This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fPb4IWfqx87xK4vPOTk2sKtdjvs.roa File: fPb4IWfqx87xK4vPOTk2sKtdjvs.roa (raw, json) Hash identifier: Ib7CmqRqhAdYpaCwd20ioCPM3NGXEjKcO0N70PfKiVk= Subject key identifier: 7C:F6:F8:21:67:EA:C7:CE:F1:2B:8B:CF:39:39:36:B0:AB:5D:8E:FB Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Certificate serial: 019B797EBEFC336BD8F171AF28A2025AEEE8 Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fPb4IWfqx87xK4vPOTk2sKtdjvs.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214871 IP address blocks: 2a0e:aa06:520::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:be:fc:33:6b:d8:f1:71:af:28:a2:02:5a:ee:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cf6f82167eac7cef12b8bcf393936b0ab5d8efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:a6:cb:16:a1:40:74:29:d2:00:2b:64:a0: 45:f8:ec:22:76:c8:d1:57:ce:b6:39:f1:35:03:12: 35:5f:09:4f:51:1c:e6:ff:1e:59:10:47:0b:62:fd: 40:41:91:a4:68:6b:04:d4:1b:21:db:8e:a1:66:48: a8:66:9a:cd:c6:e8:d4:2f:4e:0a:ee:29:0f:c7:9b: aa:4b:a2:0e:84:04:98:ce:a1:7b:88:0f:ec:16:a5: 60:25:cf:1f:aa:a9:83:72:26:e9:ce:25:ba:fb:23: fa:9d:1b:fd:96:8a:a5:38:08:43:d1:45:36:53:ca: 52:02:6d:12:d2:18:8a:8b:09:e5:b8:1f:60:c1:18: 36:7d:f7:c8:a6:59:ea:31:fd:a9:69:1a:f1:e1:08: be:58:a3:1f:1b:ae:46:28:a6:f0:d0:4e:71:fe:7f: 5e:34:2b:87:7e:70:f3:3b:fe:d7:76:a6:fd:a0:6e: 46:11:37:d6:26:45:14:df:8b:df:ae:1a:9b:54:8e: c7:64:df:5e:32:a6:b3:14:8c:b7:30:06:e4:1f:05: 6c:c7:c5:f3:3f:a8:9b:00:be:97:89:d6:08:af:30: 19:41:7e:91:ce:69:56:72:cd:fc:59:2d:89:d7:1e: fe:b5:2c:71:8b:01:9e:03:70:4f:2a:72:63:46:23: 80:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F6:F8:21:67:EA:C7:CE:F1:2B:8B:CF:39:39:36:B0:AB:5D:8E:FB X509v3 Authority Key Identifier: keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/fPb4IWfqx87xK4vPOTk2sKtdjvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:aa06:520::/44 Signature Algorithm: sha256WithRSAEncryption 18:82:04:d2:c4:bd:24:b2:bd:9e:17:30:24:1b:a6:0c:ef:d0: b4:5f:69:cc:8d:b0:4d:7e:8d:77:ac:eb:5a:11:ee:30:b4:c3: 05:72:e4:6c:27:cc:79:b4:b8:18:74:c3:e2:55:b1:8a:df:1a: ce:be:18:3c:24:fc:a8:5c:08:f4:33:cc:b1:00:a6:ca:00:a1: 2a:cc:6c:50:a1:b1:88:63:f9:db:8d:56:4f:e1:58:cd:2f:22: 86:be:25:39:92:a9:ea:8d:3f:37:36:53:95:e2:5f:7c:1c:ee: 7b:e4:74:0e:0e:ff:b3:34:d9:da:4c:17:7e:79:aa:6a:fb:dc: 06:8f:c8:2f:05:6c:51:01:d9:90:73:b8:75:7d:99:aa:21:06: 9c:dc:34:85:4b:45:44:96:d2:3a:b8:25:d8:b0:a8:f0:27:b3: 28:6c:49:3d:e1:8b:44:a7:cb:01:e1:20:65:77:e7:d2:ed:04: a5:d3:6d:2a:68:96:77:c5:1b:55:ef:dc:21:1c:2c:48:15:8e: 98:f8:7d:af:63:ac:e1:ea:05:9d:06:bd:0d:7a:a6:84:ae:d2: 93:f0:3d:f9:94:55:94:d4:87:09:dc:2b:e6:f8:41:d0:e4:73: 0c:f0:19:0f:7a:d5:57:9f:1c:77:d7:5e:86:b7:7f:84:d9:aa: 8b:dc:c2:9d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5fr78M2vY8XGvKKICWu7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0 ZWYzYWEwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2Y2ZjgyMTY3ZWFjN2NlZjEyYjhiY2YzOTM5MzZiMGFiNWQ4ZWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw52myxahQHQp0gArZKBF+OwidsjR V862OfE1AxI1XwlPURzm/x5ZEEcLYv1AQZGkaGsE1Bsh246hZkioZprNxujUL04K 7ikPx5uqS6IOhASYzqF7iA/sFqVgJc8fqqmDcibpziW6+yP6nRv9loqlOAhD0UU2 U8pSAm0S0hiKiwnluB9gwRg2fffIplnqMf2paRrx4Qi+WKMfG65GKKbw0E5x/n9e NCuHfnDzO/7Xdqb9oG5GETfWJkUU34vfrhqbVI7HZN9eMqazFIy3MAbkHwVsx8Xz P6ibAL6XidYIrzAZQX6RzmlWcs38WS2J1x7+tSxxiwGeA3BPKnJjRiOAPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHz2+CFn6sfO8SuLzzk5NrCrXY77MB8GA1UdIwQY MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt YTU0MWQxYmNlZTE5LzEvZlBiNElXZnF4ODd4SzR2UE9UazJzS3RkanZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5 LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qBgUg MA0GCSqGSIb3DQEBCwUAA4IBAQAYggTSxL0ksr2eFzAkG6YM79C0X2nMjbBNfo13 rOtaEe4wtMMFcuRsJ8x5tLgYdMPiVbGK3xrOvhg8JPyoXAj0M8yxAKbKAKEqzGxQ obGIY/nbjVZP4VjNLyKGviU5kqnqjT83NlOV4l98HO575HQODv+zNNnaTBd+eapq +9wGj8gvBWxRAdmQc7h1fZmqIQac3DSFS0VEltI6uCXYsKjwJ7MobEk94YtEp8sB 4SBld+fS7QSl020qaJZ3xRtV79whHCxIFY6Y+H2vY6zh6gWdBr0NeqaErtKT8D35 lFWU1IcJ3Cvm+EHQ5HMM8BkPetVXnxx3116Gt3+E2aqL3MKd -----END CERTIFICATE-----Generated at Tue Jan 6 21:31:20 2026 by rpki-client