This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/F-PjRsH19rPMcZ81IXF5CCgR1KU.roa File: F-PjRsH19rPMcZ81IXF5CCgR1KU.roa (raw, json) Hash identifier: L/C4Dl9kXu9PUSNWiV3aolnjjZ77+ByzduDuRCwuQ1M= Subject key identifier: 17:E3:E3:46:C1:F5:F6:B3:CC:71:9F:35:21:71:79:08:28:11:D4:A5 Certificate issuer: /CN=705b507a1019f7c465737dc59736c06fdddcefe7 Certificate serial: 019B775921564AB3EF7DE1E1D5C2059EE108 Authority key identifier: 70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/F-PjRsH19rPMcZ81IXF5CCgR1KU.roa Signing time: Thu 01 Jan 2026 02:18:08 +0000 ROA not before: Thu 01 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41720 IP address blocks: 2001:67c:d68::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.mft rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:21:56:4a:b3:ef:7d:e1:e1:d5:c2:05:9e:e1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705b507a1019f7c465737dc59736c06fdddcefe7 Validity Not Before: Jan 1 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17e3e346c1f5f6b3cc719f35217179082811d4a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:48:35:f0:6e:0a:54:a4:33:64:aa:83:47:06: 70:66:33:73:2f:e6:18:2c:b2:91:9b:46:4b:09:99: 3d:58:d8:65:ee:02:fe:2d:eb:40:df:d3:7b:a0:bb: 85:c1:ce:9e:cb:7a:ba:53:9d:1b:f1:f3:7a:b9:ad: 03:cb:9e:c4:22:40:4a:50:fa:34:8b:01:61:89:1c: a1:2b:6b:d7:77:65:ff:f1:f5:15:bc:7f:d8:4a:d9: 4e:3d:b7:63:c5:f0:61:71:b7:66:2a:80:b9:6c:dd: 37:42:d1:69:0e:d4:48:8c:58:a7:5e:5e:f4:6d:b2: 64:1e:4c:4f:d2:8d:87:dd:6f:27:1d:c8:a5:6b:6f: 78:26:63:f7:72:8f:fb:3d:e6:c1:16:51:6a:62:22: 6e:34:0c:74:ec:ff:70:4b:8b:25:ef:2b:dd:8b:0b: 0e:c0:5a:dc:e8:96:de:84:c9:92:7a:3a:86:42:d6: 13:b5:ff:08:7e:86:20:0b:01:f7:ce:0a:2c:6e:01: 41:77:e1:4a:aa:05:13:3e:47:31:d1:58:47:e0:ea: 2f:ca:ee:20:26:25:88:42:d1:b5:92:c9:bb:be:4c: 04:48:29:55:83:b6:1d:25:c8:eb:83:e8:7c:49:bb: b4:ce:62:29:f4:c1:cb:ea:18:5c:2c:45:77:c2:5b: 02:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E3:E3:46:C1:F5:F6:B3:CC:71:9F:35:21:71:79:08:28:11:D4:A5 X509v3 Authority Key Identifier: keyid:70:5B:50:7A:10:19:F7:C4:65:73:7D:C5:97:36:C0:6F:DD:DC:EF:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFtQehAZ98Rlc33FlzbAb93c7-c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/F-PjRsH19rPMcZ81IXF5CCgR1KU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c128bc-cddb-4b07-8d01-62f1a350414c/1/cFtQehAZ98Rlc33FlzbAb93c7-c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:67c:d68::/48 Signature Algorithm: sha256WithRSAEncryption c4:af:b3:f4:e9:ed:4a:ee:be:b4:a0:91:99:cc:d5:a7:3a:da: d9:fb:1f:89:a1:1e:9d:dc:f4:01:37:51:8c:0c:e2:4f:24:55: b7:97:c6:e6:2e:d8:e1:54:00:9a:f8:ce:e2:82:9b:a7:4d:c8: 59:37:b0:46:5e:e6:db:5c:6a:80:b7:fc:a8:5a:2d:ce:f5:3e: 09:a4:ce:95:77:b9:40:9f:d2:0f:4a:b2:c3:8e:3e:52:ed:a6: e0:90:19:f7:37:ad:de:b1:7c:f1:cd:9d:d8:43:c8:9b:ff:95: 68:9f:68:af:69:ee:ef:70:fc:f4:80:e7:38:7b:45:11:4e:06: bc:9f:9d:ff:64:d1:5b:fa:f3:ef:fe:bd:8f:7f:7d:48:8e:6c: 09:20:f2:ab:bc:4a:1f:c8:ec:62:b9:3f:68:02:f3:ee:29:23: b8:0f:0a:99:c3:79:bb:e0:32:bc:cd:af:9b:98:bb:79:98:21: 99:f6:f9:5c:b6:cb:a9:dc:bf:b1:ec:f1:47:75:bb:c1:76:57: ab:6b:53:70:dd:48:92:87:85:12:0d:2a:85:32:11:4b:ed:84: f1:bc:fe:56:88:50:8a:d2:dc:b9:64:10:af:e3:80:8f:b7:e3: de:ad:63:bf:4e:5d:ef:f2:1e:03:16:0d:4f:43:0a:fa:e7:f2: ee:4c:84:a8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WSFWSrPvfeHh1cIFnuEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWI1MDdhMTAxOWY3YzQ2NTczN2RjNTk3MzZjMDZmZGRk Y2VmZTcwHhcNMjYwMTAxMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2UzZTM0NmMxZjVmNmIzY2M3MTlmMzUyMTcxNzkwODI4MTFkNGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0g18G4KVKQzZKqDRwZwZjNzL+YY LLKRm0ZLCZk9WNhl7gL+LetA39N7oLuFwc6ey3q6U50b8fN6ua0Dy57EIkBKUPo0 iwFhiRyhK2vXd2X/8fUVvH/YStlOPbdjxfBhcbdmKoC5bN03QtFpDtRIjFinXl70 bbJkHkxP0o2H3W8nHcila294JmP3co/7PebBFlFqYiJuNAx07P9wS4sl7yvdiwsO wFrc6JbehMmSejqGQtYTtf8IfoYgCwH3zgosbgFBd+FKqgUTPkcx0VhH4Oovyu4g JiWIQtG1ksm7vkwESClVg7YdJcjrg+h8Sbu0zmIp9MHL6hhcLEV3wlsCSwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBfj40bB9fazzHGfNSFxeQgoEdSlMB8GA1UdIwQY MBaAFHBbUHoQGffEZXN9xZc2wG/d3O/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEt NjJmMWEzNTA0MTRjLzEvRi1QalJzSDE5clBNY1o4MUlYRjVDQ2dSMUtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jMTI4YmMtY2RkYi00YjA3LThkMDEtNjJmMWEzNTA0MTRj LzEvY0Z0UWVoQVo5OFJsYzMzRmx6YkFiOTNjNy1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfA1o MA0GCSqGSIb3DQEBCwUAA4IBAQDEr7P06e1K7r60oJGZzNWnOtrZ+x+JoR6d3PQB N1GMDOJPJFW3l8bmLtjhVACa+M7igpunTchZN7BGXubbXGqAt/yoWi3O9T4JpM6V d7lAn9IPSrLDjj5S7abgkBn3N63esXzxzZ3YQ8ib/5Von2ivae7vcPz0gOc4e0UR Tga8n53/ZNFb+vPv/r2Pf31IjmwJIPKrvEofyOxiuT9oAvPuKSO4DwqZw3m74DK8 za+bmLt5mCGZ9vlctsup3L+x7PFHdbvBdlera1Nw3UiSh4USDSqFMhFL7YTxvP5W iFCK0ty5ZBCv44CPt+PerWO/Tl3v8h4DFg1PQwr65/LuTISo -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:58 2026 by rpki-client