This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FqWpJ980DZfFy-zRT6V8AX0SOGg.roa File: FqWpJ980DZfFy-zRT6V8AX0SOGg.roa (raw, json) Hash identifier: h6Mxb+kcIDYZqJU42v4hkRSlhuGanUiZue6a7YDATFE= Subject key identifier: 16:A5:A9:27:DF:34:0D:97:C5:CB:EC:D1:4F:A5:7C:01:7D:12:38:68 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019ACB7EFD941731A4421BA979F6961A95B6 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FqWpJ980DZfFy-zRT6V8AX0SOGg.roa Signing time: Fri 28 Nov 2025 17:24:48 +0000 ROA not before: Fri 28 Nov 2025 17:24:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204916 IP address blocks: 2a0d:e244::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:7e:fd:94:17:31:a4:42:1b:a9:79:f6:96:1a:95:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Nov 28 17:24:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=16a5a927df340d97c5cbecd14fa57c017d123868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:b1:a8:b8:a3:88:66:73:fd:dc:4c:fa:2a: df:62:b2:50:17:76:2f:d0:97:ea:1f:40:f1:d9:cb: b1:88:d7:46:e2:e5:18:1d:ff:f4:45:c6:0f:0a:60: 90:c0:7b:44:b3:c0:93:d2:39:0e:9c:cd:d4:88:b0: 7e:d2:60:fb:b1:0d:ba:df:9a:69:1d:0e:c1:02:cf: 4f:d9:c1:9d:f6:b9:ae:98:37:6a:74:84:e9:d0:7e: 50:0b:d8:c5:8d:cf:be:e2:39:a7:97:d0:b3:de:fc: 12:f9:1d:93:f7:83:f7:28:8c:a0:41:9e:11:da:ec: 35:da:12:75:6a:b7:70:f1:0d:2c:c3:08:ba:7f:b1: 3a:55:0c:88:ac:74:36:62:d8:54:08:f8:a4:0c:7d: 37:64:a1:85:69:1d:44:c2:5b:7a:f0:18:ec:3c:8e: f4:14:d0:aa:ce:7e:c9:de:a2:7c:17:95:63:fa:6a: 5b:18:45:45:64:c2:ea:2e:52:ad:5d:4e:86:7f:dd: b5:e5:53:fe:57:cb:63:a4:d9:c6:e3:9e:4d:6d:ca: ec:0a:25:a4:1e:ca:26:18:66:70:f7:1a:a3:ef:e1: 87:8a:f5:2f:41:f5:f2:0b:80:67:49:04:a0:44:57: 47:74:29:a6:5a:69:d0:8f:7a:69:11:84:44:f3:51: b0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A5:A9:27:DF:34:0D:97:C5:CB:EC:D1:4F:A5:7C:01:7D:12:38:68 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FqWpJ980DZfFy-zRT6V8AX0SOGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:e244::/32 Signature Algorithm: sha256WithRSAEncryption 3a:70:aa:7d:1a:53:94:bb:e5:22:08:2e:42:b0:21:3d:15:a9: c7:c9:a7:2d:e9:af:e4:b4:1d:fb:7a:67:39:a7:62:0b:4f:e2: d9:f5:cb:5b:9b:25:99:57:1c:a8:6a:f4:5e:09:fd:a8:c7:51: b2:e1:9a:a3:53:7c:f1:bb:3c:3c:4a:db:27:c6:e3:08:13:3c: aa:8e:f7:72:c4:9c:f2:2e:e9:a6:97:07:80:c4:93:a4:f8:88: 61:bd:8b:b9:99:9b:38:52:49:92:cb:1d:c0:b5:37:f0:3e:31: f1:4d:64:0a:07:f3:a7:7d:03:7d:f9:7d:4e:e0:ed:c6:a6:80: e8:dd:26:8d:15:c1:f9:4e:a8:66:fd:88:97:35:da:a2:68:0e: b4:88:10:b6:9f:15:3f:a1:8a:ec:d0:4e:4d:71:49:37:70:0f: 95:6c:4f:16:a7:1d:cb:57:83:12:11:00:da:86:22:f7:26:c9: 9b:3a:c2:04:6c:9c:e9:be:b6:c4:da:15:8f:82:d8:c7:52:66: 53:d1:f3:fc:d7:64:14:82:d9:d8:31:01:43:09:c8:8e:44:3f: b4:81:43:96:0e:8b:dd:c9:46:6e:60:3e:cb:4b:8b:1f:b8:bc: 86:7f:8f:c9:67:e9:d1:b2:e6:03:c7:a5:9d:39:55:05:82:8f: 54:cc:7f:b4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZrLfv2UFzGkQhupefaWGpW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjUxMTI4MTcyNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmE1YTkyN2RmMzQwZDk3YzVjYmVjZDE0ZmE1N2MwMTdkMTIzODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1texqLijiGZz/dxM+irfYrJQF3Yv 0JfqH0Dx2cuxiNdG4uUYHf/0RcYPCmCQwHtEs8CT0jkOnM3UiLB+0mD7sQ2635pp HQ7BAs9P2cGd9rmumDdqdITp0H5QC9jFjc++4jmnl9Cz3vwS+R2T94P3KIygQZ4R 2uw12hJ1ardw8Q0swwi6f7E6VQyIrHQ2YthUCPikDH03ZKGFaR1Ewlt68BjsPI70 FNCqzn7J3qJ8F5Vj+mpbGEVFZMLqLlKtXU6Gf9215VP+V8tjpNnG455NbcrsCiWk HsomGGZw9xqj7+GHivUvQfXyC4BnSQSgRFdHdCmmWmnQj3ppEYRE81GwewIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBalqSffNA2Xxcvs0U+lfAF9EjhoMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvRnFXcEo5ODBEWmZGeS16UlQ2VjhBWDBTT0dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg3iRDAN BgkqhkiG9w0BAQsFAAOCAQEAOnCqfRpTlLvlIgguQrAhPRWpx8mnLemv5LQd+3pn OadiC0/i2fXLW5slmVccqGr0Xgn9qMdRsuGao1N88bs8PErbJ8bjCBM8qo73csSc 8i7pppcHgMSTpPiIYb2LuZmbOFJJkssdwLU38D4x8U1kCgfzp30Dffl9TuDtxqaA 6N0mjRXB+U6oZv2IlzXaomgOtIgQtp8VP6GK7NBOTXFJN3APlWxPFqcdy1eDEhEA 2oYi9ybJmzrCBGyc6b62xNoVj4LYx1JmU9Hz/NdkFILZ2DEBQwnIjkQ/tIFDlg6L 3clGbmA+y0uLH7i8hn+PyWfp0bLmA8elnTlVBYKPVMx/tA== -----END CERTIFICATE-----Generated at Fri Dec 5 13:22:59 2025 by rpki-client