This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FMfxFDCG0KZmaWxR6CEvIegZQ3A.roa File: FMfxFDCG0KZmaWxR6CEvIegZQ3A.roa (raw, json) Hash identifier: Jcz20RtQNhGpGx7ZQbKu9EN0G4W0851sK1RVxUW3AGA= Subject key identifier: 14:C7:F1:14:30:86:D0:A6:66:69:6C:51:E8:21:2F:21:E8:19:43:70 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393990E7B333437CD3AC6C9A12A6C9 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FMfxFDCG0KZmaWxR6CEvIegZQ3A.roa Signing time: Fri 02 Jan 2026 10:20:38 +0000 ROA not before: Fri 02 Jan 2026 10:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204765 IP address blocks: 2a0c:b641:8b0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:39:90:e7:b3:33:43:7c:d3:ac:6c:9a:12:a6:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14c7f1143086d0a666696c51e8212f21e8194370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:ea:b8:39:72:8e:ed:2f:4b:78:cc:4e:e4: 21:7f:65:08:ef:d4:83:54:5c:ad:37:9e:bc:05:78: 1a:76:c2:b8:48:b6:de:08:37:72:b7:c0:5a:06:d8: e7:e6:15:d4:df:ab:1b:1d:d3:e6:0a:fd:68:9d:e3: 0a:60:62:e4:28:1a:95:ad:6c:8a:27:cd:36:3d:ba: 87:91:59:18:02:bc:98:ed:56:39:ee:a8:c8:f3:9f: d0:32:ba:ac:2a:d5:50:a3:38:c6:a4:49:f9:9e:43: 58:75:93:f8:8f:a8:c9:7d:1f:5a:26:89:a0:5b:d2: c3:b6:e4:45:cf:fd:5e:09:8a:94:78:d3:1a:e0:32: dd:9b:aa:89:0f:fa:dc:22:ff:08:58:b4:ac:e5:75: 29:25:46:84:de:48:5e:3f:00:3f:9b:22:57:a4:49: 1c:5f:99:49:89:c9:3e:d5:43:ea:d5:6c:b1:4d:f4: 6d:c2:eb:ef:2e:7b:0c:55:1e:0c:71:b1:cf:a8:62: 8a:1a:fd:13:4a:11:87:1b:1c:b3:d5:3f:ca:53:57: 84:ea:01:6a:ee:fd:b3:cb:76:d3:d4:70:1a:ec:24: 98:9e:dc:9b:7e:cf:36:36:aa:65:77:ca:12:6f:de: 87:d4:2a:4f:17:0d:94:cd:06:44:8f:40:e9:e4:5f: 6e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C7:F1:14:30:86:D0:A6:66:69:6C:51:E8:21:2F:21:E8:19:43:70 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FMfxFDCG0KZmaWxR6CEvIegZQ3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:8b0::/44 Signature Algorithm: sha256WithRSAEncryption 48:4d:db:3b:d7:0e:f3:67:d7:4f:4b:2f:64:32:b3:d9:4c:9d: 24:8d:6d:27:7d:af:80:20:78:ea:9a:b9:36:8c:d1:9b:ae:37: d1:17:ae:94:e3:03:6c:a4:95:4a:84:ef:67:6f:90:78:6b:89: 06:b8:8b:ff:f6:2e:e9:69:21:09:7b:0d:1e:b5:ce:dd:48:c8: 1d:24:5e:81:e4:5b:05:47:c4:86:46:df:35:58:b6:73:fc:3c: 9e:82:c0:43:45:67:7b:58:e9:51:be:7c:b6:07:ea:4b:28:ca: 45:9d:db:60:63:8c:c7:9f:81:7c:52:f4:7b:3b:57:f6:84:92: fa:3c:49:be:8d:f0:df:47:25:77:6d:b5:f1:74:a0:2f:d6:32: 72:f4:df:e7:1e:1a:c7:a7:39:ee:3e:ed:c9:49:59:ac:bb:c7: 44:b2:57:9e:e5:4f:b6:90:d4:cd:d9:45:d9:46:35:a2:72:e2: d5:06:0d:75:43:8c:3e:36:41:bb:c4:7b:12:98:50:a9:65:39: 39:2b:ec:d3:0c:5b:eb:1c:a9:9e:49:78:aa:1b:c3:bd:aa:99: d3:78:16:17:f3:4c:0b:20:1f:ef:b0:b5:db:0b:fc:e0:79:35: 76:f2:c3:4b:81:f7:51:bf:0c:d0:bf:7c:fb:46:3e:10:2a:06: 1c:48:7f:68 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTmQ57MzQ3zTrGyaEqbJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGM3ZjExNDMwODZkMGE2NjY2OTZjNTFlODIxMmYyMWU4MTk0MzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnfquDlyju0vS3jMTuQhf2UI79SD VFytN568BXgadsK4SLbeCDdyt8BaBtjn5hXU36sbHdPmCv1oneMKYGLkKBqVrWyK J802PbqHkVkYAryY7VY57qjI85/QMrqsKtVQozjGpEn5nkNYdZP4j6jJfR9aJomg W9LDtuRFz/1eCYqUeNMa4DLdm6qJD/rcIv8IWLSs5XUpJUaE3khePwA/myJXpEkc X5lJick+1UPq1WyxTfRtwuvvLnsMVR4McbHPqGKKGv0TShGHGxyz1T/KU1eE6gFq 7v2zy3bT1HAa7CSYntybfs82Nqpld8oSb96H1CpPFw2UzQZEj0Dp5F9uyQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBTH8RQwhtCmZmlsUeghLyHoGUNwMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvRk1meEZEQ0cwS1ptYVd4UjZDRXZJZWdaUTNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQiw MA0GCSqGSIb3DQEBCwUAA4IBAQBITds71w7zZ9dPSy9kMrPZTJ0kjW0nfa+AIHjq mrk2jNGbrjfRF66U4wNspJVKhO9nb5B4a4kGuIv/9i7paSEJew0etc7dSMgdJF6B 5FsFR8SGRt81WLZz/DyegsBDRWd7WOlRvny2B+pLKMpFndtgY4zHn4F8UvR7O1f2 hJL6PEm+jfDfRyV3bbXxdKAv1jJy9N/nHhrHpznuPu3JSVmsu8dEslee5U+2kNTN 2UXZRjWicuLVBg11Q4w+NkG7xHsSmFCpZTk5K+zTDFvrHKmeSXiqG8O9qpnTeBYX 80wLIB/vsLXbC/zgeTV28sNLgfdRvwzQv3z7Rj4QKgYcSH9o -----END CERTIFICATE-----Generated at Tue Jan 20 02:44:50 2026 by rpki-client