This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/fpX0pz926_HhzBVudg9guAAJbiQ.roa File: fpX0pz926_HhzBVudg9guAAJbiQ.roa (raw, json) Hash identifier: AaBqM4c5SHybOPXapULIOPY+oqJXsUGCGrAw8LkdR9o= Subject key identifier: 7E:95:F4:A7:3F:76:EB:F1:E1:CC:15:6E:76:0F:60:B8:00:09:6E:24 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39414A04E753ED34DC796611885474 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/fpX0pz926_HhzBVudg9guAAJbiQ.roa Signing time: Fri 02 Jan 2026 10:20:40 +0000 ROA not before: Fri 02 Jan 2026 10:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207635 IP address blocks: 2a0c:b641:500::/44 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:41:4a:04:e7:53:ed:34:dc:79:66:11:88:54:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e95f4a73f76ebf1e1cc156e760f60b800096e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:32:49:20:25:f9:ba:98:7a:01:53:74:a7:87: 27:a5:9c:44:78:d9:b4:9a:75:9c:86:f0:c5:53:92: 98:28:90:c6:30:8d:32:1e:34:a1:92:d8:10:00:7c: 2d:c8:6f:b6:fd:bc:15:e3:16:84:7c:93:79:1d:28: 63:56:d1:a9:df:e4:f3:65:8f:72:44:b4:d6:42:b5: 2a:69:be:1e:41:a1:2a:c7:b8:16:f8:d9:6d:01:6b: 45:d9:db:84:99:6f:f6:53:da:92:75:0f:3f:f4:04: 4d:51:d9:0c:3a:20:e4:36:66:67:4b:96:6b:f8:ef: 30:f1:5d:27:04:6c:3e:10:a9:58:3a:f8:4b:26:71: 84:3f:e2:db:67:58:ec:50:65:81:85:f9:1c:19:eb: 73:8f:8b:74:07:c7:16:64:20:3f:c2:e3:d6:d6:dd: 42:1b:7f:5c:3b:e3:2a:ec:2f:d0:41:eb:5a:68:89: c4:78:b3:28:24:9c:d9:ea:39:76:77:86:cd:22:f9: 8e:d5:77:cc:a6:8d:be:d0:80:17:68:e6:8b:8d:cd: 27:f8:06:68:55:f2:dc:77:ed:f0:45:73:b4:dc:2b: 52:a1:ec:70:76:46:ad:29:c7:36:5b:3f:8a:e1:75: f0:f7:49:c2:6e:08:b0:f0:d7:12:84:0f:6a:34:86: 80:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:95:F4:A7:3F:76:EB:F1:E1:CC:15:6E:76:0F:60:B8:00:09:6E:24 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/fpX0pz926_HhzBVudg9guAAJbiQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:500::/44 Signature Algorithm: sha256WithRSAEncryption 97:40:17:4d:39:89:d3:dd:fe:f9:fb:31:36:8f:25:b5:4c:d0: fe:3f:70:5a:df:30:be:ff:20:37:39:20:ca:fc:9f:13:f1:97: 2d:71:1d:7c:37:80:8c:24:65:0b:6d:07:2f:94:46:38:26:76: 85:75:57:78:ea:b4:8a:b8:7d:b0:17:4e:12:14:05:83:1b:50: b2:45:c9:dc:77:46:e0:43:7a:a2:e5:6f:55:8c:0e:f4:bf:21: af:e3:58:bd:d8:3f:5b:12:3a:9f:9b:18:61:eb:37:c7:28:6e: 26:b2:bf:f9:40:b4:57:34:7e:7d:1c:e9:f0:84:a4:10:ef:9b: a9:b3:da:03:43:79:42:4b:a2:ac:5b:01:cf:91:d2:cc:65:9a: 07:fd:f5:7a:1d:1a:e4:14:40:17:79:ce:19:c1:4c:ee:e1:a9: 8d:1f:0f:cb:2f:4e:eb:48:a6:ec:41:92:da:65:3e:c8:e1:f2: 82:bc:ee:c7:89:d9:a7:13:df:05:c6:a2:47:69:18:99:c3:21: a2:da:76:ac:7b:cd:55:1d:21:77:79:08:d7:8d:ba:be:d5:51: a1:7f:35:2e:a3:0c:e9:20:5c:e9:23:83:7a:15:72:69:8d:39: 86:3d:4a:85:0c:20:3d:2b:eb:2c:ae:63:b8:1d:67:b3:12:fa: 34:1f:64:bf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OUFKBOdT7TTceWYRiFR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTk1ZjRhNzNmNzZlYmYxZTFjYzE1NmU3NjBmNjBiODAwMDk2ZTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDJJICX5uph6AVN0p4cnpZxEeNm0 mnWchvDFU5KYKJDGMI0yHjShktgQAHwtyG+2/bwV4xaEfJN5HShjVtGp3+TzZY9y RLTWQrUqab4eQaEqx7gW+NltAWtF2duEmW/2U9qSdQ8/9ARNUdkMOiDkNmZnS5Zr +O8w8V0nBGw+EKlYOvhLJnGEP+LbZ1jsUGWBhfkcGetzj4t0B8cWZCA/wuPW1t1C G39cO+Mq7C/QQetaaInEeLMoJJzZ6jl2d4bNIvmO1XfMpo2+0IAXaOaLjc0n+AZo VfLcd+3wRXO03CtSoexwdkatKcc2Wz+K4XXw90nCbgiw8NcShA9qNIaAiwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH6V9Kc/duvx4cwVbnYPYLgACW4kMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvZnBYMHB6OTI2X0hoekJWdWRnOWd1QUFKYmlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQUA MA0GCSqGSIb3DQEBCwUAA4IBAQCXQBdNOYnT3f75+zE2jyW1TND+P3Ba3zC+/yA3 OSDK/J8T8ZctcR18N4CMJGULbQcvlEY4JnaFdVd46rSKuH2wF04SFAWDG1CyRcnc d0bgQ3qi5W9VjA70vyGv41i92D9bEjqfmxhh6zfHKG4msr/5QLRXNH59HOnwhKQQ 75ups9oDQ3lCS6KsWwHPkdLMZZoH/fV6HRrkFEAXec4ZwUzu4amNHw/LL07rSKbs QZLaZT7I4fKCvO7HidmnE98FxqJHaRiZwyGi2nase81VHSF3eQjXjbq+1VGhfzUu owzpIFzpI4N6FXJpjTmGPUqFDCA9K+ssrmO4HWezEvo0H2S/ -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:51 2026 by rpki-client