This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/fQA-jxiChuPaKEsHn71Csf3G19I.roa File: fQA-jxiChuPaKEsHn71Csf3G19I.roa (raw, json) Hash identifier: 8UwwuaR6Ml9foG3CZhtWpTXltoYu7uDwO2LfI4bpmXg= Subject key identifier: 7D:00:3E:8F:18:82:86:E3:DA:28:4B:07:9F:BD:42:B1:FD:C6:D7:D2 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C54B01A71331B2EB5F719DF0BD68 Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/fQA-jxiChuPaKEsHn71Csf3G19I.roa Signing time: Fri 02 Jan 2026 16:20:35 +0000 ROA not before: Fri 02 Jan 2026 16:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202307 IP address blocks: 2a0b:b87:ffe9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c5:4b:01:a7:13:31:b2:eb:5f:71:9d:f0:bd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d003e8f188286e3da284b079fbd42b1fdc6d7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4f:ab:68:9d:6a:5a:a0:59:c3:f2:33:25:eb: 4d:44:de:44:ff:24:92:0b:64:7a:65:d9:3e:ce:29: 26:f5:03:f4:d9:b0:f7:fb:32:21:94:c5:d9:55:9a: e0:07:4b:01:af:7a:fb:be:36:d7:67:7f:d9:50:05: bf:9b:ec:be:c7:df:07:c3:39:fb:7c:f1:15:95:53: 82:45:2c:98:ea:00:d2:3e:92:0d:76:10:c0:02:6d: 2c:32:f4:5a:88:ec:21:70:28:c6:93:4c:ab:f3:16: 8b:79:e1:2f:60:5a:b0:22:96:f3:b1:8b:cf:50:09: 70:5a:25:81:2a:f5:7a:8f:51:7a:f1:6e:ad:a2:5e: 88:f8:86:1e:53:00:d4:50:3c:e6:7d:0b:ef:8d:65: b9:cc:67:27:b3:ba:11:7a:ef:da:c8:51:85:2d:3d: 1a:33:a2:1b:b7:c3:9f:3c:6a:b6:7f:79:73:b1:b8: d1:62:2a:19:71:a3:38:3a:c1:bf:4f:fa:ac:e0:57: a3:08:f0:8b:6e:c4:33:4b:2a:d2:e5:c1:31:d0:72: 5d:f6:58:9b:08:f5:81:da:b0:fe:81:07:d4:7a:d8: 0a:32:fd:c5:7b:3d:86:27:70:d7:ab:17:36:bd:7c: 3e:aa:c0:49:58:d6:a7:f5:bb:0b:e2:1b:fa:2b:84: 14:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:00:3E:8F:18:82:86:E3:DA:28:4B:07:9F:BD:42:B1:FD:C6:D7:D2 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/fQA-jxiChuPaKEsHn71Csf3G19I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:b87:ffe9::/48 Signature Algorithm: sha256WithRSAEncryption c6:d5:72:d7:b9:c2:84:02:03:1c:21:9d:74:a6:cb:27:34:87: d0:3b:55:d9:48:c9:18:bf:36:37:cc:04:89:a6:f1:f0:91:f7: c3:4c:8e:d2:53:77:5b:3f:0f:f7:74:bc:da:53:29:6e:59:66: b8:17:68:9c:f4:6e:ea:27:f3:5c:38:74:9b:e7:cf:a9:c9:c1: 88:50:fa:25:61:64:2c:87:3d:33:9e:3c:31:29:1c:fd:41:f1: 21:f3:56:42:36:77:60:e6:c6:29:44:b2:7f:80:9a:41:87:41: 96:2e:dd:36:cc:23:fd:81:f9:cb:52:c8:b4:46:af:d6:b8:61: 70:d8:64:1a:b3:08:ef:9c:09:89:d9:e7:05:af:38:26:c2:a1: af:2a:c0:bd:18:e9:ce:57:ec:cb:2e:be:de:12:c9:22:7b:b6: 32:88:ae:09:f1:82:a8:7a:8b:71:64:0b:74:b3:04:70:e2:bf: 8e:19:8f:e2:9d:73:f4:8d:7f:5d:83:54:a3:16:d1:30:19:64: 5f:fc:11:88:47:0c:1e:7a:1b:8f:47:45:68:2d:c1:90:cb:67: d2:85:60:11:ee:ff:0f:38:6f:ca:5d:d3:5a:11:42:85:3e:df: a3:77:18:e8:4c:a2:97:9b:0c:32:67:3d:94:95:0e:18:dc:c3: a8:79:2e:c2 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/gsVLAacTMbLrX3Gd8L1oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDAwM2U4ZjE4ODI4NmUzZGEyODRiMDc5ZmJkNDJiMWZkYzZkN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE+raJ1qWqBZw/IzJetNRN5E/ySS C2R6Zdk+zikm9QP02bD3+zIhlMXZVZrgB0sBr3r7vjbXZ3/ZUAW/m+y+x98Hwzn7 fPEVlVOCRSyY6gDSPpINdhDAAm0sMvRaiOwhcCjGk0yr8xaLeeEvYFqwIpbzsYvP UAlwWiWBKvV6j1F68W6tol6I+IYeUwDUUDzmfQvvjWW5zGcns7oReu/ayFGFLT0a M6Ibt8OfPGq2f3lzsbjRYioZcaM4OsG/T/qs4FejCPCLbsQzSyrS5cEx0HJd9lib CPWB2rD+gQfUetgKMv3Fez2GJ3DXqxc2vXw+qsBJWNan9bsL4hv6K4QUAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH0APo8Ygobj2ihLB5+9QrH9xtfSMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvZlFBLWp4aUNodVBhS0VzSG43MUNzZjNHMTlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgsLh//p MA0GCSqGSIb3DQEBCwUAA4IBAQDG1XLXucKEAgMcIZ10pssnNIfQO1XZSMkYvzY3 zASJpvHwkffDTI7SU3dbPw/3dLzaUyluWWa4F2ic9G7qJ/NcOHSb58+pycGIUPol YWQshz0znjwxKRz9QfEh81ZCNndg5sYpRLJ/gJpBh0GWLt02zCP9gfnLUsi0Rq/W uGFw2GQaswjvnAmJ2ecFrzgmwqGvKsC9GOnOV+zLLr7eEskie7YyiK4J8YKoeotx ZAt0swRw4r+OGY/inXP0jX9dg1SjFtEwGWRf/BGIRwweehuPR0VoLcGQy2fShWAR 7v8POG/KXdNaEUKFPt+jdxjoTKKXmwwyZz2UlQ4Y3MOoeS7C -----END CERTIFICATE-----Generated at Tue Jan 20 15:19:04 2026 by rpki-client