This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/fYJN56gNpyjk6FeN9g2u8kda_Ck.roa File: fYJN56gNpyjk6FeN9g2u8kda_Ck.roa (raw, json) Hash identifier: 0Bz6iRQD5arZ6ysTUfpQvVjP86yHCsoWY8uCR19q2k4= Subject key identifier: 7D:82:4D:E7:A8:0D:A7:28:E4:E8:57:8D:F6:0D:AE:F2:47:5A:FC:29 Certificate issuer: /CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Certificate serial: 019B7BA4657F4993EE746066BC701CDD4227 Authority key identifier: 12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/fYJN56gNpyjk6FeN9g2u8kda_Ck.roa Signing time: Thu 01 Jan 2026 22:18:49 +0000 ROA not before: Thu 01 Jan 2026 22:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208223 IP address blocks: 2a12:3fc2:df00::/40 maxlen: 40 2a12:3fc2:df11::/48 maxlen: 48 2a12:3fc2:dfaa::/48 maxlen: 48 2a12:3fc2:dfca::/48 maxlen: 48 2a12:3fc2:dfce::/48 maxlen: 48 2a12:3fc2:dfcf::/48 maxlen: 48 2a12:3fc2:dfd2::/48 maxlen: 48 2a12:3fc2:dfd5::/48 maxlen: 48 2a12:3fc2:dfd6::/48 maxlen: 48 2a12:3fc2:dfd8::/48 maxlen: 48 2a12:3fc2:dfd9::/48 maxlen: 48 2a12:3fc2:dfda::/48 maxlen: 48 2a12:3fc2:dfdb::/48 maxlen: 48 2a12:3fc2:dfdc::/48 maxlen: 48 2a12:3fc2:dfdd::/48 maxlen: 48 2a12:3fc2:dfde::/48 maxlen: 48 2a12:3fc2:dfdf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.mft rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:65:7f:49:93:ee:74:60:66:bc:70:1c:dd:42:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1216abcc44c9a95540cdf5b1dc542ec7d11fe07a Validity Not Before: Jan 1 22:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d824de7a80da728e4e8578df60daef2475afc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:2a:1a:90:07:e0:87:c0:87:44:e4:0c:06: d2:0c:af:26:87:a9:7a:62:cc:81:f1:89:2e:9e:a3: f1:5f:4a:17:6d:eb:c3:c5:70:ff:ee:da:fb:61:4a: dc:75:87:63:e3:5e:4f:10:2b:b4:4b:97:ca:9e:2f: a7:8a:2c:f2:b1:bc:e4:f3:04:9f:ac:29:82:2e:84: b4:84:9f:71:f8:4e:8c:60:e8:5a:c3:66:45:79:4e: fb:6b:c0:8f:6d:83:3d:20:c5:cf:4c:65:b4:83:10: da:69:fb:97:7e:86:89:0e:6e:13:0b:84:63:85:03: e6:db:e1:32:f4:23:a3:b0:ca:af:58:27:27:10:2a: 2a:00:86:6b:7a:06:33:dd:3c:39:cd:46:6d:f4:e4: 29:8a:ed:4f:ea:69:44:da:db:60:b5:30:e2:b0:6b: cf:45:e9:4c:54:84:22:05:dc:d4:9b:c9:3c:ee:c4: 60:ed:03:c6:79:4c:6c:2d:06:e8:a7:e7:49:22:a2: 61:78:7d:c3:e7:39:90:f0:15:51:5e:1b:1f:84:79: 47:28:a0:24:8d:cf:96:b0:57:a3:6b:2d:0e:61:d0: be:75:45:8b:fa:80:f6:3c:e9:33:fd:95:53:9e:f5: 8f:7d:67:64:30:c3:ad:03:68:21:a0:4b:ab:dd:35: da:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:82:4D:E7:A8:0D:A7:28:E4:E8:57:8D:F6:0D:AE:F2:47:5A:FC:29 X509v3 Authority Key Identifier: keyid:12:16:AB:CC:44:C9:A9:55:40:CD:F5:B1:DC:54:2E:C7:D1:1F:E0:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EharzETJqVVAzfWx3FQux9Ef4Ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/fYJN56gNpyjk6FeN9g2u8kda_Ck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ac9cf6-1bec-424b-aa51-a0962d998e60/1/EharzETJqVVAzfWx3FQux9Ef4Ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a12:3fc2:df00::/40 Signature Algorithm: sha256WithRSAEncryption 96:15:c7:5c:6e:0d:09:45:e9:8a:3b:37:c3:12:cc:75:a2:de: ad:fd:e3:91:c9:73:0b:fc:0f:9e:1b:1c:13:06:e0:1e:9d:a6: 66:60:1d:49:57:26:a5:32:14:9f:1c:bc:a8:70:a8:94:89:f5: 8e:95:5b:1e:bd:b0:00:36:85:0e:9c:97:c5:f9:92:4d:70:99: c6:9a:0c:4a:b2:f8:95:8a:5a:0b:d0:e1:b5:c0:2a:17:3f:61: 78:b2:d8:44:24:59:8e:ca:48:e0:00:5b:e7:09:55:0e:83:2e: 91:2f:ec:e0:22:77:b0:5b:ca:85:8e:d2:54:5a:12:58:88:8d: a2:55:7a:56:c0:94:e9:3b:87:36:36:12:db:19:73:ff:56:04: 30:ba:08:ad:11:63:a7:c8:a9:d0:53:be:4a:88:17:2c:6b:2a: c4:07:c9:1f:a7:c9:73:5d:dc:14:9c:2c:b8:4d:32:80:1a:b1: 9f:20:f4:f8:ba:7e:1b:b6:9d:ea:08:78:c1:a2:90:a7:2f:98: a8:c3:bc:ca:7e:32:ba:33:d3:ea:51:44:14:3a:27:36:87:9d: 1b:2d:ea:f6:91:af:79:21:03:8b:50:01:41:b3:88:06:7c:b2: 25:28:08:d9:f5:d8:ff:50:52:f5:b9:4b:e8:da:56:27:5e:21: 9f:72:7e:0e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt7pGV/SZPudGBmvHAc3UInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMTZhYmNjNDRjOWE5NTU0MGNkZjViMWRjNTQyZWM3ZDEx ZmUwN2EwHhcNMjYwMTAxMjIxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDgyNGRlN2E4MGRhNzI4ZTRlODU3OGRmNjBkYWVmMjQ3NWFmYzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVcqGpAH4IfAh0TkDAbSDK8mh6l6 YsyB8YkunqPxX0oXbevDxXD/7tr7YUrcdYdj415PECu0S5fKni+niizysbzk8wSf rCmCLoS0hJ9x+E6MYOhaw2ZFeU77a8CPbYM9IMXPTGW0gxDaafuXfoaJDm4TC4Rj hQPm2+Ey9COjsMqvWCcnECoqAIZregYz3Tw5zUZt9OQpiu1P6mlE2ttgtTDisGvP RelMVIQiBdzUm8k87sRg7QPGeUxsLQbop+dJIqJheH3D5zmQ8BVRXhsfhHlHKKAk jc+WsFejay0OYdC+dUWL+oD2POkz/ZVTnvWPfWdkMMOtA2ghoEur3TXaZwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFH2CTeeoDaco5OhXjfYNrvJHWvwpMB8GA1UdIwQY MBaAFBIWq8xEyalVQM31sdxULsfRH+B6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEt YTA5NjJkOTk4ZTYwLzEvZllKTjU2Z05weWprNkZlTjlnMnU4a2RhX0NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hYzljZjYtMWJlYy00MjRiLWFhNTEtYTA5NjJkOTk4ZTYw LzEvRWhhcnpFVEpxVlZBemZXeDNGUXV4OUVmNEhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhI/wt8w DQYJKoZIhvcNAQELBQADggEBAJYVx1xuDQlF6Yo7N8MSzHWi3q3945HJcwv8D54b HBMG4B6dpmZgHUlXJqUyFJ8cvKhwqJSJ9Y6VWx69sAA2hQ6cl8X5kk1wmcaaDEqy +JWKWgvQ4bXAKhc/YXiy2EQkWY7KSOAAW+cJVQ6DLpEv7OAid7BbyoWO0lRaEliI jaJVelbAlOk7hzY2EtsZc/9WBDC6CK0RY6fIqdBTvkqIFyxrKsQHyR+nyXNd3BSc LLhNMoAasZ8g9Pi6fhu2neoIeMGikKcvmKjDvMp+Mroz0+pRRBQ6JzaHnRst6vaR r3khA4tQAUGziAZ8siUoCNn12P9QUvW5S+jaVideIZ9yfg4= -----END CERTIFICATE-----Generated at Sun Jan 25 16:11:53 2026 by rpki-client