This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/FOViJa71bONBPbhwdf8cY26xpGw.roa File: FOViJa71bONBPbhwdf8cY26xpGw.roa (raw, json) Hash identifier: acfz9cNHyt0g2+N/TsWc9s6Ju/Ql+2/s0NXKkyXco/4= Subject key identifier: 14:E5:62:25:AE:F5:6C:E3:41:3D:B8:70:75:FF:1C:63:6E:B1:A4:6C Certificate issuer: /CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Certificate serial: 019AA9791268179F99C3603734F762702CB4 Authority key identifier: 9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/FOViJa71bONBPbhwdf8cY26xpGw.roa Signing time: Sat 22 Nov 2025 02:51:15 +0000 ROA not before: Sat 22 Nov 2025 02:51:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213903 IP address blocks: 2a0a:d686:8000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.mft rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a9:79:12:68:17:9f:99:c3:60:37:34:f7:62:70:2c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b744da79f0531a73ad6f4baf0837e93eb6801b1 Validity Not Before: Nov 22 02:51:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=14e56225aef56ce3413db87075ff1c636eb1a46c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4c:8a:8e:36:0b:73:e5:31:40:3b:d7:1f:0c: 8f:74:15:dd:65:77:7c:67:21:ed:0b:82:3f:52:5a: e8:c4:4a:91:e8:a3:94:cc:2c:0b:72:38:ff:40:ec: 57:67:e6:9e:06:01:16:5f:e4:be:75:22:fa:6e:19: d5:38:01:40:e5:40:84:19:85:e1:05:7c:b9:4e:71: d3:ca:31:8c:1c:7a:68:37:01:80:29:e8:52:49:13: dd:d4:c0:76:32:a2:1a:17:29:bd:63:ba:31:d9:6e: 5b:af:32:a0:22:6c:ae:87:60:5c:e1:b4:e1:50:92: 4e:b1:c0:dc:82:9c:7e:33:d1:16:24:ab:8a:2b:c8: 4b:88:74:15:af:91:6b:db:bf:cd:fd:c6:e3:36:38: 77:9b:3d:a6:41:77:0e:98:14:ba:d7:30:d4:04:af: 6f:71:73:45:da:ab:e6:01:51:51:24:6a:35:53:88: ff:74:34:50:84:56:2a:9e:c4:de:a2:2c:f7:4d:e7: 5f:3a:7c:aa:f0:28:19:5f:4a:d3:e0:a1:62:f6:68: 3f:21:91:ba:c7:1a:0a:ff:94:3d:7f:cb:c7:e7:2c: e2:a5:24:3f:05:38:4c:90:82:15:a5:d6:2f:24:a9: 99:7f:f3:3e:e7:b8:5c:5a:f5:a9:eb:28:6a:1b:df: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E5:62:25:AE:F5:6C:E3:41:3D:B8:70:75:FF:1C:63:6E:B1:A4:6C X509v3 Authority Key Identifier: keyid:9B:74:4D:A7:9F:05:31:A7:3A:D6:F4:BA:F0:83:7E:93:EB:68:01:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3RNp58FMac61vS68IN-k-toAbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/FOViJa71bONBPbhwdf8cY26xpGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3b1742-3075-4cc9-8e8e-92ab80e2efd5/1/m3RNp58FMac61vS68IN-k-toAbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d686:8000::/40 Signature Algorithm: sha256WithRSAEncryption 5c:3f:c6:1d:2c:79:c6:b2:79:82:82:d2:d1:fa:0d:78:02:2d: e7:c4:79:f9:92:5a:2b:0b:41:6f:65:e0:99:1f:0a:5a:50:ce: 33:ab:af:98:68:45:36:92:c8:8b:94:95:0b:d1:67:e4:48:56: f0:fd:92:c5:92:be:78:18:d9:cb:02:20:4c:e4:be:ce:04:b4: c2:8c:fa:24:f8:06:c7:11:61:eb:0a:c8:cf:d0:59:6f:d4:20: c7:f4:57:a7:c3:26:2a:93:55:b1:2c:75:8e:a2:fe:c2:38:05: 4b:45:e4:04:eb:b5:e4:93:36:19:3e:90:d6:9c:6a:8d:81:a0: 7d:d6:0e:cf:39:88:48:4a:fa:b6:22:0c:33:78:75:6d:ac:e4: 20:b5:cc:5b:f7:2e:5d:22:2b:e4:0b:63:d0:7c:1e:d7:9a:51: 64:78:6c:9e:88:e3:d9:f0:23:8f:d9:88:a1:57:3f:a2:4f:e3: 96:be:d1:6c:b5:05:11:3d:d5:f5:ac:75:49:78:c8:0b:e2:e7: 18:05:db:fb:51:bd:39:6f:bf:d7:8c:d5:5b:fc:b3:d9:33:9b: ad:09:83:c5:b7:f7:d5:b0:90:a0:14:d0:40:0f:9b:78:0d:09: c7:7d:4e:7e:04:0d:2f:84:3e:ba:4f:2b:ee:87:46:82:53:14: c4:76:64:7d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZqpeRJoF5+Zw2A3NPdicCy0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNzQ0ZGE3OWYwNTMxYTczYWQ2ZjRiYWYwODM3ZTkzZWI2 ODAxYjEwHhcNMjUxMTIyMDI1MTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGU1NjIyNWFlZjU2Y2UzNDEzZGI4NzA3NWZmMWM2MzZlYjFhNDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0yKjjYLc+UxQDvXHwyPdBXdZXd8 ZyHtC4I/UlroxEqR6KOUzCwLcjj/QOxXZ+aeBgEWX+S+dSL6bhnVOAFA5UCEGYXh BXy5TnHTyjGMHHpoNwGAKehSSRPd1MB2MqIaFym9Y7ox2W5brzKgImyuh2Bc4bTh UJJOscDcgpx+M9EWJKuKK8hLiHQVr5Fr27/N/cbjNjh3mz2mQXcOmBS61zDUBK9v cXNF2qvmAVFRJGo1U4j/dDRQhFYqnsTeoiz3TedfOnyq8CgZX0rT4KFi9mg/IZG6 xxoK/5Q9f8vH5yzipSQ/BThMkIIVpdYvJKmZf/M+57hcWvWp6yhqG9+bPQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBTlYiWu9WzjQT24cHX/HGNusaRsMB8GA1UdIwQY MBaAFJt0TaefBTGnOtb0uvCDfpPraAGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUt OTJhYjgwZTJlZmQ1LzEvRk9WaUphNzFiT05CUGJod2RmOGNZMjZ4cEd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zYjE3NDItMzA3NS00Y2M5LThlOGUtOTJhYjgwZTJlZmQ1 LzEvbTNSTnA1OEZNYWM2MXZTNjhJTi1rLXRvQWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgrWhoAw DQYJKoZIhvcNAQELBQADggEBAFw/xh0secayeYKC0tH6DXgCLefEefmSWisLQW9l 4JkfClpQzjOrr5hoRTaSyIuUlQvRZ+RIVvD9ksWSvngY2csCIEzkvs4EtMKM+iT4 BscRYesKyM/QWW/UIMf0V6fDJiqTVbEsdY6i/sI4BUtF5ATrteSTNhk+kNacao2B oH3WDs85iEhK+rYiDDN4dW2s5CC1zFv3Ll0iK+QLY9B8HteaUWR4bJ6I49nwI4/Z iKFXP6JP45a+0Wy1BRE91fWsdUl4yAvi5xgF2/tRvTlvv9eM1Vv8s9kzm60Jg8W3 99WwkKAU0EAPm3gNCcd9Tn4EDS+EPrpPK+6HRoJTFMR2ZH0= -----END CERTIFICATE-----Generated at Sat Dec 6 12:27:26 2025 by rpki-client