This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa File: fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa (raw, json) Hash identifier: ejLh2AtjPL3jxNb43Lf5+3Lqqs/Okt+3XnJA445dp+0= Subject key identifier: 7F:06:F8:62:91:3F:39:B8:64:3C:93:8E:B4:89:EA:E1:56:52:90:54 Certificate issuer: /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d Certificate serial: 019B7AC79E45ED9CA207C5B0637B6500F1D8 Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa Signing time: Thu 01 Jan 2026 18:17:41 +0000 ROA not before: Thu 01 Jan 2026 18:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15404 IP address blocks: 2a04:f400:3001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:9e:45:ed:9c:a2:07:c5:b0:63:7b:65:00:f1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d Validity Not Before: Jan 1 18:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f06f862913f39b8643c938eb489eae156529054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:76:d9:2b:6c:03:06:53:03:64:67:1e:f2:9d: 4d:50:cd:7d:3a:86:9e:2c:ce:6d:85:3e:ed:2b:3b: 48:0c:e8:5f:5a:c9:a5:e6:dc:05:02:a6:94:f1:0e: 96:86:7a:d0:42:96:1e:a7:77:f3:1f:1e:0c:82:58: fe:69:d2:11:f7:eb:d7:65:29:5e:7b:e9:95:91:b2: ef:44:e8:f2:a4:b2:23:66:de:dd:3b:ae:c5:0d:a9: 9c:b2:c7:22:94:bf:1e:11:2a:f3:7b:c1:39:cd:4d: 16:fb:b1:1c:b8:a0:9a:d3:4a:ac:f7:5f:71:23:c7: 63:5d:b3:a0:44:19:7b:a9:97:fe:86:a6:7e:0f:5f: 2b:db:3e:87:4d:b6:c1:75:41:4a:c7:ce:0d:41:95: b6:d7:30:ea:75:f6:70:3a:b1:a5:14:2a:85:62:c3: b4:9a:b5:4b:8f:19:80:20:90:ab:85:93:61:31:e1: ef:56:37:a9:99:6a:3d:d8:9e:90:ff:3c:09:2a:0e: c3:7a:cd:f8:c9:cd:4c:d2:74:4a:df:02:46:65:a0: 8a:bb:42:42:dc:10:74:08:6c:63:0a:7e:05:d8:d3: 31:12:a1:99:dd:fa:4f:8c:f8:ad:c6:a6:09:8d:c6: 32:aa:90:4e:ca:6e:4d:39:4c:54:c2:95:38:93:70: 28:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:06:F8:62:91:3F:39:B8:64:3C:93:8E:B4:89:EA:E1:56:52:90:54 X509v3 Authority Key Identifier: keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/fwb4YpE_ObhkPJOOtInq4VZSkFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:f400:3001::/48 Signature Algorithm: sha256WithRSAEncryption 23:a4:31:db:9e:8b:9d:fc:4d:bd:e1:02:db:0b:d1:c6:e2:f0: d8:72:bd:ae:3a:bc:38:48:84:a7:53:cd:63:76:de:11:04:e6: c1:fa:d0:98:bf:bd:4c:c7:46:f2:cf:83:73:61:8c:b2:c5:c4: 8c:89:43:62:d5:dd:9d:cd:05:8f:2f:dd:08:36:2f:47:06:d4: 31:54:83:ea:60:40:61:d1:39:82:73:2e:14:eb:1f:67:69:7a: a4:42:fe:ba:8b:93:49:be:e9:77:05:12:ba:34:92:2b:c5:9c: d3:49:dc:6f:0f:65:80:7d:68:93:97:0a:fd:66:8d:29:b6:69: eb:c7:14:cd:2a:69:cc:46:25:ca:b0:8d:5f:f4:7a:66:47:cf: 57:9b:9c:32:3d:cc:33:b1:8b:cf:7f:8e:15:e3:3c:16:ee:23: 3a:d1:b4:0e:13:b8:7c:d6:e8:cc:47:71:2f:95:83:3d:ca:28: bf:31:c1:9a:9f:f2:30:bd:6f:de:88:77:34:16:d2:ab:56:df: f2:2b:b6:67:c7:fe:8e:89:2e:fc:1a:79:fb:2f:dd:f5:49:57: 02:e8:0b:69:74:c7:20:d6:74:03:2a:14:67:f0:17:8e:95:1d: 86:22:47:ab:01:a1:60:d3:4a:d5:ba:84:20:fa:08:6a:24:99: 55:a5:86:8f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6x55F7ZyiB8WwY3tlAPHYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNmQ0NmI3NmJmZDZkNDJiYmQ1NzVlMmYyNmZjZTEzNmI5 YjZhNmQwHhcNMjYwMTAxMTgxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjA2Zjg2MjkxM2YzOWI4NjQzYzkzOGViNDg5ZWFlMTU2NTI5MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnbZK2wDBlMDZGce8p1NUM19Ooae LM5thT7tKztIDOhfWsml5twFAqaU8Q6WhnrQQpYep3fzHx4Mglj+adIR9+vXZSle e+mVkbLvROjypLIjZt7dO67FDamcsscilL8eESrze8E5zU0W+7EcuKCa00qs919x I8djXbOgRBl7qZf+hqZ+D18r2z6HTbbBdUFKx84NQZW21zDqdfZwOrGlFCqFYsO0 mrVLjxmAIJCrhZNhMeHvVjepmWo92J6Q/zwJKg7Des34yc1M0nRK3wJGZaCKu0JC 3BB0CGxjCn4F2NMxEqGZ3fpPjPitxqYJjcYyqpBOym5NOUxUwpU4k3AoPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH8G+GKRPzm4ZDyTjrSJ6uFWUpBUMB8GA1UdIwQY MBaAFLptRrdr/W1Cu9V14vJvzhNrm2ptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYt ZGZmMWNmZmI3YjE4LzEvZndiNFlwRV9PYmhrUEpPT3RJbnE0VlpTa0ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lOGJlMGUtYTgwZC00YTRmLWI1MmYtZGZmMWNmZmI3YjE4 LzEvdW0xR3QydjliVUs3MVhYaThtX09FMnViYW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgT0ADAB MA0GCSqGSIb3DQEBCwUAA4IBAQAjpDHbnoud/E294QLbC9HG4vDYcr2uOrw4SISn U81jdt4RBObB+tCYv71Mx0byz4NzYYyyxcSMiUNi1d2dzQWPL90INi9HBtQxVIPq YEBh0TmCcy4U6x9naXqkQv66i5NJvul3BRK6NJIrxZzTSdxvD2WAfWiTlwr9Zo0p tmnrxxTNKmnMRiXKsI1f9HpmR89Xm5wyPcwzsYvPf44V4zwW7iM60bQOE7h81ujM R3EvlYM9yii/McGan/IwvW/eiHc0FtKrVt/yK7Znx/6OiS78Gnn7L931SVcC6Atp dMcg1nQDKhRn8BeOlR2GIkerAaFg00rVuoQg+ghqJJlVpYaP -----END CERTIFICATE-----Generated at Wed Jan 21 14:30:37 2026 by rpki-client