This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_k_Fv3WZtgCyCs1GMO3VtLpo4aA.roa File: _k_Fv3WZtgCyCs1GMO3VtLpo4aA.roa (raw, json) Hash identifier: wsbcJX0haD+xU2DliTkdjuP3YUZYu6eqwafPda/s1Xs= Subject key identifier: FE:4F:C5:BF:75:99:B6:00:B2:0A:CD:46:30:ED:D5:B4:BA:68:E1:A0 Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Certificate serial: 019B7910BDCDF976F269B7BA70575CFCB154 Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_k_Fv3WZtgCyCs1GMO3VtLpo4aA.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215472 IP address blocks: 2a12:bec4:1040::/48 maxlen: 48 2a12:bec4:1041::/48 maxlen: 48 2a12:bec4:1042::/48 maxlen: 48 2a12:bec4:1043::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bd:cd:f9:76:f2:69:b7:ba:70:57:5c:fc:b1:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe4fc5bf7599b600b20acd4630edd5b4ba68e1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f3:43:40:da:00:ff:68:ca:30:42:1a:af:a8: 3a:15:dc:b3:bf:24:4f:04:bc:2a:9b:1a:d8:3e:08: 4d:05:2c:8d:15:e6:26:f3:fd:b0:1a:1d:7f:d5:28: 06:d2:89:3f:dc:d4:e9:f5:e8:22:4e:2b:64:39:8d: 5b:56:c1:b7:05:8a:7b:43:48:28:37:1f:8f:75:22: 48:1e:8d:21:de:8d:9c:69:73:ba:ad:ca:a3:b8:83: b7:56:10:79:ec:c5:64:c5:ce:84:2d:23:e5:81:5d: 89:47:95:00:6b:03:36:16:af:2a:71:81:ec:48:93: 51:4a:16:38:82:ba:c3:58:c2:4a:ad:9f:8d:68:02: 02:d4:ff:7d:b1:1d:4e:98:d5:5c:44:54:bb:52:01: 28:27:1c:93:2c:4c:b3:1d:7a:8c:84:0a:95:23:37: 74:0a:29:aa:b2:f4:58:7d:86:49:2e:b8:11:5a:65: 72:3c:51:a3:ea:ef:33:8d:78:a4:6e:a8:a8:31:95: 2e:6a:ca:0a:d0:51:90:08:0c:d7:38:1b:74:66:09: af:ed:dc:a5:4f:83:bf:1b:dd:d2:3a:8d:d5:77:27: 60:ba:8e:ee:dd:1a:65:00:db:94:42:d1:0e:4f:57: 8c:d2:0a:9a:de:01:ab:11:a5:3b:25:d8:41:95:b9: 2f:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4F:C5:BF:75:99:B6:00:B2:0A:CD:46:30:ED:D5:B4:BA:68:E1:A0 X509v3 Authority Key Identifier: keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/_k_Fv3WZtgCyCs1GMO3VtLpo4aA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:bec4:1040::/46 Signature Algorithm: sha256WithRSAEncryption 31:cb:d0:01:03:8f:6a:cd:38:1a:ab:91:e4:a9:7b:00:f8:5d: 83:5d:0a:31:78:85:b8:ad:9f:b8:d2:28:06:15:c2:fc:c3:23: cb:c8:76:4b:08:e6:1b:92:a0:9f:94:e9:32:1d:9c:46:74:8e: 7f:2f:3a:74:85:95:6b:b6:5d:a4:f3:63:4a:ae:29:2c:77:68: e2:15:79:4b:96:59:94:1e:f3:9f:f5:36:07:79:83:f6:f2:f9: 25:6c:a5:15:ed:1e:1a:eb:bc:36:bf:52:f4:da:0b:b3:13:36: 84:fc:a0:4b:f3:9a:68:fe:39:cc:43:97:f8:22:aa:23:58:bf: 42:77:98:98:bd:09:8e:27:41:99:e7:58:9d:c1:86:d1:71:83: 80:46:9b:b5:c9:38:c6:70:38:5e:50:36:6e:aa:26:88:4e:08: 33:ed:5e:f7:e4:bb:55:bb:67:ba:9a:99:ad:72:dd:c4:84:6c: 50:a5:39:ae:ab:3e:fd:c8:d2:4b:d5:e5:b5:81:9a:3b:5d:2b: 53:a2:fe:c0:49:1a:1c:6c:b6:49:37:0d:f9:63:53:2d:4b:3e: 2a:ab:c8:aa:7c:36:4e:02:4a:1a:fd:a5:63:f9:9c:8b:fb:62: b7:ae:c0:be:9c:76:1a:9f:f5:5f:2f:90:bd:cb:00:54:7f:e1: 51:76:97:7f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5EL3N+Xbyabe6cFdc/LFUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzN2UyMTVhNDE1ZWQ3YjVkZTRiNmRjMTJmMmY3Yjc3NTBj M2Q2NmYwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTRmYzViZjc1OTliNjAwYjIwYWNkNDYzMGVkZDViNGJhNjhlMWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2PNDQNoA/2jKMEIar6g6FdyzvyRP BLwqmxrYPghNBSyNFeYm8/2wGh1/1SgG0ok/3NTp9egiTitkOY1bVsG3BYp7Q0go Nx+PdSJIHo0h3o2caXO6rcqjuIO3VhB57MVkxc6ELSPlgV2JR5UAawM2Fq8qcYHs SJNRShY4grrDWMJKrZ+NaAIC1P99sR1OmNVcRFS7UgEoJxyTLEyzHXqMhAqVIzd0 CimqsvRYfYZJLrgRWmVyPFGj6u8zjXikbqioMZUuasoK0FGQCAzXOBt0Zgmv7dyl T4O/G93SOo3Vdydguo7u3RplANuUQtEOT1eM0gqa3gGrEaU7JdhBlbkvCwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFP5Pxb91mbYAsgrNRjDt1bS6aOGgMB8GA1UdIwQY MBaAFLN+IVpBXte13kttwS8ve3dQw9ZvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQt NTUzNjljZjUwN2VlLzEvX2tfRnYzV1p0Z0N5Q3MxR01PM1Z0THBvNGFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85N2Y0OWEtN2E5NS00ZGQ1LThjNzQtNTUzNjljZjUwN2Vl LzEvczM0aFdrRmUxN1hlUzIzQkx5OTdkMUREMW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcCKhK+xBBA MA0GCSqGSIb3DQEBCwUAA4IBAQAxy9ABA49qzTgaq5HkqXsA+F2DXQoxeIW4rZ+4 0igGFcL8wyPLyHZLCOYbkqCflOkyHZxGdI5/Lzp0hZVrtl2k82NKriksd2jiFXlL llmUHvOf9TYHeYP28vklbKUV7R4a67w2v1L02guzEzaE/KBL85po/jnMQ5f4Iqoj WL9Cd5iYvQmOJ0GZ51idwYbRcYOARpu1yTjGcDheUDZuqiaITggz7V735LtVu2e6 mpmtct3EhGxQpTmuqz79yNJL1eW1gZo7XStTov7ASRocbLZJNw35Y1MtSz4qq8iq fDZOAkoa/aVj+ZyL+2K3rsC+nHYan/VfL5C9ywBUf+FRdpd/ -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:40 2026 by rpki-client