This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fCAezVEOx3iVhfdO7lTZMKJ_A2k.roa File: fCAezVEOx3iVhfdO7lTZMKJ_A2k.roa (raw, json) Hash identifier: HMeNsCLF6h+tVsJ9EMYYRTJAEvUpQAX+xSFqbEsKTio= Subject key identifier: 7C:20:1E:CD:51:0E:C7:78:95:85:F7:4E:EE:54:D9:30:A2:7F:03:69 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B7EA6FB9B8CA36455634EBDC784B385BF Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fCAezVEOx3iVhfdO7lTZMKJ_A2k.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210912 IP address blocks: 2a0c:9a40:8fd0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fb:9b:8c:a3:64:55:63:4e:bd:c7:84:b3:85:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c201ecd510ec7789585f74eee54d930a27f0369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:48:33:f7:f4:27:62:34:35:cd:f6:16:f9:28: 65:9d:7f:b2:aa:f6:7b:9a:c1:67:95:d9:62:27:a5: 62:d1:b6:2c:19:73:df:0a:7a:56:fb:98:d5:a7:81: bf:4b:83:e3:2c:4b:b1:13:29:8d:6b:6f:4f:0b:ae: 64:94:8a:ad:5a:44:aa:51:27:d5:7e:70:c9:5c:1e: b1:0c:42:c3:00:df:ae:0b:9e:19:37:94:5a:7f:4c: 46:b6:7e:67:f1:6c:d8:f1:f4:34:72:58:67:19:3f: c5:85:d5:50:21:8d:48:cd:86:8d:4c:2c:8b:9a:7b: 8b:f9:a3:ae:3b:f8:a6:25:82:4c:ff:0e:9f:d3:50: 46:02:4c:bd:c0:58:e6:22:10:31:ce:57:08:31:2c: 86:78:96:4e:f0:97:94:fa:b3:64:b8:02:6a:25:6f: fe:d0:13:3b:06:8a:cd:7c:29:34:d9:79:fa:69:f1: f3:4e:91:51:cd:ec:1a:3a:2e:1c:69:00:1e:8f:68: 23:af:e1:8b:65:ba:06:dc:20:da:f3:e3:cc:92:01: 26:b2:05:e6:4b:fd:71:af:ad:5e:66:79:0c:5c:55: a9:61:e7:91:b3:73:6d:1a:f3:0c:e6:ff:01:9c:f6: f0:a4:e7:6d:c5:e9:f7:30:27:af:17:33:94:3a:85: de:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:20:1E:CD:51:0E:C7:78:95:85:F7:4E:EE:54:D9:30:A2:7F:03:69 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/fCAezVEOx3iVhfdO7lTZMKJ_A2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:9a40:8fd0::/48 Signature Algorithm: sha256WithRSAEncryption 60:5f:2d:22:55:5a:1b:a9:48:b4:40:e3:bd:8c:f8:98:55:6c: 12:d5:75:fa:cc:f7:d7:75:15:91:db:b7:d5:6c:18:ad:f8:78: 3e:13:02:96:04:12:1a:4c:7b:fd:9b:df:3d:68:a4:64:a1:f6: 0a:aa:f5:53:e7:98:84:bd:3d:73:bc:6c:bf:8c:21:81:2b:62: 3b:88:7e:20:f5:7b:e5:47:01:ae:f6:0a:90:89:4b:4f:c5:55: 1c:54:02:54:72:46:c8:fb:e2:3a:13:33:2b:9b:be:f1:97:38: 8e:2b:88:3b:4d:93:97:d4:d7:c0:6b:88:26:41:69:ab:3f:10: 87:4e:db:72:82:a3:da:13:e9:a5:84:ec:d3:49:7d:5f:0f:c5: ea:9d:58:0c:2d:31:07:dc:24:17:21:79:2c:0e:2d:7d:04:20: a4:4c:57:7b:37:8f:e6:a0:f4:7e:d9:6c:18:d8:0b:6f:e2:89: 39:74:8f:c1:df:02:e7:62:55:b4:06:62:8e:be:4e:f5:e1:84: 40:1d:7a:63:9e:a4:f5:73:bc:e0:bf:9a:a7:e5:94:d4:e3:63: f0:52:16:3d:d6:e2:86:bf:fa:5b:b1:9c:c5:ae:3f:38:e9:74: b5:5a:e0:d7:a3:cd:ae:93:00:01:ce:f5:76:76:f2:f7:b6:33: 9f:b2:dc:de -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pvubjKNkVWNOvceEs4W/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzIwMWVjZDUxMGVjNzc4OTU4NWY3NGVlZTU0ZDkzMGEyN2YwMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kgz9/QnYjQ1zfYW+ShlnX+yqvZ7 msFnldliJ6Vi0bYsGXPfCnpW+5jVp4G/S4PjLEuxEymNa29PC65klIqtWkSqUSfV fnDJXB6xDELDAN+uC54ZN5Raf0xGtn5n8WzY8fQ0clhnGT/FhdVQIY1IzYaNTCyL mnuL+aOuO/imJYJM/w6f01BGAky9wFjmIhAxzlcIMSyGeJZO8JeU+rNkuAJqJW/+ 0BM7BorNfCk02Xn6afHzTpFRzewaOi4caQAej2gjr+GLZboG3CDa8+PMkgEmsgXm S/1xr61eZnkMXFWpYeeRs3NtGvMM5v8BnPbwpOdtxen3MCevFzOUOoXe8QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHwgHs1RDsd4lYX3Tu5U2TCifwNpMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvZkNBZXpWRU94M2lWaGZkTzdsVFpNS0pfQTJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgyaQI/Q MA0GCSqGSIb3DQEBCwUAA4IBAQBgXy0iVVobqUi0QOO9jPiYVWwS1XX6zPfXdRWR 27fVbBit+Hg+EwKWBBIaTHv9m989aKRkofYKqvVT55iEvT1zvGy/jCGBK2I7iH4g 9XvlRwGu9gqQiUtPxVUcVAJUckbI++I6EzMrm77xlziOK4g7TZOX1NfAa4gmQWmr PxCHTttygqPaE+mlhOzTSX1fD8XqnVgMLTEH3CQXIXksDi19BCCkTFd7N4/moPR+ 2WwY2Atv4ok5dI/B3wLnYlW0BmKOvk714YRAHXpjnqT1c7zgv5qn5ZTU42PwUhY9 1uKGv/pbsZzFrj846XS1WuDXo82ukwABzvV2dvL3tjOfstze -----END CERTIFICATE-----Generated at Tue Jan 20 09:05:51 2026 by rpki-client