This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fqrehR9GqAkYpvnSjMcaWetZAec.roa File: fqrehR9GqAkYpvnSjMcaWetZAec.roa (raw, json) Hash identifier: znHcLSd0TdiJK2W55r8QsbbuJbouO3n5nt/3TJ5aCwU= Subject key identifier: 7E:AA:DE:85:1F:46:A8:09:18:A6:F9:D2:8C:C7:1A:59:EB:59:01:E7 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83A7C094F3DA64D4FE680378F5F2C5 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fqrehR9GqAkYpvnSjMcaWetZAec.roa Signing time: Fri 02 Jan 2026 16:21:33 +0000 ROA not before: Fri 02 Jan 2026 16:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61335 IP address blocks: 2a00:fd40:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a7:c0:94:f3:da:64:d4:fe:68:03:78:f5:f2:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eaade851f46a80918a6f9d28cc71a59eb5901e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:28:17:a0:ed:3b:76:79:30:fa:12:75:0a: a5:f1:1b:af:80:b2:42:f2:64:40:c1:50:56:ff:da: 13:d9:2a:90:ad:98:5a:d2:55:fa:a4:d6:09:4b:5e: ea:8a:9a:8a:21:fb:92:86:a7:04:8d:55:de:e5:68: 45:a2:40:ea:c7:0e:6c:57:4a:04:54:2b:8a:6e:89: 6f:d5:98:70:46:5d:46:39:46:7a:6d:e4:b9:29:d2: 5b:98:b6:b7:c0:c8:66:10:21:75:2d:fb:a8:1a:10: 33:24:92:72:1f:c1:a0:5a:fb:a0:2f:1a:73:e1:d5: 2a:6f:ee:91:11:fb:ff:65:69:f2:26:53:ed:c6:11: fd:09:26:bb:d4:90:50:01:cb:6c:ee:b1:4f:e7:d8: c9:46:98:bc:c9:73:98:f5:21:17:17:dd:4d:40:8c: 70:d1:df:64:6e:39:a8:00:6d:ab:2e:94:dc:f4:90: e6:99:a7:d2:fd:4d:6a:fc:da:fe:8f:23:d2:5a:ab: c9:31:a5:03:85:7f:fc:91:d1:a0:5c:23:c6:fe:b1: 66:3a:0e:cc:1f:1c:85:04:dd:4f:50:30:38:95:43: a8:52:a8:03:c8:ed:11:12:57:f1:fe:13:67:f8:be: d8:68:8a:c9:70:53:db:4c:11:ac:28:84:ed:02:c2: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:AA:DE:85:1F:46:A8:09:18:A6:F9:D2:8C:C7:1A:59:EB:59:01:E7 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/fqrehR9GqAkYpvnSjMcaWetZAec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a00:fd40:c::/48 Signature Algorithm: sha256WithRSAEncryption bb:47:84:0e:05:27:51:9d:5b:fd:51:fb:a5:ef:07:e8:2f:15: 41:3d:4e:70:bf:e6:18:77:d0:91:14:cc:92:79:70:f4:d9:5b: 8c:53:38:ac:ff:73:1c:ff:32:54:91:82:a3:18:7d:3d:c1:57: 78:ca:31:42:ee:f8:9c:23:4e:25:4f:88:46:a3:36:bf:95:3b: 3c:33:38:4b:4c:54:9a:5b:dd:b4:45:78:8c:5b:3f:d6:ac:7c: 42:c4:da:f3:91:ef:5c:47:55:b0:f4:0e:3b:89:9f:a6:0b:e0: 2f:f0:2c:e4:ac:78:3e:c2:0a:9b:05:ab:0c:d0:ad:63:fc:b6: 08:6d:17:1a:01:03:0c:72:d6:42:52:b7:a3:b6:00:ea:94:d7: 4c:3d:f3:36:30:44:63:36:90:4a:77:00:d0:11:e9:b8:d3:ac: e6:c8:af:55:aa:a3:e4:07:db:36:45:2f:5f:fb:ef:10:4c:6d: 4e:94:59:9b:dd:32:8f:05:15:c3:ab:52:b2:56:83:5a:93:bd: 87:01:3d:9c:22:11:0f:11:4f:eb:09:8d:14:d4:a5:cd:79:98: d5:bf:f3:07:91:5b:39:11:08:fb:44:f0:8a:e0:ff:64:97:b6: 80:a0:56:df:0e:f8:1a:d0:18:54:92:1b:50:08:0e:1c:7b:30: fe:9d:2c:00 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/g6fAlPPaZNT+aAN49fLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWFhZGU4NTFmNDZhODA5MThhNmY5ZDI4Y2M3MWE1OWViNTkwMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG8oF6DtO3Z5MPoSdQql8RuvgLJC 8mRAwVBW/9oT2SqQrZha0lX6pNYJS17qipqKIfuShqcEjVXe5WhFokDqxw5sV0oE VCuKbolv1ZhwRl1GOUZ6beS5KdJbmLa3wMhmECF1LfuoGhAzJJJyH8GgWvugLxpz 4dUqb+6REfv/ZWnyJlPtxhH9CSa71JBQActs7rFP59jJRpi8yXOY9SEXF91NQIxw 0d9kbjmoAG2rLpTc9JDmmafS/U1q/Nr+jyPSWqvJMaUDhX/8kdGgXCPG/rFmOg7M HxyFBN1PUDA4lUOoUqgDyO0RElfx/hNn+L7YaIrJcFPbTBGsKITtAsJRTQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH6q3oUfRqgJGKb50ozHGlnrWQHnMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvZnFyZWhSOUdxQWtZcHZuU2pNY2FXZXRaQWVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgD9QAAM MA0GCSqGSIb3DQEBCwUAA4IBAQC7R4QOBSdRnVv9Uful7wfoLxVBPU5wv+YYd9CR FMySeXD02VuMUzis/3Mc/zJUkYKjGH09wVd4yjFC7vicI04lT4hGoza/lTs8MzhL TFSaW920RXiMWz/WrHxCxNrzke9cR1Ww9A47iZ+mC+Av8CzkrHg+wgqbBasM0K1j /LYIbRcaAQMMctZCUrejtgDqlNdMPfM2MERjNpBKdwDQEem406zmyK9VqqPkB9s2 RS9f++8QTG1OlFmb3TKPBRXDq1KyVoNak72HAT2cIhEPEU/rCY0U1KXNeZjVv/MH kVs5EQj7RPCK4P9kl7aAoFbfDvga0BhUkhtQCA4cezD+nSwA -----END CERTIFICATE-----Generated at Wed Jan 21 07:35:03 2026 by rpki-client