This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa File: FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa (raw, json) Hash identifier: ysT9E+YNysEYFfe5RzvJVpbtqR6v2fUqt40v4tEcOBQ= Subject key identifier: 14:AA:4E:84:EB:AE:5C:E1:76:09:0C:94:07:35:93:D6:97:69:56:A7 Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Certificate serial: 019B7EA54AC2568A9A9012AF33C5885A09FF Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa Signing time: Fri 02 Jan 2026 12:18:40 +0000 ROA not before: Fri 02 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198468 IP address blocks: 2001:67c:e98::/48 maxlen: 48 2001:67c:1330::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:4a:c2:56:8a:9a:90:12:af:33:c5:88:5a:09:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9 Validity Not Before: Jan 2 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14aa4e84ebae5ce176090c94073593d6976956a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e4:7b:e7:5e:cf:f2:48:10:b4:36:9d:56:c9: 16:a6:31:f4:f1:ff:a5:a2:ac:07:3b:3d:ab:2b:a5: a9:c3:d0:b9:4f:3c:82:11:30:70:3a:bf:0c:43:24: 8e:80:0f:e9:7f:33:98:1f:d0:d3:84:a6:ff:20:78: bd:ef:08:21:e4:94:68:f4:03:f3:67:2c:cb:1c:99: 5a:b9:4c:6a:60:88:da:67:83:68:55:5a:7e:4a:93: c5:d8:45:db:86:a5:4d:f1:6c:d0:ec:8f:89:d7:57: 8b:10:19:30:5a:cf:2a:6d:4a:bc:42:e9:06:dd:3e: 94:ce:a1:5d:88:cb:35:fe:76:e8:04:51:68:a3:19: 71:c5:63:b1:a4:6d:17:8b:0a:d2:62:a9:60:93:c7: 1c:ae:d4:e3:07:d9:8a:4e:94:87:91:00:2f:84:1d: 91:f1:8e:a8:5f:aa:af:60:0f:6b:fb:46:dd:52:80: a1:da:06:23:a7:a5:cd:d2:75:3f:94:01:15:7f:df: 48:8f:3f:c8:c5:6a:bd:2c:e5:a8:d0:57:50:98:28: db:56:35:fb:01:65:b6:98:45:eb:ff:60:78:f8:10: d1:60:7f:28:69:ef:31:66:76:09:46:af:f1:9a:90: c2:9d:30:1c:3e:12:39:88:90:6c:d0:97:3d:b2:d7: eb:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AA:4E:84:EB:AE:5C:E1:76:09:0C:94:07:35:93:D6:97:69:56:A7 X509v3 Authority Key Identifier: keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/FKpOhOuuXOF2CQyUBzWT1pdpVqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:e98::/48 2001:67c:1330::/48 Signature Algorithm: sha256WithRSAEncryption a7:a7:50:07:c2:d4:38:2f:35:19:d6:aa:21:05:9f:0a:95:8f: 6a:39:ad:1f:05:ff:30:2b:ae:fc:13:7c:ca:43:32:ab:b1:bc: 2d:c7:21:a8:03:ce:74:11:6d:3d:00:4e:77:a9:15:f3:7b:5b: 45:63:19:de:6a:51:f5:d5:a5:3d:78:8f:3e:f3:73:99:23:63: bd:80:41:dd:a5:d4:8b:a1:f9:14:0c:21:4e:d6:1d:cd:b5:91: 23:3d:33:cb:88:57:d5:f9:a3:d4:02:79:af:8e:60:af:44:6c: 73:fd:2c:5f:fe:ea:eb:f7:76:7f:98:6f:14:4a:f7:8e:21:14: 26:a9:25:10:1d:26:57:5d:a2:84:49:3f:2a:a3:b9:65:da:2e: f7:60:bc:9a:93:3a:85:93:46:d8:79:42:3e:dc:43:0a:c9:ab: 4f:d4:1a:e2:28:82:58:10:0d:f7:e2:ab:e5:bf:f9:dd:38:23: 9c:4c:5e:a3:33:3e:ad:b4:f3:4f:fa:51:42:3a:54:2a:48:85: f0:1d:a2:24:43:99:96:d0:ef:49:cc:52:a9:68:05:79:50:1f: d2:61:f6:61:36:31:6c:6d:30:df:90:83:95:06:6b:ba:6f:f2: 16:62:62:49:ec:0a:56:d3:09:8b:3b:40:14:5e:57:79:38:4c: 43:da:f4:5a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pUrCVoqakBKvM8WIWgn/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZDAzYTU4NmI5NzhhNzBhYWE4MmUwOTU4YTkwMTUyZTcy Njc5ZDkwHhcNMjYwMTAyMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGFhNGU4NGViYWU1Y2UxNzYwOTBjOTQwNzM1OTNkNjk3Njk1NmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+R7517P8kgQtDadVskWpjH08f+l oqwHOz2rK6Wpw9C5TzyCETBwOr8MQySOgA/pfzOYH9DThKb/IHi97wgh5JRo9APz ZyzLHJlauUxqYIjaZ4NoVVp+SpPF2EXbhqVN8WzQ7I+J11eLEBkwWs8qbUq8QukG 3T6UzqFdiMs1/nboBFFooxlxxWOxpG0XiwrSYqlgk8ccrtTjB9mKTpSHkQAvhB2R 8Y6oX6qvYA9r+0bdUoCh2gYjp6XN0nU/lAEVf99Ijz/IxWq9LOWo0FdQmCjbVjX7 AWW2mEXr/2B4+BDRYH8oae8xZnYJRq/xmpDCnTAcPhI5iJBs0Jc9stfr+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBSqToTrrlzhdgkMlAc1k9aXaVanMB8GA1UdIwQY MBaAFE3QOlhrl4pwqqguCVipAVLnJnnZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUt NzZhM2ExMGEyNmYyLzEvRktwT2hPdXVYT0YyQ1F5VUJ6V1QxcGRwVnFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jOWQ1MjMtMGJiOS00NTczLTk1OTUtNzZhM2ExMGEyNmYy LzEvVGRBNldHdVhpbkNxcUM0SldLa0JVdWNtZWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAIAEGfA6Y AwcAIAEGfBMwMA0GCSqGSIb3DQEBCwUAA4IBAQCnp1AHwtQ4LzUZ1qohBZ8KlY9q Oa0fBf8wK678E3zKQzKrsbwtxyGoA850EW09AE53qRXze1tFYxnealH11aU9eI8+ 83OZI2O9gEHdpdSLofkUDCFO1h3NtZEjPTPLiFfV+aPUAnmvjmCvRGxz/Sxf/urr 93Z/mG8USveOIRQmqSUQHSZXXaKEST8qo7ll2i73YLyakzqFk0bYeUI+3EMKyatP 1BriKIJYEA334qvlv/ndOCOcTF6jMz6ttPNP+lFCOlQqSIXwHaIkQ5mW0O9JzFKp aAV5UB/SYfZhNjFsbTDfkIOVBmu6b/IWYmJJ7ApW0wmLO0AUXld5OExD2vRa -----END CERTIFICATE-----Generated at Sun Jan 25 19:38:09 2026 by rpki-client