This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/FHmKT3d93phBQ2sJCe6iypixWE4.roa File: FHmKT3d93phBQ2sJCe6iypixWE4.roa (raw, json) Hash identifier: gr7Vm5ezbEir/8TLVn3dVqAxR+5C8tMF+REqdfAIUrk= Subject key identifier: 14:79:8A:4F:77:7D:DE:98:41:43:6B:09:09:EE:A2:CA:98:B1:58:4E Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12F96C832F9D374601288BA098D8BB Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/FHmKT3d93phBQ2sJCe6iypixWE4.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207960 IP address blocks: 2a0d:1a40:7900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 17:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f9:6c:83:2f:9d:37:46:01:28:8b:a0:98:d8:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14798a4f777dde9841436b0909eea2ca98b1584e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:06:ef:2d:b3:31:a6:74:c0:7e:0c:b6:c5:d0: 3d:86:04:f3:77:76:3c:d6:03:e4:48:62:ab:f4:ae: 88:0e:45:58:8f:2e:b7:61:01:b8:01:92:eb:74:01: 84:3f:e3:3e:77:0e:fe:d4:75:98:91:f0:a6:68:bf: 53:a9:60:62:64:3f:77:65:80:de:80:f5:af:a2:9e: 07:0f:98:54:96:62:04:d0:c1:0c:6e:cf:25:e9:6c: 4d:79:d4:3e:d7:29:9e:93:c8:46:94:de:30:af:4c: 4c:15:e9:2e:2b:31:aa:23:3c:3b:3a:68:b3:17:ef: 74:93:c3:b4:2c:a8:9f:fb:6c:2e:0a:1f:ec:bb:b0: 7b:c6:50:03:0a:40:76:37:b8:41:6a:b1:68:67:f4: 3e:8a:dc:ef:86:42:04:7e:46:65:34:2b:8b:16:a8: 28:e5:20:98:7d:7c:ef:fa:ea:9f:ca:3d:e1:1a:09: 1b:2b:95:95:cb:4a:bf:70:f7:99:5f:03:b2:c4:b6: cf:46:ba:1c:45:25:e9:ea:0a:ef:70:b0:95:68:e6: 5c:d6:e6:1a:ce:c8:db:a8:84:99:e5:e2:a8:7d:d1: eb:81:3c:2a:62:c2:0a:44:62:d1:c9:3a:d6:fc:85: 5b:17:3b:5e:88:37:12:bc:86:67:03:00:00:29:75: 2b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:79:8A:4F:77:7D:DE:98:41:43:6B:09:09:EE:A2:CA:98:B1:58:4E X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/FHmKT3d93phBQ2sJCe6iypixWE4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:1a40:7900::/40 Signature Algorithm: sha256WithRSAEncryption 32:df:2c:1f:e7:1c:b0:16:dc:2b:20:bc:56:2e:3d:04:2f:e4: f1:c9:63:49:c5:1d:de:cf:4f:eb:ce:5d:b3:9f:8c:9c:a7:cb: b2:d8:16:d9:ec:83:b6:1c:d2:41:0c:10:77:79:84:ea:51:1d: 32:b1:d4:7e:64:56:8c:19:a1:ea:66:63:88:c4:30:11:65:ed: d8:a3:bf:f1:1c:01:ec:7c:0d:2b:5d:f6:c0:ba:e5:1c:ab:9f: 13:a1:11:1f:5c:99:7c:4a:f4:4f:1d:e3:31:67:74:e7:72:02: 23:f3:e9:b0:8a:b8:6e:ce:32:43:37:9c:11:0b:df:44:e7:8e: 57:f0:6d:0a:4f:65:2a:82:ef:7e:2e:f1:5c:f9:dc:61:03:29: a4:ab:85:d0:81:6b:7c:50:46:5d:ff:bc:b3:51:c2:ad:41:53: b1:17:87:38:d4:d8:65:9c:6c:62:49:d8:80:4e:e1:ab:00:39: 65:0b:8c:92:95:1c:d0:9c:b9:0f:0d:89:0b:0c:91:3c:81:85: fa:aa:ef:21:e8:cc:b5:80:42:6c:76:5e:8f:4c:e9:2c:31:65: 01:12:d9:e6:d3:2f:74:5f:47:07:0e:5a:73:64:9d:b2:a5:95: 80:52:0c:3b:97:20:47:95:13:6a:d9:46:99:c3:c9:7c:da:55: 31:08:40:28 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt8Evlsgy+dN0YBKIugmNi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDc5OGE0Zjc3N2RkZTk4NDE0MzZiMDkwOWVlYTJjYTk4YjE1ODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gbvLbMxpnTAfgy2xdA9hgTzd3Y8 1gPkSGKr9K6IDkVYjy63YQG4AZLrdAGEP+M+dw7+1HWYkfCmaL9TqWBiZD93ZYDe gPWvop4HD5hUlmIE0MEMbs8l6WxNedQ+1ymek8hGlN4wr0xMFekuKzGqIzw7Omiz F+90k8O0LKif+2wuCh/su7B7xlADCkB2N7hBarFoZ/Q+itzvhkIEfkZlNCuLFqgo 5SCYfXzv+uqfyj3hGgkbK5WVy0q/cPeZXwOyxLbPRrocRSXp6grvcLCVaOZc1uYa zsjbqISZ5eKofdHrgTwqYsIKRGLRyTrW/IVbFzteiDcSvIZnAwAAKXUrzQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBR5ik93fd6YQUNrCQnuosqYsVhOMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvRkhtS1QzZDkzcGhCUTJzSkNlNml5cGl4V0U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg0aQHkw DQYJKoZIhvcNAQELBQADggEBADLfLB/nHLAW3CsgvFYuPQQv5PHJY0nFHd7PT+vO XbOfjJyny7LYFtnsg7Yc0kEMEHd5hOpRHTKx1H5kVowZoepmY4jEMBFl7dijv/Ec Aex8DStd9sC65RyrnxOhER9cmXxK9E8d4zFndOdyAiPz6bCKuG7OMkM3nBEL30Tn jlfwbQpPZSqC734u8Vz53GEDKaSrhdCBa3xQRl3/vLNRwq1BU7EXhzjU2GWcbGJJ 2IBO4asAOWULjJKVHNCcuQ8NiQsMkTyBhfqq7yHozLWAQmx2Xo9M6SwxZQES2ebT L3RfRwcOWnNknbKllYBSDDuXIEeVE2rZRpnDyXzaVTEIQCg= -----END CERTIFICATE-----Generated at Tue Jan 6 01:48:47 2026 by rpki-client