This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FebmQ0phfrct-TGsPJxUUYX-JQg.roa File: FebmQ0phfrct-TGsPJxUUYX-JQg.roa (raw, json) Hash identifier: ulIpvDfN762wfYSDhy/XiImhYJkDdSa0ZOuipGwKQWk= Subject key identifier: 15:E6:E6:43:4A:61:7E:B7:2D:F9:31:AC:3C:9C:54:51:85:FE:25:08 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910B256884E396D09DB7E16884121C7 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FebmQ0phfrct-TGsPJxUUYX-JQg.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214320 IP address blocks: 2a12:bec4:14c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b2:56:88:4e:39:6d:09:db:7e:16:88:41:21:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15e6e6434a617eb72df931ac3c9c545185fe2508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:59:5f:db:e0:ec:12:bc:07:ab:49:68:24:ed: c7:78:98:54:a9:36:13:32:ca:39:5a:f8:83:09:49: db:94:56:6b:c6:cd:c3:4c:c6:cd:27:03:6a:60:71: ef:45:2e:54:2d:d1:00:55:68:92:6f:a8:b9:5b:34: 5e:3d:20:83:88:28:76:34:db:76:fc:d5:6a:4e:f8: b9:f3:03:64:45:4c:d8:72:b3:13:7d:e7:67:ef:f9: b5:f1:b8:33:47:1e:2b:f2:5e:94:2d:7b:4d:c5:d0: 0f:f0:49:48:37:84:e3:64:6d:d7:cd:14:97:ed:0b: 01:e3:c8:e0:be:65:0d:6b:0a:bb:bd:28:a0:15:ff: 5a:c2:c3:9d:17:eb:02:5f:6a:38:e9:91:cf:d7:af: 3b:74:22:7c:f2:b8:2c:25:7d:91:10:7b:59:0e:84: 97:d4:44:6b:c0:1c:2d:f5:d1:ea:18:5d:b7:a4:da: 4d:1d:00:5b:d3:14:b2:a5:8b:20:eb:65:9a:ed:33: 02:fd:f7:33:d5:6c:06:11:43:27:6a:7f:7a:be:1e: 4b:bb:f5:92:e1:8c:4e:5e:ad:fa:a0:9b:3a:a1:61: 13:d9:38:b9:c2:90:02:37:50:85:1a:96:b8:b7:b0: 92:f7:5e:5e:f5:c7:71:36:46:00:e7:ef:31:6a:75: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E6:E6:43:4A:61:7E:B7:2D:F9:31:AC:3C:9C:54:51:85:FE:25:08 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FebmQ0phfrct-TGsPJxUUYX-JQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:14c0::/44 Signature Algorithm: sha256WithRSAEncryption c5:65:1a:68:2c:c4:79:41:41:e3:29:dd:65:c4:19:59:19:e7: 34:3f:ac:a6:ee:a8:46:de:97:65:65:42:b4:fa:4e:50:81:f8: 9d:bd:53:c4:da:60:1d:95:68:02:17:0d:fc:65:90:d8:a5:da: b7:52:14:a3:87:da:54:2f:e9:e0:68:3a:81:b5:fb:4a:f2:4f: 99:f0:0a:e9:1f:d9:83:37:4c:d7:c9:03:73:2d:fd:d1:c9:70: ae:92:09:8f:70:aa:a7:c9:18:bb:c1:b1:cd:e5:c2:da:c8:25: 3a:80:68:31:f3:77:35:ce:7b:8d:f0:64:ba:a0:d8:94:9a:73: a3:e6:3d:db:1f:3d:11:d1:8a:30:fd:21:aa:b8:4c:e8:dd:58: 6d:1f:15:b5:62:ba:52:35:7e:6d:a8:7a:72:2f:83:a6:a9:7f: 7b:f9:8d:e5:eb:f0:50:da:a0:af:c1:c7:11:1d:28:61:7b:eb: 48:82:e3:10:2f:58:d7:88:71:62:3f:55:75:93:c1:02:08:dd: c9:01:0e:bb:22:54:30:b3:08:56:8b:6c:d3:44:e6:ba:9f:de: 76:98:89:e9:da:4c:f3:21:71:1a:94:b1:20:09:9b:13:98:e4: 00:c9:91:cb:23:d5:98:36:2c:f6:72:2f:31:59:1c:9d:f7:72: 20:e5:3e:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5ELJWiE45bQnbfhaIQSHHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWU2ZTY0MzRhNjE3ZWI3MmRmOTMxYWMzYzljNTQ1MTg1ZmUyNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFlf2+DsErwHq0loJO3HeJhUqTYT Mso5WviDCUnblFZrxs3DTMbNJwNqYHHvRS5ULdEAVWiSb6i5WzRePSCDiCh2NNt2 /NVqTvi58wNkRUzYcrMTfedn7/m18bgzRx4r8l6ULXtNxdAP8ElIN4TjZG3XzRSX 7QsB48jgvmUNawq7vSigFf9awsOdF+sCX2o46ZHP1687dCJ88rgsJX2REHtZDoSX 1ERrwBwt9dHqGF23pNpNHQBb0xSypYsg62Wa7TMC/fcz1WwGEUMnan96vh5Lu/WS 4YxOXq36oJs6oWET2Ti5wpACN1CFGpa4t7CS915e9cdxNkYA5+8xanW1MwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBXm5kNKYX63LfkxrDycVFGF/iUIMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvRmVibVEwcGhmcmN0LVRHc1BKeFVVWVgtSlFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhK+xBTA MA0GCSqGSIb3DQEBCwUAA4IBAQDFZRpoLMR5QUHjKd1lxBlZGec0P6ym7qhG3pdl ZUK0+k5QgfidvVPE2mAdlWgCFw38ZZDYpdq3UhSjh9pUL+ngaDqBtftK8k+Z8Arp H9mDN0zXyQNzLf3RyXCukgmPcKqnyRi7wbHN5cLayCU6gGgx83c1znuN8GS6oNiU mnOj5j3bHz0R0Yow/SGquEzo3VhtHxW1YrpSNX5tqHpyL4OmqX97+Y3l6/BQ2qCv wccRHShhe+tIguMQL1jXiHFiP1V1k8ECCN3JAQ67IlQwswhWi2zTROa6n952mInp 2kzzIXEalLEgCZsTmOQAyZHLI9WYNiz2ci8xWRyd93Ig5T7/ -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:41 2026 by rpki-client