This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/FywruB2h1UMMBNiziu9K-u0CoA4.roa File: FywruB2h1UMMBNiziu9K-u0CoA4.roa (raw, json) Hash identifier: CkfZAsYyJ9gSYPa5a3ylUK5XAFPN68qmbQKhvyngn3Y= Subject key identifier: 17:2C:2B:B8:1D:A1:D5:43:0C:04:D8:B3:8A:EF:4A:FA:ED:02:A0:0E Certificate issuer: /CN=7d415bee222585f2d1aafbffba795031a45129c7 Certificate serial: 019A7C8450DEDCCC8B82933902046A7237E3 Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/FywruB2h1UMMBNiziu9K-u0CoA4.roa Signing time: Thu 13 Nov 2025 09:20:37 +0000 ROA not before: Thu 13 Nov 2025 09:20:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 2001:678:110c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:84:50:de:dc:cc:8b:82:93:39:02:04:6a:72:37:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7 Validity Not Before: Nov 13 09:20:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=172c2bb81da1d5430c04d8b38aef4afaed02a00e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:01:94:81:cf:f7:6f:a9:a6:b5:64:21:fe:90: 1e:ee:b2:e4:f7:90:9d:97:fe:11:96:d4:7f:bc:5a: bf:e7:4d:79:88:54:6b:e0:80:9c:3d:c3:16:0d:34: 2b:48:31:f0:de:76:71:3d:39:3d:ce:10:96:f4:71: d5:73:c9:ff:31:7a:ca:cf:54:fc:7f:0a:4e:75:8d: a2:c8:8a:87:e7:d9:3f:08:86:e0:d6:db:e9:e3:6a: ca:4a:ca:42:73:70:71:53:a2:65:02:70:ed:46:e5: e0:af:2b:7a:4c:7b:97:7e:22:e2:85:d3:d1:0b:76: 21:4a:f0:46:47:19:43:95:b2:ed:a0:f2:a9:23:08: 2d:7e:e3:75:79:c9:8f:36:3d:a6:d1:a1:fd:e6:69: 36:b8:44:fd:7e:40:b3:65:ca:80:d5:83:f8:40:4c: 36:62:ea:4a:d7:83:6a:91:95:19:19:48:b8:cf:6d: 64:d8:68:32:25:df:1f:56:8f:e1:a9:d9:78:88:39: 88:03:33:27:77:ff:12:b3:27:8f:cf:47:38:d1:cf: 24:b8:74:a5:f8:68:6e:16:e8:85:be:63:90:d8:12: e6:a1:c4:39:06:ae:24:5b:de:02:66:25:cd:61:1e: ba:34:44:da:c1:bb:93:e4:64:c2:34:96:79:ee:af: 8b:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2C:2B:B8:1D:A1:D5:43:0C:04:D8:B3:8A:EF:4A:FA:ED:02:A0:0E X509v3 Authority Key Identifier: keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/FywruB2h1UMMBNiziu9K-u0CoA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:110c::/48 Signature Algorithm: sha256WithRSAEncryption 13:0b:7e:36:2a:09:8f:72:89:f6:34:7e:b0:2d:58:a4:56:9d: 1c:e5:8c:af:0f:28:99:bc:b8:cc:4d:17:14:d5:5e:96:0a:22: df:53:a7:49:e7:05:58:e3:20:f1:32:3f:f9:8e:f4:8d:ba:c4: 93:19:df:a0:3f:ee:6b:22:14:f7:47:7e:e7:1c:04:05:82:b6: 76:84:0f:23:18:f5:bf:56:52:31:f3:b0:24:bd:5c:19:10:3c: 61:d7:d3:32:8e:13:2f:27:f9:7a:20:ba:0e:92:23:3c:ad:f1: ee:6d:af:0d:97:9f:f1:35:80:f0:58:9c:e0:9c:f7:ab:43:f3: af:f3:71:6b:60:86:b6:1a:d7:f7:21:1b:03:17:b8:fc:93:b9: ec:58:ce:de:2f:27:48:e3:6d:6e:9c:ca:51:fd:d1:96:68:eb: 43:1c:06:ac:56:c0:2c:70:4d:42:77:ae:25:81:1b:5f:b2:a4: b5:e8:c7:ae:56:f6:f0:b2:60:51:4b:3b:9a:e0:ff:ac:9d:25: e2:eb:d5:f2:22:9b:3f:e1:f1:d5:7f:9f:e4:35:92:39:97:e3: b8:d8:aa:85:64:b0:4b:41:95:88:be:fc:f7:c0:ac:d5:7a:6b: 3a:72:f0:5b:e6:29:43:8e:3e:68:02:90:80:48:e4:80:8a:02: c6:6a:a6:0e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZp8hFDe3MyLgpM5AgRqcjfjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkNDE1YmVlMjIyNTg1ZjJkMWFhZmJmZmJhNzk1MDMxYTQ1 MTI5YzcwHhcNMjUxMTEzMDkyMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzJjMmJiODFkYTFkNTQzMGMwNGQ4YjM4YWVmNGFmYWVkMDJhMDBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwGUgc/3b6mmtWQh/pAe7rLk95Cd l/4RltR/vFq/5015iFRr4ICcPcMWDTQrSDHw3nZxPTk9zhCW9HHVc8n/MXrKz1T8 fwpOdY2iyIqH59k/CIbg1tvp42rKSspCc3BxU6JlAnDtRuXgryt6THuXfiLihdPR C3YhSvBGRxlDlbLtoPKpIwgtfuN1ecmPNj2m0aH95mk2uET9fkCzZcqA1YP4QEw2 YupK14NqkZUZGUi4z21k2GgyJd8fVo/hqdl4iDmIAzMnd/8SsyePz0c40c8kuHSl +GhuFuiFvmOQ2BLmocQ5Bq4kW94CZiXNYR66NETawbuT5GTCNJZ57q+LMwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBcsK7gdodVDDATYs4rvSvrtAqAOMB8GA1UdIwQY MBaAFH1BW+4iJYXy0ar7/7p5UDGkUSnHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8yZDQ0MTktMmViNi00YTczLTk5ZjQt MmNkNGJmMjdiNjdkLzEvRnl3cnVCMmgxVU1NQk5peml1OUstdTBDb0E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8yZDQ0MTktMmViNi00YTczLTk5ZjQtMmNkNGJmMjdiNjdk LzEvZlVGYjdpSWxoZkxScXZ2X3VubFFNYVJSS2NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeBEM MA0GCSqGSIb3DQEBCwUAA4IBAQATC342KgmPcon2NH6wLVikVp0c5YyvDyiZvLjM TRcU1V6WCiLfU6dJ5wVY4yDxMj/5jvSNusSTGd+gP+5rIhT3R37nHAQFgrZ2hA8j GPW/VlIx87AkvVwZEDxh19MyjhMvJ/l6ILoOkiM8rfHuba8Nl5/xNYDwWJzgnPer Q/Ov83FrYIa2Gtf3IRsDF7j8k7nsWM7eLydI421unMpR/dGWaOtDHAasVsAscE1C d64lgRtfsqS16MeuVvbwsmBRSzua4P+snSXi69XyIps/4fHVf5/kNZI5l+O42KqF ZLBLQZWIvvz3wKzVems6cvBb5ilDjj5oApCASOSAigLGaqYO -----END CERTIFICATE-----Generated at Fri Nov 28 05:00:40 2025 by rpki-client