This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/5lFyIZmBLBFDx76RfuZHevsHQQY.roa File: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (raw, json) Hash identifier: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0= Subject key identifier: E6:51:72:21:99:81:2C:11:43:C7:BE:91:7E:E6:47:7A:FB:07:41:06 Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 019B7E386F0056B310FD2BCC40EE723CDE96 Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/5lFyIZmBLBFDx76RfuZHevsHQQY.roa Signing time: Fri 02 Jan 2026 10:19:46 +0000 ROA not before: Fri 02 Jan 2026 10:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32780 IP address blocks: 2a07:23c0::/48 maxlen: 48 2a07:23c0:8::/48 maxlen: 48 2a07:23c0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:6f:00:56:b3:10:fd:2b:cc:40:ee:72:3c:de:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Jan 2 10:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e651722199812c1143c7be917ee6477afb074106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:25:31:69:d8:91:76:d6:88:fa:ca:14:ff: 8f:ff:9a:51:7a:8d:dc:94:0b:bd:07:f5:7b:97:62: 99:c3:e7:3f:05:fb:80:3a:48:44:f3:1d:26:30:d0: b9:68:c9:09:1f:ca:15:38:2b:40:50:4f:8c:53:75: 5d:a1:46:1f:b1:81:46:ba:e3:ab:e3:d4:26:8e:71: 3d:5c:11:57:3f:6b:a1:d0:b4:af:0e:59:6c:6e:33: cf:a3:c0:56:00:86:ae:05:46:2c:c5:8a:c0:ad:95: 5d:54:cc:7c:da:73:08:31:82:65:da:3e:84:51:a9: af:96:8b:e3:70:0b:e4:55:67:f1:2f:08:e4:12:79: 72:fd:0b:c2:70:bd:18:79:0c:04:e7:f5:c2:5a:7a: 18:17:6f:d7:6c:5e:c0:90:11:04:24:9c:79:61:22: f8:50:92:72:87:2b:29:3c:49:ba:01:fb:63:d8:61: 5f:9b:38:76:55:11:2e:dd:ed:58:6a:8c:68:ba:6e: 2d:27:34:87:51:9b:02:c3:cb:88:59:75:9b:e5:11: f4:f2:b0:b1:1a:fd:fa:7f:4b:2f:cc:8d:c2:52:4c: 1b:75:4b:03:60:34:c2:ae:f0:51:cd:80:c2:0b:0b: d1:b7:6a:c1:40:18:76:6a:c9:90:f4:cc:a5:1f:fb: f7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:51:72:21:99:81:2C:11:43:C7:BE:91:7E:E6:47:7A:FB:07:41:06 X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/5lFyIZmBLBFDx76RfuZHevsHQQY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:23c0::/48 2a07:23c0:8::/47 Signature Algorithm: sha256WithRSAEncryption a4:d2:d5:67:1d:5b:fd:37:5c:7e:f1:a2:9c:80:f6:7e:48:ae: 86:e9:f3:74:3d:e8:fa:58:6f:4f:27:87:46:f6:31:e4:70:f9: 57:25:33:ef:12:a8:a5:4a:84:25:82:bf:02:fe:37:28:68:a4: 33:ee:75:9f:0d:63:1e:77:64:c1:7e:67:d9:4d:3f:04:d7:f0: 89:12:be:05:2b:33:dc:02:d7:d1:5b:39:54:30:a4:b9:af:ad: e4:23:b6:e4:43:9c:cd:34:52:b0:f4:01:52:00:bb:09:2d:80: 38:bb:d3:63:76:42:60:5b:85:bb:24:c9:e8:57:01:28:b9:9a: c5:1d:f3:42:6d:92:0e:b4:0e:ac:09:5b:f0:e5:cd:18:a0:e5: 96:1d:0a:b1:06:c6:d5:00:63:c5:21:bc:33:26:1e:13:c1:de: 8d:7a:46:0f:28:46:32:4d:d5:ac:7a:3d:73:13:22:fd:48:fd: 2f:54:cc:ba:0d:af:fe:73:55:a5:9f:25:55:f7:8e:80:80:6e: 6a:29:b1:54:2d:aa:d3:e6:f8:71:b6:85:b4:89:2f:f0:7e:37: 04:31:c7:06:f3:5a:05:5d:35:08:39:53:72:47:e3:ed:95:70: de:87:5e:d0:a5:5d:34:02:c4:90:c3:42:19:1b:b9:c7:77:b7: 59:8d:e3:14 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OG8AVrMQ/SvMQO5yPN6WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYwMTAyMTAxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjUxNzIyMTk5ODEyYzExNDNjN2JlOTE3ZWU2NDc3YWZiMDc0MTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdslMWnYkXbWiPrKFP+P/5pReo3c lAu9B/V7l2KZw+c/BfuAOkhE8x0mMNC5aMkJH8oVOCtAUE+MU3VdoUYfsYFGuuOr 49QmjnE9XBFXP2uh0LSvDllsbjPPo8BWAIauBUYsxYrArZVdVMx82nMIMYJl2j6E UamvlovjcAvkVWfxLwjkEnly/QvCcL0YeQwE5/XCWnoYF2/XbF7AkBEEJJx5YSL4 UJJyhyspPEm6Aftj2GFfmzh2VREu3e1Yaoxoum4tJzSHUZsCw8uIWXWb5RH08rCx Gv36f0svzI3CUkwbdUsDYDTCrvBRzYDCCwvRt2rBQBh2asmQ9MylH/v3nQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOZRciGZgSwRQ8e+kX7mR3r7B0EGMB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvNWxGeUlabUJMQkZEeDc2UmZ1WkhldnNIUVFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgcjwAAA AwcBKgcjwAAIMA0GCSqGSIb3DQEBCwUAA4IBAQCk0tVnHVv9N1x+8aKcgPZ+SK6G 6fN0Pej6WG9PJ4dG9jHkcPlXJTPvEqilSoQlgr8C/jcoaKQz7nWfDWMed2TBfmfZ TT8E1/CJEr4FKzPcAtfRWzlUMKS5r63kI7bkQ5zNNFKw9AFSALsJLYA4u9NjdkJg W4W7JMnoVwEouZrFHfNCbZIOtA6sCVvw5c0YoOWWHQqxBsbVAGPFIbwzJh4Twd6N ekYPKEYyTdWsej1zEyL9SP0vVMy6Da/+c1WlnyVV946AgG5qKbFULarT5vhxtoW0 iS/wfjcEMccG81oFXTUIOVNyR+PtlXDeh17QpV00AsSQw0IZG7nHd7dZjeMU -----END CERTIFICATE-----Generated at Wed Jan 21 01:50:05 2026 by rpki-client