This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/f2WeliHigZNRsPyfnuBo4tGwDZ0.roa File: f2WeliHigZNRsPyfnuBo4tGwDZ0.roa (raw, json) Hash identifier: 5slWSGWLG6ATTnZtrmt7Zpoe6VhaQcLSQgvXuDKX6jQ= Subject key identifier: 7F:65:9E:96:21:E2:81:93:51:B0:FC:9F:9E:E0:68:E2:D1:B0:0D:9D Certificate issuer: /CN=9af9d0d4befda09e999eabd0c8724e217364de10 Certificate serial: 019B7CEE0C1FFC12C6B77D188F8E6E06C491 Authority key identifier: 9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/f2WeliHigZNRsPyfnuBo4tGwDZ0.roa Signing time: Fri 02 Jan 2026 04:18:54 +0000 ROA not before: Fri 02 Jan 2026 04:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 2a0e:fd80:a03::/48 maxlen: 48 2a0e:fd80:a04::/48 maxlen: 48 2a0e:fd80:a05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.mft rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:0c:1f:fc:12:c6:b7:7d:18:8f:8e:6e:06:c4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9af9d0d4befda09e999eabd0c8724e217364de10 Validity Not Before: Jan 2 04:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f659e9621e2819351b0fc9f9ee068e2d1b00d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:83:30:a8:eb:5f:b3:39:60:47:86:7c:f7:c5: 2e:f6:15:53:7b:d6:9a:fc:2c:fa:fd:8a:76:0d:91: 11:e5:fa:3b:4c:02:53:72:e4:49:61:c5:b4:d6:e4: 66:13:2e:8f:00:e5:c4:60:d4:e0:7c:54:40:ac:fc: 0d:5e:95:a4:66:c0:0c:7b:fa:79:63:e8:64:3e:5a: 90:8a:64:1a:14:37:bd:27:7c:15:54:1c:85:5c:5f: a9:86:04:65:13:45:dd:97:d6:e5:cf:d3:57:17:64: 7d:aa:5a:c0:a3:95:26:b1:33:bd:39:e4:4a:e0:a6: 67:3f:28:1e:a5:b8:38:7b:de:35:9e:08:b4:32:8b: a8:f8:94:45:07:55:f0:4c:93:bc:f5:81:15:7e:73: b3:7f:7d:bd:81:76:9f:85:1a:e9:8f:ca:7e:06:50: 17:3d:32:e8:b9:74:17:fd:05:c3:cb:cd:01:3d:b6: 08:5b:1e:c5:da:e0:54:c4:b8:70:89:99:a8:b9:34: 56:40:45:c2:08:2a:0c:4d:04:75:f3:1a:36:8d:cd: b0:97:1f:56:93:58:04:8b:10:4a:03:10:c8:bb:19: da:70:56:4c:26:48:b1:47:19:4e:89:e3:df:6a:90: 7d:7a:67:61:0d:40:77:ab:e2:1a:7c:89:25:66:fb: 0e:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:65:9E:96:21:E2:81:93:51:B0:FC:9F:9E:E0:68:E2:D1:B0:0D:9D X509v3 Authority Key Identifier: keyid:9A:F9:D0:D4:BE:FD:A0:9E:99:9E:AB:D0:C8:72:4E:21:73:64:DE:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/f2WeliHigZNRsPyfnuBo4tGwDZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01d9fe-e14a-40a4-8458-26701b162fc3/1/mvnQ1L79oJ6ZnqvQyHJOIXNk3hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:fd80:a03::-2a0e:fd80:a05:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 63:16:a8:fb:2f:c3:c0:43:23:97:e7:ec:26:66:4e:13:04:cd: a4:b5:e2:ac:a6:75:86:82:af:d6:df:0f:4c:75:a0:ed:cc:6c: ec:af:84:bb:92:1d:0c:76:47:b5:64:6d:81:8d:d9:e9:ff:31: 3c:54:73:de:9d:0b:88:46:5b:15:79:40:b6:b7:fc:a1:c2:42: a4:0b:01:2f:da:15:31:60:ef:14:c5:8b:31:43:cc:41:d9:74: e8:f4:6a:2b:3c:da:6a:5a:71:ef:af:06:db:5c:3f:b2:82:85: 5a:bd:4e:15:16:31:94:9d:a0:64:0a:86:a5:22:b6:b9:e6:4d: 1c:b3:e7:a8:d8:f3:18:ae:14:90:9e:7b:3c:6c:0c:9c:4f:ca: 74:8a:17:a4:ab:c5:bb:74:6c:5f:a1:fb:52:93:08:1d:b6:61: 90:94:7d:c8:88:a4:cd:9a:9e:6a:56:e1:c4:07:d6:bd:39:55: e1:bd:7b:f2:c5:97:49:75:94:55:13:8d:e9:57:22:ac:71:fb: 42:10:6f:56:df:6e:3a:34:52:8f:ff:3c:9f:94:20:14:f5:9b: 9a:31:76:22:93:9b:5a:60:92:0d:f2:f7:e6:dc:4c:3f:5a:97: 21:9d:10:c7:76:c7:d3:7c:ee:67:71:65:cb:57:b5:27:d2:ed: db:83:c4:c9 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt87gwf/BLGt30Yj45uBsSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhZjlkMGQ0YmVmZGEwOWU5OTllYWJkMGM4NzI0ZTIxNzM2 NGRlMTAwHhcNMjYwMTAyMDQxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjY1OWU5NjIxZTI4MTkzNTFiMGZjOWY5ZWUwNjhlMmQxYjAwZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YMwqOtfszlgR4Z898Uu9hVTe9aa /Cz6/Yp2DZER5fo7TAJTcuRJYcW01uRmEy6PAOXEYNTgfFRArPwNXpWkZsAMe/p5 Y+hkPlqQimQaFDe9J3wVVByFXF+phgRlE0Xdl9blz9NXF2R9qlrAo5UmsTO9OeRK 4KZnPygepbg4e941ngi0Mouo+JRFB1XwTJO89YEVfnOzf329gXafhRrpj8p+BlAX PTLouXQX/QXDy80BPbYIWx7F2uBUxLhwiZmouTRWQEXCCCoMTQR18xo2jc2wlx9W k1gEixBKAxDIuxnacFZMJkixRxlOiePfapB9emdhDUB3q+IafIklZvsOHwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFH9lnpYh4oGTUbD8n57gaOLRsA2dMB8GA1UdIwQY MBaAFJr50NS+/aCemZ6r0MhyTiFzZN4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgt MjY3MDFiMTYyZmMzLzEvZjJXZWxpSGlnWk5Sc1B5Zm51Qm80dEd3RFowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wMWQ5ZmUtZTE0YS00MGE0LTg0NTgtMjY3MDFiMTYyZmMz LzEvbXZuUTFMNzlvSjZabnF2UXlISk9JWE5rM2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAAjAUMBIDBwAqDv2A CgMDBwEqDv2ACgQwDQYJKoZIhvcNAQELBQADggEBAGMWqPsvw8BDI5fn7CZmThME zaS14qymdYaCr9bfD0x1oO3MbOyvhLuSHQx2R7VkbYGN2en/MTxUc96dC4hGWxV5 QLa3/KHCQqQLAS/aFTFg7xTFizFDzEHZdOj0ais82mpace+vBttcP7KChVq9ThUW MZSdoGQKhqUitrnmTRyz56jY8xiuFJCeezxsDJxPynSKF6Srxbt0bF+h+1KTCB22 YZCUfciIpM2anmpW4cQH1r05VeG9e/LFl0l1lFUTjelXIqxx+0IQb1bfbjo0Uo// PJ+UIBT1m5oxdiKTm1pgkg3y9+bcTD9alyGdEMd2x9N87mdxZctXtSfS7duDxMk= -----END CERTIFICATE-----Generated at Fri Jan 2 09:30:18 2026 by rpki-client