This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa File: FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa (raw, json) Hash identifier: JZ21wYzfPfkSwGCQh1OtjrZna2xAaeFagGp1aClwZy0= Subject key identifier: 16:52:83:AA:1B:01:FA:40:C9:80:E8:4B:98:2B:F8:0C:D5:27:B1:DF Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Certificate serial: 019B79EC0B4CE65F0ADB48642F2E6B6CC9B1 Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa Signing time: Thu 01 Jan 2026 14:17:51 +0000 ROA not before: Thu 01 Jan 2026 14:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213967 IP address blocks: 2a05:4140:35::/48 maxlen: 48 2a05:4144::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:0b:4c:e6:5f:0a:db:48:64:2f:2e:6b:6c:c9:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a Validity Not Before: Jan 1 14:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=165283aa1b01fa40c980e84b982bf80cd527b1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:8a:19:ff:e3:7e:79:aa:22:00:5c:c2:73:28: 81:0b:e9:79:a9:fa:aa:24:95:97:8f:0b:69:18:a8: 67:b5:40:28:40:af:fb:ac:d7:7a:b4:14:f5:2b:7b: 62:86:28:20:8e:22:6d:f8:4f:51:ec:6b:de:55:94: b0:ca:d5:5c:24:c0:cc:f3:02:5b:97:be:0b:b1:4f: 29:2f:6f:1a:12:79:b6:34:18:59:c6:38:b6:93:57: 0c:50:85:47:6a:70:68:6a:44:50:3b:25:c6:f5:27: d6:16:a1:d5:9e:d8:b1:11:90:59:35:37:e1:b7:03: 15:d2:69:40:1e:ce:c0:2b:04:8c:b7:44:4c:15:c8: c3:3f:42:05:9e:f7:d7:4a:1d:3e:23:ea:0c:94:51: 92:22:4b:7a:53:76:23:fd:0e:4f:a7:a9:9f:56:5a: 99:49:7a:28:c3:57:95:1e:f7:0e:90:1b:f7:ab:67: 1a:f8:6d:08:94:20:83:58:09:53:cc:50:a4:6e:5d: cf:cc:33:7d:d8:fa:70:5b:d1:2c:37:17:bf:fb:6a: f0:8f:cc:a2:88:fa:34:00:5f:51:48:ac:1f:73:d7: fe:97:5a:32:5e:dd:9e:d5:4c:bb:36:80:33:fe:6d: ea:6f:a7:2e:08:fb:6b:38:43:74:b6:49:2f:65:10: 2e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:52:83:AA:1B:01:FA:40:C9:80:E8:4B:98:2B:F8:0C:D5:27:B1:DF X509v3 Authority Key Identifier: keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/FlKDqhsB-kDJgOhLmCv4DNUnsd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a05:4140:35::/48 2a05:4144::/32 Signature Algorithm: sha256WithRSAEncryption 08:a9:70:e2:4c:45:94:7e:44:e6:5c:6a:37:e6:ad:22:b9:c6: 33:5d:5c:42:6f:7b:04:48:ca:f6:4a:a4:98:3d:ca:f0:f9:e7: 4e:96:b9:20:7f:98:0e:7c:a3:99:d4:55:b1:5c:c1:1c:9f:4c: 94:55:8e:e7:0d:de:cf:b4:a3:53:0a:99:c0:9a:ec:6c:d0:24: d6:ff:33:63:5f:5d:d2:c4:18:cd:de:e6:4a:de:b8:19:2d:f5: a3:48:d4:c3:80:48:25:32:41:2a:3c:ae:ab:9f:6c:b3:fe:1b: ff:f1:2b:2b:18:e3:7d:4a:4c:5e:bf:95:d1:b6:30:ee:91:ab: 34:1c:75:7e:8d:60:c3:fd:6f:9e:01:75:ac:c4:c4:3a:4a:2b: 46:37:00:3a:52:e4:66:a1:d1:14:cb:0f:1c:6d:cb:7a:08:9b: 70:87:66:4a:2a:9e:fb:48:84:2b:b3:82:db:aa:cb:08:c1:b3: c7:28:c2:ef:34:22:b9:37:0a:f8:b9:d8:6d:d1:2f:2b:a6:1a: 36:7d:1c:33:d5:52:70:e3:3f:c4:ea:35:db:6a:da:ee:c8:cf: e2:ec:57:d6:db:5a:49:e3:ba:a9:22:7b:55:33:8e:54:8a:bb: 29:3f:61:1a:a1:fe:d8:ea:16:39:4b:6f:b5:74:2b:98:0d:78: ab:27:18:4f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt57AtM5l8K20hkLy5rbMmxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3NGM2MGFkZWIwY2Q1NzY4Y2Y3NTZmNTYyYjFiNWNjNWI5 YzE4MGEwHhcNMjYwMTAxMTQxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjUyODNhYTFiMDFmYTQwYzk4MGU4NGI5ODJiZjgwY2Q1MjdiMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ooZ/+N+eaoiAFzCcyiBC+l5qfqq JJWXjwtpGKhntUAoQK/7rNd6tBT1K3tihiggjiJt+E9R7GveVZSwytVcJMDM8wJb l74LsU8pL28aEnm2NBhZxji2k1cMUIVHanBoakRQOyXG9SfWFqHVntixEZBZNTfh twMV0mlAHs7AKwSMt0RMFcjDP0IFnvfXSh0+I+oMlFGSIkt6U3Yj/Q5Pp6mfVlqZ SXoow1eVHvcOkBv3q2ca+G0IlCCDWAlTzFCkbl3PzDN92PpwW9EsNxe/+2rwj8yi iPo0AF9RSKwfc9f+l1oyXt2e1Uy7NoAz/m3qb6cuCPtrOEN0tkkvZRAu6wIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFBZSg6obAfpAyYDoS5gr+AzVJ7HfMB8GA1UdIwQY MBaAFMdMYK3rDNV2jPdW9WKxtcxbnBgKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMt ODg1ZTg0ZTc1MTJlLzEvRmxLRHFoc0Ita0RKZ09oTG1DdjRETlVuc2Q4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hZGI2NWMtZjZmNy00NDk1LWJhMjMtODg1ZTg0ZTc1MTJl LzEveDB4Z3Jlc00xWGFNOTFiMVlyRzF6RnVjR0FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwcAKgVBQAA1 AwUAKgVBRDANBgkqhkiG9w0BAQsFAAOCAQEACKlw4kxFlH5E5lxqN+atIrnGM11c Qm97BEjK9kqkmD3K8PnnTpa5IH+YDnyjmdRVsVzBHJ9MlFWO5w3ez7SjUwqZwJrs bNAk1v8zY19d0sQYzd7mSt64GS31o0jUw4BIJTJBKjyuq59ss/4b//ErKxjjfUpM Xr+V0bYw7pGrNBx1fo1gw/1vngF1rMTEOkorRjcAOlLkZqHRFMsPHG3LegibcIdm Siqe+0iEK7OC26rLCMGzxyjC7zQiuTcK+LnYbdEvK6YaNn0cM9VScOM/xOo122ra 7sjP4uxX1ttaSeO6qSJ7VTOOVIq7KT9hGqH+2OoWOUtvtXQrmA14qycYTw== -----END CERTIFICATE-----Generated at Wed Jan 21 16:15:45 2026 by rpki-client