This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa File: fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa (raw, json) Hash identifier: GyXHiAiOBT4Wt1rYKLOCWwf00XoA39UOqU9gosFaCoA= Subject key identifier: 7E:43:2C:0B:91:41:DC:45:F3:29:40:EE:D1:61:16:64:36:20:44:68 Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe Certificate serial: 019B7BA4FAAAB6198078CDA1240F925C1162 Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa Signing time: Thu 01 Jan 2026 22:19:28 +0000 ROA not before: Thu 01 Jan 2026 22:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60998 IP address blocks: 2a0f:4440:aaaa::/48 maxlen: 48 2a0f:4440:abcd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.mft rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:fa:aa:b6:19:80:78:cd:a1:24:0f:92:5c:11:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe Validity Not Before: Jan 1 22:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e432c0b9141dc45f32940eed161166436204468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:42:3d:6d:94:ec:dd:5f:8d:1e:76:12:12:12: 63:e5:13:0d:32:7f:09:2e:1b:1e:4c:bc:84:8a:57: e3:2d:2d:48:58:d2:7e:27:eb:51:13:ec:e0:f5:9c: 68:dc:54:49:57:5f:38:f1:0e:f2:d8:4d:16:95:78: dd:13:19:47:22:3d:fb:3a:64:1d:a7:1a:2c:60:08: cf:44:44:c3:4a:de:ef:1f:da:f8:d3:8b:b4:f5:62: 66:a2:e3:99:02:1c:f5:96:34:83:13:a9:30:72:7b: 7c:21:6a:19:21:2c:a9:1e:bd:93:8c:6d:df:42:54: 33:9c:3f:2d:1b:31:33:e7:d4:11:83:39:f3:12:56: 8d:f8:7e:fc:21:fe:40:b2:23:c1:a0:6a:82:c3:ab: 97:4b:fe:2d:cf:a1:6a:82:e7:3d:9d:44:7d:76:40: 00:2f:31:a8:b7:fe:1a:65:86:16:ec:5c:b4:a9:52: ce:5d:55:e1:55:9e:fa:24:c3:2d:16:e2:39:c7:c6: ad:0e:25:db:77:9f:91:0b:a2:d3:16:2f:25:c6:1f: f7:55:b4:6b:5e:63:3e:9b:86:26:35:12:33:ea:79: 86:ae:1f:ad:fa:23:50:bf:e6:7b:63:49:bf:9c:f8: 3e:ec:3d:f1:2a:b8:ae:9f:a1:c3:cb:58:92:bd:35: b4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:43:2C:0B:91:41:DC:45:F3:29:40:EE:D1:61:16:64:36:20:44:68 X509v3 Authority Key Identifier: keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/fkMsC5FB3EXzKUDu0WEWZDYgRGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:4440:aaaa::/48 2a0f:4440:abcd::/48 Signature Algorithm: sha256WithRSAEncryption 0f:41:f0:8b:94:07:55:47:ae:92:22:53:1f:76:84:47:fa:83: 22:6f:16:16:ab:16:80:26:30:cf:68:80:7a:b7:35:7a:25:02: 01:26:ac:da:ed:fd:74:88:f8:e9:80:41:2a:c7:01:a6:b8:c2: 53:42:9e:2d:e7:0e:5b:bf:48:2e:30:da:f3:3b:8b:c2:24:25: 63:a3:8a:30:e6:c2:8f:93:f1:69:84:12:48:b7:d2:3b:3c:02: 0a:45:e2:a2:71:03:4b:36:37:5e:bc:14:49:3e:b2:a3:f6:1e: c8:39:26:dd:23:08:fe:bb:19:c2:90:7d:aa:9d:4b:ac:71:75: 9f:40:2d:40:7d:00:7c:60:9a:53:98:a0:10:38:f7:26:0f:76: 39:da:0f:25:ec:d7:f6:0e:0e:f9:86:27:51:3a:15:73:17:99: 05:27:30:b2:fc:ca:f0:13:f9:6e:80:b0:69:68:28:54:b3:00: 2a:f9:29:13:10:4f:6a:72:a9:cc:e8:25:e1:fb:90:4c:4f:33: 20:17:ad:88:0f:d9:98:49:71:f8:8c:bd:63:b8:fc:39:2d:28: b9:fd:7e:1d:cc:1f:7f:b0:af:94:e2:78:09:fd:0b:bd:73:35: 5a:a6:36:40:47:4a:f3:46:28:c8:e3:45:d2:38:5f:d0:9a:ab: a4:62:3d:86 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pPqqthmAeM2hJA+SXBFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ5ODI0N2QzZjgxNDcyZGJiYTA2ZGJlYTliZDE5Yzc4NWQx OGJhYmUwHhcNMjYwMTAxMjIxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTQzMmMwYjkxNDFkYzQ1ZjMyOTQwZWVkMTYxMTY2NDM2MjA0NDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EI9bZTs3V+NHnYSEhJj5RMNMn8J LhseTLyEilfjLS1IWNJ+J+tRE+zg9Zxo3FRJV1848Q7y2E0WlXjdExlHIj37OmQd pxosYAjPRETDSt7vH9r404u09WJmouOZAhz1ljSDE6kwcnt8IWoZISypHr2TjG3f QlQznD8tGzEz59QRgznzElaN+H78If5AsiPBoGqCw6uXS/4tz6Fqguc9nUR9dkAA LzGot/4aZYYW7Fy0qVLOXVXhVZ76JMMtFuI5x8atDiXbd5+RC6LTFi8lxh/3VbRr XmM+m4YmNRIz6nmGrh+t+iNQv+Z7Y0m/nPg+7D3xKriun6HDy1iSvTW0cQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH5DLAuRQdxF8ylA7tFhFmQ2IERoMB8GA1UdIwQY MBaAFNmCR9P4FHLbugbb6pvRnHhdGLq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgt YTMwMzI2MTU2NjBjLzEvZmtNc0M1RkIzRVh6S1VEdTBXRVdaRFlnUkdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC82ZGJjOTktYmZhOS00ZWY3LWE3OTgtYTMwMzI2MTU2NjBj LzEvMllKSDBfZ1VjdHU2QnR2cW05R2NlRjBZdXI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKg9EQKqq AwcAKg9EQKvNMA0GCSqGSIb3DQEBCwUAA4IBAQAPQfCLlAdVR66SIlMfdoRH+oMi bxYWqxaAJjDPaIB6tzV6JQIBJqza7f10iPjpgEEqxwGmuMJTQp4t5w5bv0guMNrz O4vCJCVjo4ow5sKPk/FphBJIt9I7PAIKReKicQNLNjdevBRJPrKj9h7IOSbdIwj+ uxnCkH2qnUuscXWfQC1AfQB8YJpTmKAQOPcmD3Y52g8l7Nf2Dg75hidROhVzF5kF JzCy/MrwE/lugLBpaChUswAq+SkTEE9qcqnM6CXh+5BMTzMgF62ID9mYSXH4jL1j uPw5LSi5/X4dzB9/sK+U4ngJ/Qu9czVapjZAR0rzRijI40XSOF/QmqukYj2G -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:30 2026 by rpki-client