This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/FENuxoqFjunqAylfU_74pUn9r9w.roa File: FENuxoqFjunqAylfU_74pUn9r9w.roa (raw, json) Hash identifier: MH7ftTgYFM0jAg20wF24Y7UB/Kl4HvysaZ+BlD0+dTM= Subject key identifier: 14:43:6E:C6:8A:85:8E:E9:EA:03:29:5F:53:FE:F8:A5:49:FD:AF:DC Certificate issuer: /CN=b2c5f74df4520d341da348a700a03b97caf07735 Certificate serial: 019B79ED2386D3C27D0260883DF037F41F4F Authority key identifier: B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/FENuxoqFjunqAylfU_74pUn9r9w.roa Signing time: Thu 01 Jan 2026 14:19:02 +0000 ROA not before: Thu 01 Jan 2026 14:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28727 IP address blocks: 2001:67c:628::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.mft rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:23:86:d3:c2:7d:02:60:88:3d:f0:37:f4:1f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2c5f74df4520d341da348a700a03b97caf07735 Validity Not Before: Jan 1 14:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14436ec68a858ee9ea03295f53fef8a549fdafdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0d:05:c6:5f:fb:ad:7a:98:14:3b:46:46:96: d2:0e:4d:67:4d:9c:be:84:98:22:da:c1:f2:6f:be: cf:42:5f:32:b9:e5:7b:35:7b:1d:86:84:00:d0:15: fd:fd:d4:e6:ef:a1:54:2d:63:74:63:27:1d:2d:76: 89:47:98:ae:94:4b:83:8d:a0:01:78:cb:87:09:91: b8:79:f7:d4:6c:28:7d:fd:6d:82:25:76:2b:7e:6d: 81:d2:f0:00:16:2b:7e:9c:f3:8c:9d:0b:40:87:73: 96:c4:43:d8:07:17:86:5f:48:f5:be:e3:23:b9:e7: 13:f6:60:c7:31:bb:fb:ce:8e:52:5f:8c:68:12:a4: 7c:54:8b:d4:53:b0:f9:8d:28:b5:6f:cb:b9:a7:02: c2:0e:25:0a:22:9a:15:e8:37:a5:ac:36:0a:64:9e: dc:b6:22:94:5d:7f:fb:41:3d:d3:54:df:1f:6d:c1: 07:7d:42:c3:e4:3b:47:c7:c7:90:8c:30:fe:23:b1: a2:2a:d4:0c:c8:e2:48:bf:fb:9b:3b:8e:8f:08:df: 26:e7:02:aa:29:a7:e3:cf:17:9f:dc:7a:98:66:bf: a4:bc:f1:b8:c6:fd:57:5b:97:ed:c7:89:83:cd:6e: 39:6c:58:89:cd:92:0b:5c:f4:8b:b0:bf:e3:96:5d: e4:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:43:6E:C6:8A:85:8E:E9:EA:03:29:5F:53:FE:F8:A5:49:FD:AF:DC X509v3 Authority Key Identifier: keyid:B2:C5:F7:4D:F4:52:0D:34:1D:A3:48:A7:00:A0:3B:97:CA:F0:77:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssX3TfRSDTQdo0inAKA7l8rwdzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/FENuxoqFjunqAylfU_74pUn9r9w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/dfffc5-cb6d-44ce-8472-777ee9556210/1/ssX3TfRSDTQdo0inAKA7l8rwdzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:628::/48 Signature Algorithm: sha256WithRSAEncryption 77:c0:ce:db:39:8d:fd:04:b7:0b:4e:85:21:b9:5a:1b:7e:ff: 3e:fc:16:6d:5a:f7:b3:e5:bb:c2:bc:83:dc:31:2e:39:b7:71: e7:4c:4a:03:98:b2:02:0a:96:c4:48:27:36:13:b9:94:53:e6: ec:76:9e:fa:55:0c:e1:c5:74:a6:e6:ce:ea:30:4b:1d:ce:1e: f0:aa:b6:3b:0b:99:5f:aa:aa:31:a7:10:fb:2d:76:7a:c8:4a: af:b9:40:af:6d:4f:94:cf:a9:e3:f8:cb:0f:d3:2f:c7:03:df: 3b:2a:5f:4f:5c:a6:3f:c3:c5:c7:49:70:e6:68:1b:45:e9:3a: 1f:8e:12:8d:a8:8b:f6:aa:2c:81:bb:cc:77:65:f6:16:5f:b5: a6:9c:fc:15:7d:1b:8d:fa:5b:a6:54:91:fa:d9:ae:46:5c:42: 8b:84:69:b4:92:fe:2e:4e:0f:91:12:01:b8:98:f2:60:f2:bc: 45:4a:fc:94:6f:1f:37:62:94:a1:0e:ba:9c:55:63:7b:76:84: 3d:09:7f:13:f2:7d:ea:6e:8a:15:7d:66:68:0b:9b:e2:fa:d6: 8d:6d:55:6c:74:df:eb:75:5a:24:89:50:e4:ef:b2:dc:1a:33: dc:19:0c:f1:e3:b6:0c:10:2c:64:0a:51:4a:72:fd:e6:2e:dc: ce:ce:2c:51 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57SOG08J9AmCIPfA39B9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYzVmNzRkZjQ1MjBkMzQxZGEzNDhhNzAwYTAzYjk3Y2Fm MDc3MzUwHhcNMjYwMTAxMTQxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDQzNmVjNjhhODU4ZWU5ZWEwMzI5NWY1M2ZlZjhhNTQ5ZmRhZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g0Fxl/7rXqYFDtGRpbSDk1nTZy+ hJgi2sHyb77PQl8yueV7NXsdhoQA0BX9/dTm76FULWN0YycdLXaJR5iulEuDjaAB eMuHCZG4effUbCh9/W2CJXYrfm2B0vAAFit+nPOMnQtAh3OWxEPYBxeGX0j1vuMj uecT9mDHMbv7zo5SX4xoEqR8VIvUU7D5jSi1b8u5pwLCDiUKIpoV6DelrDYKZJ7c tiKUXX/7QT3TVN8fbcEHfULD5DtHx8eQjDD+I7GiKtQMyOJIv/ubO46PCN8m5wKq Kafjzxef3HqYZr+kvPG4xv1XW5ftx4mDzW45bFiJzZILXPSLsL/jll3kvwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBRDbsaKhY7p6gMpX1P++KVJ/a/cMB8GA1UdIwQY MBaAFLLF9030Ug00HaNIpwCgO5fK8Hc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzIt Nzc3ZWU5NTU2MjEwLzEvRkVOdXhvcUZqdW5xQXlsZlVfNzRwVW45cjl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9kZmZmYzUtY2I2ZC00NGNlLTg0NzItNzc3ZWU5NTU2MjEw LzEvc3NYM1RmUlNEVFFkbzBpbkFLQTdsOHJ3ZHpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAYo MA0GCSqGSIb3DQEBCwUAA4IBAQB3wM7bOY39BLcLToUhuVobfv8+/BZtWvez5bvC vIPcMS45t3HnTEoDmLICCpbESCc2E7mUU+bsdp76VQzhxXSm5s7qMEsdzh7wqrY7 C5lfqqoxpxD7LXZ6yEqvuUCvbU+Uz6nj+MsP0y/HA987Kl9PXKY/w8XHSXDmaBtF 6TofjhKNqIv2qiyBu8x3ZfYWX7WmnPwVfRuN+lumVJH62a5GXEKLhGm0kv4uTg+R EgG4mPJg8rxFSvyUbx83YpShDrqcVWN7doQ9CX8T8n3qbooVfWZoC5vi+taNbVVs dN/rdVokiVDk77LcGjPcGQzx47YMECxkClFKcv3mLtzOzixR -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:49 2026 by rpki-client