This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/F-rApHmMNywXbOy8G6qB8fH01fA.roa File: F-rApHmMNywXbOy8G6qB8fH01fA.roa (raw, json) Hash identifier: Cj/vTHuQIKGTmDHTsxswJvQ6X1dpxAptzaajKbS+iP0= Subject key identifier: 17:EA:C0:A4:79:8C:37:2C:17:6C:EC:BC:1B:AA:81:F1:F1:F4:D5:F0 Certificate issuer: /CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758 Certificate serial: 019B7E381487F3FB69AE94D017CC5A128A6A Authority key identifier: 6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/F-rApHmMNywXbOy8G6qB8fH01fA.roa Signing time: Fri 02 Jan 2026 10:19:23 +0000 ROA not before: Fri 02 Jan 2026 10:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215060 IP address blocks: 2001:67c:e84::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.mft rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:14:87:f3:fb:69:ae:94:d0:17:cc:5a:12:8a:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ba69c3bdc92d681148a358a13a6e6f53dfb7758 Validity Not Before: Jan 2 10:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17eac0a4798c372c176cecbc1baa81f1f1f4d5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f3:f1:69:6e:48:fd:b8:f4:38:73:23:73:42: ab:b6:8b:54:60:9e:1c:ad:ab:66:2d:b2:8d:e3:3b: 29:a9:08:2e:0d:70:0a:2d:21:14:c5:5c:ee:b5:84: 98:57:6e:bc:e7:17:d7:7b:0c:44:e1:0d:20:62:1d: c1:18:c4:67:34:ed:00:42:2e:d5:db:18:09:f1:b4: 69:22:2c:ed:e5:5d:0d:b0:92:2b:17:45:65:9d:9d: 19:31:28:01:f1:22:82:26:fd:50:96:77:39:70:1f: 04:ca:2a:ef:fd:b3:64:9d:9a:a7:2b:f0:16:30:60: e8:c1:ad:32:d6:df:52:1e:50:a7:4a:fd:a8:08:37: 5f:b2:c7:ea:b0:8f:1f:82:8d:b2:b0:eb:00:bd:cd: f4:0d:90:93:d7:9b:72:31:b1:37:db:5e:5b:d1:d8: 0b:02:31:ca:ee:5a:cd:f9:e7:df:5b:bf:8f:ff:3b: 18:72:d2:c4:ea:bd:99:58:8c:a6:fd:e8:32:d1:5a: e6:e0:4f:68:33:eb:28:09:53:5a:5f:c9:e3:6c:17: 75:09:1f:81:e9:a2:63:74:31:c3:a1:cb:7b:4e:14: e5:f0:08:a7:90:f6:03:9c:3d:e6:09:c2:b8:0b:25: df:9f:e0:2c:a7:a5:a0:60:57:5d:f8:d4:cd:57:4a: 2b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EA:C0:A4:79:8C:37:2C:17:6C:EC:BC:1B:AA:81:F1:F1:F4:D5:F0 X509v3 Authority Key Identifier: keyid:6B:A6:9C:3B:DC:92:D6:81:14:8A:35:8A:13:A6:E6:F5:3D:FB:77:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6acO9yS1oEUijWKE6bm9T37d1g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/F-rApHmMNywXbOy8G6qB8fH01fA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/98bc90-01df-46ae-ba63-a9c04d0954e2/1/a6acO9yS1oEUijWKE6bm9T37d1g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e84::/48 Signature Algorithm: sha256WithRSAEncryption 08:dd:2b:ff:9a:2f:3f:0c:0d:c9:e4:74:24:8e:06:07:15:7f: d0:1d:5c:fa:33:d3:ff:75:9f:7b:a9:17:77:9e:4f:8d:5b:23: 53:a7:b0:87:e1:91:68:ac:aa:ae:8f:87:5d:fa:c3:46:69:bb: ce:8c:6d:c6:a3:d1:ba:15:ee:b0:34:02:b9:85:70:19:5d:51: 56:87:3c:e3:18:43:1e:32:a0:8a:25:32:28:3d:e1:32:67:b8: 51:8f:97:55:f5:2b:de:d5:e9:8b:d5:98:d5:df:e9:00:db:7f: 01:4e:0b:2a:4a:60:8e:27:b5:91:42:1e:dd:df:c5:ce:bf:71: 07:ed:84:66:04:9b:bb:a6:80:f2:57:c2:1f:1e:12:42:fc:57: a6:41:66:bd:24:a1:7a:2c:06:ca:05:90:62:6a:ce:e6:16:ca: d1:63:28:c4:8e:0f:89:79:89:4d:1f:33:14:07:38:0c:7c:4d: a6:2f:9c:c8:ca:0a:6f:1a:04:8f:48:ad:e4:fd:6e:f0:fb:11: 98:0d:73:5d:b6:f2:4c:7c:2f:9a:43:f2:23:37:dd:c3:d0:d5: f7:b3:a0:7a:49:5d:96:a3:9e:70:c6:36:15:23:5b:fe:17:02: ba:8f:58:13:20:b9:0a:1e:c0:6b:81:b6:3e:e0:8d:c4:a8:b8: bf:0d:d9:2b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OBSH8/tprpTQF8xaEopqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYTY5YzNiZGM5MmQ2ODExNDhhMzU4YTEzYTZlNmY1M2Rm Yjc3NTgwHhcNMjYwMTAyMTAxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2VhYzBhNDc5OGMzNzJjMTc2Y2VjYmMxYmFhODFmMWYxZjRkNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/PxaW5I/bj0OHMjc0KrtotUYJ4c ratmLbKN4zspqQguDXAKLSEUxVzutYSYV2685xfXewxE4Q0gYh3BGMRnNO0AQi7V 2xgJ8bRpIizt5V0NsJIrF0VlnZ0ZMSgB8SKCJv1Qlnc5cB8Eyirv/bNknZqnK/AW MGDowa0y1t9SHlCnSv2oCDdfssfqsI8fgo2ysOsAvc30DZCT15tyMbE3215b0dgL AjHK7lrN+effW7+P/zsYctLE6r2ZWIym/egy0Vrm4E9oM+soCVNaX8njbBd1CR+B 6aJjdDHDoct7ThTl8AinkPYDnD3mCcK4CyXfn+Asp6WgYFdd+NTNV0orSQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBfqwKR5jDcsF2zsvBuqgfHx9NXwMB8GA1UdIwQY MBaAFGumnDvcktaBFIo1ihOm5vU9+3dYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTZhY085eVMxb0VVaWpXS0U2Ym05VDM3ZDFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy85OGJjOTAtMDFkZi00NmFlLWJhNjMt YTljMDRkMDk1NGUyLzEvRi1yQXBIbU1OeXdYYk95OEc2cUI4ZkgwMWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy85OGJjOTAtMDFkZi00NmFlLWJhNjMtYTljMDRkMDk1NGUy LzEvYTZhY085eVMxb0VVaWpXS0U2Ym05VDM3ZDFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA6E MA0GCSqGSIb3DQEBCwUAA4IBAQAI3Sv/mi8/DA3J5HQkjgYHFX/QHVz6M9P/dZ97 qRd3nk+NWyNTp7CH4ZForKquj4dd+sNGabvOjG3Go9G6Fe6wNAK5hXAZXVFWhzzj GEMeMqCKJTIoPeEyZ7hRj5dV9Sve1emL1ZjV3+kA238BTgsqSmCOJ7WRQh7d38XO v3EH7YRmBJu7poDyV8IfHhJC/FemQWa9JKF6LAbKBZBias7mFsrRYyjEjg+JeYlN HzMUBzgMfE2mL5zIygpvGgSPSK3k/W7w+xGYDXNdtvJMfC+aQ/IjN93D0NX3s6B6 SV2Wo55wxjYVI1v+FwK6j1gTILkKHsBrgbY+4I3EqLi/Ddkr -----END CERTIFICATE-----Generated at Mon Feb 9 20:05:18 2026 by rpki-client