This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/FHuC08xej65vWpoCn1vY19ZYaXo.roa File: FHuC08xej65vWpoCn1vY19ZYaXo.roa (raw, json) Hash identifier: fK+QZuAXM9LenQpI7DNcQDyQgibuJZ/UqzboQddeQwQ= Subject key identifier: 14:7B:82:D3:CC:5E:8F:AE:6F:5A:9A:02:9F:5B:D8:D7:D6:58:69:7A Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Certificate serial: 019B78A29C6D7AB5089DD2ECA5EB3582FD88 Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/FHuC08xej65vWpoCn1vY19ZYaXo.roa Signing time: Thu 01 Jan 2026 08:18:01 +0000 ROA not before: Thu 01 Jan 2026 08:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210562 IP address blocks: 2001:67c:8cc::/48 maxlen: 48 2001:67c:b10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9c:6d:7a:b5:08:9d:d2:ec:a5:eb:35:82:fd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=147b82d3cc5e8fae6f5a9a029f5bd8d7d658697a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e6:fa:24:35:ed:40:ec:b3:23:3f:b7:1c:f3: 0e:fc:ab:6d:15:8a:7b:dc:c8:dd:d9:10:13:3e:85: 93:56:cd:0a:35:90:d3:cb:34:b6:64:35:52:b9:48: 80:29:df:46:4f:32:82:01:b6:d0:e0:49:00:78:a8: d1:02:ba:a5:21:7c:e6:dc:a9:43:98:d3:6a:b7:ac: 9e:cd:d5:e1:48:31:ec:70:e6:1b:e6:6d:1d:64:28: a2:18:10:ea:3f:96:87:3d:e7:b3:f9:56:3c:d8:01: 24:5a:30:bd:28:2e:da:75:0b:1c:56:e8:c7:cc:24: 5a:9c:26:fa:ea:0c:26:b1:68:59:01:47:61:c7:a7: 2b:2f:19:a0:11:84:fe:a1:2a:64:3a:bf:7d:13:6e: b5:00:e5:03:80:3f:a5:e2:59:b8:a9:0b:5f:da:47: ab:ae:5a:0f:6c:40:d0:92:d5:74:ac:5e:e4:9b:fa: 05:51:e9:5f:86:b0:5a:fe:0f:86:57:05:81:c0:a5: 0d:9d:ff:3a:4a:97:59:e6:d1:09:4e:0e:00:1d:87: ca:89:27:0f:40:b1:71:d4:af:d0:46:04:8b:cf:6a: b2:d9:3b:c8:43:e5:12:59:02:99:7c:d7:6f:ee:2b: 36:fb:92:fe:61:57:de:f0:b2:ff:d1:4d:60:60:cb: 6c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7B:82:D3:CC:5E:8F:AE:6F:5A:9A:02:9F:5B:D8:D7:D6:58:69:7A X509v3 Authority Key Identifier: keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/FHuC08xej65vWpoCn1vY19ZYaXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:8cc::/48 2001:67c:b10::/48 Signature Algorithm: sha256WithRSAEncryption 28:5f:df:d9:da:17:9a:e4:4e:bd:72:9f:62:58:be:f7:06:d9: fa:81:ad:bf:4f:3e:f6:c3:82:88:ce:75:dd:9a:7a:42:80:07: 81:af:96:25:b6:17:22:eb:50:e9:c4:be:ae:64:36:a5:dd:1c: c4:07:b3:88:a8:e9:e8:13:c1:74:01:ad:e0:f3:96:40:59:f7: e5:72:6d:5d:4a:af:0c:c4:44:67:6e:69:72:ee:23:78:c0:14: 84:28:77:fa:a2:1d:9b:7b:7a:cc:07:96:4b:38:c6:78:26:15: 37:97:83:6d:f5:a2:67:ce:4a:5a:f5:54:f1:b9:a5:13:7e:c4: 34:37:6e:1c:81:5d:17:57:2a:b0:f5:cf:9f:6d:fc:ad:a9:f0: 67:7c:02:ef:2f:1d:4b:87:0c:c9:ae:31:f9:77:9f:4b:a8:e9: cc:32:6f:3a:8d:e7:ef:76:c4:d0:a6:2a:df:5f:35:01:70:c2: e3:15:ce:7a:90:e5:43:ae:7c:f6:01:27:e5:13:3f:23:16:52: 09:e5:f1:b2:6f:ba:b8:e6:b1:93:0b:56:ca:06:b6:06:b0:7a: 52:5e:c6:42:d0:ee:75:1c:c9:01:3a:40:be:3a:bb:8e:27:49: 67:c5:b1:48:67:b7:e1:1d:48:84:fd:69:2a:5e:5b:7d:2a:c6: 89:54:d4:3a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4opxterUIndLspes1gv2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTFhYzhmOGViYjUwMmZjYzQ0NTYyZGMxMGQ5NzM4ODQ0 OTNiZTUwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDdiODJkM2NjNWU4ZmFlNmY1YTlhMDI5ZjViZDhkN2Q2NTg2OTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+b6JDXtQOyzIz+3HPMO/KttFYp7 3Mjd2RATPoWTVs0KNZDTyzS2ZDVSuUiAKd9GTzKCAbbQ4EkAeKjRArqlIXzm3KlD mNNqt6yezdXhSDHscOYb5m0dZCiiGBDqP5aHPeez+VY82AEkWjC9KC7adQscVujH zCRanCb66gwmsWhZAUdhx6crLxmgEYT+oSpkOr99E261AOUDgD+l4lm4qQtf2ker rloPbEDQktV0rF7km/oFUelfhrBa/g+GVwWBwKUNnf86SpdZ5tEJTg4AHYfKiScP QLFx1K/QRgSLz2qy2TvIQ+USWQKZfNdv7is2+5L+YVfe8LL/0U1gYMts4wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBR7gtPMXo+ub1qaAp9b2NfWWGl6MB8GA1UdIwQY MBaAFL3hrI+Ou1AvzERWLcENlziESTvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYt MWE1MDgwODY0ZmE3LzEvRkh1QzA4eGVqNjV2V3BvQ24xdlkxOVpZYVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYtMWE1MDgwODY0ZmE3 LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfAjM AwcAIAEGfAsQMA0GCSqGSIb3DQEBCwUAA4IBAQAoX9/Z2hea5E69cp9iWL73Btn6 ga2/Tz72w4KIznXdmnpCgAeBr5Ylthci61DpxL6uZDal3RzEB7OIqOnoE8F0Aa3g 85ZAWfflcm1dSq8MxERnbmly7iN4wBSEKHf6oh2be3rMB5ZLOMZ4JhU3l4Nt9aJn zkpa9VTxuaUTfsQ0N24cgV0XVyqw9c+fbfytqfBnfALvLx1LhwzJrjH5d59LqOnM Mm86jefvdsTQpirfXzUBcMLjFc56kOVDrnz2ASflEz8jFlIJ5fGyb7q45rGTC1bK BrYGsHpSXsZC0O51HMkBOkC+OruOJ0lnxbFIZ7fhHUiE/WkqXlt9KsaJVNQ6 -----END CERTIFICATE-----Generated at Thu Feb 5 01:49:42 2026 by rpki-client