This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/Rfxi_4unCBKk6n7MGTb17E8xvvA.roa File: Rfxi_4unCBKk6n7MGTb17E8xvvA.roa (raw, json) Hash identifier: dfTugS3/G7SgKge92nXod0lqaqLbkSf5ohyyxzem2GU= Subject key identifier: 45:FC:62:FF:8B:A7:08:12:A4:EA:7E:CC:19:36:F5:EC:4F:31:BE:F0 Certificate issuer: /CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb Certificate serial: 019B7AC7838147407E428DA274F6B45BFABA Authority key identifier: 79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/Rfxi_4unCBKk6n7MGTb17E8xvvA.roa Signing time: Thu 01 Jan 2026 18:17:34 +0000 ROA not before: Thu 01 Jan 2026 18:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206715 IP address blocks: 2a0c:16c7:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.mft rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:83:81:47:40:7e:42:8d:a2:74:f6:b4:5b:fa:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79e24b47f8943cad6e04c9f646cb1077c140fdfb Validity Not Before: Jan 1 18:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45fc62ff8ba70812a4ea7ecc1936f5ec4f31bef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:72:6a:8c:61:20:fe:8e:51:e0:0b:be:a8:75: 2c:1f:ce:b5:a6:59:e1:41:90:7d:f8:d0:df:5a:bc: 6b:00:3d:78:7e:93:6a:59:5e:2c:a7:2d:7c:6a:ba: 2e:57:e7:6a:98:d4:f1:3c:75:07:9c:c8:fe:60:52: 14:58:d3:25:dc:26:85:fc:27:cf:84:8a:fe:c1:2c: a1:ca:99:e4:cb:e9:f5:b8:67:30:ef:91:d4:ef:10: 4a:95:80:c2:7d:dd:74:d1:68:9a:76:cb:6e:04:15: 23:b7:4a:85:2b:60:d4:22:12:a1:3f:ea:72:e1:23: ff:a1:c3:2a:76:a9:8a:d5:80:30:41:81:c1:de:a5: 2d:f9:79:f7:a3:21:af:07:d3:1f:6f:c6:ee:44:d5: 5e:3f:33:89:34:66:d4:46:3c:6a:fe:c5:88:30:d7: b2:e4:0f:51:47:ce:a1:9e:ef:0d:96:a4:10:e8:45: 50:77:a1:7f:35:b0:5e:e4:9f:5d:e1:45:f0:19:c3: 31:2d:c1:38:50:7e:63:14:6b:8b:91:ba:ef:0c:62: c0:c3:16:e5:9c:40:59:06:76:fb:43:89:6f:05:83: 59:45:03:44:67:a9:16:02:c8:14:b4:40:c3:cb:24: 66:3b:a4:58:30:fb:4c:f1:35:fa:08:da:1e:c9:55: 0d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FC:62:FF:8B:A7:08:12:A4:EA:7E:CC:19:36:F5:EC:4F:31:BE:F0 X509v3 Authority Key Identifier: keyid:79:E2:4B:47:F8:94:3C:AD:6E:04:C9:F6:46:CB:10:77:C1:40:FD:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eeJLR_iUPK1uBMn2RssQd8FA_fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/Rfxi_4unCBKk6n7MGTb17E8xvvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/54a65b-cf0b-498f-80d4-bc584b36cbef/1/eeJLR_iUPK1uBMn2RssQd8FA_fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:16c7:1::/48 Signature Algorithm: sha256WithRSAEncryption 54:9c:e8:6c:bc:c0:57:f4:8b:a6:24:be:dc:38:9c:a1:07:53: 6d:49:72:17:b8:d2:6d:bd:60:7e:c5:9b:6d:3b:0a:82:ff:72: b9:ee:94:a9:db:2d:15:6b:df:ea:d4:07:d9:fa:1d:63:ef:a2: d4:8a:e2:a6:a5:f3:98:04:e8:09:4c:9d:0f:cc:d7:46:b7:93: 51:97:21:f6:b5:7e:82:37:16:37:e7:48:80:22:1d:ef:30:a0: ab:e0:e0:8c:21:4a:01:b4:32:0a:12:a5:e0:6a:76:5e:50:cf: 46:42:f5:5f:62:1a:70:ed:3f:a6:72:18:3a:a0:7e:80:20:fc: 38:93:57:d7:62:84:a3:8a:97:4b:8d:93:38:5d:df:4f:e0:55: 54:3c:43:14:b8:b9:72:89:6e:fc:2a:43:2a:c0:fd:3e:61:b0: 76:8e:6e:f9:99:00:92:3c:69:d9:8f:1d:b7:d6:0b:10:a0:dc: 84:27:0b:48:05:8d:e5:7b:69:26:cc:e9:22:fd:35:f6:b3:b9: d1:35:4f:9c:e6:a1:8b:9f:67:58:50:f3:38:1e:97:d1:2a:c8: c7:b5:51:46:7a:01:28:d7:82:6e:49:f9:1c:a2:97:92:f1:f2: d0:25:2b:39:cc:1e:c5:60:79:eb:d9:73:cf:46:f7:3f:77:59: 8c:2a:29:a4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6x4OBR0B+Qo2idPa0W/q6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ZTI0YjQ3Zjg5NDNjYWQ2ZTA0YzlmNjQ2Y2IxMDc3YzE0 MGZkZmIwHhcNMjYwMTAxMTgxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWZjNjJmZjhiYTcwODEyYTRlYTdlY2MxOTM2ZjVlYzRmMzFiZWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHJqjGEg/o5R4Au+qHUsH861plnh QZB9+NDfWrxrAD14fpNqWV4spy18arouV+dqmNTxPHUHnMj+YFIUWNMl3CaF/CfP hIr+wSyhypnky+n1uGcw75HU7xBKlYDCfd100WiadstuBBUjt0qFK2DUIhKhP+py 4SP/ocMqdqmK1YAwQYHB3qUt+Xn3oyGvB9Mfb8buRNVePzOJNGbURjxq/sWIMNey 5A9RR86hnu8NlqQQ6EVQd6F/NbBe5J9d4UXwGcMxLcE4UH5jFGuLkbrvDGLAwxbl nEBZBnb7Q4lvBYNZRQNEZ6kWAsgUtEDDyyRmO6RYMPtM8TX6CNoeyVUNlQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFEX8Yv+LpwgSpOp+zBk29exPMb7wMB8GA1UdIwQY MBaAFHniS0f4lDytbgTJ9kbLEHfBQP37MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWVKTFJfaVVQSzF1Qk1uMlJzc1FkOEZBX2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi81NGE2NWItY2YwYi00OThmLTgwZDQt YmM1ODRiMzZjYmVmLzEvUmZ4aV80dW5DQktrNm43TUdUYjE3RTh4dnZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi81NGE2NWItY2YwYi00OThmLTgwZDQtYmM1ODRiMzZjYmVm LzEvZWVKTFJfaVVQSzF1Qk1uMlJzc1FkOEZBX2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgwWxwAB MA0GCSqGSIb3DQEBCwUAA4IBAQBUnOhsvMBX9IumJL7cOJyhB1NtSXIXuNJtvWB+ xZttOwqC/3K57pSp2y0Va9/q1AfZ+h1j76LUiuKmpfOYBOgJTJ0PzNdGt5NRlyH2 tX6CNxY350iAIh3vMKCr4OCMIUoBtDIKEqXganZeUM9GQvVfYhpw7T+mchg6oH6A IPw4k1fXYoSjipdLjZM4Xd9P4FVUPEMUuLlyiW78KkMqwP0+YbB2jm75mQCSPGnZ jx231gsQoNyEJwtIBY3le2kmzOki/TX2s7nRNU+c5qGLn2dYUPM4HpfRKsjHtVFG egEo14JuSfkcopeS8fLQJSs5zB7FYHnr2XPPRvc/d1mMKimk -----END CERTIFICATE-----Generated at Mon Jan 12 02:17:12 2026 by rpki-client