This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/f2RzKPqHeeSwshGgaI03kVuo9ZY.roa File: f2RzKPqHeeSwshGgaI03kVuo9ZY.roa (raw, json) Hash identifier: vcuUb/xuMjhKt4KDFSNHCcpL3GkZRwfPEaVwfoajM48= Subject key identifier: 7F:64:73:28:FA:87:79:E4:B0:B2:11:A0:68:8D:37:91:5B:A8:F5:96 Certificate issuer: /CN=19fb56adc9071d5e9fda2b669438b92bf863e58f Certificate serial: 019B77588765084AE51CB03D2356AD921885 Authority key identifier: 19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/f2RzKPqHeeSwshGgaI03kVuo9ZY.roa Signing time: Thu 01 Jan 2026 02:17:29 +0000 ROA not before: Thu 01 Jan 2026 02:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33988 IP address blocks: 2001:67c:14c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.mft rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:87:65:08:4a:e5:1c:b0:3d:23:56:ad:92:18:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19fb56adc9071d5e9fda2b669438b92bf863e58f Validity Not Before: Jan 1 02:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f647328fa8779e4b0b211a0688d37915ba8f596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4c:a0:07:64:4d:84:7a:d5:67:45:75:de:65: 07:e0:d1:59:86:a4:ab:59:92:9e:d3:91:b9:e4:86: 14:4c:47:04:83:28:59:9f:8f:b0:63:ff:91:57:fb: 41:f5:77:f0:06:de:1a:ca:bb:8a:a3:1e:a3:4c:f3: 06:ab:73:95:62:10:0f:95:87:4e:0a:2b:6b:5c:0f: ae:87:94:da:98:7a:bd:5e:6f:7c:d8:55:88:b7:01: 23:a5:83:51:fe:0c:22:32:d5:44:9a:d1:9c:4b:4f: c2:03:01:b0:79:62:0a:94:62:5f:a4:8f:7f:23:d8: e7:e3:62:21:25:c7:e1:11:52:82:e1:6e:c0:de:d8: 2f:c8:62:17:78:3f:60:e9:10:9c:17:80:7b:80:c8: e2:a4:c4:a7:95:b1:5a:aa:ec:83:0e:9d:c2:44:e4: 69:b2:aa:0e:5e:f9:19:98:0b:85:39:13:d6:3a:07: bc:d0:a8:6e:60:f0:8c:dc:ee:1b:2b:0d:37:6f:1b: 7b:57:48:da:05:cf:74:ed:6a:15:db:06:c2:47:56: 56:18:c6:d8:49:69:6d:55:cc:5c:b9:0e:24:40:8d: 6b:8c:94:a4:a4:96:e2:fb:f0:87:f7:33:eb:9b:1d: 40:f7:9b:4c:09:5e:20:2c:37:f9:a7:6c:83:3b:8c: 2d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:64:73:28:FA:87:79:E4:B0:B2:11:A0:68:8D:37:91:5B:A8:F5:96 X509v3 Authority Key Identifier: keyid:19:FB:56:AD:C9:07:1D:5E:9F:DA:2B:66:94:38:B9:2B:F8:63:E5:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GftWrckHHV6f2itmlDi5K_hj5Y8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/f2RzKPqHeeSwshGgaI03kVuo9ZY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/618399-c53b-4cf2-930e-63eebe0325ec/1/GftWrckHHV6f2itmlDi5K_hj5Y8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:14c::/48 Signature Algorithm: sha256WithRSAEncryption 7e:8b:32:53:84:95:17:ed:53:98:ec:16:cc:86:b1:62:5e:bd: 50:ff:65:59:eb:43:5d:43:23:8b:da:3d:06:82:9b:ad:c5:34: 5f:d8:5b:b1:16:8e:5a:f0:92:90:c1:4b:d6:3f:f3:de:8c:27: a1:fc:47:79:e0:55:ca:8b:2a:f5:c1:be:03:fc:72:99:40:46: d2:13:d5:48:12:c2:30:8d:22:4c:a5:bd:87:46:67:ff:af:11: 4b:19:b0:f5:b8:97:c4:34:4f:84:d3:29:48:0c:1a:30:44:fb: 2e:38:15:45:0c:65:9d:ae:4e:20:2c:d7:72:1e:4d:99:79:93: f0:15:d6:2b:66:a9:02:57:f1:75:0a:d0:aa:59:e6:31:4f:aa: 32:30:4c:ce:72:80:f2:da:aa:8e:80:b4:aa:6a:67:7c:ac:c1: 9d:9f:7c:52:63:54:1a:53:27:08:94:95:fc:6a:da:47:d5:e2: 0c:c4:93:96:f8:11:a1:18:13:5c:56:55:21:6b:b6:72:7a:1f: 3d:41:d1:58:28:9c:d7:60:f7:3d:50:93:78:29:d7:d5:99:52: d2:1b:69:aa:98:7d:a1:ce:30:bf:79:d5:82:9f:45:78:c0:64: 0c:77:be:c1:f2:61:2e:41:84:40:e6:9d:ab:17:29:4e:97:0f: e0:9d:ee:28 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WIdlCErlHLA9I1atkhiFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZmI1NmFkYzkwNzFkNWU5ZmRhMmI2Njk0MzhiOTJiZjg2 M2U1OGYwHhcNMjYwMTAxMDIxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjY0NzMyOGZhODc3OWU0YjBiMjExYTA2ODhkMzc5MTViYThmNTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEygB2RNhHrVZ0V13mUH4NFZhqSr WZKe05G55IYUTEcEgyhZn4+wY/+RV/tB9XfwBt4ayruKox6jTPMGq3OVYhAPlYdO CitrXA+uh5TamHq9Xm982FWItwEjpYNR/gwiMtVEmtGcS0/CAwGweWIKlGJfpI9/ I9jn42IhJcfhEVKC4W7A3tgvyGIXeD9g6RCcF4B7gMjipMSnlbFaquyDDp3CRORp sqoOXvkZmAuFORPWOge80KhuYPCM3O4bKw03bxt7V0jaBc907WoV2wbCR1ZWGMbY SWltVcxcuQ4kQI1rjJSkpJbi+/CH9zPrmx1A95tMCV4gLDf5p2yDO4wttwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH9kcyj6h3nksLIRoGiNN5FbqPWWMB8GA1UdIwQY MBaAFBn7Vq3JBx1en9orZpQ4uSv4Y+WPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUt NjNlZWJlMDMyNWVjLzEvZjJSektQcUhlZVN3c2hHZ2FJMDNrVnVvOVpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82MTgzOTktYzUzYi00Y2YyLTkzMGUtNjNlZWJlMDMyNWVj LzEvR2Z0V3Jja0hIVjZmMml0bWxEaTVLX2hqNVk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAFM MA0GCSqGSIb3DQEBCwUAA4IBAQB+izJThJUX7VOY7BbMhrFiXr1Q/2VZ60NdQyOL 2j0GgputxTRf2FuxFo5a8JKQwUvWP/PejCeh/Ed54FXKiyr1wb4D/HKZQEbSE9VI EsIwjSJMpb2HRmf/rxFLGbD1uJfENE+E0ylIDBowRPsuOBVFDGWdrk4gLNdyHk2Z eZPwFdYrZqkCV/F1CtCqWeYxT6oyMEzOcoDy2qqOgLSqamd8rMGdn3xSY1QaUycI lJX8atpH1eIMxJOW+BGhGBNcVlUha7Zyeh89QdFYKJzXYPc9UJN4KdfVmVLSG2mq mH2hzjC/edWCn0V4wGQMd77B8mEuQYRA5p2rFylOlw/gne4o -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:56 2026 by rpki-client