This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/fk7mY39tErf9E91KsoOlDrOBfU8.roa File: fk7mY39tErf9E91KsoOlDrOBfU8.roa (raw, json) Hash identifier: lngR8tmbGC/WTujFHgPebFJew1qfiHWhUb5haVGmuH4= Subject key identifier: 7E:4E:E6:63:7F:6D:12:B7:FD:13:DD:4A:B2:83:A5:0E:B3:81:7D:4F Certificate issuer: /CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Certificate serial: 019B7C801FC2AEDA6717D26A872A45D93E8A Authority key identifier: FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/fk7mY39tErf9E91KsoOlDrOBfU8.roa Signing time: Fri 02 Jan 2026 02:18:50 +0000 ROA not before: Fri 02 Jan 2026 02:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202269 IP address blocks: 2a0e:b080::/30 maxlen: 30 2a0e:b084::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.mft rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:1f:c2:ae:da:67:17:d2:6a:87:2a:45:d9:3e:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd8eff201218a5a823cbe85336853e3db4dd16eb Validity Not Before: Jan 2 02:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e4ee6637f6d12b7fd13dd4ab283a50eb3817d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1e:90:a0:45:27:25:c9:92:da:a1:58:cd:56: 25:74:55:8b:11:f2:f7:7d:ee:e4:ef:0c:ea:9b:c5: 29:cd:34:c9:a5:cd:01:7a:22:86:d7:86:b5:9e:cb: 7f:f6:7e:c1:d1:01:3c:cc:b2:c5:a5:6a:e9:d6:53: 76:92:39:4a:dd:eb:7d:5c:27:53:27:bd:1d:c6:94: ff:90:3f:c9:c3:53:cb:1f:af:75:b2:ff:a5:85:a7: ba:12:c6:48:38:ef:17:b4:1b:8d:d6:2e:40:5e:dd: 69:c9:5a:e2:9f:9c:70:45:2a:84:89:c5:13:80:64: 66:84:3b:83:7c:78:6d:de:2b:aa:ce:35:5a:d1:6b: 83:67:e5:81:84:75:5f:19:e5:43:29:67:6f:fb:fe: 82:39:19:c1:71:34:ec:ee:1b:33:da:94:a4:37:48: b5:92:2e:9d:e0:53:fe:96:9b:df:8f:73:f3:bf:88: 52:6d:99:f5:15:70:47:af:ff:49:0a:29:30:09:72: 53:1b:e1:6e:2f:f5:a2:07:e3:2f:c5:a5:c0:39:7d: 0b:78:da:26:4c:93:30:38:c7:1c:24:94:5d:90:35: f9:78:e7:e2:28:50:3a:83:d6:80:a7:b9:49:5e:a6: ce:cd:e6:06:0b:ef:59:f5:6a:e9:67:36:8f:fe:cb: 3d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4E:E6:63:7F:6D:12:B7:FD:13:DD:4A:B2:83:A5:0E:B3:81:7D:4F X509v3 Authority Key Identifier: keyid:FD:8E:FF:20:12:18:A5:A8:23:CB:E8:53:36:85:3E:3D:B4:DD:16:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Y7_IBIYpagjy-hTNoU-PbTdFus.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/fk7mY39tErf9E91KsoOlDrOBfU8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99fd41-7ed8-4b25-8d56-c7ac26bcc2da/1/_Y7_IBIYpagjy-hTNoU-PbTdFus.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b080::/29 Signature Algorithm: sha256WithRSAEncryption 9d:99:c2:22:58:d2:ed:71:39:b7:7b:ea:b4:60:cf:17:0a:0c: ae:37:be:b0:15:4a:d0:d9:e3:5e:12:c8:3e:e8:63:d8:55:d9: 01:79:46:24:df:f3:c8:83:7b:cd:86:89:50:4d:af:6d:0c:1a: c4:06:95:fc:17:de:34:59:62:92:45:b5:f1:82:f5:4a:fe:15: cc:07:3c:71:92:43:5e:3c:30:a8:af:78:63:bd:7f:aa:47:7d: 7b:a2:00:43:7b:99:bb:50:6c:2a:1e:d5:85:db:ba:76:b1:eb: 47:44:4f:d7:d1:33:0e:69:c9:52:39:47:39:d0:ba:61:1e:7d: 38:1e:19:63:b2:b4:29:a1:ae:ff:79:78:3b:b4:87:78:7e:e3: 03:34:db:23:ec:74:9d:3e:95:d4:38:f2:fc:d2:82:78:25:34: 6b:54:79:30:d9:8e:fc:29:e1:66:9a:d2:fe:2e:df:14:79:22: d9:94:48:1e:d9:1c:50:bd:68:af:78:d0:c7:43:57:21:bd:42: f4:e3:01:34:4a:cc:19:af:18:7a:ec:30:61:59:c8:ad:97:58: 51:f5:22:bf:b0:cb:43:36:bc:88:f4:58:5a:d5:69:ec:02:fa: 55:07:2c:22:ab:9f:f7:b0:c5:e4:06:bf:54:a6:5c:35:1f:8a: 10:01:29:d0 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt8gB/CrtpnF9JqhypF2T6KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkOGVmZjIwMTIxOGE1YTgyM2NiZTg1MzM2ODUzZTNkYjRk ZDE2ZWIwHhcNMjYwMTAyMDIxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTRlZTY2MzdmNmQxMmI3ZmQxM2RkNGFiMjgzYTUwZWIzODE3ZDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx6QoEUnJcmS2qFYzVYldFWLEfL3 fe7k7wzqm8UpzTTJpc0BeiKG14a1nst/9n7B0QE8zLLFpWrp1lN2kjlK3et9XCdT J70dxpT/kD/Jw1PLH691sv+lhae6EsZIOO8XtBuN1i5AXt1pyVrin5xwRSqEicUT gGRmhDuDfHht3iuqzjVa0WuDZ+WBhHVfGeVDKWdv+/6CORnBcTTs7hsz2pSkN0i1 ki6d4FP+lpvfj3Pzv4hSbZn1FXBHr/9JCikwCXJTG+FuL/WiB+MvxaXAOX0LeNom TJMwOMccJJRdkDX5eOfiKFA6g9aAp7lJXqbOzeYGC+9Z9WrpZzaP/ss9aQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFH5O5mN/bRK3/RPdSrKDpQ6zgX1PMB8GA1UdIwQY MBaAFP2O/yASGKWoI8voUzaFPj203RbrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYt YzdhYzI2YmNjMmRhLzEvZms3bVkzOXRFcmY5RTkxS3NvT2xEck9CZlU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85OWZkNDEtN2VkOC00YjI1LThkNTYtYzdhYzI2YmNjMmRh LzEvX1k3X0lCSVlwYWdqeS1oVE5vVS1QYlRkRnVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg6wgDAN BgkqhkiG9w0BAQsFAAOCAQEAnZnCIljS7XE5t3vqtGDPFwoMrje+sBVK0NnjXhLI Puhj2FXZAXlGJN/zyIN7zYaJUE2vbQwaxAaV/BfeNFlikkW18YL1Sv4VzAc8cZJD XjwwqK94Y71/qkd9e6IAQ3uZu1BsKh7Vhdu6drHrR0RP19EzDmnJUjlHOdC6YR59 OB4ZY7K0KaGu/3l4O7SHeH7jAzTbI+x0nT6V1Djy/NKCeCU0a1R5MNmO/CnhZprS /i7fFHki2ZRIHtkcUL1or3jQx0NXIb1C9OMBNErMGa8YeuwwYVnIrZdYUfUiv7DL Qza8iPRYWtVp7AL6VQcsIquf97DF5Aa/VKZcNR+KEAEp0A== -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:49 2026 by rpki-client