This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FeWkuUgbANHbf-yOJpCKsXGRG5g.roa File: FeWkuUgbANHbf-yOJpCKsXGRG5g.roa (raw, json) Hash identifier: 59oZjdd9Ef33FhO4Bo5viRbUJguE49d0qvxY6UoB1pg= Subject key identifier: 15:E5:A4:B9:48:1B:00:D1:DB:7F:EC:8E:26:90:8A:B1:71:91:1B:98 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA70DE4323BEA0502EBD8E907892905 Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FeWkuUgbANHbf-yOJpCKsXGRG5g.roa Signing time: Fri 02 Jan 2026 12:20:35 +0000 ROA not before: Fri 02 Jan 2026 12:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214939 IP address blocks: 2a0c:9a40:8230::/44 maxlen: 48 2a0c:9a40:8230::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:0d:e4:32:3b:ea:05:02:eb:d8:e9:07:89:29:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15e5a4b9481b00d1db7fec8e26908ab171911b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b3:05:0d:1c:1e:bf:69:e9:b8:6e:7c:90:a4: 24:ef:30:16:76:4e:9c:72:96:6c:ca:2b:85:ca:76: 61:7b:56:8f:56:a0:6e:83:2e:ca:37:49:6b:d5:f9: d7:6c:e3:c9:38:e6:22:8e:bd:65:99:78:5f:9f:1a: 49:21:9a:3f:ed:4d:a4:cc:e7:cd:ea:da:f5:15:57: 93:aa:b0:c6:ed:c1:98:c6:69:db:85:eb:07:c4:a1: 7f:2c:7d:f6:dc:e6:e0:15:33:7a:f6:62:7d:45:18: 93:69:5b:a3:42:53:0f:b9:f6:50:c0:5a:f2:ea:ba: 88:8a:f9:71:b5:6a:cb:dd:64:75:06:79:f9:d3:70: 3f:59:43:c0:62:25:d8:de:54:41:6b:97:5c:6f:f9: 9e:0a:27:f6:e9:f8:72:2e:cb:63:d7:45:e9:e2:1f: f6:a9:b4:a7:72:6d:24:c5:bf:03:8e:f4:71:f8:21: 5c:f2:28:bc:54:56:cd:eb:18:21:d5:e3:8e:21:0d: 4a:24:72:88:32:df:f0:05:bd:0e:67:31:96:7c:b4: 98:22:45:0d:02:03:f7:ca:bc:c8:f5:43:56:14:58: a3:1c:f5:2b:32:e0:24:d6:d9:4b:da:51:2f:93:89: 55:9b:2d:0b:b6:e0:da:f3:8f:3f:67:16:f3:9b:7d: b6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E5:A4:B9:48:1B:00:D1:DB:7F:EC:8E:26:90:8A:B1:71:91:1B:98 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FeWkuUgbANHbf-yOJpCKsXGRG5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8230::/44 Signature Algorithm: sha256WithRSAEncryption 90:a7:dc:e0:7c:b1:cc:0c:eb:ea:d8:67:80:c2:ae:8d:e0:fb: d4:88:1f:e8:98:34:23:21:32:87:0c:c9:b9:9e:1f:b9:c8:2d: 4e:3d:55:60:4a:1b:f2:e4:7e:cb:f7:99:14:77:2d:bc:92:66: ee:c3:44:16:96:89:4f:1e:bb:81:b4:b7:4c:96:05:a6:83:e6: 90:48:c7:e0:48:3c:30:e1:cf:d7:7d:e6:50:b9:51:47:d8:23: b8:f0:bd:f3:1b:1e:fd:27:1e:69:18:fa:e3:89:5c:3e:f8:47: 5b:cd:ae:58:14:31:36:da:5c:f4:32:de:1a:63:8e:f9:00:5c: be:96:ff:ea:b5:ad:bc:c8:be:d4:f7:a3:3d:3f:d4:a7:92:e4: 0d:b0:78:b0:d4:c9:cc:62:e2:d7:c5:bb:4e:54:60:bc:dc:de: 32:fe:b7:60:98:24:4e:66:6a:11:10:3b:de:78:11:52:86:6c: 63:f9:95:f2:df:11:30:86:b5:8e:56:f9:d5:f3:d9:dd:ac:11: fa:6e:b7:e5:db:e7:fe:08:3d:84:14:b7:fb:44:63:3e:37:33: 33:93:c6:92:1c:23:f8:40:15:e9:1e:fc:a7:0c:c3:8b:8b:4d: c4:d4:e4:f8:73:28:94:e1:0a:45:ea:d8:3b:fd:aa:89:10:ae: 41:89:0a:04 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pw3kMjvqBQLr2OkHiSkFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWU1YTRiOTQ4MWIwMGQxZGI3ZmVjOGUyNjkwOGFiMTcxOTExYjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbMFDRwev2npuG58kKQk7zAWdk6c cpZsyiuFynZhe1aPVqBugy7KN0lr1fnXbOPJOOYijr1lmXhfnxpJIZo/7U2kzOfN 6tr1FVeTqrDG7cGYxmnbhesHxKF/LH323ObgFTN69mJ9RRiTaVujQlMPufZQwFry 6rqIivlxtWrL3WR1Bnn503A/WUPAYiXY3lRBa5dcb/meCif26fhyLstj10Xp4h/2 qbSncm0kxb8DjvRx+CFc8ii8VFbN6xgh1eOOIQ1KJHKIMt/wBb0OZzGWfLSYIkUN AgP3yrzI9UNWFFijHPUrMuAk1tlL2lEvk4lVmy0LtuDa848/Zxbzm322PwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBXlpLlIGwDR23/sjiaQirFxkRuYMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvRmVXa3VVZ2JBTkhiZi15T0pwQ0tzWEdSRzVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQIIw MA0GCSqGSIb3DQEBCwUAA4IBAQCQp9zgfLHMDOvq2GeAwq6N4PvUiB/omDQjITKH DMm5nh+5yC1OPVVgShvy5H7L95kUdy28kmbuw0QWlolPHruBtLdMlgWmg+aQSMfg SDww4c/XfeZQuVFH2CO48L3zGx79Jx5pGPrjiVw++Edbza5YFDE22lz0Mt4aY475 AFy+lv/qta28yL7U96M9P9SnkuQNsHiw1MnMYuLXxbtOVGC83N4y/rdgmCROZmoR EDveeBFShmxj+ZXy3xEwhrWOVvnV89ndrBH6brfl2+f+CD2EFLf7RGM+NzMzk8aS HCP4QBXpHvynDMOLi03E1OT4cyiU4QpF6tg7/aqJEK5BiQoE -----END CERTIFICATE-----Generated at Tue Jan 20 09:07:40 2026 by rpki-client