This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FainGrmp-OaBdprpjh9D_tuxW58.roa File: FainGrmp-OaBdprpjh9D_tuxW58.roa (raw, json) Hash identifier: krlJKHLVuzm3cL5ukp/zexl81EaiTW+xpRPlujR2JPM= Subject key identifier: 15:A8:A7:1A:B9:A9:F8:E6:81:76:9A:E9:8E:1F:43:FE:DB:B1:5B:9F Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D49499F4A91203B7871E959D9B4B9 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FainGrmp-OaBdprpjh9D_tuxW58.roa Signing time: Fri 02 Jan 2026 06:20:24 +0000 ROA not before: Fri 02 Jan 2026 06:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212120 IP address blocks: 2a0e:b107:eb0::/48 maxlen: 48 2a0e:b107:eb1::/48 maxlen: 48 2a0e:b107:ebf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:49:49:9f:4a:91:20:3b:78:71:e9:59:d9:b4:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15a8a71ab9a9f8e681769ae98e1f43fedbb15b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f9:ba:99:cc:ea:d6:01:7a:e8:3f:e4:be:56: ce:7b:42:ab:ca:0c:ea:f7:c1:6d:ff:56:c4:16:8b: 7e:a7:0f:5e:1b:32:c6:69:13:b3:01:78:56:2d:21: 31:ef:55:f2:c2:93:eb:44:1c:d7:d6:d8:76:3c:3e: 85:80:74:14:f9:3a:90:fa:a9:af:78:cb:d8:df:60: 8f:8c:9a:6e:6e:dc:b3:30:4e:ad:99:a7:1a:48:2f: 86:cf:43:40:b5:eb:cb:0d:f8:38:4b:6c:c0:59:65: 2e:31:74:5a:4f:6b:cf:8c:ba:7f:9a:b5:69:db:24: 03:8c:81:84:e3:15:71:c9:cc:b0:f9:fc:75:fe:bc: 44:9f:f8:d7:bb:29:64:b8:e2:a9:0d:ef:24:90:6f: 40:c9:ba:51:4d:49:c7:24:ba:aa:e4:f8:9f:2a:ae: 72:ec:cd:b9:15:02:42:3b:39:6b:97:cd:4d:ec:4e: 58:d3:8f:3c:30:9c:63:b8:b7:9a:56:c9:f6:db:ce: 67:c9:10:1d:82:d5:e1:f5:6c:5e:e7:9e:5f:7f:a4: 87:de:3b:80:52:3f:76:26:f0:72:24:8f:67:a3:31: e2:68:08:bc:1f:b4:a7:6c:5b:6a:0c:5f:7a:a7:52: 54:3e:db:67:d1:95:e3:e9:43:32:5a:c7:5f:32:1d: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A8:A7:1A:B9:A9:F8:E6:81:76:9A:E9:8E:1F:43:FE:DB:B1:5B:9F X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/FainGrmp-OaBdprpjh9D_tuxW58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:eb0::/47 2a0e:b107:ebf::/48 Signature Algorithm: sha256WithRSAEncryption b6:df:2a:cc:87:b0:28:d2:e6:14:f4:c4:d8:29:63:51:c9:e0: 0b:91:b8:0c:ed:0a:d7:73:2f:44:78:ce:43:b1:58:9d:7b:59: e5:16:a7:4c:e3:62:0a:e5:2a:d2:2b:47:75:12:63:ac:2d:ea: 25:18:34:0c:64:8e:14:bd:9f:ef:af:30:da:42:36:89:f3:de: ec:17:90:10:67:23:f1:23:df:89:5a:a1:04:ea:2f:78:91:12: 5f:05:c3:f5:1a:b4:5a:13:db:8b:d6:f9:d1:ff:4b:e6:bc:73: 6c:63:aa:a4:f9:94:30:fe:07:73:7f:54:03:8f:9d:3f:6d:38: 55:93:a5:a9:a9:00:45:e3:3b:b2:d5:42:93:86:29:d3:d7:47: f3:70:af:66:8d:e3:56:ec:ea:91:fd:00:c7:ef:d4:10:b0:e3: f2:78:42:bf:cc:17:9b:09:aa:06:5a:3f:eb:d3:ba:0a:ac:98: d4:95:a5:b8:f5:e4:79:9d:1c:69:54:25:70:1f:99:54:d7:45: 7b:3f:f0:a6:91:cc:08:cd:f6:c1:c8:e9:e7:b7:78:9f:89:7d: 95:6c:d4:20:b7:e8:5c:77:02:d1:c1:74:01:11:88:4b:f7:2f: c2:8f:d4:0c:e3:c9:52:f4:5e:64:24:74:db:76:92:33:0a:2e: 24:80:44:fb -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XUlJn0qRIDt4celZ2bS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWE4YTcxYWI5YTlmOGU2ODE3NjlhZTk4ZTFmNDNmZWRiYjE1YjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPm6mczq1gF66D/kvlbOe0Krygzq 98Ft/1bEFot+pw9eGzLGaROzAXhWLSEx71XywpPrRBzX1th2PD6FgHQU+TqQ+qmv eMvY32CPjJpubtyzME6tmacaSC+Gz0NAtevLDfg4S2zAWWUuMXRaT2vPjLp/mrVp 2yQDjIGE4xVxycyw+fx1/rxEn/jXuylkuOKpDe8kkG9AybpRTUnHJLqq5PifKq5y 7M25FQJCOzlrl81N7E5Y0488MJxjuLeaVsn2285nyRAdgtXh9Wxe555ff6SH3juA Uj92JvByJI9nozHiaAi8H7SnbFtqDF96p1JUPttn0ZXj6UMyWsdfMh0DAQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBWopxq5qfjmgXaa6Y4fQ/7bsVufMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvRmFpbkdybXAtT2FCZHBycGpoOURfdHV4VzU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBKg6xBw6w AwcAKg6xBw6/MA0GCSqGSIb3DQEBCwUAA4IBAQC23yrMh7Ao0uYU9MTYKWNRyeAL kbgM7QrXcy9EeM5DsVide1nlFqdM42IK5SrSK0d1EmOsLeolGDQMZI4UvZ/vrzDa QjaJ897sF5AQZyPxI9+JWqEE6i94kRJfBcP1GrRaE9uL1vnR/0vmvHNsY6qk+ZQw /gdzf1QDj50/bThVk6WpqQBF4zuy1UKThinT10fzcK9mjeNW7OqR/QDH79QQsOPy eEK/zBebCaoGWj/r07oKrJjUlaW49eR5nRxpVCVwH5lU10V7P/CmkcwIzfbByOnn t3ifiX2VbNQgt+hcdwLRwXQBEYhL9y/Cj9QM48lS9F5kJHTbdpIzCi4kgET7 -----END CERTIFICATE-----Generated at Fri Jan 9 13:11:50 2026 by rpki-client