This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/fWJsYVgQL5CmKB9LVnueb5k5Zmo.roa File: fWJsYVgQL5CmKB9LVnueb5k5Zmo.roa (raw, json) Hash identifier: bPkpgWGDJi90Zjbu3ytyLe5FiLyyElxalkB8o9TUe7w= Subject key identifier: 7D:62:6C:61:58:10:2F:90:A6:28:1F:4B:56:7B:9E:6F:99:39:66:6A Certificate issuer: /CN=19193cd0cfb9395989358e0396312cfbb1c88ffe Certificate serial: 019B790FF8F4CC473365D8D7429B3F1C601E Authority key identifier: 19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/fWJsYVgQL5CmKB9LVnueb5k5Zmo.roa Signing time: Thu 01 Jan 2026 10:17:28 +0000 ROA not before: Thu 01 Jan 2026 10:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39392 IP address blocks: 2a02:6ea0:cd77::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:f8:f4:cc:47:33:65:d8:d7:42:9b:3f:1c:60:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19193cd0cfb9395989358e0396312cfbb1c88ffe Validity Not Before: Jan 1 10:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d626c6158102f90a6281f4b567b9e6f9939666a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:2b:c8:6c:dd:d1:5c:4a:84:5f:df:7a:57: 44:a9:5e:ac:85:84:8d:95:d8:07:e9:28:59:9b:af: dd:ad:88:84:54:0a:9c:70:21:d0:a2:cd:23:1a:27: 75:bb:50:08:a0:03:25:dd:2d:63:c8:5d:10:a6:52: d6:74:79:ad:08:68:69:13:d3:e8:06:c3:a2:fc:43: 48:06:16:e1:fe:a8:40:1c:49:40:53:00:10:26:d9: 59:3a:97:58:b2:b9:76:58:24:cb:4b:9e:cd:fe:4f: b8:11:e8:ee:df:89:d3:53:7f:7b:d3:b2:89:b3:b2: 22:e4:5b:97:73:e6:b3:51:68:e6:cf:c4:3c:93:e0: 70:a8:47:8d:94:00:69:3b:f8:bb:27:4b:9e:a5:b9: 9b:c5:a3:e9:9a:73:c8:81:cb:31:05:45:7c:0a:91: 38:19:8d:92:b0:cf:5e:4f:a6:2f:15:39:c1:74:05: 8d:b0:90:1e:0b:39:a8:de:86:0c:0f:1f:b2:ed:02: 00:77:7d:2a:69:9d:ce:d3:b8:92:25:0f:3a:6d:61: 5e:71:e9:96:86:bc:7e:df:2d:f3:0e:a5:1b:b6:ce: 75:56:93:48:92:74:8f:9a:d3:d9:a2:9c:4e:e7:18: ee:e9:0d:ff:35:56:db:f3:b7:46:5d:fb:66:8a:d8: a9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:62:6C:61:58:10:2F:90:A6:28:1F:4B:56:7B:9E:6F:99:39:66:6A X509v3 Authority Key Identifier: keyid:19:19:3C:D0:CF:B9:39:59:89:35:8E:03:96:31:2C:FB:B1:C8:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GRk80M-5OVmJNY4DljEs-7HIj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/fWJsYVgQL5CmKB9LVnueb5k5Zmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/0d68d4-adb3-4ff9-b78a-4ef9d07c4405/1/GRk80M-5OVmJNY4DljEs-7HIj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:6ea0:cd77::/48 Signature Algorithm: sha256WithRSAEncryption 53:63:a7:8e:96:50:18:27:f4:d7:3c:41:f3:db:ce:dd:6f:9f: d3:f6:1f:f8:fc:d2:83:1a:d6:a9:c9:57:4b:44:0f:79:c0:21: 34:08:93:7b:90:87:59:8c:64:1e:a1:57:58:9d:7a:53:1c:80: 10:25:6d:f3:70:a3:42:10:47:ef:63:da:5d:14:bc:90:86:f4: a5:95:77:56:05:a9:1f:22:7a:d7:e3:67:23:3f:20:be:2d:42: 45:b2:20:cf:4e:10:4e:1a:db:fe:af:ab:8e:c1:70:ee:65:50: 9c:d3:03:16:8e:b1:31:88:b1:e5:ce:a7:28:67:6d:c3:4f:16: 66:cc:e4:4b:f1:5f:df:b2:99:5f:54:66:e6:c3:59:aa:0b:55: 6b:e1:a5:79:3f:d7:d8:07:db:af:35:3d:f9:24:9a:50:6b:05: 32:bb:ba:a4:f9:e6:8e:eb:f4:05:84:a5:99:7e:6e:47:38:5f: 37:40:1e:dd:97:bc:4b:d1:fd:34:3c:01:b2:7d:d2:cd:e6:d0: a3:59:4a:b1:68:a3:e7:2d:12:7d:fa:e8:7f:6d:c5:2f:b9:04: 58:c7:22:8d:63:d2:b5:26:aa:c6:30:db:6f:5a:0b:99:66:a5: 24:b2:1b:23:e9:81:8f:5d:03:a4:b4:78:db:b0:2f:4c:ca:f2: 70:d1:ca:87 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt5D/j0zEczZdjXQps/HGAeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5MTkzY2QwY2ZiOTM5NTk4OTM1OGUwMzk2MzEyY2ZiYjFj ODhmZmUwHhcNMjYwMTAxMTAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDYyNmM2MTU4MTAyZjkwYTYyODFmNGI1NjdiOWU2Zjk5Mzk2NjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBkryGzd0VxKhF/feldEqV6shYSN ldgH6ShZm6/drYiEVAqccCHQos0jGid1u1AIoAMl3S1jyF0QplLWdHmtCGhpE9Po BsOi/ENIBhbh/qhAHElAUwAQJtlZOpdYsrl2WCTLS57N/k+4Eeju34nTU39707KJ s7Ii5FuXc+azUWjmz8Q8k+BwqEeNlABpO/i7J0uepbmbxaPpmnPIgcsxBUV8CpE4 GY2SsM9eT6YvFTnBdAWNsJAeCzmo3oYMDx+y7QIAd30qaZ3O07iSJQ86bWFecemW hrx+3y3zDqUbts51VpNIknSPmtPZopxO5xju6Q3/NVbb87dGXftmitipmwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH1ibGFYEC+QpigfS1Z7nm+ZOWZqMB8GA1UdIwQY MBaAFBkZPNDPuTlZiTWOA5YxLPuxyI/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEt NGVmOWQwN2M0NDA1LzEvZldKc1lWZ1FMNUNtS0I5TFZudWViNWs1Wm1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8wZDY4ZDQtYWRiMy00ZmY5LWI3OGEtNGVmOWQwN2M0NDA1 LzEvR1JrODBNLTVPVm1KTlk0RGxqRXMtN0hJal80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgJuoM13 MA0GCSqGSIb3DQEBCwUAA4IBAQBTY6eOllAYJ/TXPEHz287db5/T9h/4/NKDGtap yVdLRA95wCE0CJN7kIdZjGQeoVdYnXpTHIAQJW3zcKNCEEfvY9pdFLyQhvSllXdW BakfInrX42cjPyC+LUJFsiDPThBOGtv+r6uOwXDuZVCc0wMWjrExiLHlzqcoZ23D TxZmzORL8V/fsplfVGbmw1mqC1Vr4aV5P9fYB9uvNT35JJpQawUyu7qk+eaO6/QF hKWZfm5HOF83QB7dl7xL0f00PAGyfdLN5tCjWUqxaKPnLRJ9+uh/bcUvuQRYxyKN Y9K1JqrGMNtvWguZZqUkshsj6YGPXQOktHjbsC9MyvJw0cqH -----END CERTIFICATE-----Generated at Sun Jan 25 18:21:02 2026 by rpki-client