This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/Fd5umUhcoCCaJGYibKCvP6v4FDo.roa File: Fd5umUhcoCCaJGYibKCvP6v4FDo.roa (raw, json) Hash identifier: aX4f/4JkLGsDLe+rXVPfGB2prsQe4LXC6c7f8OmsATA= Subject key identifier: 15:DE:6E:99:48:5C:A0:20:9A:24:66:22:6C:A0:AF:3F:AB:F8:14:3A Certificate issuer: /CN=71601c0b8b13cc121017f6d25117ac1fd0664344 Certificate serial: 019B791131AC4ADE164A517B7818E2468F52 Authority key identifier: 71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/Fd5umUhcoCCaJGYibKCvP6v4FDo.roa Signing time: Thu 01 Jan 2026 10:18:48 +0000 ROA not before: Thu 01 Jan 2026 10:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15557 IP address blocks: 2a00:b180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 22:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:31:ac:4a:de:16:4a:51:7b:78:18:e2:46:8f:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71601c0b8b13cc121017f6d25117ac1fd0664344 Validity Not Before: Jan 1 10:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15de6e99485ca0209a2466226ca0af3fabf8143a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:20:ef:08:3c:50:fa:21:53:5f:f3:fe:f6: bb:df:ca:22:6f:2d:08:54:56:39:32:dc:e1:9c:eb: 71:fc:c8:d9:fe:1b:40:b7:47:78:f3:1a:df:69:9b: 96:78:c0:ec:ef:55:94:4f:94:b2:61:91:b9:3f:ea: 49:b5:c4:af:2d:08:2b:ed:be:8b:39:a8:eb:85:91: c7:7f:1f:f9:e8:8f:70:07:be:dd:07:11:2b:1b:11: 39:df:b4:bc:45:4d:f9:aa:7b:1d:75:ae:ef:f5:ba: ad:f3:a0:dd:ed:50:32:00:13:55:61:1e:af:b0:a2: f6:70:85:6c:64:1c:94:0b:58:e9:2a:bb:6c:82:48: 19:cb:c9:a2:30:9d:c6:cf:04:ae:cc:d6:ff:de:66: e6:97:1b:04:5f:a9:b6:38:1b:9b:e2:f8:98:7b:c2: 3e:ad:96:1d:dd:23:69:9c:d6:bd:ee:05:64:29:d4: 9e:bd:bd:1d:be:87:bc:ee:dc:14:88:23:b4:36:00: fa:47:97:14:54:d3:bf:44:5a:1d:1f:fb:98:84:ff: dd:50:3d:ad:ba:16:9a:12:0b:1a:e8:51:64:1c:be: 56:e7:1a:15:56:8d:b1:ff:c1:42:2f:c9:62:dc:be: 0a:be:f4:ea:61:14:f9:3e:f4:1e:31:70:56:3f:48: 4c:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DE:6E:99:48:5C:A0:20:9A:24:66:22:6C:A0:AF:3F:AB:F8:14:3A X509v3 Authority Key Identifier: keyid:71:60:1C:0B:8B:13:CC:12:10:17:F6:D2:51:17:AC:1F:D0:66:43:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAcC4sTzBIQF_bSUResH9BmQ0Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/Fd5umUhcoCCaJGYibKCvP6v4FDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d5a49a-4f1a-4961-9c1f-76b0325c3b07/1/cWAcC4sTzBIQF_bSUResH9BmQ0Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:b180::/32 Signature Algorithm: sha256WithRSAEncryption e2:85:83:43:bd:22:9b:5c:01:84:b2:31:e1:d5:eb:5f:28:7a: 08:b6:79:80:d3:29:30:55:b4:f5:d6:fc:68:6d:8d:e2:d6:b9: 73:82:06:fe:0f:7f:af:fa:1e:2d:3d:85:8a:cd:8a:11:83:1e: 30:04:6b:fe:da:06:8f:7e:e0:16:7f:8c:95:51:74:df:25:83: 40:7b:62:4a:2d:27:d0:02:18:81:8d:9a:b9:0f:1c:ee:8a:94: a8:6f:de:0e:5a:fa:fa:74:5f:17:f2:7a:95:f2:24:3e:77:43: a6:88:9c:ce:d8:39:cb:d3:33:db:36:76:41:e7:1c:92:b8:75: 93:d3:84:16:40:d3:25:c7:60:87:f2:0e:a2:ed:d0:be:66:2e: d6:3c:d3:1f:72:f6:49:2e:e5:0d:26:91:c8:f1:f9:3e:fb:ec: 6c:ff:5d:50:0b:5b:13:10:27:7b:9b:6c:7b:e2:96:60:4e:5c: 3f:1d:ef:f1:2b:67:f4:57:9b:f5:7c:fa:7e:0d:1b:d4:65:7b: 7c:5c:f9:c7:63:ef:82:c4:53:cf:46:21:d8:41:d3:79:58:72: 2d:90:50:5d:2d:87:63:08:85:0b:d5:b0:ed:11:e1:22:70:97: ed:7c:7e:be:7b:b4:5a:90:d7:2b:4a:1e:03:1a:49:21:51:8a: 8c:ac:67:4e -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5ETGsSt4WSlF7eBjiRo9SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjAxYzBiOGIxM2NjMTIxMDE3ZjZkMjUxMTdhYzFmZDA2 NjQzNDQwHhcNMjYwMTAxMTAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWRlNmU5OTQ4NWNhMDIwOWEyNDY2MjI2Y2EwYWYzZmFiZjgxNDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCIg7wg8UPohU1/z/va738oiby0I VFY5MtzhnOtx/MjZ/htAt0d48xrfaZuWeMDs71WUT5SyYZG5P+pJtcSvLQgr7b6L OajrhZHHfx/56I9wB77dBxErGxE537S8RU35qnsdda7v9bqt86Dd7VAyABNVYR6v sKL2cIVsZByUC1jpKrtsgkgZy8miMJ3GzwSuzNb/3mbmlxsEX6m2OBub4viYe8I+ rZYd3SNpnNa97gVkKdSevb0dvoe87twUiCO0NgD6R5cUVNO/RFodH/uYhP/dUD2t uhaaEgsa6FFkHL5W5xoVVo2x/8FCL8li3L4KvvTqYRT5PvQeMXBWP0hM0QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBXebplIXKAgmiRmImygrz+r+BQ6MB8GA1UdIwQY MBaAFHFgHAuLE8wSEBf20lEXrB/QZkNEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYt NzZiMDMyNWMzYjA3LzEvRmQ1dW1VaGNvQ0NhSkdZaWJLQ3ZQNnY0RkRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9kNWE0OWEtNGYxYS00OTYxLTljMWYtNzZiMDMyNWMzYjA3 LzEvY1dBY0M0c1R6QklRRl9iU1VSZXNIOUJtUTBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgCxgDAN BgkqhkiG9w0BAQsFAAOCAQEA4oWDQ70im1wBhLIx4dXrXyh6CLZ5gNMpMFW09db8 aG2N4ta5c4IG/g9/r/oeLT2Fis2KEYMeMARr/toGj37gFn+MlVF03yWDQHtiSi0n 0AIYgY2auQ8c7oqUqG/eDlr6+nRfF/J6lfIkPndDpoicztg5y9Mz2zZ2Qecckrh1 k9OEFkDTJcdgh/IOou3QvmYu1jzTH3L2SS7lDSaRyPH5PvvsbP9dUAtbExAne5ts e+KWYE5cPx3v8Stn9Feb9Xz6fg0b1GV7fFz5x2PvgsRTz0Yh2EHTeVhyLZBQXS2H YwiFC9Ww7RHhInCX7Xx+vnu0WpDXK0oeAxpJIVGKjKxnTg== -----END CERTIFICATE-----Generated at Wed Jan 21 06:06:36 2026 by rpki-client