This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/fGmytEtcKCBxP_COaX3EzxixmEo.roa File: fGmytEtcKCBxP_COaX3EzxixmEo.roa (raw, json) Hash identifier: 91bs2HcwyIQ9LFJt+Drla5dzPgI0WfHKEyPyA0R0pa0= Subject key identifier: 7C:69:B2:B4:4B:5C:28:20:71:3F:F0:8E:69:7D:C4:CF:18:B1:98:4A Certificate issuer: /CN=d7ec3c0285bc458332de8150364ab2a219ba61e2 Certificate serial: 019B7D5BAD8ADCD378A11C13B28419D8834E Authority key identifier: D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/fGmytEtcKCBxP_COaX3EzxixmEo.roa Signing time: Fri 02 Jan 2026 06:18:38 +0000 ROA not before: Fri 02 Jan 2026 06:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202587 IP address blocks: 2a07:bf40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:ad:8a:dc:d3:78:a1:1c:13:b2:84:19:d8:83:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7ec3c0285bc458332de8150364ab2a219ba61e2 Validity Not Before: Jan 2 06:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c69b2b44b5c2820713ff08e697dc4cf18b1984a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:05:3b:77:e3:56:98:13:c0:2e:ef:6a:ae:b0: 23:40:52:e4:e4:68:d7:e9:b8:8e:54:2c:ea:e7:83: af:35:e0:15:b5:34:d1:8f:5a:f8:a0:82:67:2b:97: 5e:4b:05:71:52:64:c6:7d:03:bf:46:a1:78:e6:99: 34:62:2e:2c:fd:c4:6f:7e:10:38:c8:a9:ab:4e:12: 47:1d:d1:96:e5:05:39:5b:12:17:bf:b6:61:4a:88: d5:c6:3f:97:73:d5:bf:cd:33:22:d7:cb:f5:85:24: 08:50:84:93:6e:05:cb:11:f1:cd:9f:20:fe:35:ae: 04:e9:0f:48:e2:36:b9:42:c5:ab:b9:d7:64:1f:52: c7:1c:31:79:2b:ca:7b:62:9f:82:ce:4b:c6:58:a8: 09:8d:9a:6b:64:bf:02:b0:20:fe:87:10:79:e9:69: c1:6f:d2:fb:3e:ac:8c:c2:b3:07:21:1f:d1:f3:3a: ad:80:f8:73:f0:c4:c3:84:7c:ea:7a:3a:4e:3d:c2: a6:35:a4:d2:d5:2b:f7:d6:03:10:ec:11:16:c6:66: dd:2b:dc:a6:ca:f2:01:a3:10:db:24:e5:31:f1:25: bb:c6:8b:12:b6:47:70:73:c4:4e:0c:1e:f0:b5:ef: 8f:4a:19:db:3c:86:7a:46:16:80:d7:71:5e:02:ea: 10:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:69:B2:B4:4B:5C:28:20:71:3F:F0:8E:69:7D:C4:CF:18:B1:98:4A X509v3 Authority Key Identifier: keyid:D7:EC:3C:02:85:BC:45:83:32:DE:81:50:36:4A:B2:A2:19:BA:61:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w8AoW8RYMy3oFQNkqyohm6YeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/fGmytEtcKCBxP_COaX3EzxixmEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b59d3c-9def-4ccf-a9da-1b3379aff51d/1/1-w8AoW8RYMy3oFQNkqyohm6YeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:bf40::/29 Signature Algorithm: sha256WithRSAEncryption 49:49:fe:04:00:a6:52:eb:f2:84:8f:ab:07:33:63:62:d9:cc: 39:92:40:45:78:2b:fe:76:2f:91:9d:b8:1d:13:94:53:0b:f4: 36:03:e1:2e:f2:70:d6:16:23:56:5d:57:43:a8:e4:79:41:3d: b8:f4:e1:41:d3:f8:b5:3f:29:ab:14:a1:b0:f5:81:97:06:a4: 3f:06:06:6b:2a:91:02:f4:c3:85:4e:a9:57:af:d1:ac:e4:ad: 37:96:50:e5:cf:5d:24:5e:c3:ca:06:d3:15:62:e6:52:76:45: bc:a3:31:b1:51:d3:b1:43:b4:70:05:d2:4d:f2:97:96:b7:8d: 3c:b9:d1:d9:27:63:2a:88:f7:45:c7:bf:46:61:9a:de:35:08: 62:c3:c4:55:c6:ae:19:95:7e:00:ba:d4:4d:d0:14:01:0c:68: c3:75:d9:ac:7e:75:a7:cf:f0:37:22:2c:0a:85:97:60:9f:69: 8b:c3:69:3b:f1:2b:ca:3b:31:14:9f:7b:5d:e8:e5:d5:f2:f6: 64:9e:ab:86:0e:3d:4c:7e:28:bd:f7:c1:3a:c2:63:be:2b:f8: 51:80:21:e5:eb:c4:c5:30:19:30:3e:93:05:1d:21:b6:28:cc: e0:cc:ac:3b:5b:76:66:a1:d5:c5:d2:dc:6e:cd:bc:1c:70:08: 9e:6f:a4:43 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9W62K3NN4oRwTsoQZ2INOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3ZWMzYzAyODViYzQ1ODMzMmRlODE1MDM2NGFiMmEyMTli YTYxZTIwHhcNMjYwMTAyMDYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzY5YjJiNDRiNWMyODIwNzEzZmYwOGU2OTdkYzRjZjE4YjE5ODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAU7d+NWmBPALu9qrrAjQFLk5GjX 6biOVCzq54OvNeAVtTTRj1r4oIJnK5deSwVxUmTGfQO/RqF45pk0Yi4s/cRvfhA4 yKmrThJHHdGW5QU5WxIXv7ZhSojVxj+Xc9W/zTMi18v1hSQIUISTbgXLEfHNnyD+ Na4E6Q9I4ja5QsWruddkH1LHHDF5K8p7Yp+CzkvGWKgJjZprZL8CsCD+hxB56WnB b9L7PqyMwrMHIR/R8zqtgPhz8MTDhHzqejpOPcKmNaTS1Sv31gMQ7BEWxmbdK9ym yvIBoxDbJOUx8SW7xosStkdwc8RODB7wte+PShnbPIZ6RhaA13FeAuoQwwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHxpsrRLXCggcT/wjml9xM8YsZhKMB8GA1UdIwQY MBaAFNfsPAKFvEWDMt6BUDZKsqIZumHiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iNTlkM2MtOWRlZi00Y2NmLWE5ZGEt MWIzMzc5YWZmNTFkLzEvZkdteXRFdGNLQ0J4UF9DT2FYM0V6eGl4bUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iNTlkM2MtOWRlZi00Y2NmLWE5ZGEtMWIzMzc5YWZmNTFk LzEvMS13OEFvVzhSWU15M29GUU5rcXlvaG02WWVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKge/QDAN BgkqhkiG9w0BAQsFAAOCAQEASUn+BACmUuvyhI+rBzNjYtnMOZJARXgr/nYvkZ24 HROUUwv0NgPhLvJw1hYjVl1XQ6jkeUE9uPThQdP4tT8pqxShsPWBlwakPwYGayqR AvTDhU6pV6/RrOStN5ZQ5c9dJF7DygbTFWLmUnZFvKMxsVHTsUO0cAXSTfKXlreN PLnR2SdjKoj3Rce/RmGa3jUIYsPEVcauGZV+ALrUTdAUAQxow3XZrH51p8/wNyIs CoWXYJ9pi8NpO/EryjsxFJ97Xejl1fL2ZJ6rhg49TH4ovffBOsJjviv4UYAh5evE xTAZMD6TBR0htijM4MysO1t2ZqHVxdLcbs28HHAInm+kQw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:43 2026 by rpki-client