This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_Fm7TlXl5OFQ6QHeUiBqKDQV6-A.roa File: _Fm7TlXl5OFQ6QHeUiBqKDQV6-A.roa (raw, json) Hash identifier: roxx1jTurtbiqD7dYa6cwT1bGXKctEf1858p88Dv+vo= Subject key identifier: FC:59:BB:4E:55:E5:E4:E1:50:E9:01:DE:52:20:6A:28:34:15:EB:E0 Certificate issuer: /CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Certificate serial: 019B7F84D2B84E89A58F86A9EB5F34EA16FA Authority key identifier: 18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_Fm7TlXl5OFQ6QHeUiBqKDQV6-A.roa Signing time: Fri 02 Jan 2026 16:22:49 +0000 ROA not before: Fri 02 Jan 2026 16:22:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216435 IP address blocks: 2a11:f140::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.mft rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:d2:b8:4e:89:a5:8f:86:a9:eb:5f:34:ea:16:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=189d6b55d6a688ee5e3381883bb5af68433276e3 Validity Not Before: Jan 2 16:22:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc59bb4e55e5e4e150e901de52206a283415ebe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:6a:99:36:4a:56:00:79:ab:50:6f:ea:47:12: 3a:ab:cd:35:fa:b3:6c:00:bc:50:eb:20:59:16:c3: e3:15:e1:6c:c3:a7:35:82:0a:41:3d:7f:65:73:02: 8d:3d:1c:d0:94:92:0e:b3:5f:ec:e0:a7:10:b4:d3: 69:01:62:b8:10:eb:8f:3b:2d:4f:73:f2:6d:57:95: 57:bb:41:0a:74:04:95:71:71:49:cc:98:01:9c:bc: 20:9f:95:ce:61:11:66:19:e9:f3:f4:1c:45:9c:b7: 48:04:c3:e1:01:38:49:5f:0a:6e:55:e5:43:90:cd: 8f:11:f2:93:7d:e8:26:ba:8a:10:21:fa:d6:f2:5f: 65:c2:a8:59:22:c5:1b:85:98:28:cc:9c:bb:8d:62: bc:f0:98:66:ec:14:a4:95:42:29:1c:88:ca:3f:af: 15:9c:3d:6b:d8:17:75:35:1e:c1:24:67:0d:c5:fb: 8a:22:6a:71:fe:18:88:1e:f0:87:2f:31:44:ac:bd: da:45:76:cf:20:22:2a:8f:d2:08:01:39:f5:7d:f0: c4:3d:14:22:5c:8a:6e:84:25:5e:f9:5d:b0:1a:66: 4f:33:1e:34:de:9a:91:87:0c:d7:e8:83:ea:e8:f5: a2:71:39:f6:cc:50:1b:3c:a9:19:e0:83:79:a8:79: 31:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:59:BB:4E:55:E5:E4:E1:50:E9:01:DE:52:20:6A:28:34:15:EB:E0 X509v3 Authority Key Identifier: keyid:18:9D:6B:55:D6:A6:88:EE:5E:33:81:88:3B:B5:AF:68:43:32:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJ1rVdamiO5eM4GIO7WvaEMyduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/_Fm7TlXl5OFQ6QHeUiBqKDQV6-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/757b56-7b57-48a0-9a75-a2a4c6a621cd/1/GJ1rVdamiO5eM4GIO7WvaEMyduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a11:f140::/29 Signature Algorithm: sha256WithRSAEncryption 55:ac:f9:35:45:b7:e8:50:05:e9:2e:d8:93:2d:67:44:d1:f5: bb:b3:64:7c:64:fe:c9:cd:bc:d8:5e:b7:ea:9b:af:fc:ba:53: 45:b7:bf:b7:7b:e5:bb:4d:82:a5:46:20:0a:9a:71:17:d0:e1: dd:0a:2a:e4:73:cf:b3:79:3d:9c:df:4d:87:81:1b:7d:e4:1c: f4:9b:a9:9f:91:67:a4:69:7d:f1:c5:ef:05:d1:4c:82:3d:4d: b3:4d:36:0b:cc:e0:c7:b0:07:b7:71:25:f4:96:da:70:82:1a: e1:8a:6a:ca:93:83:a8:0a:db:8a:3b:86:ed:c5:87:a9:b1:04: 05:67:94:15:b8:f2:44:40:7e:1b:05:4a:4d:1c:17:90:bb:53: e4:4b:8c:83:b9:94:88:ff:6c:82:ea:ef:5c:0b:1b:80:a6:96: 7d:85:bc:09:92:cb:d1:7d:86:26:6e:e1:29:66:91:be:c1:12: 3b:d4:65:99:ed:63:d2:ee:e8:9c:f2:6a:4b:5d:e4:8c:b6:f9: b1:1e:f6:4c:85:97:1f:14:af:fa:9c:ee:7d:a2:2a:0e:79:b7: e1:cb:c5:c0:9f:83:74:22:90:7d:f2:fe:fb:1c:f7:23:bf:f4: 14:14:77:f5:1e:08:62:aa:d0:f1:8e:cd:1a:bc:15:b4:0d:93: ef:79:3d:70 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hNK4Tomlj4ap61806hb6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4OWQ2YjU1ZDZhNjg4ZWU1ZTMzODE4ODNiYjVhZjY4NDMz Mjc2ZTMwHhcNMjYwMTAyMTYyMjQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzU5YmI0ZTU1ZTVlNGUxNTBlOTAxZGU1MjIwNmEyODM0MTVlYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02qZNkpWAHmrUG/qRxI6q801+rNs ALxQ6yBZFsPjFeFsw6c1ggpBPX9lcwKNPRzQlJIOs1/s4KcQtNNpAWK4EOuPOy1P c/JtV5VXu0EKdASVcXFJzJgBnLwgn5XOYRFmGenz9BxFnLdIBMPhAThJXwpuVeVD kM2PEfKTfegmuooQIfrW8l9lwqhZIsUbhZgozJy7jWK88Jhm7BSklUIpHIjKP68V nD1r2Bd1NR7BJGcNxfuKImpx/hiIHvCHLzFErL3aRXbPICIqj9IIATn1ffDEPRQi XIpuhCVe+V2wGmZPMx403pqRhwzX6IPq6PWicTn2zFAbPKkZ4IN5qHkxXQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPxZu05V5eThUOkB3lIgaig0FevgMB8GA1UdIwQY MBaAFBida1XWpojuXjOBiDu1r2hDMnbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUt YTJhNGM2YTYyMWNkLzEvX0ZtN1RsWGw1T0ZRNlFIZVVpQnFLRFFWNi1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS83NTdiNTYtN2I1Ny00OGEwLTlhNzUtYTJhNGM2YTYyMWNk LzEvR0oxclZkYW1pTzVlTTRHSU83V3ZhRU15ZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhHxQDAN BgkqhkiG9w0BAQsFAAOCAQEAVaz5NUW36FAF6S7Yky1nRNH1u7NkfGT+yc282F63 6puv/LpTRbe/t3vlu02CpUYgCppxF9Dh3Qoq5HPPs3k9nN9Nh4EbfeQc9Jupn5Fn pGl98cXvBdFMgj1Ns002C8zgx7AHt3El9JbacIIa4YpqypODqArbijuG7cWHqbEE BWeUFbjyREB+GwVKTRwXkLtT5EuMg7mUiP9sgurvXAsbgKaWfYW8CZLL0X2GJm7h KWaRvsESO9Rlme1j0u7onPJqS13kjLb5sR72TIWXHxSv+pzufaIqDnm34cvFwJ+D dCKQffL++xz3I7/0FBR39R4IYqrQ8Y7NGrwVtA2T73k9cA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:09 2026 by rpki-client