This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/_DBibvy1y9JoyoGE-bKCjSoDWyc.roa File: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (raw, json) Hash identifier: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8= Subject key identifier: FC:30:62:6E:FC:B5:CB:D2:68:CA:81:84:F9:B2:82:8D:2A:03:5B:27 Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019B7E38F7778068229A051EDC2AFDEFF683 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/_DBibvy1y9JoyoGE-bKCjSoDWyc.roa Signing time: Fri 02 Jan 2026 10:20:21 +0000 ROA not before: Fri 02 Jan 2026 10:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212149 IP address blocks: 2a12:5840:b00b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f7:77:80:68:22:9a:05:1e:dc:2a:fd:ef:f6:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jan 2 10:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc30626efcb5cbd268ca8184f9b2828d2a035b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b2:f9:ff:fa:83:a1:5f:1d:f8:b3:b0:2b:bc: b1:d4:7c:da:2b:39:12:8b:aa:ca:79:53:9e:19:e0: 6c:dc:85:03:e1:b5:ee:1f:81:0a:4c:73:4e:47:3a: 32:d0:39:c0:ce:c5:6d:42:f0:4f:0e:af:99:2a:4a: ea:b0:3d:e9:89:81:fc:ef:8f:f7:56:02:95:87:98: 48:c5:e0:8c:ca:75:d0:0a:59:f9:62:86:c3:ad:ef: 33:24:17:24:9d:ec:4e:3e:45:20:b3:8c:71:f7:da: d7:31:88:4f:ec:9e:b4:a4:c9:80:19:2f:05:40:1f: 05:f9:a9:54:73:06:a1:9e:a8:30:84:5a:2f:3c:1a: 9a:97:35:5a:2e:88:41:11:90:ea:2c:2d:fe:e9:5c: ea:10:53:a8:46:a7:23:03:14:88:73:9b:4d:da:0b: 7f:62:4a:15:be:ae:8a:86:22:8c:a8:fd:2f:97:03: 98:c7:e3:c5:0a:8b:51:eb:65:0b:94:da:fb:32:43: 6e:f9:8b:07:6e:3f:f2:64:98:25:82:92:63:f6:d2: a8:b0:5a:88:af:f0:f5:ce:d1:c1:15:16:8e:14:c9: 4f:f6:16:10:27:a8:2c:5e:87:9e:3f:60:da:95:f9: 02:6b:a1:2b:32:85:2e:aa:c4:cc:07:60:f8:4c:e4: fe:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:30:62:6E:FC:B5:CB:D2:68:CA:81:84:F9:B2:82:8D:2A:03:5B:27 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/_DBibvy1y9JoyoGE-bKCjSoDWyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:5840:b00b::/48 Signature Algorithm: sha256WithRSAEncryption 52:f1:24:49:b8:03:89:60:99:41:3a:5a:02:9c:a3:78:be:ef: 8a:10:dd:81:e0:67:54:8a:45:ff:b8:c5:1c:86:03:f2:a9:41: 2f:78:5b:b2:67:50:9b:ea:b4:50:99:0a:d1:5c:14:96:9a:62: 33:a7:31:85:e6:82:7e:d1:43:cb:cc:51:17:20:5e:9d:0b:be: f2:28:c6:95:ab:c0:7a:01:6d:d1:b8:a9:85:56:5e:4c:d2:dc: 25:85:96:6a:66:db:5b:a8:c6:25:72:cc:11:b6:b9:d6:8f:03: 75:ba:69:fd:80:15:a6:1d:71:3a:2b:bc:ba:fe:19:7b:f8:f7: ab:e4:a8:bf:49:a9:c3:37:22:fe:96:89:1e:76:90:1c:cb:28: 2e:fd:dd:ee:54:88:30:01:35:e5:37:2f:60:d7:f7:87:7b:42: c9:f0:4b:9d:8d:82:19:b7:12:4c:1c:50:f5:fe:55:05:c1:8b: 6b:dc:a5:9b:2d:97:3c:d6:68:2b:f3:57:6f:7d:93:5b:27:f1: ca:bc:60:54:fe:be:5f:35:2f:25:14:24:8f:b0:72:bf:b1:78: eb:d7:43:02:dd:8c:5f:7b:72:54:4e:99:ee:66:a8:ae:cd:b5: f5:b7:b4:1c:a1:f6:e6:e4:0f:5a:ed:f0:46:cb:55:b0:10:5b: 8d:67:13:d6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OPd3gGgimgUe3Cr97/aDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwMTAyMTAyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzMwNjI2ZWZjYjVjYmQyNjhjYTgxODRmOWIyODI4ZDJhMDM1YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LL5//qDoV8d+LOwK7yx1HzaKzkS i6rKeVOeGeBs3IUD4bXuH4EKTHNORzoy0DnAzsVtQvBPDq+ZKkrqsD3piYH874/3 VgKVh5hIxeCMynXQCln5YobDre8zJBcknexOPkUgs4xx99rXMYhP7J60pMmAGS8F QB8F+alUcwahnqgwhFovPBqalzVaLohBEZDqLC3+6VzqEFOoRqcjAxSIc5tN2gt/ YkoVvq6KhiKMqP0vlwOYx+PFCotR62ULlNr7MkNu+YsHbj/yZJglgpJj9tKosFqI r/D1ztHBFRaOFMlP9hYQJ6gsXoeeP2DalfkCa6ErMoUuqsTMB2D4TOT+uwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPwwYm78tcvSaMqBhPmygo0qA1snMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvX0RCaWJ2eTF5OUpveW9HRS1iS0NqU29EV3ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhJYQLAL MA0GCSqGSIb3DQEBCwUAA4IBAQBS8SRJuAOJYJlBOloCnKN4vu+KEN2B4GdUikX/ uMUchgPyqUEveFuyZ1Cb6rRQmQrRXBSWmmIzpzGF5oJ+0UPLzFEXIF6dC77yKMaV q8B6AW3RuKmFVl5M0twlhZZqZttbqMYlcswRtrnWjwN1umn9gBWmHXE6K7y6/hl7 +Per5Ki/SanDNyL+lokedpAcyygu/d3uVIgwATXlNy9g1/eHe0LJ8EudjYIZtxJM HFD1/lUFwYtr3KWbLZc81mgr81dvfZNbJ/HKvGBU/r5fNS8lFCSPsHK/sXjr10MC 3Yxfe3JUTpnuZqiuzbX1t7Qcofbm5A9a7fBGy1WwEFuNZxPW -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:58 2026 by rpki-client