This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa File: xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa (raw, json) Hash identifier: dcuU5KhFuT+OtopOGBCq8QR05uFVdXywWZjFZcyGZgM= Subject key identifier: C4:ED:1E:6B:01:36:07:54:B4:4C:AB:C1:71:A6:86:89:08:74:3A:5D Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57 Certificate serial: 019B7FF122D5B1C4AB3162688FDF8E66B551 Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa Signing time: Fri 02 Jan 2026 18:21:08 +0000 ROA not before: Fri 02 Jan 2026 18:21:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42063 IP address blocks: 2001:67c:2fdc::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.mft rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:22:d5:b1:c4:ab:31:62:68:8f:df:8e:66:b5:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57 Validity Not Before: Jan 2 18:21:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4ed1e6b01360754b44cabc171a6868908743a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4f:d9:3d:40:69:84:f0:82:68:ef:8f:6d:d3: 08:3c:d7:56:30:81:96:52:d3:d7:f4:40:a5:ae:26: a3:7c:da:72:5d:97:c1:1f:55:5a:0e:4d:1a:9c:46: a9:ed:a5:99:39:eb:a8:ba:32:97:07:e6:ed:ba:23: a4:4f:16:ad:f0:5b:48:64:3f:94:7c:fb:82:79:22: 4c:23:8d:b8:e4:68:42:92:9e:fc:44:52:34:29:22: 9c:66:dd:f5:5d:58:cf:77:a3:8d:62:b0:63:6d:27: 47:6f:1b:7b:76:01:0a:3d:1b:5e:c5:1c:2a:62:fe: 2f:6b:4a:36:5b:81:d6:7f:a1:ef:e1:3e:9b:20:99: e2:32:a8:59:a6:16:f9:d7:4b:08:c1:5f:a6:7a:a2: 28:af:fd:ab:83:d7:65:3d:cc:8f:28:17:b4:7f:fc: dd:dd:2d:0a:01:be:3f:8d:66:a4:93:56:84:c6:33: 80:d0:73:2d:f1:4b:ba:13:6e:d1:18:ac:b8:2d:9f: c9:1b:22:ec:69:81:09:fe:ba:49:a4:82:e8:22:17: 65:b0:a3:f1:ec:77:df:bb:e6:f2:81:ac:71:03:a7: 5e:c8:ba:17:4b:4e:72:af:f3:ea:bc:b3:90:7e:97: bb:24:43:b2:78:ff:1d:ca:64:24:04:1e:db:05:ea: fd:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:ED:1E:6B:01:36:07:54:B4:4C:AB:C1:71:A6:86:89:08:74:3A:5D X509v3 Authority Key Identifier: keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/xO0eawE2B1S0TKvBcaaGiQh0Ol0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:2fdc::/48 Signature Algorithm: sha256WithRSAEncryption 99:2f:1d:98:1a:53:64:41:6e:51:5f:aa:83:9d:03:5b:2e:2d: 8f:87:b3:50:22:6b:c2:c0:e0:34:52:ab:34:28:53:d3:81:40: 97:bf:f9:b4:26:b3:50:78:70:55:d3:4e:81:91:78:c7:d3:b1: d7:9e:3d:91:5a:c9:9d:95:cf:20:dc:b6:b4:b4:f2:fb:46:b7: 8b:91:6b:8a:d4:94:a7:32:f6:17:fc:60:e1:57:8c:a7:0f:65: 50:47:57:88:8c:18:0d:fe:8c:05:6b:04:94:6e:85:3d:69:f6: b3:08:24:79:4a:c6:23:a3:6d:87:05:20:dc:26:6f:5f:ad:86: b6:c3:af:57:4c:93:3c:b6:fb:1d:ba:2d:75:24:4d:22:87:64: 91:bd:58:21:0a:82:4c:04:f2:3c:8d:aa:dc:76:1b:6c:07:b9: 7d:bf:55:d1:7d:24:9b:ca:ac:87:51:71:8b:a5:a8:c0:12:25: 0b:9a:48:88:19:3d:e3:d7:1f:5a:0e:4d:5a:40:4c:1c:6a:26: 9b:07:f1:09:e3:4b:25:8c:b9:19:a2:71:1e:92:f5:13:5b:dd: 13:57:a4:4c:9e:6e:98:ac:87:14:bb:cf:da:21:a5:21:41:66: ff:ca:b8:57:51:8f:b4:84:a7:dd:88:b4:23:3e:b6:7c:31:1a: 94:62:c6:ec -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8SLVscSrMWJoj9+OZrVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NGFkNDVkMjJiNWYzY2YyZTcxY2UwYWMwMTA3NGI3Y2Qy MWFjNTcwHhcNMjYwMTAyMTgyMTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGVkMWU2YjAxMzYwNzU0YjQ0Y2FiYzE3MWE2ODY4OTA4NzQzYTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU/ZPUBphPCCaO+PbdMIPNdWMIGW UtPX9EClriajfNpyXZfBH1VaDk0anEap7aWZOeuoujKXB+btuiOkTxat8FtIZD+U fPuCeSJMI4245GhCkp78RFI0KSKcZt31XVjPd6ONYrBjbSdHbxt7dgEKPRtexRwq Yv4va0o2W4HWf6Hv4T6bIJniMqhZphb510sIwV+meqIor/2rg9dlPcyPKBe0f/zd 3S0KAb4/jWakk1aExjOA0HMt8Uu6E27RGKy4LZ/JGyLsaYEJ/rpJpILoIhdlsKPx 7Hffu+bygaxxA6deyLoXS05yr/PqvLOQfpe7JEOyeP8dymQkBB7bBer9iwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFMTtHmsBNgdUtEyrwXGmhokIdDpdMB8GA1UdIwQY MBaAFPZK1F0itfPPLnHOCsAQdLfNIaxXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2Qt Njk5YjIzNGZjNzhjLzEveE8wZWF3RTJCMVMwVEt2QmNhYUdpUWgwT2wwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9lZTNiODQtMjdkNy00ZGM3LThmM2QtNjk5YjIzNGZjNzhj LzEvOWtyVVhTSzE4ODh1Y2M0S3dCQjB0ODBockZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfC/c MA0GCSqGSIb3DQEBCwUAA4IBAQCZLx2YGlNkQW5RX6qDnQNbLi2Ph7NQImvCwOA0 Uqs0KFPTgUCXv/m0JrNQeHBV006BkXjH07HXnj2RWsmdlc8g3La0tPL7RreLkWuK 1JSnMvYX/GDhV4ynD2VQR1eIjBgN/owFawSUboU9afazCCR5SsYjo22HBSDcJm9f rYa2w69XTJM8tvsdui11JE0ih2SRvVghCoJMBPI8jarcdhtsB7l9v1XRfSSbyqyH UXGLpajAEiULmkiIGT3j1x9aDk1aQEwcaiabB/EJ40sljLkZonEekvUTW90TV6RM nm6YrIcUu8/aIaUhQWb/yrhXUY+0hKfdiLQjPrZ8MRqUYsbs -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:08 2026 by rpki-client