This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/FwyHYSFHDsnHe13-teMRd2Fwsok.roa File: FwyHYSFHDsnHe13-teMRd2Fwsok.roa (raw, json) Hash identifier: HzeLlPvVaerPbRc2Uu0sKiJSiZNPtG93MnAwRwanKNY= Subject key identifier: 17:0C:87:61:21:47:0E:C9:C7:7B:5D:FE:B5:E3:11:77:61:70:B2:89 Certificate issuer: /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec Certificate serial: 019B7CEE231E452219D79083083C2528E12B Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/FwyHYSFHDsnHe13-teMRd2Fwsok.roa Signing time: Fri 02 Jan 2026 04:18:59 +0000 ROA not before: Fri 02 Jan 2026 04:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204834 IP address blocks: 2a0b:7c80::/48 maxlen: 48 2a0b:7c80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:23:1e:45:22:19:d7:90:83:08:3c:25:28:e1:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec Validity Not Before: Jan 2 04:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=170c876121470ec9c77b5dfeb5e311776170b289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3f:03:a2:6a:05:c9:63:d5:f9:f1:1c:09:ab: 97:66:92:3d:00:89:79:6b:11:05:f5:29:3d:56:69: c4:48:8c:bd:c9:db:e6:45:f5:9f:89:5e:3a:a9:ed: e5:f0:02:a5:50:b5:e9:e1:eb:ef:42:7a:72:51:30: 4b:6f:31:1b:e3:6b:d4:55:ad:6e:1a:d1:c6:78:dc: 0d:68:ac:ef:13:46:2c:27:26:7b:12:13:94:3b:0f: 2f:2d:b5:c2:cc:af:e4:d5:2e:c5:d3:8b:80:12:1a: a1:c5:72:59:76:0f:a0:e5:b4:21:7e:68:dd:05:ee: e5:62:0a:9a:0f:b4:5f:63:89:37:22:e9:d6:6f:61: c0:39:ba:ca:d8:cc:19:e2:e9:3e:f7:37:35:65:0f: 12:b7:c5:18:5a:1d:d4:83:17:e7:cb:f4:6d:75:c3: b5:da:44:2a:7a:ed:49:1f:7c:2b:c6:a1:d5:af:71: de:35:03:fc:ea:fd:3f:64:f7:63:81:ab:c1:19:3a: 32:4b:1e:67:d8:ad:c4:7d:54:cb:ea:57:75:67:0b: bf:d1:50:cc:ef:2d:90:56:d4:2b:ba:1f:58:02:21: ab:74:11:63:ac:a8:d3:5a:0a:33:17:97:44:ac:15: 98:e5:ef:74:86:9b:21:8a:7f:fe:ae:f3:20:c5:b4: d8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0C:87:61:21:47:0E:C9:C7:7B:5D:FE:B5:E3:11:77:61:70:B2:89 X509v3 Authority Key Identifier: keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/FwyHYSFHDsnHe13-teMRd2Fwsok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0b:7c80::/47 Signature Algorithm: sha256WithRSAEncryption 75:1b:cc:d2:02:73:15:16:5e:cb:a3:78:15:8c:d3:4a:30:c4: 59:5c:22:ca:d5:b4:a0:22:81:01:d3:22:dc:40:18:c2:61:30: ad:ef:4d:29:84:99:2d:25:ae:a2:62:38:20:6f:38:86:0b:01: ec:38:ba:d8:82:09:dc:0f:ab:e2:8d:cd:72:40:d2:b1:17:53: 58:7b:60:83:32:95:79:fe:29:e4:1f:c2:b0:c0:ea:bb:3e:cf: f4:26:fd:df:6e:8c:88:9d:6e:f9:53:11:b7:52:03:52:43:22: 8a:4f:36:16:fd:0d:86:02:48:5a:d5:f9:f7:8e:e7:e2:59:6d: f2:f1:e5:56:35:f5:07:e0:b1:90:44:2b:f3:c0:7a:13:26:bb: e8:f1:5f:bc:f8:66:f5:43:83:1c:22:ed:a8:f4:37:bf:93:33: 45:e7:1e:03:e2:03:12:3b:fc:94:30:81:a7:0c:c7:84:0a:8c: 4e:5e:c2:81:cd:f7:d3:ec:5c:25:37:ab:1f:71:33:bc:01:c6: ff:ba:ef:b0:16:0e:bc:c9:e7:c7:f7:f9:d1:99:7c:e2:cd:85: e4:90:63:18:ae:45:da:5f:37:dd:50:0f:75:23:80:e6:84:26: c1:c8:ca:42:04:7d:80:b6:71:9c:2b:57:16:a6:77:f4:48:a3: 0a:30:21:01 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87iMeRSIZ15CDCDwlKOErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNjJjZjgwN2E1NmI3NzFhNWY0MmNjMTg5YWYyZDYzMWVi NWFhZWMwHhcNMjYwMTAyMDQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzBjODc2MTIxNDcwZWM5Yzc3YjVkZmViNWUzMTE3NzYxNzBiMjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT8DomoFyWPV+fEcCauXZpI9AIl5 axEF9Sk9VmnESIy9ydvmRfWfiV46qe3l8AKlULXp4evvQnpyUTBLbzEb42vUVa1u GtHGeNwNaKzvE0YsJyZ7EhOUOw8vLbXCzK/k1S7F04uAEhqhxXJZdg+g5bQhfmjd Be7lYgqaD7RfY4k3IunWb2HAObrK2MwZ4uk+9zc1ZQ8St8UYWh3Ugxfny/RtdcO1 2kQqeu1JH3wrxqHVr3HeNQP86v0/ZPdjgavBGToySx5n2K3EfVTL6ld1Zwu/0VDM 7y2QVtQruh9YAiGrdBFjrKjTWgozF5dErBWY5e90hpshin/+rvMgxbTYxQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBcMh2EhRw7Jx3td/rXjEXdhcLKJMB8GA1UdIwQY MBaAFNBiz4B6VrdxpfQswYmvLWMetarsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQt MWRkNWZhYTA2YjBhLzEvRnd5SFlTRkhEc25IZTEzLXRlTVJkMkZ3c29rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS84ODZlZDYtZjYxMy00YTBlLThjMGQtMWRkNWZhYTA2YjBh LzEvMEdMUGdIcFd0M0dsOUN6QmlhOHRZeDYxcXV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgt8gAAA MA0GCSqGSIb3DQEBCwUAA4IBAQB1G8zSAnMVFl7Lo3gVjNNKMMRZXCLK1bSgIoEB 0yLcQBjCYTCt700phJktJa6iYjggbziGCwHsOLrYggncD6vijc1yQNKxF1NYe2CD MpV5/inkH8KwwOq7Ps/0Jv3fboyInW75UxG3UgNSQyKKTzYW/Q2GAkha1fn3jufi WW3y8eVWNfUH4LGQRCvzwHoTJrvo8V+8+Gb1Q4McIu2o9De/kzNF5x4D4gMSO/yU MIGnDMeECoxOXsKBzffT7FwlN6sfcTO8Acb/uu+wFg68yefH9/nRmXzizYXkkGMY rkXaXzfdUA91I4DmhCbByMpCBH2AtnGcK1cWpnf0SKMKMCEB -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:37 2026 by rpki-client