This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa File: fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa (raw, json) Hash identifier: MVq6Psg4hS5MltjuluEalJmzG7hJZP0WRHHEPcHhyK0= Subject key identifier: 7C:15:43:57:C9:F0:5D:07:69:43:FA:C7:67:B6:A0:29:CD:6B:D1:06 Certificate issuer: /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Certificate serial: 019B7D5AD367EF5DF59E4994AB02C0BD1C32 Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa Signing time: Fri 02 Jan 2026 06:17:42 +0000 ROA not before: Fri 02 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59861 IP address blocks: 2a10:dc7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d3:67:ef:5d:f5:9e:49:94:ab:02:c0:bd:1c:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73 Validity Not Before: Jan 2 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c154357c9f05d076943fac767b6a029cd6bd106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7f:ca:97:df:f0:fa:7a:c0:97:74:77:a6:36: 34:c8:a9:0b:17:bb:7c:e4:80:a1:4d:96:0e:d7:f2: 47:ce:ce:79:0b:45:35:97:cf:24:4a:f9:c4:c5:cf: a4:0f:c1:18:54:a2:38:1a:d3:7e:b1:3e:38:d6:31: ce:26:7a:9d:e1:71:1f:56:06:5d:90:a7:60:74:33: ba:28:87:7f:7e:cd:f0:87:e4:9e:17:45:90:e7:53: d1:aa:bf:60:1a:51:32:96:4d:1d:d5:33:86:69:60: 62:64:ad:13:8b:6f:4f:40:88:f2:6d:88:58:07:ba: f7:6d:95:87:47:0d:88:bd:00:eb:78:13:90:43:b7: cb:13:4c:fe:aa:91:f7:e8:12:c9:5d:eb:e5:55:03: f7:c8:a1:71:07:e1:37:e8:bf:a6:d1:6b:2f:2d:67: 27:d8:21:3b:61:4b:7c:fc:2c:43:73:80:40:6c:e2: 69:31:1f:49:99:7b:ce:df:7d:b4:e9:ee:f7:b7:95: 6a:97:a8:2b:df:4e:81:a0:6a:b9:c1:c9:8c:3b:c9: 76:92:8d:a1:ff:ba:fd:98:ae:5d:81:66:dd:4b:d8: 2b:2f:2f:49:c7:0d:b1:09:d7:b7:79:a9:d8:b1:e9: 81:87:d3:10:31:23:f8:5b:42:86:db:92:10:f3:db: a4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:15:43:57:C9:F0:5D:07:69:43:FA:C7:67:B6:A0:29:CD:6B:D1:06 X509v3 Authority Key Identifier: keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:dc7::/32 Signature Algorithm: sha256WithRSAEncryption 55:97:e7:e5:fd:c8:f2:9a:bd:8e:fe:bd:de:01:a3:bc:e0:ff: 54:88:6e:f5:c7:53:ce:20:26:f7:15:68:52:f9:ab:16:26:e4: 44:26:e2:a0:82:11:ba:ec:3f:d4:f9:74:2d:3b:18:66:a9:6c: 0e:1d:c9:20:1d:2b:38:85:24:05:bd:78:d2:f4:71:ef:9f:69: bf:b0:a0:a0:d2:48:80:ed:65:a9:4b:67:7e:4a:26:cb:bd:4f: 9a:6d:da:3a:f7:bc:63:71:43:26:b5:d7:f9:2d:43:2d:b9:87: 36:86:69:84:0c:89:f0:06:5b:2a:c2:41:1e:6b:e5:6e:d5:04: 14:45:95:a9:e1:46:62:1a:21:ba:e2:88:3d:16:d4:24:e1:9c: 5f:0f:91:13:6c:c3:de:2b:e1:12:c0:8b:f6:29:e2:2f:4b:8f: 6b:a9:2f:a1:0a:48:ab:f6:1e:b6:0d:f7:e8:d2:14:5d:76:65: 8d:51:a8:d3:00:b6:00:9a:c9:0e:58:97:39:bd:a1:11:11:13: 24:e6:c6:e9:05:ab:d6:dc:80:17:35:b2:6a:42:34:a0:b6:15: 40:e5:87:32:51:5f:37:d7:9b:98:92:7a:d6:00:b6:09:58:d1: b6:a4:a2:d8:32:6f:22:98:c9:29:13:a6:57:04:2e:55:12:ed: 1c:03:82:c7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9WtNn7131nkmUqwLAvRwyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwYzVlZTAyZDJlMDU4NjFkZDkwNmZlMDZiMzg0NGYwNGQz NzhjNzMwHhcNMjYwMTAyMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzE1NDM1N2M5ZjA1ZDA3Njk0M2ZhYzc2N2I2YTAyOWNkNmJkMTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuX/Kl9/w+nrAl3R3pjY0yKkLF7t8 5IChTZYO1/JHzs55C0U1l88kSvnExc+kD8EYVKI4GtN+sT441jHOJnqd4XEfVgZd kKdgdDO6KId/fs3wh+SeF0WQ51PRqr9gGlEylk0d1TOGaWBiZK0Ti29PQIjybYhY B7r3bZWHRw2IvQDreBOQQ7fLE0z+qpH36BLJXevlVQP3yKFxB+E36L+m0WsvLWcn 2CE7YUt8/CxDc4BAbOJpMR9JmXvO33206e73t5Vql6gr306BoGq5wcmMO8l2ko2h /7r9mK5dgWbdS9grLy9Jxw2xCde3eanYsemBh9MQMSP4W0KG25IQ89ukewIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFHwVQ1fJ8F0HaUP6x2e2oCnNa9EGMB8GA1UdIwQY MBaAFCDF7gLS4Fhh3ZBv4Gs4RPBNN4xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUt Njc3NzEzNTlhMmIzLzEvZkJWRFY4bndYUWRwUV9ySFo3YWdLYzFyMFFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85NzkyOTYtZWY3YS00YmFjLThjMTUtNjc3NzEzNTlhMmIz LzEvSU1YdUF0TGdXR0hka0dfZ2F6aEU4RTAzakhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhANxzAN BgkqhkiG9w0BAQsFAAOCAQEAVZfn5f3I8pq9jv693gGjvOD/VIhu9cdTziAm9xVo UvmrFibkRCbioIIRuuw/1Pl0LTsYZqlsDh3JIB0rOIUkBb140vRx759pv7CgoNJI gO1lqUtnfkomy71Pmm3aOve8Y3FDJrXX+S1DLbmHNoZphAyJ8AZbKsJBHmvlbtUE FEWVqeFGYhohuuKIPRbUJOGcXw+RE2zD3ivhEsCL9iniL0uPa6kvoQpIq/Yetg33 6NIUXXZljVGo0wC2AJrJDliXOb2hERETJObG6QWr1tyAFzWyakI0oLYVQOWHMlFf N9ebmJJ61gC2CVjRtqSi2DJvIpjJKROmVwQuVRLtHAOCxw== -----END CERTIFICATE-----Generated at Mon Jan 26 23:24:06 2026 by rpki-client