This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa File: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (raw, json) Hash identifier: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc= Subject key identifier: 15:28:97:E2:DF:ED:83:FC:BB:A0:5F:BF:E7:94:39:6D:B7:54:B1:0F Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470 Certificate serial: 019B775883CC85B5AF25B8E443ABED2CAAF2 Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa Signing time: Thu 01 Jan 2026 02:17:28 +0000 ROA not before: Thu 01 Jan 2026 02:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 2a10:8802::/36 maxlen: 36 2a10:8804::/36 maxlen: 36 2a10:8804:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:83:cc:85:b5:af:25:b8:e4:43:ab:ed:2c:aa:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470 Validity Not Before: Jan 1 02:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=152897e2dfed83fcbba05fbfe794396db754b10f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5a:bc:8e:2d:ab:d9:49:e4:d9:5b:cc:bc:3e: d8:a4:84:d2:44:29:b1:ee:1b:c6:10:16:d6:0c:62: 37:40:d1:e3:1e:79:29:19:9f:bf:9d:fc:da:88:cc: 2e:cb:46:3a:a3:d4:f0:5f:83:46:c2:e8:3f:c9:7c: d7:52:57:7a:cb:fb:43:db:1a:5f:45:49:31:2f:98: ee:c5:9a:81:2e:67:5c:83:b6:15:c0:2f:b6:1b:c4: b2:6a:c8:9f:1b:ab:17:c9:94:ee:e6:53:5d:26:f2: db:9a:1a:a2:71:a7:62:9e:d7:15:af:84:63:c7:2a: 12:59:05:40:f5:0c:fb:30:84:7d:f2:9b:9e:89:4f: 7d:9c:1e:82:73:39:06:6f:1c:52:2f:8d:e6:0d:02: e6:a9:c2:7a:24:ba:d1:83:bb:e7:65:a4:4d:c7:49: ca:d0:33:95:83:70:3c:e6:44:b7:29:bd:51:2e:4b: 31:20:2f:8f:b4:0b:01:97:a7:f6:2f:27:ff:44:d6: 0c:20:a6:d5:b6:62:5d:65:29:63:f5:b0:8a:2c:2c: bd:89:56:c2:13:17:73:bd:05:65:b5:70:ba:42:c3: 02:8a:65:4e:22:f7:0b:4b:70:45:0d:d1:94:e8:8c: e6:99:3b:51:40:f8:6e:e6:8a:82:dd:4e:a0:ea:8e: 30:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:28:97:E2:DF:ED:83:FC:BB:A0:5F:BF:E7:94:39:6D:B7:54:B1:0F X509v3 Authority Key Identifier: keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:8802::/36 2a10:8804::/36 2a10:8804:2000::/36 Signature Algorithm: sha256WithRSAEncryption 2b:a8:4a:a2:d1:ca:85:8c:98:29:15:f9:88:6b:12:8a:16:d4: de:be:3f:57:dc:c8:d5:21:02:6b:c5:b0:3b:0e:14:9a:ec:18: 8b:9c:09:b0:c9:a8:77:89:4c:bc:04:49:8d:15:e8:8c:1f:f2: b3:f0:58:ab:24:5e:2d:29:30:53:66:98:21:69:61:7e:5b:4e: ba:f9:08:ff:b0:be:c1:1d:55:ba:b9:5c:8c:2d:94:3d:9d:10: 3e:a1:c3:6e:dd:1f:a1:3a:a3:3e:9a:76:37:e4:27:41:46:e6: a8:21:77:7c:d9:49:9a:93:25:08:b2:49:1c:57:7f:ff:fc:ae: d3:c8:2c:53:91:3c:c6:88:d6:8d:41:3d:fe:01:23:fe:ee:0c: 30:1e:28:6d:41:b7:06:41:e0:08:01:19:67:d7:58:ca:d5:ab: 0e:f8:b9:52:d4:15:c5:6f:a6:a5:44:e5:2b:1d:92:19:37:2d: 6b:b2:64:b2:48:be:5a:81:a0:3b:75:44:19:57:97:19:c4:7b: ff:de:45:39:1d:a4:fd:bb:cc:c1:02:f0:bf:ac:8a:45:4f:2d: 17:15:ed:c3:96:cb:cc:24:f7:a3:a4:d1:48:3f:7c:5b:fc:68: 4a:07:69:cd:b0:4e:f7:0f:89:69:67:c2:8b:06:87:6a:da:45: 40:05:b5:da -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3WIPMhbWvJbjkQ6vtLKryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNGU0MDUzNTlhMjEzMTcwOGZjMDI0MzhkNDcyNTY4ZTJj MDM0NzAwHhcNMjYwMTAxMDIxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTI4OTdlMmRmZWQ4M2ZjYmJhMDVmYmZlNzk0Mzk2ZGI3NTRiMTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vq8ji2r2Unk2VvMvD7YpITSRCmx 7hvGEBbWDGI3QNHjHnkpGZ+/nfzaiMwuy0Y6o9TwX4NGwug/yXzXUld6y/tD2xpf RUkxL5juxZqBLmdcg7YVwC+2G8SyasifG6sXyZTu5lNdJvLbmhqicadintcVr4Rj xyoSWQVA9Qz7MIR98pueiU99nB6CczkGbxxSL43mDQLmqcJ6JLrRg7vnZaRNx0nK 0DOVg3A85kS3Kb1RLksxIC+PtAsBl6f2Lyf/RNYMIKbVtmJdZSlj9bCKLCy9iVbC ExdzvQVltXC6QsMCimVOIvcLS3BFDdGU6IzmmTtRQPhu5oqC3U6g6o4w7QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFBUol+Lf7YP8u6Bfv+eUOW23VLEPMB8GA1UdIwQY MBaAFPpOQFNZohMXCPwCQ41HJWjiwDRwMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1rNUFVMW1pRXhjSV9BSkRqVWNsYU9MQU5IQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvNmEzZjM1LTM1YjgtNDllMC05ZjQ0 LWI4MThmYWVjYjcxNy8xL0ZTaVg0dF90Z195N29GLV81NVE1YmJkVXNROC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMDcvNmEzZjM1LTM1YjgtNDllMC05ZjQ0LWI4MThmYWVjYjcx Ny8xLzEtazVBVTFtaUV4Y0lfQUpEalVjbGFPTEFOSEEuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMQYIKwYBBQUHAQcBAf8EIjAgMB4EAgACMBgDBgQqEIgC AAMGBCoQiAQAAwYEKhCIBCAwDQYJKoZIhvcNAQELBQADggEBACuoSqLRyoWMmCkV +YhrEooW1N6+P1fcyNUhAmvFsDsOFJrsGIucCbDJqHeJTLwESY0V6Iwf8rPwWKsk Xi0pMFNmmCFpYX5bTrr5CP+wvsEdVbq5XIwtlD2dED6hw27dH6E6oz6adjfkJ0FG 5qghd3zZSZqTJQiySRxXf//8rtPILFORPMaI1o1BPf4BI/7uDDAeKG1BtwZB4AgB GWfXWMrVqw74uVLUFcVvpqVE5Ssdkhk3LWuyZLJIvlqBoDt1RBlXlxnEe//eRTkd pP27zMEC8L+sikVPLRcV7cOWy8wk96Ok0Ug/fFv8aEoHac2wTvcPiWlnwosGh2ra RUAFtdo= -----END CERTIFICATE-----Generated at Wed Jan 21 13:16:59 2026 by rpki-client