This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FPKkaKGYGZF4DZvS8k2GGtWxHlg.roa File: FPKkaKGYGZF4DZvS8k2GGtWxHlg.roa (raw, json) Hash identifier: yUz4hkoZ2CkAJPwnog3GGEvVARvEydjGfdFmJ5Ja+gQ= Subject key identifier: 14:F2:A4:68:A1:98:19:91:78:0D:9B:D2:F2:4D:86:1A:D5:B1:1E:58 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E393781C9997610064B515D56C4FAE8 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FPKkaKGYGZF4DZvS8k2GGtWxHlg.roa Signing time: Fri 02 Jan 2026 10:20:37 +0000 ROA not before: Fri 02 Jan 2026 10:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204210 IP address blocks: 2a0c:b641:300::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:37:81:c9:99:76:10:06:4b:51:5d:56:c4:fa:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14f2a468a1981991780d9bd2f24d861ad5b11e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:bd:0b:32:e4:c5:4d:c3:eb:b9:a9:c1:e3:0d: cd:6f:3f:32:a3:59:32:78:56:b4:02:9d:30:53:67: b0:5b:81:72:d9:7d:dc:f2:dc:78:f9:1e:fd:66:e7: f9:64:37:e3:16:63:6c:d9:c6:b0:18:1a:61:2d:25: f1:59:a3:1a:01:d1:9d:34:cc:0e:51:36:94:ca:76: e9:0c:86:fa:aa:9d:5e:95:05:a3:4a:82:62:af:73: b6:78:60:62:c9:ec:92:75:85:7c:5a:a2:37:f1:72: 38:50:ad:30:41:83:45:a9:ea:98:a8:4b:f2:13:35: a0:70:b4:88:0f:1a:0f:53:80:1a:ff:6b:b0:65:d0: a7:60:91:cc:ce:46:60:9c:de:2c:cc:82:29:ac:58: 76:fc:4e:bd:aa:60:70:25:06:55:2b:fd:21:32:f5: a3:3a:13:fd:e4:d5:ad:d7:2d:43:cb:57:c1:8d:7f: 00:62:72:bc:8f:f2:f4:1e:d7:cd:f6:8c:d4:2e:4d: 7e:b6:ee:f7:84:82:72:35:67:9b:3c:a0:8c:5d:5a: 9c:aa:75:88:04:2b:f6:93:b6:b2:eb:80:6c:59:1e: 13:c5:34:ee:81:79:db:c7:2c:8e:7f:88:ca:4f:3c: 23:3d:12:14:27:ec:93:5f:b3:8b:5b:46:40:62:47: 36:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F2:A4:68:A1:98:19:91:78:0D:9B:D2:F2:4D:86:1A:D5:B1:1E:58 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/FPKkaKGYGZF4DZvS8k2GGtWxHlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:300::/44 Signature Algorithm: sha256WithRSAEncryption 75:ca:1f:e9:20:fa:16:07:c1:51:86:9c:d4:9a:09:1e:f2:b2: b4:90:01:8d:23:d2:ef:04:1e:8d:e2:8d:cd:e9:7d:db:bf:9f: 62:1c:ae:f1:99:15:65:3a:ca:ba:2d:9b:58:c6:d9:08:ef:d2: d1:bf:01:0c:87:5a:cd:f7:b6:d4:d6:dd:6e:d3:a7:5d:4b:21: 22:3c:fa:85:42:a9:86:ee:b8:5e:03:73:21:47:69:d2:ae:33: 02:f4:5d:4e:aa:71:9c:dd:c8:01:84:47:cd:f5:22:41:22:7d: 10:af:70:85:d3:41:9a:98:ae:d9:a0:e0:6c:28:09:69:50:45: 85:0b:a1:08:b9:a2:39:c6:1b:b1:ec:61:2f:26:10:82:0d:f9: a9:e1:82:bb:fd:6b:c8:35:57:ce:62:3b:be:24:53:98:2d:c9: fd:56:18:36:9f:70:50:10:c5:a6:13:b6:4e:50:06:0b:04:7f: 0a:57:f5:41:6f:1d:04:57:51:ca:85:a9:2f:6a:5c:02:b7:b4: 6f:61:1b:6a:30:27:8b:bf:b5:cb:3a:7f:9e:65:4c:8b:16:41: c3:8e:b3:d0:ec:9a:0a:6a:b5:0f:4e:af:41:61:82:51:81:e0: e5:67:61:43:10:7f:ef:4b:d3:cf:ab:16:67:82:af:6f:63:d7: d9:f5:29:19 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OTeByZl2EAZLUV1WxProMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGYyYTQ2OGExOTgxOTkxNzgwZDliZDJmMjRkODYxYWQ1YjExZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx70LMuTFTcPruanB4w3Nbz8yo1ky eFa0Ap0wU2ewW4Fy2X3c8tx4+R79Zuf5ZDfjFmNs2cawGBphLSXxWaMaAdGdNMwO UTaUynbpDIb6qp1elQWjSoJir3O2eGBiyeySdYV8WqI38XI4UK0wQYNFqeqYqEvy EzWgcLSIDxoPU4Aa/2uwZdCnYJHMzkZgnN4szIIprFh2/E69qmBwJQZVK/0hMvWj OhP95NWt1y1Dy1fBjX8AYnK8j/L0HtfN9ozULk1+tu73hIJyNWebPKCMXVqcqnWI BCv2k7ay64BsWR4TxTTugXnbxyyOf4jKTzwjPRIUJ+yTX7OLW0ZAYkc2yQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBTypGihmBmReA2b0vJNhhrVsR5YMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvRlBLa2FLR1lHWkY0RFp2UzhrMkdHdFd4SGxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQMA MA0GCSqGSIb3DQEBCwUAA4IBAQB1yh/pIPoWB8FRhpzUmgke8rK0kAGNI9LvBB6N 4o3N6X3bv59iHK7xmRVlOsq6LZtYxtkI79LRvwEMh1rN97bU1t1u06ddSyEiPPqF QqmG7rheA3MhR2nSrjMC9F1OqnGc3cgBhEfN9SJBIn0Qr3CF00GamK7ZoOBsKAlp UEWFC6EIuaI5xhux7GEvJhCCDfmp4YK7/WvINVfOYju+JFOYLcn9Vhg2n3BQEMWm E7ZOUAYLBH8KV/VBbx0EV1HKhakvalwCt7RvYRtqMCeLv7XLOn+eZUyLFkHDjrPQ 7JoKarUPTq9BYYJRgeDlZ2FDEH/vS9PPqxZngq9vY9fZ9SkZ -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:56 2026 by rpki-client