This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/nfTwPQ3vFYQK-8uCHGxl0c1ZFos.roa File: nfTwPQ3vFYQK-8uCHGxl0c1ZFos.roa (raw, json) Hash identifier: RD1NNAQbVUTLFIC0p8IpyLnW0lNI6MJeVxWZuDg6dNQ= Subject key identifier: 9D:F4:F0:3D:0D:EF:15:84:0A:FB:CB:82:1C:6C:65:D1:CD:59:16:8B Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Certificate serial: 019B7E38B0783ABEE00F8B0E4C900EEA3D21 Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/nfTwPQ3vFYQK-8uCHGxl0c1ZFos.roa Signing time: Fri 02 Jan 2026 10:20:02 +0000 ROA not before: Fri 02 Jan 2026 10:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137908 IP address blocks: 2a13:a5c3:ff50::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b0:78:3a:be:e0:0f:8b:0e:4c:90:0e:ea:3d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d Validity Not Before: Jan 2 10:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9df4f03d0def15840afbcb821c6c65d1cd59168b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c5:84:5d:e0:c4:97:4d:5a:91:3d:9f:3c:6f: 76:88:e2:92:a1:61:cf:71:4c:0b:26:a8:1b:ae:df: 81:4c:2a:ed:4e:f2:04:7a:60:f4:d4:57:cb:05:ef: 61:c6:6a:79:5a:c8:c0:9b:0a:6a:7d:a0:63:e3:d7: 71:94:b4:a0:f4:03:0b:e0:c1:95:6f:59:f8:6e:83: 76:6b:54:bf:a6:b5:ae:93:54:4a:c6:8f:5e:de:75: 8e:96:38:aa:57:53:ee:17:09:86:95:54:fa:81:41: c2:21:4c:6e:d8:40:c9:24:42:d8:8e:73:b3:55:f8: 9b:43:2b:bc:03:8d:86:a1:7a:a0:50:a8:ee:71:07: 55:6f:8e:47:9b:80:5f:7e:44:bd:a3:9a:ea:6c:bc: 03:6f:c5:d3:b7:4c:ef:d6:83:5c:3a:9f:53:05:a7: fd:90:8e:eb:82:74:6b:97:46:00:20:73:bc:49:05: 09:d6:81:71:6e:dc:54:24:c2:1e:50:c7:ec:e0:94: 8b:5f:72:37:c6:d3:a7:6b:59:2c:00:3c:b7:e1:fd: 6a:dc:17:6d:0f:eb:cd:75:c2:d0:d0:30:59:d8:23: 47:84:fc:bd:1b:0b:44:4a:21:28:4d:8c:36:b6:67: 5e:c6:5a:81:14:90:ec:58:6e:3b:a9:8d:60:b1:13: d7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:F4:F0:3D:0D:EF:15:84:0A:FB:CB:82:1C:6C:65:D1:CD:59:16:8B X509v3 Authority Key Identifier: keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/nfTwPQ3vFYQK-8uCHGxl0c1ZFos.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:a5c3:ff50::/44 Signature Algorithm: sha256WithRSAEncryption 93:13:70:a4:ee:b2:80:32:47:34:65:3c:9c:66:67:1c:1f:b0: e2:bf:b7:68:09:df:96:69:0e:f8:df:19:a0:86:8e:0e:ce:c3: 55:4d:59:f4:4d:6a:8f:9d:8a:af:17:23:17:d9:79:0c:3b:8f: c0:ea:f3:94:61:05:e9:2a:3f:f0:ac:95:49:0a:60:4d:df:9b: 3d:9e:6a:85:ce:13:8c:94:5c:8a:f1:67:be:f5:4e:e9:de:74: 3f:13:04:a2:f5:0d:08:ed:76:82:ec:ae:40:5e:87:f4:de:00: 32:ba:0c:33:0c:55:d0:b3:53:89:56:d1:60:91:46:e1:34:c7: 1a:0f:a2:9a:f8:d8:55:83:cb:7c:d0:aa:08:20:68:9c:25:6b: 52:ea:10:b3:a7:c9:30:be:21:3b:2b:f0:a8:42:6a:7d:00:db: 84:f3:9b:e1:c5:d6:36:a4:9c:20:2a:99:b7:73:41:41:d2:df: 58:69:6e:23:e9:09:0f:c2:7e:e3:10:97:79:85:13:00:46:7c: 1e:2b:19:aa:c2:07:31:10:fd:b2:4c:0a:fd:93:d4:c4:5e:65: 49:e5:39:8d:45:e8:09:2d:35:5d:1d:56:53:3c:da:c3:7f:6f: 0d:48:4b:f1:4c:b9:18:3b:fe:00:b1:57:ca:51:f5:f4:45:d6: f6:53:db:88 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OLB4Or7gD4sOTJAO6j0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkZDZlZTAxMGI5OTBhMzM3MzU3NTZiNGZlMmYzZDNjMjY3 MWRkOWQwHhcNMjYwMTAyMTAyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGY0ZjAzZDBkZWYxNTg0MGFmYmNiODIxYzZjNjVkMWNkNTkxNjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18WEXeDEl01akT2fPG92iOKSoWHP cUwLJqgbrt+BTCrtTvIEemD01FfLBe9hxmp5WsjAmwpqfaBj49dxlLSg9AML4MGV b1n4boN2a1S/prWuk1RKxo9e3nWOljiqV1PuFwmGlVT6gUHCIUxu2EDJJELYjnOz VfibQyu8A42GoXqgUKjucQdVb45Hm4BffkS9o5rqbLwDb8XTt0zv1oNcOp9TBaf9 kI7rgnRrl0YAIHO8SQUJ1oFxbtxUJMIeUMfs4JSLX3I3xtOna1ksADy34f1q3Bdt D+vNdcLQ0DBZ2CNHhPy9GwtESiEoTYw2tmdexlqBFJDsWG47qY1gsRPXnQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFJ308D0N7xWECvvLghxsZdHNWRaLMB8GA1UdIwQY MBaAFP3W7gELmQozc1dWtP4vPTwmcd2dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDct NjNjNzIxY2YxZjU2LzEvbmZUd1BRM3ZGWVFLLTh1Q0hHeGwwYzFaRm9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yZDFhMzUtZmY4YS00NmI0LThjNDctNjNjNzIxY2YxZjU2 LzEvX2RidUFRdVpDak56VjFhMF9pODlQQ1p4M1owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhOlw/9Q MA0GCSqGSIb3DQEBCwUAA4IBAQCTE3Ck7rKAMkc0ZTycZmccH7Div7doCd+WaQ74 3xmgho4OzsNVTVn0TWqPnYqvFyMX2XkMO4/A6vOUYQXpKj/wrJVJCmBN35s9nmqF zhOMlFyK8We+9U7p3nQ/EwSi9Q0I7XaC7K5AXof03gAyugwzDFXQs1OJVtFgkUbh NMcaD6Ka+NhVg8t80KoIIGicJWtS6hCzp8kwviE7K/CoQmp9ANuE85vhxdY2pJwg Kpm3c0FB0t9YaW4j6QkPwn7jEJd5hRMARnweKxmqwgcxEP2yTAr9k9TEXmVJ5TmN RegJLTVdHVZTPNrDf28NSEvxTLkYO/4AsVfKUfX0Rdb2U9uI -----END CERTIFICATE-----Generated at Mon Jan 5 03:49:57 2026 by rpki-client