This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa File: Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa (raw, json) Hash identifier: ItGk7pZicra55KKf6s/67/p+3dH+7mzo9kuzCaFglZg= Subject key identifier: 16:0B:F6:A4:B0:75:20:FE:A5:2D:EA:0C:C5:A6:23:A9:0D:21:54:A9 Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Certificate serial: 019B7EA661DE2E17E4ADBC28C9EDABE48A62 Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa Signing time: Fri 02 Jan 2026 12:19:51 +0000 ROA not before: Fri 02 Jan 2026 12:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 264749 IP address blocks: 2a0d:c940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.mft rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:61:de:2e:17:e4:ad:bc:28:c9:ed:ab:e4:8a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0 Validity Not Before: Jan 2 12:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=160bf6a4b07520fea52dea0cc5a623a90d2154a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:10:7c:eb:d9:24:74:bc:66:45:f2:0c:24: 72:63:e3:14:34:c4:95:ae:93:eb:01:b3:2a:27:44: 08:c3:9d:0f:b3:f1:29:02:26:30:97:49:78:73:c9: 77:57:7f:56:64:fe:56:5d:d4:9d:00:b2:e0:3f:e0: 61:fe:d4:67:ec:38:9c:8c:dc:ff:db:17:8e:15:7e: 00:c1:60:90:51:91:5c:33:6f:84:de:c0:47:7b:dc: 44:75:52:90:d3:d6:38:8f:16:eb:c8:44:98:67:29: 05:a7:f4:7b:75:71:0c:4e:46:3e:33:a7:29:ff:3f: f0:2e:fc:8b:aa:f7:0c:e9:7c:4e:94:ca:ef:6c:1c: 5e:43:33:f5:a4:96:50:a9:e4:89:08:b3:41:9a:3f: 7d:6b:87:66:29:69:f2:81:f9:0b:7e:bc:31:93:83: 77:40:f9:31:6f:a2:3d:18:7b:01:34:b9:a4:b5:bc: fe:b5:09:fb:1a:50:dd:ca:14:d0:e2:a5:b5:ba:99: 82:1b:3b:3e:54:b3:e5:03:d9:19:fb:a6:4c:cd:f3: d5:b4:7a:03:f8:2a:9d:f1:59:cf:01:6a:93:71:f7: ad:3b:18:99:f0:08:18:f3:05:15:7b:76:20:37:fc: bb:c7:de:29:0a:1c:c7:fd:18:a9:9d:8c:ed:54:65: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:0B:F6:A4:B0:75:20:FE:A5:2D:EA:0C:C5:A6:23:A9:0D:21:54:A9 X509v3 Authority Key Identifier: keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/Fgv2pLB1IP6lLeoMxaYjqQ0hVKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:c940::/29 Signature Algorithm: sha256WithRSAEncryption 0b:ec:1d:35:97:5c:99:5b:32:03:89:fe:7f:90:cd:75:ed:67: 6d:5b:50:8c:61:ef:a1:4b:c9:4d:99:01:6b:84:ad:af:9f:51: c4:9d:78:de:a6:59:80:3d:4e:81:b2:c2:44:ad:99:ea:c4:bc: 86:75:74:ac:b8:57:58:30:51:d3:89:7f:41:86:99:a4:d5:d3: fb:69:1e:1a:87:e8:45:72:d5:00:c8:71:c4:96:08:0f:f8:12: 4d:ad:79:03:f5:47:5e:e9:11:9a:d5:49:6d:79:6e:2c:03:62: 90:fe:2f:6b:28:b0:c7:cf:60:bf:ab:3b:4f:fd:86:3a:bf:ce: 16:cb:f3:98:e4:b3:02:be:b8:70:7f:49:c7:94:8a:e1:27:e1: 96:1f:56:d2:c4:80:0d:3d:9f:d0:cd:61:a9:45:e8:3f:4c:ef: 94:ec:88:f5:3a:f4:6d:ae:4c:f6:8a:c6:ab:b1:59:12:e7:e9: ae:9f:14:29:97:5b:ce:cb:40:b2:a4:f0:01:f5:86:80:30:4a: 5a:4e:d4:92:db:e4:89:cb:dd:9d:2c:ce:05:fe:73:84:e5:c1: c3:e4:9e:58:f6:a2:0a:db:3a:87:0f:15:65:e9:2e:e3:0a:78: 4e:ed:88:0b:ef:81:76:ef:be:0d:2c:3b:3f:6a:27:7d:cf:4b: 45:6d:f8:3b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pmHeLhfkrbwoye2r5IpiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYzQ3OGRkOWNjZDYxNjJmODI0ODhhYzZmYzUwYzIxZDM2 OWYyYTAwHhcNMjYwMTAyMTIxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjBiZjZhNGIwNzUyMGZlYTUyZGVhMGNjNWE2MjNhOTBkMjE1NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqwQfOvZJHS8ZkXyDCRyY+MUNMSV rpPrAbMqJ0QIw50Ps/EpAiYwl0l4c8l3V39WZP5WXdSdALLgP+Bh/tRn7DicjNz/ 2xeOFX4AwWCQUZFcM2+E3sBHe9xEdVKQ09Y4jxbryESYZykFp/R7dXEMTkY+M6cp /z/wLvyLqvcM6XxOlMrvbBxeQzP1pJZQqeSJCLNBmj99a4dmKWnygfkLfrwxk4N3 QPkxb6I9GHsBNLmktbz+tQn7GlDdyhTQ4qW1upmCGzs+VLPlA9kZ+6ZMzfPVtHoD +Cqd8VnPAWqTcfetOxiZ8AgY8wUVe3YgN/y7x94pChzH/RipnYztVGUXbQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBYL9qSwdSD+pS3qDMWmI6kNIVSpMB8GA1UdIwQY MBaAFMzEeN2czWFi+CSIrG/FDCHTafKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUt NDI4NTk5ODM5MmQzLzEvRmd2MnBMQjFJUDZsTGVvTXhhWWpxUTBoVktrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS9lZTNlM2YtM2E0NS00M2ViLWE1ZGUtNDI4NTk5ODM5MmQz LzEvek1SNDNaek5ZV0w0Sklpc2I4VU1JZE5wOHFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg3JQDAN BgkqhkiG9w0BAQsFAAOCAQEAC+wdNZdcmVsyA4n+f5DNde1nbVtQjGHvoUvJTZkB a4Str59RxJ143qZZgD1OgbLCRK2Z6sS8hnV0rLhXWDBR04l/QYaZpNXT+2keGofo RXLVAMhxxJYID/gSTa15A/VHXukRmtVJbXluLANikP4vayiwx89gv6s7T/2GOr/O FsvzmOSzAr64cH9Jx5SK4Sfhlh9W0sSADT2f0M1hqUXoP0zvlOyI9Tr0ba5M9orG q7FZEufprp8UKZdbzstAsqTwAfWGgDBKWk7UktvkicvdnSzOBf5zhOXBw+SeWPai Cts6hw8VZeku4wp4Tu2IC++Bdu++DSw7P2onfc9LRW34Ow== -----END CERTIFICATE-----Generated at Sun Jan 25 13:47:16 2026 by rpki-client