This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/Fs69o1yumuB_h24l2rSGVDLaJIQ.roa File: Fs69o1yumuB_h24l2rSGVDLaJIQ.roa (raw, json) Hash identifier: vdZ0BN7jIBHTZi6LLJoCAqiuS0RkgBp+kjGpn9OHcoM= Subject key identifier: 16:CE:BD:A3:5C:AE:9A:E0:7F:87:6E:25:DA:B4:86:54:32:DA:24:84 Certificate issuer: /CN=4121c7fb04153829d96a1c038f0df714da595404 Certificate serial: 019B7BA441F59AC11A98E486042636993316 Authority key identifier: 41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/Fs69o1yumuB_h24l2rSGVDLaJIQ.roa Signing time: Thu 01 Jan 2026 22:18:40 +0000 ROA not before: Thu 01 Jan 2026 22:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213032 IP address blocks: 2001:678:dc4::/48 maxlen: 48 2001:678:dc8::/48 maxlen: 48 2001:67c:27c4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:41:f5:9a:c1:1a:98:e4:86:04:26:36:99:33:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4121c7fb04153829d96a1c038f0df714da595404 Validity Not Before: Jan 1 22:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16cebda35cae9ae07f876e25dab4865432da2484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a5:11:cd:d4:f0:45:df:1c:65:d5:33:c9:4c: ce:21:a5:9b:0c:ff:d1:55:56:72:90:6d:16:ae:e4: e5:99:eb:c7:23:14:a6:a3:87:d2:e1:b3:b9:24:22: bc:30:dc:f0:4c:4c:71:4d:eb:65:7f:b5:63:cd:6a: 33:47:7d:ee:87:b1:dc:75:fb:24:8c:a8:e2:23:5e: 2c:6f:01:9b:9e:03:be:7f:0c:b0:da:2a:ff:97:b8: c9:85:71:c3:a6:e3:34:16:71:9e:ef:e9:e2:79:86: ff:c6:c2:87:65:69:0d:8a:ab:f4:87:38:4b:5d:d1: 00:86:cd:11:d2:a4:67:e9:e1:b3:d1:cd:24:29:32: ec:28:fa:ca:6b:c5:25:d0:23:00:38:04:b2:fb:dd: b8:dd:44:a4:dc:cc:2e:57:5b:40:7d:7a:48:e6:33: be:ff:12:1e:28:4f:81:ea:0d:ae:b0:60:a8:3b:58: 8f:df:89:85:96:94:1e:c8:08:9f:1f:7e:7f:0a:10: 19:08:a6:cb:33:8a:8a:4d:d1:cd:d2:26:3b:db:95: 9b:74:53:de:f2:4e:98:95:9d:8a:f8:75:c7:55:60: ef:ef:de:42:59:34:7c:7f:45:ef:c9:9b:43:db:26: e9:3d:a4:ff:5c:72:3c:33:c5:0d:18:8e:7c:68:4c: b0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:CE:BD:A3:5C:AE:9A:E0:7F:87:6E:25:DA:B4:86:54:32:DA:24:84 X509v3 Authority Key Identifier: keyid:41:21:C7:FB:04:15:38:29:D9:6A:1C:03:8F:0D:F7:14:DA:59:54:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSHH-wQVOCnZahwDjw33FNpZVAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/Fs69o1yumuB_h24l2rSGVDLaJIQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/05e109-2347-4a7c-8adb-d1981dd446cf/1/QSHH-wQVOCnZahwDjw33FNpZVAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:dc4::/48 2001:678:dc8::/48 2001:67c:27c4::/48 Signature Algorithm: sha256WithRSAEncryption 66:ab:72:26:c5:e2:db:fd:0c:4f:92:0d:af:28:1e:4e:11:b6: 12:df:71:15:ab:d2:5a:34:d2:d6:68:09:8f:ca:b5:c4:1b:8e: 35:c2:de:04:ff:d0:f7:fb:6f:b8:5d:5c:68:13:b1:a8:97:eb: 18:45:df:36:93:32:80:23:24:61:ff:06:c7:d7:d7:dc:92:d4: 29:78:15:99:d3:ea:fa:52:f7:f2:4d:ef:41:0f:64:15:d2:ae: 62:de:24:cd:eb:6f:cc:51:82:3c:c4:cc:d8:33:79:0c:96:8b: 57:31:df:c2:94:fe:06:61:46:e8:17:0c:13:db:50:c0:eb:63: 24:a4:1e:dd:a0:b1:82:16:59:27:1c:b8:8d:fe:e7:01:1d:74: 45:73:b2:59:38:a1:db:bc:06:ea:a0:b9:b1:20:62:b8:56:d4: 88:07:1b:21:3d:99:b7:d1:df:5e:50:47:4b:03:5a:a7:42:16: d1:53:7c:10:b4:06:56:44:a2:ec:fd:90:3b:3f:77:b8:78:1f: 3d:85:f9:14:8b:6f:b4:18:f1:d0:dd:ac:cd:a0:6e:10:3f:b5: c8:f3:95:03:a9:13:74:be:f4:65:64:a1:d6:e8:a8:2c:0a:62: 0c:d7:e4:73:78:21:c1:2d:af:cc:09:70:62:b4:60:c4:cc:d4: 31:62:cd:1c -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pEH1msEamOSGBCY2mTMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMjFjN2ZiMDQxNTM4MjlkOTZhMWMwMzhmMGRmNzE0ZGE1 OTU0MDQwHhcNMjYwMTAxMjIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmNlYmRhMzVjYWU5YWUwN2Y4NzZlMjVkYWI0ODY1NDMyZGEyNDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaURzdTwRd8cZdUzyUzOIaWbDP/R VVZykG0WruTlmevHIxSmo4fS4bO5JCK8MNzwTExxTetlf7VjzWozR33uh7Hcdfsk jKjiI14sbwGbngO+fwyw2ir/l7jJhXHDpuM0FnGe7+nieYb/xsKHZWkNiqv0hzhL XdEAhs0R0qRn6eGz0c0kKTLsKPrKa8Ul0CMAOASy+9243USk3MwuV1tAfXpI5jO+ /xIeKE+B6g2usGCoO1iP34mFlpQeyAifH35/ChAZCKbLM4qKTdHN0iY725WbdFPe 8k6YlZ2K+HXHVWDv795CWTR8f0XvyZtD2ybpPaT/XHI8M8UNGI58aEyw7QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBbOvaNcrprgf4duJdq0hlQy2iSEMB8GA1UdIwQY MBaAFEEhx/sEFTgp2WocA48N9xTaWVQEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNISC13UVZPQ25aYWh3RGp3MzNGTnBaVkFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wNWUxMDktMjM0Ny00YTdjLThhZGIt ZDE5ODFkZDQ0NmNmLzEvRnM2OW8xeXVtdUJfaDI0bDJyU0dWRExhSklRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8wNWUxMDktMjM0Ny00YTdjLThhZGItZDE5ODFkZDQ0NmNm LzEvUVNISC13UVZPQ25aYWh3RGp3MzNGTnBaVkFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAAjAbAwcAIAEGeA3E AwcAIAEGeA3IAwcAIAEGfCfEMA0GCSqGSIb3DQEBCwUAA4IBAQBmq3ImxeLb/QxP kg2vKB5OEbYS33EVq9JaNNLWaAmPyrXEG441wt4E/9D3+2+4XVxoE7Gol+sYRd82 kzKAIyRh/wbH19fcktQpeBWZ0+r6UvfyTe9BD2QV0q5i3iTN62/MUYI8xMzYM3kM lotXMd/ClP4GYUboFwwT21DA62MkpB7doLGCFlknHLiN/ucBHXRFc7JZOKHbvAbq oLmxIGK4VtSIBxshPZm30d9eUEdLA1qnQhbRU3wQtAZWRKLs/ZA7P3e4eB89hfkU i2+0GPHQ3azNoG4QP7XI85UDqRN0vvRlZKHW6KgsCmIM1+RzeCHBLa/MCXBitGDE zNQxYs0c -----END CERTIFICATE-----Generated at Mon Feb 2 14:24:39 2026 by rpki-client