This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa File: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (raw, json) Hash identifier: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk= Subject key identifier: 7D:1C:6F:71:33:3A:66:CB:6D:1F:01:74:58:CD:50:FB:20:72:13:60 Certificate issuer: /CN=836462c62c7f63d2f5d787a701d779ab696e2236 Certificate serial: 019B7DCA6B84D26386D587FEDD2490698635 Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa Signing time: Fri 02 Jan 2026 08:19:36 +0000 ROA not before: Fri 02 Jan 2026 08:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 2a0d:5980:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:6b:84:d2:63:86:d5:87:fe:dd:24:90:69:86:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236 Validity Not Before: Jan 2 08:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d1c6f71333a66cb6d1f017458cd50fb20721360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bd:26:81:65:32:a3:1f:fa:0b:4b:0c:7e:b2: 86:51:39:99:eb:2a:dd:bf:eb:de:cb:7c:26:ad:78: 20:c9:e2:e6:c4:be:2f:6a:34:df:d6:fc:c4:44:7c: 0d:49:0f:79:2b:bc:97:af:ad:58:21:c7:59:07:a7: 60:47:0b:eb:b7:7a:c3:dd:d2:ad:ac:3e:e6:4a:ea: 17:90:5a:15:e4:39:da:32:10:8e:c8:63:54:5d:8c: 4e:87:33:d1:d0:47:19:d9:2b:8b:fc:cc:59:6a:fa: cf:3b:cf:91:72:d6:9a:d6:88:bd:77:bf:4a:10:d7: f4:dc:c2:80:72:26:42:84:91:57:fb:be:dc:2d:e4: 62:02:08:db:be:c0:04:34:01:5e:f9:97:ec:38:0d: 62:dd:24:66:a8:57:37:20:17:bb:7b:19:68:0b:80: 27:e9:78:92:b9:c8:c9:36:e9:97:a5:25:aa:49:0b: 6c:b2:be:86:79:22:91:5a:c2:3e:17:2a:20:30:0b: 46:bb:a3:21:68:67:82:66:7d:5e:94:63:e6:3f:b4: 4f:73:09:db:96:35:ce:ce:6c:e7:8f:e3:18:51:43: 47:92:9f:1e:1a:84:0e:77:9b:e3:24:0e:c4:2c:e0: 18:26:c7:05:0d:57:e6:5d:44:d5:da:11:63:f6:35: d6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1C:6F:71:33:3A:66:CB:6D:1F:01:74:58:CD:50:FB:20:72:13:60 X509v3 Authority Key Identifier: keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:5980:100::/48 Signature Algorithm: sha256WithRSAEncryption 45:69:c7:dd:94:e6:cf:f8:8f:8e:fc:60:b8:b9:da:ac:89:ba: 51:76:7d:f0:05:8e:17:34:24:47:e2:d5:1c:a6:e0:a3:97:2d: ff:24:9f:5b:25:e8:d1:5b:7f:8c:b9:c5:76:c7:59:e9:cc:67: 52:ce:a7:3a:41:1a:b2:4f:5c:51:71:4d:be:bf:a3:13:01:2c: db:c5:da:e2:6a:d7:82:26:07:49:83:e6:34:b4:a0:00:12:45: db:17:4e:35:65:68:b7:de:1d:2e:77:9a:0a:bb:2a:fb:3c:66: 31:d1:30:e2:49:d8:09:39:fb:fd:c6:7e:7e:4f:6b:be:3b:07: f4:5b:09:66:46:93:7e:5b:e5:ce:75:e7:c3:32:62:14:2e:fe: 4c:32:74:68:cf:8c:ab:49:bc:a3:fd:26:93:e6:99:61:e4:70: c6:44:5f:73:37:10:e1:2e:c1:e9:9e:4d:77:cf:51:aa:54:1c: 60:c7:6c:80:bc:da:70:26:4b:d9:4c:95:0a:b4:dd:71:17:54: 50:ee:2c:41:53:08:1b:58:17:dc:c7:35:ff:e3:73:83:7b:32: 32:fb:2b:93:66:12:09:10:44:13:89:a0:93:5e:fe:b4:6b:99: de:26:ba:39:d8:0d:99:32:1a:a2:d4:27:ad:05:fb:1b:81:7b: 8e:5b:bd:e9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9ymuE0mOG1Yf+3SSQaYY1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjQ2MmM2MmM3ZjYzZDJmNWQ3ODdhNzAxZDc3OWFiNjk2 ZTIyMzYwHhcNMjYwMTAyMDgxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDFjNmY3MTMzM2E2NmNiNmQxZjAxNzQ1OGNkNTBmYjIwNzIxMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo70mgWUyox/6C0sMfrKGUTmZ6yrd v+vey3wmrXggyeLmxL4vajTf1vzERHwNSQ95K7yXr61YIcdZB6dgRwvrt3rD3dKt rD7mSuoXkFoV5DnaMhCOyGNUXYxOhzPR0EcZ2SuL/MxZavrPO8+Rctaa1oi9d79K ENf03MKAciZChJFX+77cLeRiAgjbvsAENAFe+ZfsOA1i3SRmqFc3IBe7exloC4An 6XiSucjJNumXpSWqSQtssr6GeSKRWsI+FyogMAtGu6MhaGeCZn1elGPmP7RPcwnb ljXOzmznj+MYUUNHkp8eGoQOd5vjJA7ELOAYJscFDVfmXUTV2hFj9jXWRwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH0cb3EzOmbLbR8BdFjNUPsgchNgMB8GA1UdIwQY MBaAFINkYsYsf2PS9deHpwHXeatpbiI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMt ZjkxMGU1MTc2YjVlLzEvZlJ4dmNUTTZac3R0SHdGMFdNMVEteUJ5RTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMtZjkxMGU1MTc2YjVl LzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1ZgAEA MA0GCSqGSIb3DQEBCwUAA4IBAQBFacfdlObP+I+O/GC4udqsibpRdn3wBY4XNCRH 4tUcpuCjly3/JJ9bJejRW3+MucV2x1npzGdSzqc6QRqyT1xRcU2+v6MTASzbxdri ateCJgdJg+Y0tKAAEkXbF041ZWi33h0ud5oKuyr7PGYx0TDiSdgJOfv9xn5+T2u+ Owf0WwlmRpN+W+XOdefDMmIULv5MMnRoz4yrSbyj/SaT5plh5HDGRF9zNxDhLsHp nk13z1GqVBxgx2yAvNpwJkvZTJUKtN1xF1RQ7ixBUwgbWBfcxzX/43ODezIy+yuT ZhIJEEQTiaCTXv60a5neJro52A2ZMhqi1CetBfsbgXuOW73p -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:10 2026 by rpki-client