt92Vg+cJOfalfrDfloVzMl6 t+gnNIYBm/MnLq0SnD7FIEvhq6+0RRfzDvu7fqhgeJeDwcdI9iTGQgCkcwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLP3xRipHaD2OB9QZOgMSs7BPkPyMB8GA1UdIwQY MBaAFPd3BeibtltHLk4BhNb+m/uMWGNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYt NmNiODk3OTFkN2ZkLzEvc19mRkdLa2RvUFk0SDFCazZBeEt6c0UtUV9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy8wMjI4MzktNjk4NC00MGQ0LTg3MTYtNmNiODk3OTFkN2Zk LzEvOTNjRjZKdTJXMGN1VGdHRTF2NmItNHhZWTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgNYQAEq MA0GCSqGSIb3DQEBCwUAA4IBAQAS0D/scIG0IHaNyDs/rNDgWtfA9wSVg7b4EU9j ew5tV6u62eYIknKEyvN0DHomFL22XNBNqAiJGgzK3nZkCqiC99EGb7DKYxyKskC9 yIK/HMiQfNG4H2O6knkI7TczX4nutlqooJrpAL4KERTJ8Q7P8i3edhwVD6UD8ch0 mibhmGJHDVI9FQ2A/6Mclyc27N4ZSB2bFFyBhHfF7QR79MLGT3nCoXKYe83eFHiq 0JPEyb5nnSLRawUFxWJj4Kj8DOgcosEjh0OB8E1EAbmLlyevQJJe7d4bjVSgK4U7 5hhigYJdKnfKcQLLJ7HuCL2BeLFkElrlETEidFp0aW2v+Oto -----END CERTIFICATE-----Generated at Fri Jan 23 15:21:25 2026 by rpki-client