This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/Fp4UEgpqLjFgWOhGK_G7aio72NU.roa File: Fp4UEgpqLjFgWOhGK_G7aio72NU.roa (raw, json) Hash identifier: YSrfGKlIuE0FqJ0gu+vKGaGUCKaaLtU+2IoC/r0Bjwg= Subject key identifier: 16:9E:14:12:0A:6A:2E:31:60:58:E8:46:2B:F1:BB:6A:2A:3B:D8:D5 Certificate issuer: /CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92 Certificate serial: 019B7C12A9B1601EA4AF253F58B0EFB8D977 Authority key identifier: 0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/Fp4UEgpqLjFgWOhGK_G7aio72NU.roa Signing time: Fri 02 Jan 2026 00:19:16 +0000 ROA not before: Fri 02 Jan 2026 00:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204946 IP address blocks: 2001:678:b0c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.mft rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a9:b1:60:1e:a4:af:25:3f:58:b0:ef:b8:d9:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a108a28c707b0e5c2c2e6c2137d45879114bb92 Validity Not Before: Jan 2 00:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=169e14120a6a2e316058e8462bf1bb6a2a3bd8d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d1:ec:ac:e8:9b:ac:c7:df:66:21:32:7b:77: b4:2a:dc:3d:9f:d5:0d:a8:e6:8f:cd:57:fe:fb:2d: e2:05:4c:c7:a9:72:ae:76:1e:19:9e:c2:7e:9f:ae: 0f:6b:4a:20:84:94:c5:68:91:c9:2a:02:f8:47:5f: 7f:9b:86:93:22:9b:c2:aa:fc:b7:9e:4e:df:4f:0d: 9c:e8:15:f4:ca:19:3a:d5:f6:a0:50:3a:fd:b9:c4: 0c:00:6d:ca:97:30:ee:ff:02:41:d8:91:d0:3a:aa: 1a:83:66:33:d6:ec:eb:ab:3f:cb:48:60:10:2d:63: 2a:51:a7:e3:ed:5c:f0:8b:c7:0e:76:7e:0a:e5:1f: 35:2a:ad:97:43:e3:cf:97:58:ac:13:98:91:8c:d9: a9:7b:7b:ef:3f:c3:f3:f0:ba:96:db:07:77:bb:34: 16:8b:fa:a1:ac:71:bb:53:f4:12:0e:4e:98:67:cc: 58:93:da:e7:bb:85:2a:14:dd:31:b3:9c:2b:74:a4: 20:ce:65:e3:cb:7e:e6:fd:47:45:2a:db:a3:1f:5b: cb:62:15:40:0a:41:31:7d:5b:16:fc:7c:51:a4:3f: f6:3c:bc:13:52:4b:f6:11:cf:cb:76:e0:4f:b3:41: 23:0d:ff:09:36:35:20:7b:1f:45:d0:ab:3b:4b:f4: 2d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9E:14:12:0A:6A:2E:31:60:58:E8:46:2B:F1:BB:6A:2A:3B:D8:D5 X509v3 Authority Key Identifier: keyid:0A:10:8A:28:C7:07:B0:E5:C2:C2:E6:C2:13:7D:45:87:91:14:BB:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ChCKKMcHsOXCwubCE31Fh5EUu5I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/Fp4UEgpqLjFgWOhGK_G7aio72NU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/139d23-802d-4224-832e-1f8581421760/1/ChCKKMcHsOXCwubCE31Fh5EUu5I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:b0c::/48 Signature Algorithm: sha256WithRSAEncryption 6c:57:52:10:dd:58:ae:78:4a:72:2d:a9:95:34:fa:cc:7d:39: 66:c8:11:81:47:ec:96:3f:7c:07:43:76:49:20:3f:29:0d:df: be:d5:be:f5:91:da:54:ab:8d:45:53:34:9e:be:0e:39:9f:6f: ff:8f:b2:05:b3:79:85:cf:46:e8:49:df:a6:9d:8e:b7:68:b3: 43:ce:18:57:2f:7f:d9:e6:b7:5f:cf:ca:93:97:c8:b2:a3:76: 7b:32:31:ba:45:30:14:98:d1:f1:36:9a:04:41:9a:e0:28:43: f3:a0:90:56:a7:b3:a4:77:4d:22:ba:4c:de:f0:c0:49:85:a4: 8c:4f:bb:91:a0:5b:1f:6a:8d:2c:94:1d:86:02:51:99:66:15: 85:21:7f:7e:05:40:30:9e:e3:30:7a:ed:e5:d4:ed:93:dc:02: 19:dd:f3:56:de:f5:3e:16:7c:6f:67:9d:b2:05:9e:fb:e7:86: 57:8a:10:cd:61:bf:e4:87:22:88:b3:c2:f4:ca:95:d7:dc:57: 3f:22:c2:a9:b0:2d:4d:b0:92:81:27:13:a1:80:62:8b:28:8e: f6:41:5c:c9:c9:3d:7f:1f:cf:7b:71:3a:b6:01:bb:60:1f:ba: 29:be:cd:11:c1:4f:45:4c:e3:d3:30:7d:ff:25:7b:7e:9a:c6: 4c:36:3e:7d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EqmxYB6kryU/WLDvuNl3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMTA4YTI4YzcwN2IwZTVjMmMyZTZjMjEzN2Q0NTg3OTEx NGJiOTIwHhcNMjYwMTAyMDAxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjllMTQxMjBhNmEyZTMxNjA1OGU4NDYyYmYxYmI2YTJhM2JkOGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dHsrOibrMffZiEye3e0Ktw9n9UN qOaPzVf++y3iBUzHqXKudh4ZnsJ+n64Pa0oghJTFaJHJKgL4R19/m4aTIpvCqvy3 nk7fTw2c6BX0yhk61fagUDr9ucQMAG3KlzDu/wJB2JHQOqoag2Yz1uzrqz/LSGAQ LWMqUafj7Vzwi8cOdn4K5R81Kq2XQ+PPl1isE5iRjNmpe3vvP8Pz8LqW2wd3uzQW i/qhrHG7U/QSDk6YZ8xYk9rnu4UqFN0xs5wrdKQgzmXjy37m/UdFKtujH1vLYhVA CkExfVsW/HxRpD/2PLwTUkv2Ec/LduBPs0EjDf8JNjUgex9F0Ks7S/QtlQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBaeFBIKai4xYFjoRivxu2oqO9jVMB8GA1UdIwQY MBaAFAoQiijHB7DlwsLmwhN9RYeRFLuSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xMzlkMjMtODAyZC00MjI0LTgzMmUt MWY4NTgxNDIxNzYwLzEvRnA0VUVncHFMakZnV09oR0tfRzdhaW83Mk5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xMzlkMjMtODAyZC00MjI0LTgzMmUtMWY4NTgxNDIxNzYw LzEvQ2hDS0tNY0hzT1hDd3ViQ0UzMUZoNUVVdTVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAsM MA0GCSqGSIb3DQEBCwUAA4IBAQBsV1IQ3ViueEpyLamVNPrMfTlmyBGBR+yWP3wH Q3ZJID8pDd++1b71kdpUq41FUzSevg45n2//j7IFs3mFz0boSd+mnY63aLNDzhhX L3/Z5rdfz8qTl8iyo3Z7MjG6RTAUmNHxNpoEQZrgKEPzoJBWp7Okd00iukze8MBJ haSMT7uRoFsfao0slB2GAlGZZhWFIX9+BUAwnuMweu3l1O2T3AIZ3fNW3vU+Fnxv Z52yBZ7754ZXihDNYb/khyKIs8L0ypXX3Fc/IsKpsC1NsJKBJxOhgGKLKI72QVzJ yT1/H897cTq2AbtgH7opvs0RwU9FTOPTMH3/JXt+msZMNj59 -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:27 2026 by rpki-client