This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/U_Ta6twf7MIhtnzsm8wlRfxOJjw.roa File: U_Ta6twf7MIhtnzsm8wlRfxOJjw.roa (raw, json) Hash identifier: ynlZLfA1KKQGA9ays2zyoOPFiR0SmVJSMZZfG1zu6sk= Subject key identifier: 53:F4:DA:EA:DC:1F:EC:C2:21:B6:7C:EC:9B:CC:25:45:FC:4E:26:3C Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f Certificate serial: 019B7DC9A5E4A9FB901E1B0331ABD926B038 Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/U_Ta6twf7MIhtnzsm8wlRfxOJjw.roa Signing time: Fri 02 Jan 2026 08:18:45 +0000 ROA not before: Fri 02 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205723 IP address blocks: 2a0a:4540:2000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:a5:e4:a9:fb:90:1e:1b:03:31:ab:d9:26:b0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f Validity Not Before: Jan 2 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53f4daeadc1fecc221b67cec9bcc2545fc4e263c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a6:ca:f6:1f:62:52:b4:26:1d:fc:58:cb:55: 94:e3:be:bd:fc:60:51:9a:01:1a:f3:b0:d3:0a:a4: cf:99:60:d6:71:5a:88:88:2a:fa:16:07:fc:3c:98: 4c:be:bd:ef:1d:df:2f:ef:af:f4:00:b3:f1:19:aa: 49:fe:ec:63:a6:7c:95:e2:ae:44:45:5a:78:9e:59: d6:58:eb:e1:c3:e9:ea:55:17:54:e6:e8:a4:f6:2e: 52:ef:47:71:20:dd:fe:dd:47:36:c6:c3:7d:ae:61: 7a:9e:c6:f9:ab:40:e3:ad:1d:53:14:b2:a2:05:a1: cd:9d:0d:63:c1:3b:4e:0e:86:47:a1:37:46:81:eb: ae:ba:7c:36:ab:58:5d:e6:23:f7:90:6c:62:25:1a: ff:55:c5:2d:03:30:13:16:61:34:50:2b:3f:24:c4: c7:ba:d4:f8:76:0a:07:1f:ae:d1:ff:a7:77:c2:e8: 3b:b8:d4:73:9e:df:55:d6:64:e3:44:b1:f0:6d:de: 3e:05:af:54:cf:1f:74:05:2c:ff:61:03:7b:69:82: 3b:4a:01:b1:bc:12:60:b0:70:9a:95:f0:de:1e:4c: 6e:37:6f:ad:cf:77:ae:b8:a0:2a:7b:6d:bc:d1:2b: ba:2d:99:42:d1:52:29:bb:a6:5c:03:9a:68:b4:3d: 44:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:F4:DA:EA:DC:1F:EC:C2:21:B6:7C:EC:9B:CC:25:45:FC:4E:26:3C X509v3 Authority Key Identifier: keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/U_Ta6twf7MIhtnzsm8wlRfxOJjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:4540:2000::/48 Signature Algorithm: sha256WithRSAEncryption 5c:9e:52:80:ed:e3:b2:38:f3:66:44:a2:d1:95:ee:9b:18:97: 8a:f9:e0:7a:05:f2:b6:d9:28:a6:4d:2d:71:5e:be:0d:0b:26: 07:a8:1d:bc:8b:58:02:51:aa:77:6f:0c:9b:49:7d:c1:dc:44: 3f:e0:1f:9c:ce:d3:6a:ce:9c:cd:68:dd:71:b6:2e:96:32:7b: 65:42:f8:93:ab:69:4f:04:8b:a5:29:c4:dd:0e:54:f9:1f:67: e2:c6:74:b1:b6:ee:c2:2e:3a:dd:53:e7:9d:00:ee:b7:1c:f7: 62:46:98:44:7a:4d:c5:6d:8f:12:0a:e9:3c:c7:40:73:0e:d8: 34:86:2d:9d:64:5c:50:ff:8d:c3:b2:75:7b:fd:b5:5e:94:fa: 18:ef:d9:5a:4e:60:e7:d4:c7:67:db:a0:ac:75:3a:6c:a3:25: d4:c6:60:20:de:27:b7:be:f0:11:12:f1:46:54:d3:9a:80:6f: b6:d9:82:32:f3:cc:ba:25:61:45:ca:df:a3:81:8a:45:69:95: 30:e6:26:3b:c3:1c:ed:4b:ac:98:25:b5:34:98:7d:11:a3:64: 37:7f:22:ed:71:69:34:9d:55:52:46:c8:b8:46:63:2f:09:96: 65:d4:10:6f:42:a4:1f:19:1a:db:6b:a2:40:f3:d7:8e:2d:95: 1b:c5:d4:80 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt9yaXkqfuQHhsDMavZJrA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYWM1MGYxOWQ5OTMwYWVlYzA5Y2QyN2Y1MDhmYzUwMmVh MTRkMWYwHhcNMjYwMTAyMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2Y0ZGFlYWRjMWZlY2MyMjFiNjdjZWM5YmNjMjU0NWZjNGUyNjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqabK9h9iUrQmHfxYy1WU4769/GBR mgEa87DTCqTPmWDWcVqIiCr6Fgf8PJhMvr3vHd8v76/0ALPxGapJ/uxjpnyV4q5E RVp4nlnWWOvhw+nqVRdU5uik9i5S70dxIN3+3Uc2xsN9rmF6nsb5q0DjrR1TFLKi BaHNnQ1jwTtODoZHoTdGgeuuunw2q1hd5iP3kGxiJRr/VcUtAzATFmE0UCs/JMTH utT4dgoHH67R/6d3wug7uNRznt9V1mTjRLHwbd4+Ba9Uzx90BSz/YQN7aYI7SgGx vBJgsHCalfDeHkxuN2+tz3euuKAqe2280Su6LZlC0VIpu6ZcA5potD1E3wIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFFP02urcH+zCIbZ87JvMJUX8TiY8MB8GA1UdIwQY MBaAFPusUPGdmTCu7AnNJ/UI/FAuoU0fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02eFE4WjJaTUs3c0NjMG45UWo4VUM2aFRSOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvOGZjMDlkLTdkMjUtNDI1Yy04Yjkx LWQ2MmU0NTRiZjM3Zi8xL1VfVGE2dHdmN01JaHRuenNtOHdsUmZ4T0pqdy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvOGZjMDlkLTdkMjUtNDI1Yy04YjkxLWQ2MmU0NTRiZjM3 Zi8xLzEtNnhROFoyWk1LN3NDYzBuOVFqOFVDNmhUUjguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCkVA IAAwDQYJKoZIhvcNAQELBQADggEBAFyeUoDt47I482ZEotGV7psYl4r54HoF8rbZ KKZNLXFevg0LJgeoHbyLWAJRqndvDJtJfcHcRD/gH5zO02rOnM1o3XG2LpYye2VC +JOraU8Ei6UpxN0OVPkfZ+LGdLG27sIuOt1T550A7rcc92JGmER6TcVtjxIK6TzH QHMO2DSGLZ1kXFD/jcOydXv9tV6U+hjv2VpOYOfUx2fboKx1OmyjJdTGYCDeJ7e+ 8BES8UZU05qAb7bZgjLzzLolYUXK36OBikVplTDmJjvDHO1LrJgltTSYfRGjZDd/ Iu1xaTSdVVJGyLhGYy8JlmXUEG9CpB8ZGttrokDz144tlRvF1IA= -----END CERTIFICATE-----Generated at Sun Jan 25 10:30:04 2026 by rpki-client