This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/f_5BjnEr80pGWfL1w3q_5fZIFf4.roa File: f_5BjnEr80pGWfL1w3q_5fZIFf4.roa (raw, json) Hash identifier: RpdasGSTz3LwfRMX6VuVLK5/qxPoIGc1oN473heL/WE= Subject key identifier: 7F:FE:41:8E:71:2B:F3:4A:46:59:F2:F5:C3:7A:BF:E5:F6:48:15:FE Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f Certificate serial: 019B7DC9A60DB3D8DEE127B414F7888C0750 Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/f_5BjnEr80pGWfL1w3q_5fZIFf4.roa Signing time: Fri 02 Jan 2026 08:18:45 +0000 ROA not before: Fri 02 Jan 2026 08:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213396 IP address blocks: 2a0a:4540:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:a6:0d:b3:d8:de:e1:27:b4:14:f7:88:8c:07:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f Validity Not Before: Jan 2 08:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ffe418e712bf34a4659f2f5c37abfe5f64815fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:c7:a7:21:a0:f1:84:c2:f0:71:92:5b:6f: 70:da:d5:c9:a9:bc:70:4d:a7:21:5d:58:eb:50:fa: 18:e3:f9:d4:52:0e:57:78:ee:a7:9c:a5:39:f5:4e: 60:a3:22:07:79:1d:2b:40:80:9d:bf:68:55:9f:98: ff:b4:a9:42:51:dc:bc:95:77:37:8b:e3:a1:5a:02: 66:ca:0a:9d:29:c9:c9:16:89:20:06:ac:f8:11:33: 5d:d6:68:c5:18:82:cc:69:16:dd:bb:88:6b:3a:41: ee:4e:7b:02:1e:01:51:6c:c8:33:14:fa:28:ec:52: 86:09:32:f4:07:ae:b7:3f:da:08:29:8f:69:32:14: 71:6e:eb:81:80:6c:dd:f5:5f:53:aa:fc:51:cd:f0: f6:23:b4:7c:1d:a6:2f:fc:53:08:3f:0e:6e:b4:3e: 60:8b:eb:8f:e9:8e:60:20:ad:48:a3:1c:4b:c3:70: ce:0e:f8:b4:7f:33:48:0d:70:1d:b8:3a:aa:d5:dd: 6e:12:a4:37:18:6b:cc:e5:ae:88:35:e4:13:96:30: 1c:40:42:68:99:b2:24:f9:e5:86:e1:29:80:50:06: a0:53:8a:d7:96:a5:b9:2e:c2:ca:95:8c:57:b8:48: 91:95:03:f9:c9:a6:06:68:b0:3c:ed:6f:96:32:28: 5b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FE:41:8E:71:2B:F3:4A:46:59:F2:F5:C3:7A:BF:E5:F6:48:15:FE X509v3 Authority Key Identifier: keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/f_5BjnEr80pGWfL1w3q_5fZIFf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:4540:3000::/48 Signature Algorithm: sha256WithRSAEncryption 81:ec:85:2a:08:01:1a:8f:8f:dd:d6:09:94:0b:6f:90:1f:d8: d7:93:85:26:b2:fb:72:99:13:bd:5f:b3:fd:94:65:93:50:df: 9e:1f:24:b2:2c:70:16:e5:a6:ff:b8:50:e3:8a:54:e7:36:24: 4b:8a:1c:1b:70:07:e8:bf:11:01:0b:59:d3:07:f4:6c:05:8e: d4:df:28:48:e8:c0:3a:c5:b6:c4:c2:c3:a2:45:ec:00:a5:b0: 15:52:40:d8:54:dd:e2:21:70:f7:6d:3f:fb:c8:f1:57:ac:63: 94:71:90:74:93:8b:7c:06:83:7f:6c:23:dc:e5:36:59:e6:c9: b1:63:c0:70:60:7b:27:f2:7a:9d:e1:ff:a0:cd:4c:8b:50:2d: e3:63:ad:1c:2c:ed:c4:79:b8:dc:6d:06:14:36:4b:f2:30:80: ea:8e:80:14:17:24:7a:d7:1e:93:ad:59:04:49:36:1d:25:33: 92:d5:44:cd:38:2a:fd:79:50:a3:4e:a0:cb:da:a2:54:8d:0d: 18:71:60:94:a8:c8:08:71:52:4e:09:e1:35:ee:26:b6:c3:ce: a3:dd:bc:bc:01:e8:19:aa:08:65:29:48:3a:d3:41:53:92:05: 9a:52:87:ef:d3:c8:d6:11:6c:bb:6a:70:e5:82:08:a2:61:b2: 42:7f:b9:a0 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt9yaYNs9je4Se0FPeIjAdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiYWM1MGYxOWQ5OTMwYWVlYzA5Y2QyN2Y1MDhmYzUwMmVh MTRkMWYwHhcNMjYwMTAyMDgxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmZlNDE4ZTcxMmJmMzRhNDY1OWYyZjVjMzdhYmZlNWY2NDgxNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt/HpyGg8YTC8HGSW29w2tXJqbxw TachXVjrUPoY4/nUUg5XeO6nnKU59U5goyIHeR0rQICdv2hVn5j/tKlCUdy8lXc3 i+OhWgJmygqdKcnJFokgBqz4ETNd1mjFGILMaRbdu4hrOkHuTnsCHgFRbMgzFPoo 7FKGCTL0B663P9oIKY9pMhRxbuuBgGzd9V9TqvxRzfD2I7R8HaYv/FMIPw5utD5g i+uP6Y5gIK1IoxxLw3DODvi0fzNIDXAduDqq1d1uEqQ3GGvM5a6INeQTljAcQEJo mbIk+eWG4SmAUAagU4rXlqW5LsLKlYxXuEiRlQP5yaYGaLA87W+WMihbZQIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFH/+QY5xK/NKRlny9cN6v+X2SBX+MB8GA1UdIwQY MBaAFPusUPGdmTCu7AnNJ/UI/FAuoU0fMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS02eFE4WjJaTUs3c0NjMG45UWo4VUM2aFRSOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvOGZjMDlkLTdkMjUtNDI1Yy04Yjkx LWQ2MmU0NTRiZjM3Zi8xL2ZfNUJqbkVyODBwR1dmTDF3M3FfNWZaSUZmNC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGUvOGZjMDlkLTdkMjUtNDI1Yy04YjkxLWQ2MmU0NTRiZjM3 Zi8xLzEtNnhROFoyWk1LN3NDYzBuOVFqOFVDNmhUUjguY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAqCkVA MAAwDQYJKoZIhvcNAQELBQADggEBAIHshSoIARqPj93WCZQLb5Af2NeThSay+3KZ E71fs/2UZZNQ354fJLIscBblpv+4UOOKVOc2JEuKHBtwB+i/EQELWdMH9GwFjtTf KEjowDrFtsTCw6JF7AClsBVSQNhU3eIhcPdtP/vI8VesY5RxkHSTi3wGg39sI9zl NlnmybFjwHBgeyfyep3h/6DNTItQLeNjrRws7cR5uNxtBhQ2S/IwgOqOgBQXJHrX HpOtWQRJNh0lM5LVRM04Kv15UKNOoMvaolSNDRhxYJSoyAhxUk4J4TXuJrbDzqPd vLwB6BmqCGUpSDrTQVOSBZpSh+/TyNYRbLtqcOWCCKJhskJ/uaA= -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:28 2026 by rpki-client