This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/p-FRidV19Ral8HYCkTftp8ZGx_I.roa File: p-FRidV19Ral8HYCkTftp8ZGx_I.roa (raw, json) Hash identifier: hshHmTn3wzmrRXENipR4Ti5XKN7QbdSwu9BQI5Ilgp0= Subject key identifier: A7:E1:51:89:D5:75:F5:16:A5:F0:76:02:91:37:ED:A7:C6:46:C7:F2 Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034 Certificate serial: 019B7834EB6A2403FF0DB7709814633F4930 Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/p-FRidV19Ral8HYCkTftp8ZGx_I.roa Signing time: Thu 01 Jan 2026 06:18:12 +0000 ROA not before: Thu 01 Jan 2026 06:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50375 IP address blocks: 2a01:d0:3a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:eb:6a:24:03:ff:0d:b7:70:98:14:63:3f:49:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034 Validity Not Before: Jan 1 06:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7e15189d575f516a5f076029137eda7c646c7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:3b:f7:4d:56:38:af:de:ff:c6:fa:4d:75: 5b:cc:93:19:ff:d8:76:a0:c0:c7:be:81:09:3c:06: ff:9a:d4:38:03:8d:a7:ff:82:c0:4e:7b:f8:e0:97: 47:aa:50:63:a3:37:90:62:35:9b:46:00:53:30:ef: c9:f0:ea:3c:b7:01:2d:9b:da:9c:9f:c3:3a:8c:a4: e7:a4:4a:60:03:2c:7b:77:f3:57:08:a4:91:80:0a: 34:3c:a4:37:1e:b2:6b:dd:db:7f:b2:76:ef:3a:02: 7c:0b:94:d4:32:9a:f9:23:dc:62:cd:a9:71:6e:1a: bc:ab:ab:9d:6e:a5:55:e8:87:a4:4f:c7:16:41:26: 03:0f:6e:f4:7b:df:83:65:d0:7b:03:37:e0:a5:e2: 8e:a5:36:38:b6:6b:0a:4b:97:ad:e2:55:3f:77:10: de:71:07:08:36:38:b9:64:f9:6f:9d:41:62:56:6b: fe:cd:8e:52:47:24:ce:60:ba:d2:c3:97:ec:80:2c: 19:3a:5f:e4:85:3c:da:4f:e8:e5:84:c8:4a:dd:ed: 84:b6:60:af:e6:23:d6:4b:95:89:f2:f1:fd:8e:f9: 66:16:69:1c:b0:06:3d:7d:0d:60:7b:e6:e3:7a:bb: d4:67:e6:c6:8f:0a:b4:36:5e:f8:da:e9:5d:f2:30: ec:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:E1:51:89:D5:75:F5:16:A5:F0:76:02:91:37:ED:A7:C6:46:C7:F2 X509v3 Authority Key Identifier: keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/p-FRidV19Ral8HYCkTftp8ZGx_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:d0:3a::/48 Signature Algorithm: sha256WithRSAEncryption 66:3f:71:97:80:32:de:c9:c8:69:d2:ee:0b:a4:6b:1f:f7:31: 5a:22:04:a8:0f:ea:3b:fa:09:d1:67:8d:46:24:b2:80:82:2a: 86:41:41:c8:6a:80:77:b6:99:03:5a:99:90:df:e3:fc:b3:40: ac:b7:95:e7:70:f7:60:6b:67:2c:bb:a6:b1:68:27:9e:46:93: e8:ac:f7:29:2c:a3:68:f4:b5:f6:12:3d:91:ef:86:ab:24:5d: 7a:47:d2:e5:53:96:50:4d:65:9e:bd:ad:eb:60:0c:34:25:07: f0:56:3e:67:7b:58:86:3a:10:9a:81:6e:c5:f9:81:47:0a:ff: 9c:71:e5:81:48:21:94:1a:bd:66:32:0f:a7:0d:66:8d:0a:0e: d9:bb:29:1b:49:cf:0a:8f:9f:88:99:e6:cb:6c:aa:a1:ee:8b: ba:8b:16:cf:39:d8:39:a2:83:62:c5:29:02:4b:54:57:98:64: a3:4c:34:46:e1:f8:94:f7:84:83:8c:2d:34:32:8b:63:64:12: 52:20:4c:54:8a:f5:5a:40:36:b0:de:46:b7:3b:e7:ab:a3:1b: 96:10:51:77:71:ab:ce:53:c9:ea:5a:db:6f:5c:4b:4a:1e:fc: 91:a8:73:d9:59:dd:c3:f9:dc:14:ff:f4:06:b1:fa:61:3e:f1: d5:56:27:48 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt4NOtqJAP/DbdwmBRjP0kwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjBlZGY5NjI2NmI3YzBkNDM4MzZjODU0YWI0NzJjYjc0 ZGIwMzQwHhcNMjYwMTAxMDYxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2UxNTE4OWQ1NzVmNTE2YTVmMDc2MDI5MTM3ZWRhN2M2NDZjN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvc7901WOK/e/8b6TXVbzJMZ/9h2 oMDHvoEJPAb/mtQ4A42n/4LATnv44JdHqlBjozeQYjWbRgBTMO/J8Oo8twEtm9qc n8M6jKTnpEpgAyx7d/NXCKSRgAo0PKQ3HrJr3dt/snbvOgJ8C5TUMpr5I9xizalx bhq8q6udbqVV6IekT8cWQSYDD270e9+DZdB7AzfgpeKOpTY4tmsKS5et4lU/dxDe cQcINji5ZPlvnUFiVmv+zY5SRyTOYLrSw5fsgCwZOl/khTzaT+jlhMhK3e2EtmCv 5iPWS5WJ8vH9jvlmFmkcsAY9fQ1ge+bjervUZ+bGjwq0Nl742uld8jDsswIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFKfhUYnVdfUWpfB2ApE37afGRsfyMB8GA1UdIwQY MBaAFL1g7fliZrfA1Dg2yFSrRyy3TbA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0Yzgt NDJiYmYxYTZhNjViLzEvcC1GUmlkVjE5UmFsOEhZQ2tUZnRwOFpHeF9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0YzgtNDJiYmYxYTZhNjVi LzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEA0AA6 MA0GCSqGSIb3DQEBCwUAA4IBAQBmP3GXgDLeychp0u4LpGsf9zFaIgSoD+o7+gnR Z41GJLKAgiqGQUHIaoB3tpkDWpmQ3+P8s0Cst5XncPdga2csu6axaCeeRpPorPcp LKNo9LX2Ej2R74arJF16R9LlU5ZQTWWeva3rYAw0JQfwVj5ne1iGOhCagW7F+YFH Cv+cceWBSCGUGr1mMg+nDWaNCg7ZuykbSc8Kj5+ImebLbKqh7ou6ixbPOdg5ooNi xSkCS1RXmGSjTDRG4fiU94SDjC00MotjZBJSIExUivVaQDaw3ka3O+eroxuWEFF3 cavOU8nqWttvXEtKHvyRqHPZWd3D+dwU//QGsfphPvHVVidI -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:24 2026 by rpki-client