This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa File: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (raw, json) Hash identifier: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ= Subject key identifier: 15:97:86:81:4D:88:6B:00:4A:F1:80:38:07:04:CC:FD:EE:B1:E4:CA Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019B797F15597C436A8BF77D67CA52890E4D Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa Signing time: Thu 01 Jan 2026 12:18:50 +0000 ROA not before: Thu 01 Jan 2026 12:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202044 IP address blocks: 2a14:c886:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 18:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:15:59:7c:43:6a:8b:f7:7d:67:ca:52:89:0e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jan 1 12:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=159786814d886b004af180380704ccfdeeb1e4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:6e:7e:a4:70:af:06:0a:d6:f4:5f:c8:b6: 4e:88:32:c8:49:ae:f5:2d:b9:3c:39:db:72:26:6a: 8e:cd:0b:cf:5c:9d:6b:9f:38:6e:22:27:69:43:99: 96:48:b3:df:ea:5b:e5:ac:95:38:4d:28:1d:a9:f9: 33:be:dd:a1:17:2b:a0:2d:9a:12:c5:88:88:0e:bd: c8:0c:83:04:e7:fd:39:62:65:4a:82:59:f5:29:f0: f8:0b:35:eb:2b:a7:68:07:ec:0f:14:ae:eb:0b:d8: 45:8f:ee:ef:e3:f9:c6:cc:59:ca:2a:3f:47:6c:3f: 78:24:93:98:ed:11:82:1c:4e:4e:82:23:34:12:65: 71:a1:fb:47:1d:4b:84:9b:cc:70:01:27:d9:8c:36: 76:70:59:60:43:e2:fe:53:0a:78:54:78:3e:29:84: 2e:0f:1c:6b:40:63:32:b2:fd:58:82:7b:e5:85:e6: 38:83:d9:d6:cb:f3:b0:48:20:e6:db:5a:ca:27:4a: 0f:79:a2:fd:fc:03:85:9b:87:a2:d2:82:c4:30:12: c8:df:88:f8:e4:48:3a:73:19:8a:77:2f:e6:ba:e2: 6a:2f:21:57:71:e0:d7:9c:4d:f5:16:d0:89:e5:d9: af:25:3e:3d:f4:ab:b6:03:06:83:85:83:bc:da:be: 1c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:97:86:81:4D:88:6B:00:4A:F1:80:38:07:04:CC:FD:EE:B1:E4:CA X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c886:8000::/33 Signature Algorithm: sha256WithRSAEncryption 7d:52:43:a8:c6:e7:38:a2:73:ae:93:ff:a5:79:e5:ca:53:f9: f4:ea:70:60:b1:df:de:6a:74:b5:88:bd:77:29:93:68:a4:cd: 1c:04:50:51:c7:bb:c8:9c:03:2a:61:9c:5b:2f:c8:85:05:f5: 66:15:83:47:8e:c8:c9:5f:8d:57:d6:7f:36:1d:e2:40:6a:d7: 63:b5:fd:68:3f:05:74:7a:9b:8a:02:6a:72:87:b2:8b:0d:cd: c8:9a:fc:21:c3:8a:83:0d:f1:1f:d1:0c:c7:a7:00:e1:8e:90: 39:ec:5e:09:21:90:da:49:c8:42:b7:13:53:f8:c2:29:6e:8c: 7b:d4:86:9a:98:84:70:4d:53:c9:16:5c:1f:0e:82:4d:60:54: 72:94:3e:04:af:03:f1:78:63:13:5a:66:c8:0c:f4:c8:f7:ed: 0f:db:ff:5d:9c:28:e6:64:22:63:23:f6:11:57:be:17:a2:da: 50:8a:81:99:96:a1:e9:9c:93:21:00:52:2f:3c:76:0f:67:bc: 6e:7c:99:37:cd:71:d0:76:7d:f7:21:e0:89:71:30:1b:68:82: ab:f7:d6:fe:0d:c2:2d:e4:49:87:63:c1:cb:b9:e1:a5:65:53: 4b:97:a1:30:a1:e7:06:69:52:4c:47:bb:b4:a9:46:76:bd:d7: c2:89:93:b4 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt5fxVZfENqi/d9Z8pSiQ5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwMTAxMTIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTk3ODY4MTRkODg2YjAwNGFmMTgwMzgwNzA0Y2NmZGVlYjFlNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuilufqRwrwYK1vRfyLZOiDLISa71 Lbk8OdtyJmqOzQvPXJ1rnzhuIidpQ5mWSLPf6lvlrJU4TSgdqfkzvt2hFyugLZoS xYiIDr3IDIME5/05YmVKgln1KfD4CzXrK6doB+wPFK7rC9hFj+7v4/nGzFnKKj9H bD94JJOY7RGCHE5OgiM0EmVxoftHHUuEm8xwASfZjDZ2cFlgQ+L+Uwp4VHg+KYQu DxxrQGMysv1YgnvlheY4g9nWy/OwSCDm21rKJ0oPeaL9/AOFm4ei0oLEMBLI34j4 5Eg6cxmKdy/muuJqLyFXceDXnE31FtCJ5dmvJT499Ku2AwaDhYO82r4ciwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBWXhoFNiGsASvGAOAcEzP3useTKMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvRlplR2dVMklhd0JLOFlBNEJ3VE1fZTZ4NU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYHKhTIhoAw DQYJKoZIhvcNAQELBQADggEBAH1SQ6jG5ziic66T/6V55cpT+fTqcGCx395qdLWI vXcpk2ikzRwEUFHHu8icAyphnFsvyIUF9WYVg0eOyMlfjVfWfzYd4kBq12O1/Wg/ BXR6m4oCanKHsosNzcia/CHDioMN8R/RDMenAOGOkDnsXgkhkNpJyEK3E1P4wilu jHvUhpqYhHBNU8kWXB8Ogk1gVHKUPgSvA/F4YxNaZsgM9Mj37Q/b/12cKOZkImMj 9hFXvhei2lCKgZmWoemckyEAUi88dg9nvG58mTfNcdB2ffch4IlxMBtogqv31v4N wi3kSYdjwcu54aVlU0uXoTCh5wZpUkxHu7SpRna918KJk7Q= -----END CERTIFICATE-----Generated at Sun Jan 25 03:14:27 2026 by rpki-client