This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/faGdoZhz0ZzoiaD9L85uhCKUffA.roa File: faGdoZhz0ZzoiaD9L85uhCKUffA.roa (raw, json) Hash identifier: Cd8V9woMmvFITBZqej5uL7Sa7BYjY+6FeX78Effs6VQ= Subject key identifier: 7D:A1:9D:A1:98:73:D1:9C:E8:89:A0:FD:2F:CE:6E:84:22:94:7D:F0 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA4A63D5906F5A37C9B17F67CAC86E0 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/faGdoZhz0ZzoiaD9L85uhCKUffA.roa Signing time: Thu 01 Jan 2026 22:19:06 +0000 ROA not before: Thu 01 Jan 2026 22:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 2a13:f083::/32 maxlen: 32 2a13:f085::/32 maxlen: 32 2a13:f086::/32 maxlen: 32 2a13:f087::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:a6:3d:59:06:f5:a3:7c:9b:17:f6:7c:ac:86:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7da19da19873d19ce889a0fd2fce6e8422947df0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:45:71:9e:ca:42:60:59:3e:3e:02:6b:a4:3d: 5f:6b:94:d9:6d:a6:59:d4:e5:34:26:4d:31:0a:33: ee:61:82:c3:f4:8d:2e:c3:eb:db:6b:ff:b8:d4:0c: b2:06:09:3d:f4:b9:ba:86:30:f5:69:06:3b:14:36: 30:4e:fa:a3:50:60:cf:98:9e:45:76:20:73:46:e2: 5d:ed:08:bc:76:77:ea:3d:66:a9:0a:81:ed:5d:b0: af:48:0a:20:9a:f3:55:53:a4:3c:84:d5:88:02:43: 09:1e:89:0f:95:ff:e9:97:05:cd:62:98:42:2f:43: ca:c3:c8:a4:3d:54:24:b7:b7:57:fc:1d:7e:e5:df: 47:74:ab:43:40:80:e3:ef:a7:8e:75:2b:36:dc:f5: 24:59:53:b2:0a:5e:96:7a:c8:ba:c9:35:56:dd:0c: 71:01:6d:c0:9f:ad:62:ce:00:d7:c7:01:0f:64:8d: 47:17:49:f8:4a:97:2d:6d:32:71:b1:bb:b6:ce:71: 66:4a:50:6e:f8:42:03:e1:26:9d:b3:af:e2:98:98: d0:9f:56:3b:f9:bd:b4:fe:70:fd:15:23:fd:0a:15: f6:79:76:50:3a:ad:af:ee:5c:7e:62:24:61:75:7c: 0a:ca:86:bf:21:6a:33:d7:78:58:c3:54:79:7a:e0: 2b:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A1:9D:A1:98:73:D1:9C:E8:89:A0:FD:2F:CE:6E:84:22:94:7D:F0 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/faGdoZhz0ZzoiaD9L85uhCKUffA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:f083::/32 2a13:f085::-2a13:f087:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 74:c6:36:88:08:eb:f6:f9:8e:ed:5e:de:de:a8:23:41:4b:db: d6:ce:77:5b:5a:4d:6a:ef:16:a3:26:11:36:0a:8a:dc:00:e9: b2:02:94:16:20:6b:c6:cc:e1:9c:d7:1e:b4:8f:7e:24:88:66: 48:f5:ce:92:14:3c:bf:70:a3:61:0b:bf:17:14:79:fe:92:34: e8:f3:60:88:6d:b0:f4:d2:de:bb:32:bf:c9:b2:dd:94:65:f8: 8b:b4:cc:55:fb:c3:8e:9a:4e:96:6e:cd:77:25:4a:32:74:da: 59:92:4c:8d:7c:e8:27:9d:19:a7:17:7b:1b:1a:13:91:26:61: 99:69:94:42:d2:5a:29:5a:9a:ea:8f:3b:81:90:60:1d:56:90: d1:52:72:0d:a9:4d:bb:71:a3:b3:dd:ec:49:55:8d:c0:9f:c6: 66:3c:39:a8:4c:37:f5:8e:a6:81:b1:fd:93:30:3c:aa:5d:93: 7d:90:c3:c4:4e:bb:d0:8e:08:25:0b:bb:15:ae:c0:87:ba:da: b7:df:b4:36:1b:76:11:11:f8:86:85:a7:a3:35:16:fc:fe:68: ed:15:bd:5a:61:29:32:c2:cf:ea:ac:0e:fe:68:73:67:8d:07: b9:2a:f4:00:a7:85:5e:c5:5f:05:49:97:7e:a4:da:a9:be:c8: f0:b1:e5:82 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7pKY9WQb1o3ybF/Z8rIbgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGExOWRhMTk4NzNkMTljZTg4OWEwZmQyZmNlNmU4NDIyOTQ3ZGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUVxnspCYFk+PgJrpD1fa5TZbaZZ 1OU0Jk0xCjPuYYLD9I0uw+vba/+41AyyBgk99Lm6hjD1aQY7FDYwTvqjUGDPmJ5F diBzRuJd7Qi8dnfqPWapCoHtXbCvSAogmvNVU6Q8hNWIAkMJHokPlf/plwXNYphC L0PKw8ikPVQkt7dX/B1+5d9HdKtDQIDj76eOdSs23PUkWVOyCl6Wesi6yTVW3Qxx AW3An61izgDXxwEPZI1HF0n4SpctbTJxsbu2znFmSlBu+EID4Sads6/imJjQn1Y7 +b20/nD9FSP9ChX2eXZQOq2v7lx+YiRhdXwKyoa/IWoz13hYw1R5euArowIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFH2hnaGYc9Gc6Img/S/OboQilH3wMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvZmFHZG9aaHowWnpvaWFEOUw4NXVoQ0tVZmZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAAjAXAwUAKhPwgzAO AwUAKhPwhQMFAyoT8IAwDQYJKoZIhvcNAQELBQADggEBAHTGNogI6/b5ju1e3t6o I0FL29bOd1taTWrvFqMmETYKitwA6bIClBYga8bM4ZzXHrSPfiSIZkj1zpIUPL9w o2ELvxcUef6SNOjzYIhtsPTS3rsyv8my3ZRl+Iu0zFX7w46aTpZuzXclSjJ02lmS TI186CedGacXexsaE5EmYZlplELSWilamuqPO4GQYB1WkNFScg2pTbtxo7Pd7ElV jcCfxmY8OahMN/WOpoGx/ZMwPKpdk32Qw8ROu9COCCULuxWuwIe62rfftDYbdhER +IaFp6M1Fvz+aO0VvVphKTLCz+qsDv5oc2eNB7kq9ACnhV7FXwVJl36k2qm+yPCx 5YI= -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:09 2026 by rpki-client