This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/F-7S1HSbGkkCpgyYEJTyKuPXX8I.roa File: F-7S1HSbGkkCpgyYEJTyKuPXX8I.roa (raw, json) Hash identifier: QiyTfxENgQqPVV66UHt5INHcvss6VEj4aW8BtRGcZLY= Subject key identifier: 17:EE:D2:D4:74:9B:1A:49:02:A6:0C:98:10:94:F2:2A:E3:D7:5F:C2 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF4BECC4A3C43EDA9EA14B9791E4D Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/F-7S1HSbGkkCpgyYEJTyKuPXX8I.roa Signing time: Fri 02 Jan 2026 04:17:42 +0000 ROA not before: Fri 02 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2546 IP address blocks: 2001:648:2120::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f4:be:cc:4a:3c:43:ed:a9:ea:14:b9:79:1e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17eed2d4749b1a4902a60c981094f22ae3d75fc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6c:a0:99:9e:6e:6a:84:0c:86:6a:d5:91:53: 88:02:c1:89:17:2a:cb:f5:f1:3d:a9:5f:32:16:94: aa:eb:23:a8:4f:a2:87:5a:09:48:3f:2a:0e:77:ee: a4:1a:f9:7d:33:e8:63:f2:89:41:a7:ea:78:33:34: 98:65:5b:53:09:d0:ee:52:07:65:32:a1:29:8d:97: 84:cd:51:1b:d1:7e:68:97:1f:93:c8:42:19:ec:82: f0:42:2a:7f:1f:2a:9a:fb:d3:b6:0d:0e:ce:60:84: 01:d6:bd:3d:37:54:90:00:86:73:c0:39:2d:24:61: cc:6f:6c:ab:3f:77:84:f2:36:6d:3e:c1:0e:71:e1: 2b:10:8f:9c:13:93:34:b3:75:fc:d8:a6:2f:a1:49: 90:54:c6:88:20:c4:56:b0:55:e4:9c:3c:de:d9:14: 2e:c5:f3:3a:bb:c8:de:70:a2:c4:62:32:6b:62:3a: df:e8:f6:27:55:95:4f:25:92:b0:fa:39:fe:91:d7: d9:1b:7e:a7:a9:8e:1a:8b:bd:5e:41:bf:0c:d5:00: 6e:c5:5d:12:a4:f0:a8:58:cf:53:5f:c3:37:6b:f2: ba:d5:1b:29:27:c5:10:65:0a:19:9e:91:2d:b9:5b: c0:54:37:83:3b:29:26:fd:8b:89:98:1c:d0:bf:aa: 1b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EE:D2:D4:74:9B:1A:49:02:A6:0C:98:10:94:F2:2A:E3:D7:5F:C2 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/F-7S1HSbGkkCpgyYEJTyKuPXX8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:648:2120::/48 Signature Algorithm: sha256WithRSAEncryption 4a:4e:83:48:5d:e2:7f:2a:da:0e:69:5a:59:34:f2:ef:13:ab: 88:91:bc:56:89:34:e4:ae:57:ee:95:8b:0d:e1:2a:fd:85:48: f6:74:83:91:e9:4e:7e:42:c0:fd:d9:8e:9a:fa:61:86:ff:04: 60:ac:53:77:34:80:85:cb:83:ef:57:24:b2:5b:a8:4f:0e:e6: b0:73:f9:d0:e2:e2:d5:55:a1:e3:b7:7c:d2:4a:d9:8f:fc:4e: d9:07:2c:ad:34:54:65:69:b4:64:05:e0:ed:e3:12:5a:e8:5c: b8:b1:1c:c4:94:47:00:d3:25:18:69:12:eb:1e:b0:2f:c4:c2: 10:a8:0c:20:24:7e:08:ce:20:cd:c7:a1:f0:4e:99:52:f7:df: 98:d1:55:df:d1:77:5f:91:14:e7:c0:cb:13:58:f6:56:29:90: 1d:de:94:50:ad:1f:d2:fb:97:1a:aa:da:f3:26:1a:08:de:78: b3:ee:8a:1a:c0:87:36:51:cb:07:8c:ee:ac:e3:9f:3d:67:e4: 41:0e:61:81:07:22:22:6d:d2:fe:0f:26:2a:c6:e5:5d:cd:f9: bb:f9:18:63:41:18:39:b6:16:e3:f7:92:17:f3:97:5e:7e:7c: a2:bb:08:ca:11:3f:10:4b:c6:de:b9:2e:9f:1b:51:16:28:16: 72:c4:5a:bc -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87PS+zEo8Q+2p6hS5eR5NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2VlZDJkNDc0OWIxYTQ5MDJhNjBjOTgxMDk0ZjIyYWUzZDc1ZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2ygmZ5uaoQMhmrVkVOIAsGJFyrL 9fE9qV8yFpSq6yOoT6KHWglIPyoOd+6kGvl9M+hj8olBp+p4MzSYZVtTCdDuUgdl MqEpjZeEzVEb0X5olx+TyEIZ7ILwQip/Hyqa+9O2DQ7OYIQB1r09N1SQAIZzwDkt JGHMb2yrP3eE8jZtPsEOceErEI+cE5M0s3X82KYvoUmQVMaIIMRWsFXknDze2RQu xfM6u8jecKLEYjJrYjrf6PYnVZVPJZKw+jn+kdfZG36nqY4ai71eQb8M1QBuxV0S pPCoWM9TX8M3a/K61RspJ8UQZQoZnpEtuVvAVDeDOykm/YuJmBzQv6obBwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBfu0tR0mxpJAqYMmBCU8irj11/CMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvRi03UzFIU2JHa2tDcGd5WUVKVHlLdVBYWDhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGSCEg MA0GCSqGSIb3DQEBCwUAA4IBAQBKToNIXeJ/KtoOaVpZNPLvE6uIkbxWiTTkrlfu lYsN4Sr9hUj2dIOR6U5+QsD92Y6a+mGG/wRgrFN3NICFy4PvVySyW6hPDuawc/nQ 4uLVVaHjt3zSStmP/E7ZByytNFRlabRkBeDt4xJa6Fy4sRzElEcA0yUYaRLrHrAv xMIQqAwgJH4IziDNx6HwTplS99+Y0VXf0XdfkRTnwMsTWPZWKZAd3pRQrR/S+5ca qtrzJhoI3niz7ooawIc2UcsHjO6s4589Z+RBDmGBByIibdL+DyYqxuVdzfm7+Rhj QRg5thbj95IX85defnyiuwjKET8QS8beuS6fG1EWKBZyxFq8 -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:27 2026 by rpki-client