This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Fp_422CMKCF4_oLASV3Gc67A9dk.roa File: Fp_422CMKCF4_oLASV3Gc67A9dk.roa (raw, json) Hash identifier: aq6BbK6VGiDDbjOXXeYVUx9Ysg4x5ZqgmlfZa0MMkNo= Subject key identifier: 16:9F:F8:DB:60:8C:28:21:78:FE:82:C0:49:5D:C6:73:AE:C0:F5:D9 Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Certificate serial: 019B7EA75FA24BCD1F106B659E70BBF1609D Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Fp_422CMKCF4_oLASV3Gc67A9dk.roa Signing time: Fri 02 Jan 2026 12:20:56 +0000 ROA not before: Fri 02 Jan 2026 12:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209864 IP address blocks: 2a06:e881:5500::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:5f:a2:4b:cd:1f:10:6b:65:9e:70:bb:f1:60:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954 Validity Not Before: Jan 2 12:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=169ff8db608c282178fe82c0495dc673aec0f5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e1:a2:80:db:6a:3b:33:3a:8a:5e:2d:c9:b0: b6:74:a5:dd:96:58:1d:5e:4d:6c:30:ed:89:38:4a: e0:d0:94:8c:33:5d:8e:f8:f5:a4:16:54:96:3e:ba: ef:27:42:cc:38:26:43:01:dc:38:a5:68:50:88:f9: 4a:ca:15:51:16:20:5f:48:bf:75:87:b0:1f:20:2e: 82:39:96:45:cd:c1:43:64:7b:24:fa:30:88:4b:31: 9e:f7:a7:2f:e3:79:da:76:3a:78:e8:75:34:73:eb: a3:cd:af:65:8e:b3:9d:9f:33:cc:fd:9d:e7:8d:c7: d0:80:a8:0a:61:09:c6:0a:90:51:08:aa:b5:23:15: 52:f7:e6:b3:49:0a:cb:d3:1b:a7:25:2d:02:f6:36: 31:ef:d1:c8:b6:04:f2:01:70:52:29:3f:66:ba:dd: 2c:07:8d:1e:15:50:fd:67:30:cf:9e:a2:84:fc:8f: 95:e3:22:a0:2c:23:d2:7f:f5:f3:e0:d1:ae:39:86: 6a:8c:98:66:06:4d:a9:e4:08:72:e7:74:32:62:e8: 27:70:1d:91:30:9b:23:c2:1f:d5:18:e7:ef:de:d0: 46:35:a1:6c:d3:a4:97:40:66:c2:73:2f:97:80:2c: 17:08:18:cf:83:93:07:e1:ce:8e:67:22:41:cf:64: 3e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:9F:F8:DB:60:8C:28:21:78:FE:82:C0:49:5D:C6:73:AE:C0:F5:D9 X509v3 Authority Key Identifier: keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/Fp_422CMKCF4_oLASV3Gc67A9dk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:e881:5500::/44 Signature Algorithm: sha256WithRSAEncryption d0:69:f4:63:76:4d:5f:d5:79:e0:fe:44:0b:97:71:6a:af:1a: 4e:fd:68:cb:6a:a7:d2:cc:d7:bf:94:01:c8:0b:92:60:e4:b2: 09:10:92:60:f7:ce:81:d3:e6:8e:15:46:c2:d3:76:ef:67:41: af:5d:df:63:a4:bd:96:26:9c:a4:43:7b:da:35:e3:63:db:c7: 46:06:52:e2:83:1d:9f:e2:24:5f:87:23:e4:d9:18:3d:cf:3d: b5:c0:13:e2:12:5f:06:58:8f:0e:85:6c:48:de:00:32:cc:bb: 9e:45:8d:7a:95:04:49:64:f4:e8:66:d6:2a:05:17:8e:6d:d9: 34:ee:4f:3f:c7:19:e5:0e:ef:f7:c8:39:0f:27:9a:2d:24:f5: e6:fb:dc:81:76:03:2f:b9:5a:36:21:f0:43:ca:78:78:92:7c: 40:58:4c:92:c9:28:5c:e7:20:1a:a0:7f:84:ec:10:61:af:80: 5e:13:63:78:99:da:1c:64:8c:82:b4:fc:59:63:93:55:c0:95: 23:7c:28:0d:16:2a:3b:a5:cc:5d:a6:c2:25:01:14:b2:71:41: 56:a8:7f:e8:3f:b0:3a:1e:e6:18:b5:5e:a7:e8:47:89:09:d9: 2d:cb:87:15:9d:1e:4e:92:6b:1a:43:a5:cf:91:fc:34:d3:e0: bf:96:7e:89 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p1+iS80fEGtlnnC78WCdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4MDc0YjQxOWVhZDRjZWZlYTJmMmFkMmMyNTlkOTc4YzVl ZDc5NTQwHhcNMjYwMTAyMTIyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjlmZjhkYjYwOGMyODIxNzhmZTgyYzA0OTVkYzY3M2FlYzBmNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuGigNtqOzM6il4tybC2dKXdllgd Xk1sMO2JOErg0JSMM12O+PWkFlSWPrrvJ0LMOCZDAdw4pWhQiPlKyhVRFiBfSL91 h7AfIC6COZZFzcFDZHsk+jCISzGe96cv43nadjp46HU0c+ujza9ljrOdnzPM/Z3n jcfQgKgKYQnGCpBRCKq1IxVS9+azSQrL0xunJS0C9jYx79HItgTyAXBSKT9mut0s B40eFVD9ZzDPnqKE/I+V4yKgLCPSf/Xz4NGuOYZqjJhmBk2p5Ahy53QyYugncB2R MJsjwh/VGOfv3tBGNaFs06SXQGbCcy+XgCwXCBjPg5MH4c6OZyJBz2Q++QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBaf+NtgjCgheP6CwEldxnOuwPXZMB8GA1UdIwQY MBaAFLgHS0GerUzv6i8q0sJZ2XjF7XlUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYt M2Q5MWVkZTViMmIxLzEvRnBfNDIyQ01LQ0Y0X29MQVNWM0djNjdBOWRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi8xZTQzZTQtZDA2ZS00YTU1LWJkYjYtM2Q5MWVkZTViMmIx LzEvdUFkTFFaNnRUT19xTHlyU3dsblplTVh0ZVZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgbogVUA MA0GCSqGSIb3DQEBCwUAA4IBAQDQafRjdk1f1Xng/kQLl3FqrxpO/WjLaqfSzNe/ lAHIC5Jg5LIJEJJg986B0+aOFUbC03bvZ0GvXd9jpL2WJpykQ3vaNeNj28dGBlLi gx2f4iRfhyPk2Rg9zz21wBPiEl8GWI8OhWxI3gAyzLueRY16lQRJZPToZtYqBReO bdk07k8/xxnlDu/3yDkPJ5otJPXm+9yBdgMvuVo2IfBDynh4knxAWEySyShc5yAa oH+E7BBhr4BeE2N4mdocZIyCtPxZY5NVwJUjfCgNFio7pcxdpsIlARSycUFWqH/o P7A6HuYYtV6n6EeJCdkty4cVnR5OkmsaQ6XPkfw00+C/ln6J -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:40 2026 by rpki-client