This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/fFFAMOimUOHtZ0P2EST6cc5eFys.roa File: fFFAMOimUOHtZ0P2EST6cc5eFys.roa (raw, json) Hash identifier: z3O1rdXJNJiP4+IK6Eicrxx0Y0tbtDOd2jjJD9KkLHk= Subject key identifier: 7C:51:40:30:E8:A6:50:E1:ED:67:43:F6:11:24:FA:71:CE:5E:17:2B Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Certificate serial: 019B7F13E7C1789FD2141A8C2300199D2A59 Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/fFFAMOimUOHtZ0P2EST6cc5eFys.roa Signing time: Fri 02 Jan 2026 14:19:29 +0000 ROA not before: Fri 02 Jan 2026 14:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39435 IP address blocks: 2a02:2698:c00::/38 maxlen: 48 2a02:2698:1000::/38 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:e7:c1:78:9f:d2:14:1a:8c:23:00:19:9d:2a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f Validity Not Before: Jan 2 14:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c514030e8a650e1ed6743f61124fa71ce5e172b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:09:8a:45:97:e6:16:c5:81:c6:27:e6:41: e8:2b:75:72:1a:c2:c2:3b:f7:8a:0a:94:8b:16:a5: 81:52:90:01:b7:af:5a:56:d4:e3:f3:49:20:d6:79: 62:07:87:ee:62:2c:fd:84:61:52:bc:eb:47:ba:cc: f8:16:3c:3a:3e:61:92:8b:b4:13:32:c4:2a:09:98: 1e:28:59:5b:97:bd:bb:ae:7e:b5:44:a5:5e:ea:f4: 4f:1b:d5:4a:c0:00:8a:9a:fd:0a:72:76:c3:f3:02: f1:ed:c6:9d:09:fe:ee:4f:ab:58:36:d8:13:67:bc: 19:75:73:0a:a7:ff:0d:31:2a:bc:a0:14:98:02:ba: b4:5f:2c:02:ce:69:68:e5:84:f0:51:88:ce:27:1d: ae:1e:5d:74:33:5d:8c:b8:4c:c0:07:a6:ae:0c:f4: 21:60:a5:29:bb:6a:1d:ef:67:41:8e:31:a4:dd:c8: 16:23:f5:b2:9b:1c:e3:b6:96:0b:3f:a3:bf:21:d6: 37:57:a2:e4:71:19:0b:91:d7:59:6e:80:b6:85:15: 76:1e:df:60:db:47:fc:0e:2a:1f:79:44:08:8c:c4: 7c:c5:30:41:f4:19:a5:e3:f2:81:df:00:f5:6f:a0: df:51:8b:b2:50:32:ef:5b:65:c4:58:5c:41:11:ba: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:51:40:30:E8:A6:50:E1:ED:67:43:F6:11:24:FA:71:CE:5E:17:2B X509v3 Authority Key Identifier: keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/fFFAMOimUOHtZ0P2EST6cc5eFys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:2698:c00::-2a02:2698:13ff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5c:f5:fa:46:3f:5c:4d:bb:92:e7:65:e5:bb:f0:be:61:70:35: 6c:f1:4f:29:c3:0f:5b:90:0c:11:bb:63:40:c2:d4:f1:cc:93: 92:99:77:a2:98:d3:0c:e0:79:06:63:e5:e5:f2:0b:4a:c0:25: 2a:38:1f:40:e8:11:7b:89:51:76:6c:b2:5b:d8:5e:8c:a2:95: 3a:76:e1:a0:68:03:72:57:1d:5e:71:07:8b:bc:2b:1a:f8:4d: ea:60:59:d9:d2:57:4e:9f:22:a5:76:b2:2c:94:6c:05:7b:e4: 77:a9:66:00:1c:1b:c5:0b:d4:e4:d3:77:02:ab:9a:5c:d1:ec: e3:d5:3c:1c:b6:3e:79:b4:4f:aa:2d:72:ac:22:1b:1d:6e:e4: 41:58:9f:1b:c9:3c:37:3f:01:df:76:c3:ed:3c:31:27:2a:87: 87:39:f5:70:5c:9b:e5:b8:32:0a:72:03:86:a5:08:49:23:0a: b8:c2:b1:8b:f2:96:7f:04:21:b9:a9:c1:f8:d2:f7:68:ca:51: 03:6c:16:1a:be:09:4c:68:41:df:fa:6d:dd:51:98:86:8e:a7: 85:71:82:f6:9f:58:ae:21:c1:07:77:a0:9d:bd:09:d8:e5:7d: 24:ec:f6:83:f3:10:7b:58:44:b0:63:bd:12:b3:b9:d7:4c:4d: c4:be:d4:3f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/E+fBeJ/SFBqMIwAZnSpZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi ODJiNWYwHhcNMjYwMTAyMTQxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzUxNDAzMGU4YTY1MGUxZWQ2NzQzZjYxMTI0ZmE3MWNlNWUxNzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XwJikWX5hbFgcYn5kHoK3VyGsLC O/eKCpSLFqWBUpABt69aVtTj80kg1nliB4fuYiz9hGFSvOtHusz4Fjw6PmGSi7QT MsQqCZgeKFlbl727rn61RKVe6vRPG9VKwACKmv0KcnbD8wLx7cadCf7uT6tYNtgT Z7wZdXMKp/8NMSq8oBSYArq0XywCzmlo5YTwUYjOJx2uHl10M12MuEzAB6auDPQh YKUpu2od72dBjjGk3cgWI/WymxzjtpYLP6O/IdY3V6LkcRkLkddZboC2hRV2Ht9g 20f8DiofeUQIjMR8xTBB9Bml4/KB3wD1b6DfUYuyUDLvW2XEWFxBEbr0hQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFHxRQDDoplDh7WdD9hEk+nHOXhcrMB8GA1UdIwQY MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt Y2YwYWEzZWNhZDI4LzEvZkZGQU1PaW1VT0h0WjBQMkVTVDZjYzVlRnlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4 LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASMBADBgIqAiaY DAMGAioCJpgQMA0GCSqGSIb3DQEBCwUAA4IBAQBc9fpGP1xNu5LnZeW78L5hcDVs 8U8pww9bkAwRu2NAwtTxzJOSmXeimNMM4HkGY+Xl8gtKwCUqOB9A6BF7iVF2bLJb 2F6MopU6duGgaANyVx1ecQeLvCsa+E3qYFnZ0ldOnyKldrIslGwFe+R3qWYAHBvF C9Tk03cCq5pc0ezj1Twctj55tE+qLXKsIhsdbuRBWJ8byTw3PwHfdsPtPDEnKoeH OfVwXJvluDIKcgOGpQhJIwq4wrGL8pZ/BCG5qcH40vdoylEDbBYavglMaEHf+m3d UZiGjqeFcYL2n1iuIcEHd6CdvQnY5X0k7PaD8xB7WESwY70Ss7nXTE3EvtQ/ -----END CERTIFICATE-----Generated at Thu Feb 5 05:53:05 2026 by rpki-client