This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa File: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (raw, json) Hash identifier: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU= Subject key identifier: 16:BE:54:5D:F8:DD:32:B8:44:1D:84:3A:5D:D8:9A:D0:E7:66:35:69 Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19 Certificate serial: 019B7C11C8B3F8A1F4EF8D5F2C98C3A5FAED Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa Signing time: Fri 02 Jan 2026 00:18:18 +0000 ROA not before: Fri 02 Jan 2026 00:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 766 IP address blocks: 2001:678:508::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:c8:b3:f8:a1:f4:ef:8d:5f:2c:98:c3:a5:fa:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19 Validity Not Before: Jan 2 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16be545df8dd32b8441d843a5dd89ad0e7663569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:23:50:68:77:7f:f0:20:21:13:75:da:67:7b: f7:d5:ec:a8:b1:ae:09:c2:af:74:4b:3b:ed:e0:c9: 57:89:48:93:bb:c5:6c:c1:14:56:f6:4b:67:30:03: b4:aa:be:6c:3a:9c:2d:8c:54:72:39:b9:c8:02:ba: 4e:d3:bc:67:d5:aa:62:22:9d:b4:00:8a:3d:cd:ef: 74:42:1c:f4:3f:57:68:85:17:7f:f3:a9:13:b8:8b: 00:e8:cb:cd:53:80:62:ae:0c:78:bf:3f:8e:50:e4: 2b:36:3f:b7:91:a5:28:3e:c3:21:02:19:36:c6:e5: f3:c7:04:56:30:a3:6d:6f:12:ea:96:21:5c:2d:d9: 28:b4:83:2e:28:f7:18:f0:11:b0:54:11:97:b4:88: 49:6e:9c:a2:76:78:e9:d4:9f:ce:1b:79:93:5a:15: 35:78:ca:bd:af:34:73:cc:c1:8a:4f:20:37:b4:60: c7:82:0b:07:16:f8:58:8d:c0:4c:6a:bf:55:03:02: 26:66:ee:e2:4e:21:4c:2a:0e:94:50:fc:5d:6a:d8: c5:b7:44:58:19:47:a8:9a:47:6a:df:a2:cb:a6:35: 61:37:78:b5:30:ff:79:d1:6c:6d:d8:61:8a:4e:e4: 3d:96:b5:df:2f:2e:36:81:b7:82:aa:e9:9a:33:c4: 2b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BE:54:5D:F8:DD:32:B8:44:1D:84:3A:5D:D8:9A:D0:E7:66:35:69 X509v3 Authority Key Identifier: keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:508::/48 Signature Algorithm: sha256WithRSAEncryption 55:5f:af:f7:08:7a:5b:08:20:63:fd:9d:4c:6b:20:a3:59:93: 7f:b3:87:91:72:c7:3d:9b:d9:96:82:35:42:34:a9:45:8d:aa: 52:14:69:09:b8:87:28:62:1d:a3:93:d5:8b:10:de:a9:7e:1b: fe:ed:b7:16:3f:82:37:ac:d7:a9:2c:cf:fe:60:c6:2b:80:86: ee:da:2a:c9:83:41:34:10:eb:b2:4c:04:ad:60:10:72:5a:7d: 4f:c9:71:af:7d:dd:29:4b:b1:d0:2b:79:3f:8a:88:fd:1a:f9: 80:30:77:c0:b6:7e:1d:be:b1:43:d3:bf:14:b2:50:a8:e9:4a: 42:f5:60:1a:fb:41:b7:fa:58:e5:4f:df:33:2a:9c:83:56:ee: 15:d6:6e:3a:e1:ac:15:2c:dd:d5:5f:cc:47:44:41:58:92:00: 7a:85:71:00:d7:b0:95:fe:0c:ca:8f:d0:39:d6:39:5f:f3:54: f5:f4:05:c0:97:b0:9c:76:12:d8:b9:8b:e0:2a:cf:5e:32:51: 83:ed:26:95:27:8e:8d:dc:5a:5b:a5:28:9e:27:93:16:00:e7: 88:cb:93:0d:d9:59:b2:66:f0:03:43:1c:34:bf:52:e5:81:d2: c7:04:9b:91:a3:fe:5c:29:72:c9:d7:58:47:e5:14:0a:68:e7: 91:de:05:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8Eciz+KH0741fLJjDpfrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3 N2ZkMTkwHhcNMjYwMTAyMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmJlNTQ1ZGY4ZGQzMmI4NDQxZDg0M2E1ZGQ4OWFkMGU3NjYzNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SNQaHd/8CAhE3XaZ3v31eyosa4J wq90Szvt4MlXiUiTu8VswRRW9ktnMAO0qr5sOpwtjFRyObnIArpO07xn1apiIp20 AIo9ze90Qhz0P1dohRd/86kTuIsA6MvNU4Birgx4vz+OUOQrNj+3kaUoPsMhAhk2 xuXzxwRWMKNtbxLqliFcLdkotIMuKPcY8BGwVBGXtIhJbpyidnjp1J/OG3mTWhU1 eMq9rzRzzMGKTyA3tGDHggsHFvhYjcBMar9VAwImZu7iTiFMKg6UUPxdatjFt0RY GUeomkdq36LLpjVhN3i1MP950Wxt2GGKTuQ9lrXfLy42gbeCqumaM8QrxwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBa+VF343TK4RB2EOl3YmtDnZjVpMB8GA1UdIwQY MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt NzlkOTFlZjgyN2NlLzEvRnI1VVhmamRNcmhFSFlRNlhkaWEwT2RtTldrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAUI MA0GCSqGSIb3DQEBCwUAA4IBAQBVX6/3CHpbCCBj/Z1MayCjWZN/s4eRcsc9m9mW gjVCNKlFjapSFGkJuIcoYh2jk9WLEN6pfhv+7bcWP4I3rNepLM/+YMYrgIbu2irJ g0E0EOuyTAStYBByWn1PyXGvfd0pS7HQK3k/ioj9GvmAMHfAtn4dvrFD078UslCo 6UpC9WAa+0G3+ljlT98zKpyDVu4V1m464awVLN3VX8xHREFYkgB6hXEA17CV/gzK j9A51jlf81T19AXAl7CcdhLYuYvgKs9eMlGD7SaVJ46N3FpbpSieJ5MWAOeIy5MN 2VmyZvADQxw0v1LlgdLHBJuRo/5cKXLJ11hH5RQKaOeR3gUt -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:59 2026 by rpki-client