This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/fpbZgKklTRGbUlBw5VfG2XolpT4.roa File: fpbZgKklTRGbUlBw5VfG2XolpT4.roa (raw, json) Hash identifier: VEiVSo2qKOGnxDIsrhNTfOH5xMpm4xzV14ZuiE7aVXQ= Subject key identifier: 7E:96:D9:80:A9:25:4D:11:9B:52:50:70:E5:57:C6:D9:7A:25:A5:3E Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d Certificate serial: 019B7AC79ED556D9E43F02AB33573A9AAE72 Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/fpbZgKklTRGbUlBw5VfG2XolpT4.roa Signing time: Thu 01 Jan 2026 18:17:41 +0000 ROA not before: Thu 01 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36351 IP address blocks: 2a04:f400:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9e:d5:56:d9:e4:3f:02:ab:33:57:3a:9a:ae:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e96d980a9254d119b525070e557c6d97a25a53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2c:45:1a:20:05:7e:e3:1c:4b:47:27:0e:df: 3c:8e:9e:d0:c7:fd:d2:24:b1:a5:97:2f:e4:15:1c: c4:02:db:36:c2:24:e4:f8:aa:43:40:d1:84:4f:c8: 2f:cb:c0:8a:65:6d:42:2f:e3:19:4a:a2:72:50:7f: f0:63:23:7c:03:5a:73:1f:24:f6:59:4a:0e:64:c0: db:9b:df:4d:f2:be:e3:c7:b8:9f:04:68:74:66:d7: 35:ff:b2:5e:1b:83:ab:cc:81:56:e5:e5:39:85:d9: be:9a:e3:9f:9a:f0:26:cc:35:c8:75:3e:0c:46:24: 58:40:e3:46:0e:61:cd:28:23:25:41:ec:da:b6:9b: 06:4f:6a:88:eb:8d:ca:a0:5f:62:e2:99:e9:68:36: f2:d8:06:14:6e:c0:3a:ef:1c:1f:7f:8b:4c:8a:22: cf:31:86:83:08:ca:1c:da:87:da:6a:8c:0e:ad:f7: 4d:f8:51:ce:7b:f8:68:71:96:11:cc:62:6b:7b:a9: 5d:a0:32:cb:29:a1:07:c1:b7:08:44:a0:17:67:9a: 92:cc:63:b0:e4:33:c2:54:fe:e1:ea:32:27:a4:a2: 40:09:40:c8:f8:20:eb:25:90:a3:96:ec:74:da:4e: d4:2e:57:64:10:d1:f0:13:90:d2:bd:29:b3:7c:cd: 45:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:96:D9:80:A9:25:4D:11:9B:52:50:70:E5:57:C6:D9:7A:25:A5:3E X509v3 Authority Key Identifier: keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/fpbZgKklTRGbUlBw5VfG2XolpT4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:f400:3000::/48 Signature Algorithm: sha256WithRSAEncryption 0d:85:19:09:1b:17:3f:dd:40:ed:7e:6c:cd:1d:14:ba:ec:e1: 52:b6:a8:5c:b1:86:3c:f7:cc:2a:6c:fa:4f:bd:6f:81:08:ad: 2c:be:4f:c3:a6:2a:fc:6a:d2:15:8b:5b:24:66:3c:de:36:4a: 6a:b3:e4:33:ff:e6:5a:df:6a:dc:55:12:71:0a:c5:f3:a2:d2: b0:a4:54:13:f0:81:1e:12:69:45:60:82:da:30:ec:62:dd:67: f0:ce:ea:c6:a3:2a:7c:c2:f2:76:e9:03:d8:0a:31:de:1b:0e: 5e:00:c6:6d:7c:4b:43:e7:71:e1:a1:ab:ea:2b:13:a1:4b:ba: be:ba:c1:8a:48:98:fb:33:7b:af:63:69:c3:38:1e:83:5c:57: 06:a7:4e:1f:6c:8c:e5:04:f7:8e:61:1c:e5:e5:b9:8b:dc:a0: 49:f5:a4:1c:9f:62:f8:88:53:91:08:56:ad:74:fe:2d:81:75: 15:08:b8:58:4f:9c:5c:50:82:a1:bb:56:25:35:40:e2:b6:6e: af:d6:20:bd:63:31:d4:19:98:2d:c0:b3:f4:4d:aa:61:1d:4d: 7c:f9:67:c9:4e:cd:12:87:6d:6c:bf:78:12:90:e3:78:f4:01: ba:2a:b6:a2:c4:20:eb:d4:4c:48:77:05:bb:0d:a7:3c:be:d2: e5:8a:3b:9f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6x57VVtnkPwKrM1c6mq5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmQ0NmI3NmJmZDZkNDJiYmQ1NzVlMmYyNmZjZTEzNmI5 YjZhNmQwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTk2ZDk4MGE5MjU0ZDExOWI1MjUwNzBlNTU3YzZkOTdhMjVhNTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCxFGiAFfuMcS0cnDt88jp7Qx/3S JLGlly/kFRzEAts2wiTk+KpDQNGET8gvy8CKZW1CL+MZSqJyUH/wYyN8A1pzHyT2 WUoOZMDbm99N8r7jx7ifBGh0Ztc1/7JeG4OrzIFW5eU5hdm+muOfmvAmzDXIdT4M RiRYQONGDmHNKCMlQezatpsGT2qI643KoF9i4pnpaDby2AYUbsA67xwff4tMiiLP MYaDCMoc2ofaaowOrfdN+FHOe/hocZYRzGJre6ldoDLLKaEHwbcIRKAXZ5qSzGOw 5DPCVP7h6jInpKJACUDI+CDrJZCjlux02k7ULldkENHwE5DSvSmzfM1FuwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH6W2YCpJU0Rm1JQcOVXxtl6JaU+MB8GA1UdIwQY MBaAFLptRrdr/W1Cu9V14vJvzhNrm2ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYt ZGZmMWNmZmI3YjE4LzEvZnBiWmdLa2xUUkdiVWxCdzVWZkcyWG9scFQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYtZGZmMWNmZmI3YjE4 LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgT0ADAA MA0GCSqGSIb3DQEBCwUAA4IBAQANhRkJGxc/3UDtfmzNHRS67OFStqhcsYY898wq bPpPvW+BCK0svk/Dpir8atIVi1skZjzeNkpqs+Qz/+Za32rcVRJxCsXzotKwpFQT 8IEeEmlFYILaMOxi3WfwzurGoyp8wvJ26QPYCjHeGw5eAMZtfEtD53HhoavqKxOh S7q+usGKSJj7M3uvY2nDOB6DXFcGp04fbIzlBPeOYRzl5bmL3KBJ9aQcn2L4iFOR CFatdP4tgXUVCLhYT5xcUIKhu1YlNUDitm6v1iC9YzHUGZgtwLP0TaphHU18+WfJ Ts0Sh21sv3gSkON49AG6KraixCDr1ExIdwW7Dac8vtLlijuf -----END CERTIFICATE-----Generated at Fri Jan 2 16:22:43 2026 by rpki-client