This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/FiH_Dv9KRA9mEtdQJUxihReFF1c.roa File: FiH_Dv9KRA9mEtdQJUxihReFF1c.roa (raw, json) Hash identifier: LloMKXL1qJtQXFFrKg1pWHguOKrDmgj1zA46ZODHmzI= Subject key identifier: 16:21:FF:0E:FF:4A:44:0F:66:12:D7:50:25:4C:62:85:17:85:17:57 Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Certificate serial: 019B7CED2420DD028E7EF791429FC50818F4 Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/FiH_Dv9KRA9mEtdQJUxihReFF1c.roa Signing time: Fri 02 Jan 2026 04:17:54 +0000 ROA not before: Fri 02 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a01:7e00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 07:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:24:20:dd:02:8e:7e:f7:91:42:9f:c5:08:18:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Validity Not Before: Jan 2 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1621ff0eff4a440f6612d750254c628517851757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:04:ba:54:b2:90:7a:64:ad:ee:bb:14:84:21: 7e:8b:24:8d:af:0d:9e:23:0d:17:ab:20:c2:ce:2a: dd:55:ef:32:3a:e9:fb:73:57:00:5e:c4:fc:b6:a9: b6:f7:65:e6:df:6f:2f:96:ea:42:25:73:54:67:a2: 4b:ac:e5:4f:b2:df:b1:6b:04:45:29:5b:e3:1c:e5: 64:4e:4d:df:a7:de:a4:22:b3:d0:00:a1:17:6e:a3: f7:32:ed:c5:b4:bd:8b:4e:6c:83:4d:f0:f1:e7:45: 2f:31:0a:d8:86:3b:88:33:e1:f0:1e:e1:53:5b:8e: 67:8b:96:4e:e0:33:63:7f:34:9f:b8:b5:a2:f3:6d: 42:be:d7:25:45:3d:34:fe:8c:70:c4:f9:30:e4:3d: c5:c1:d3:d6:4f:9c:90:64:b7:00:0f:1f:46:60:5a: 56:fc:05:f2:7f:91:04:0c:77:33:ab:a9:1b:75:fa: 7a:bc:6d:28:ef:9e:a2:3c:a1:36:59:6b:34:76:50: 95:9e:9e:13:b1:80:27:8d:32:8c:84:e6:20:0f:e7: 11:32:de:11:69:d6:7c:14:9a:e6:2f:a9:9e:89:98: 1b:39:74:e2:9f:67:9f:ab:f6:d5:47:bb:69:fc:dd: ce:f3:c1:7c:54:15:fa:77:13:75:79:15:f3:1f:1c: 5c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:21:FF:0E:FF:4A:44:0F:66:12:D7:50:25:4C:62:85:17:85:17:57 X509v3 Authority Key Identifier: keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/FiH_Dv9KRA9mEtdQJUxihReFF1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:7e00::/29 Signature Algorithm: sha256WithRSAEncryption 1b:ff:dd:0e:65:85:fa:eb:eb:41:99:92:4a:74:24:68:31:53: c0:f6:dc:2b:9f:48:09:1c:ea:13:c5:49:f6:1e:39:ca:14:c3: 58:93:4b:e1:5e:4e:c9:a4:82:66:b9:a0:59:b3:7d:84:ef:44: 65:20:fe:2a:a0:7d:c2:a6:58:af:4c:36:26:dc:b3:8c:c2:af: 4b:8d:a7:2b:f8:d8:46:6a:1b:16:22:60:2b:d5:25:56:75:2f: 09:eb:df:8e:2a:7f:a9:0e:c9:bd:1d:e4:ad:7c:12:7c:8f:32: e8:f9:89:ab:11:f3:b4:d6:0c:1c:13:e9:03:b4:3d:49:7b:89: 2d:2f:e0:c0:45:a4:86:78:ff:04:18:71:84:ff:ef:bf:96:19: 66:c4:6c:11:4a:7d:96:fa:d7:f7:b4:ec:39:92:7c:4d:ce:59: 45:54:3c:e6:a3:92:fd:1c:69:bf:1d:4e:30:0a:2e:2b:28:0b: b7:d1:be:69:6a:80:2c:40:0b:46:24:04:f3:dc:a8:e7:37:1b: 8d:7b:6b:98:d3:26:f5:29:59:02:16:b0:56:62:ff:b9:2a:2f: 02:f0:d3:33:38:45:35:97:d2:ef:38:a4:36:4b:20:96:1e:81: 62:cc:31:01:c1:dd:6e:aa:82:5b:08:5c:08:63:ae:03:49:29: ac:c0:6b:12 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt87SQg3QKOfveRQp/FCBj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1 MWRiZWEwHhcNMjYwMTAyMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjIxZmYwZWZmNGE0NDBmNjYxMmQ3NTAyNTRjNjI4NTE3ODUxNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gS6VLKQemSt7rsUhCF+iySNrw2e Iw0XqyDCzirdVe8yOun7c1cAXsT8tqm292Xm328vlupCJXNUZ6JLrOVPst+xawRF KVvjHOVkTk3fp96kIrPQAKEXbqP3Mu3FtL2LTmyDTfDx50UvMQrYhjuIM+HwHuFT W45ni5ZO4DNjfzSfuLWi821CvtclRT00/oxwxPkw5D3FwdPWT5yQZLcADx9GYFpW /AXyf5EEDHczq6kbdfp6vG0o756iPKE2WWs0dlCVnp4TsYAnjTKMhOYgD+cRMt4R adZ8FJrmL6meiZgbOXTin2efq/bVR7tp/N3O88F8VBX6dxN1eRXzHxxcSwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBYh/w7/SkQPZhLXUCVMYoUXhRdXMB8GA1UdIwQY MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt Mzc4NDk5Mzk4ZjE4LzEvRmlIX0R2OUtSQTltRXRkUUpVeGloUmVGRjFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4 LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgF+ADAN BgkqhkiG9w0BAQsFAAOCAQEAG//dDmWF+uvrQZmSSnQkaDFTwPbcK59ICRzqE8VJ 9h45yhTDWJNL4V5OyaSCZrmgWbN9hO9EZSD+KqB9wqZYr0w2JtyzjMKvS42nK/jY RmobFiJgK9UlVnUvCevfjip/qQ7JvR3krXwSfI8y6PmJqxHztNYMHBPpA7Q9SXuJ LS/gwEWkhnj/BBhxhP/vv5YZZsRsEUp9lvrX97TsOZJ8Tc5ZRVQ85qOS/Rxpvx1O MAouKygLt9G+aWqALEALRiQE89yo5zcbjXtrmNMm9SlZAhawVmL/uSovAvDTMzhF NZfS7zikNksglh6BYswxAcHdbqqCWwhcCGOuA0kprMBrEg== -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:04 2026 by rpki-client