This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa File: f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa (raw, json) Hash identifier: YnhL3R6TQw9jOlB6ezNd4A83xIKsm64Z7pwt9aESzIw= Subject key identifier: 7F:77:EA:BB:8B:53:1E:5D:AF:70:16:5D:19:73:EC:33:20:23:29:85 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C731148F67AD3DC5E3F0ACA28FA225 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210625 IP address blocks: 2a0c:ab07:2000::/36 maxlen: 36 2a0c:ab07:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:31:14:8f:67:ad:3d:c5:e3:f0:ac:a2:8f:a2:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f77eabb8b531e5daf70165d1973ec3320232985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:9a:38:b3:c6:83:0f:27:e5:db:6b:3d:47: f5:2e:c3:78:7d:1f:b7:8e:ab:d0:c0:e4:90:9f:95: bb:63:77:8c:bc:92:d0:fb:9d:60:7a:88:8a:1d:13: 8b:13:93:3a:02:ea:f4:8a:d2:05:56:ce:e5:de:89: 47:2c:93:76:04:5d:3e:67:7a:2a:70:37:3a:b4:3a: d7:88:3e:1f:6f:2c:74:37:94:fe:2b:2d:6f:aa:db: eb:bb:e4:1f:9d:fc:74:3a:25:a9:75:b5:67:31:18: b1:2b:bb:ee:a9:11:ec:09:10:9b:94:41:a5:fb:2e: 97:54:ff:7d:0a:69:0a:f9:3b:79:d6:92:a9:55:3c: 29:eb:c9:33:bb:92:c6:9a:30:2a:f7:84:d9:58:48: 03:94:cc:8e:c7:03:b3:af:c8:2a:a9:a9:d1:b1:ea: fb:1b:8f:df:29:98:5e:c0:4b:da:3d:85:df:19:99: 1d:ab:2d:83:27:0c:1f:2a:37:b4:0c:80:c2:ac:09: 77:78:21:fa:62:4a:d5:36:ee:5a:0f:8d:08:89:2c: 66:dc:42:34:d7:de:60:39:c9:1f:16:32:61:d5:8f: c2:01:0b:e7:e1:9b:15:60:b3:ca:0f:ab:ee:1b:01: 7e:01:9b:17:60:fb:eb:7c:34:7c:e6:f1:bd:49:f5: e8:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:77:EA:BB:8B:53:1E:5D:AF:70:16:5D:19:73:EC:33:20:23:29:85 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:ab07:2000::/36 2a0c:ab07:8000::/36 Signature Algorithm: sha256WithRSAEncryption 25:77:b7:c5:18:90:c7:82:33:34:54:6b:1c:ee:70:3a:6b:2d: a4:0e:4d:96:92:65:80:ea:6b:06:30:02:82:90:12:6a:ca:7f: 01:73:ec:39:ef:bf:9c:2b:fa:4d:f3:23:d2:99:21:3d:21:c0: 8c:53:85:d4:1d:8a:da:7f:a9:e4:74:9a:bd:62:89:a8:65:e3: 87:95:ca:b9:e6:a5:ee:97:5c:01:8a:49:8a:00:dc:2e:b3:36: d2:5e:a3:cc:1d:e8:09:6b:b2:20:da:fd:56:a7:47:fd:6c:58: bb:33:1d:fd:4e:80:c7:9f:98:f5:aa:a5:a6:99:dc:e5:2a:d6: 9b:52:53:f2:fb:b3:d5:bc:da:ab:fe:eb:92:80:75:55:9a:63: 18:b9:07:f4:66:d9:a5:7c:96:fd:75:eb:70:96:61:0f:4a:04: e5:b1:b4:ac:b3:ec:c5:1b:0d:66:f9:41:73:8c:35:35:4d:bd: 3f:81:cf:e0:20:cc:39:b6:df:5e:d0:c9:80:95:e5:11:ea:1a: 5f:85:a7:23:0f:e6:c1:7e:b0:a6:c1:13:0e:cb:de:b7:9c:a4: 98:7d:c0:43:4f:72:3b:3a:83:2e:07:5f:df:0e:e3:87:0e:ee: e3:de:ad:d9:fd:3c:1b:ca:57:87:dc:88:b2:23:81:46:f7:63: b0:e1:89:3e -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgISAZt3xzEUj2etPcXj8Kyij6IlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Zjc3ZWFiYjhiNTMxZTVkYWY3MDE2NWQxOTczZWMzMzIwMjMyOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGmaOLPGgw8n5dtrPUf1LsN4fR+3 jqvQwOSQn5W7Y3eMvJLQ+51geoiKHROLE5M6Aur0itIFVs7l3olHLJN2BF0+Z3oq cDc6tDrXiD4fbyx0N5T+Ky1vqtvru+Qfnfx0OiWpdbVnMRixK7vuqRHsCRCblEGl +y6XVP99CmkK+Tt51pKpVTwp68kzu5LGmjAq94TZWEgDlMyOxwOzr8gqqanRser7 G4/fKZhewEvaPYXfGZkdqy2DJwwfKje0DIDCrAl3eCH6YkrVNu5aD40IiSxm3EI0 195gOckfFjJh1Y/CAQvn4ZsVYLPKD6vuGwF+AZsXYPvrfDR85vG9SfXorwIDAQAB o4ICEzCCAg8wHQYDVR0OBBYEFH936ruLUx5dr3AWXRlz7DMgIymFMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvZjNmcXU0dFRIbDJ2Y0JaZEdYUHNNeUFqS1lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKgyrByAD BgQqDKsHgDANBgkqhkiG9w0BAQsFAAOCAQEAJXe3xRiQx4IzNFRrHO5wOmstpA5N lpJlgOprBjACgpASasp/AXPsOe+/nCv6TfMj0pkhPSHAjFOF1B2K2n+p5HSavWKJ qGXjh5XKueal7pdcAYpJigDcLrM20l6jzB3oCWuyINr9VqdH/WxYuzMd/U6Ax5+Y 9aqlppnc5SrWm1JT8vuz1bzaq/7rkoB1VZpjGLkH9GbZpXyW/XXrcJZhD0oE5bG0 rLPsxRsNZvlBc4w1NU29P4HP4CDMObbfXtDJgJXlEeoaX4WnIw/mwX6wpsETDsve t5ykmH3AQ09yOzqDLgdf3w7jhw7u496t2f08G8pXh9yIsiOBRvdjsOGJPg== -----END CERTIFICATE-----Generated at Wed Jan 21 03:31:03 2026 by rpki-client