This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/fliT7CSN0P7IrthmgvKtOYpdfus.roa File: fliT7CSN0P7IrthmgvKtOYpdfus.roa (raw, json) Hash identifier: QUoQumbQ45G7hWmpRNJQSWIwGg7+LCw3mLegafNHnAg= Subject key identifier: 7E:58:93:EC:24:8D:D0:FE:C8:AE:D8:66:82:F2:AD:39:8A:5D:7E:EB Certificate issuer: /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Certificate serial: 019B7EA70984E22C615C02E06732AACE95E2 Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/fliT7CSN0P7IrthmgvKtOYpdfus.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205480 IP address blocks: 2a01:ecc0:900::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:09:84:e2:2c:61:5c:02:e0:67:32:aa:ce:95:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e5893ec248dd0fec8aed86682f2ad398a5d7eeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a7:d1:c0:eb:e1:55:56:e6:6e:9a:be:5c:21: 18:9f:8a:78:b1:90:42:fe:f2:2f:6b:cd:27:67:fb: 3b:28:62:ba:bd:3b:f1:75:b6:78:b6:bc:21:43:13: 3f:74:ec:bf:06:79:6e:4e:df:a1:41:11:3c:8b:a8: fa:81:d4:1d:5b:c5:13:25:5f:bd:95:20:00:e5:02: 68:77:95:50:89:c8:e2:e7:5e:44:23:5b:ac:ee:ab: 97:fb:20:dd:dc:35:f7:8e:fc:4c:82:09:e0:f4:41: 99:a6:e3:79:a2:b4:9f:2f:0a:a2:55:70:3b:e0:44: c6:f7:4e:12:56:d0:f7:64:a6:db:fb:dc:f2:6f:cb: 5c:5e:05:f5:b8:9d:ed:57:5b:04:36:39:6c:69:1a: a6:da:cf:2d:0f:48:d3:a9:76:c3:80:0b:36:1b:10: ad:6e:c3:d1:56:11:64:c2:86:c3:31:1f:c9:2a:46: f6:86:c2:2b:b1:f4:56:52:6c:9c:84:c5:c7:1f:4c: ea:08:58:f5:41:54:74:62:5c:dc:0c:5f:ac:b0:a3: 38:d6:9f:39:74:2a:00:ec:5f:53:65:a3:01:d1:c3: 10:51:b2:cf:21:45:4f:74:c6:06:cf:b2:04:e3:20: 38:c1:50:88:a8:96:06:70:6e:e5:3b:1e:65:aa:e3: 76:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:58:93:EC:24:8D:D0:FE:C8:AE:D8:66:82:F2:AD:39:8A:5D:7E:EB X509v3 Authority Key Identifier: keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/fliT7CSN0P7IrthmgvKtOYpdfus.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:ecc0:900::/40 Signature Algorithm: sha256WithRSAEncryption b5:fa:4e:60:98:94:7c:be:fb:ac:86:ca:b3:7d:82:9e:b6:07: 5f:b5:83:5b:c0:57:3e:d2:f3:0d:05:b1:13:56:b3:94:19:bc: 50:3d:0e:8b:8a:b7:42:4a:0f:09:20:f8:8e:55:2f:8c:47:f2: 89:9f:08:d5:95:3b:57:01:59:ce:55:5a:80:75:ad:b8:f3:0b: 00:6a:53:54:63:92:5e:f8:c2:3f:ae:9c:0a:0b:69:65:d8:9a: a0:3e:01:7c:d1:25:57:33:40:c8:34:f6:af:12:e4:69:d3:c5: 1b:6a:e8:6b:c4:66:55:62:f4:85:3f:a1:40:d6:b3:f6:2a:bb: a7:ce:be:8a:48:cd:7b:bf:52:49:99:50:8c:5b:12:aa:5f:4c: e9:5a:5d:18:9d:d9:36:5b:4a:72:f3:74:22:74:eb:cd:3b:e5: 2a:d9:33:10:0c:8a:57:c1:44:3c:64:42:cf:88:4c:de:bd:8f: eb:8d:f8:7c:97:15:79:7c:45:b8:cf:49:08:b2:41:9a:e5:ee: 37:1b:be:bd:a3:08:59:21:02:8a:63:b0:1e:f6:6d:27:60:0f: b8:e9:c2:a9:8f:ab:12:14:66:c0:3a:75:10:e4:b2:ab:5c:75: e8:ca:01:10:16:1e:c6:39:1c:0d:75:48:1e:e2:5b:47:3e:49: df:ba:09:c9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+pwmE4ixhXALgZzKqzpXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFkNDNhMjQ4NDU2OWQyMGUzZjUzYzE3YmU3YjlmYjI5YzM0 ZWU1YmUwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTU4OTNlYzI0OGRkMGZlYzhhZWQ4NjY4MmYyYWQzOThhNWQ3ZWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsafRwOvhVVbmbpq+XCEYn4p4sZBC /vIva80nZ/s7KGK6vTvxdbZ4trwhQxM/dOy/BnluTt+hQRE8i6j6gdQdW8UTJV+9 lSAA5QJod5VQicji515EI1us7quX+yDd3DX3jvxMggng9EGZpuN5orSfLwqiVXA7 4ETG904SVtD3ZKbb+9zyb8tcXgX1uJ3tV1sENjlsaRqm2s8tD0jTqXbDgAs2GxCt bsPRVhFkwobDMR/JKkb2hsIrsfRWUmychMXHH0zqCFj1QVR0YlzcDF+ssKM41p85 dCoA7F9TZaMB0cMQUbLPIUVPdMYGz7IE4yA4wVCIqJYGcG7lOx5lquN2XQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFH5Yk+wkjdD+yK7YZoLyrTmKXX7rMB8GA1UdIwQY MBaAFB1DokhFadIOP1PBe+e5+ynDTuW+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjkt NjM0NTE1NDg5NzlkLzEvZmxpVDdDU04wUDdJcnRobWd2S3RPWXBkZnVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jOTNkODctMzJlMC00NmYxLTlmYjktNjM0NTE1NDg5Nzlk LzEvSFVPaVNFVnAwZzRfVThGNzU3bjdLY05PNWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKgHswAkw DQYJKoZIhvcNAQELBQADggEBALX6TmCYlHy++6yGyrN9gp62B1+1g1vAVz7S8w0F sRNWs5QZvFA9DouKt0JKDwkg+I5VL4xH8omfCNWVO1cBWc5VWoB1rbjzCwBqU1Rj kl74wj+unAoLaWXYmqA+AXzRJVczQMg09q8S5GnTxRtq6GvEZlVi9IU/oUDWs/Yq u6fOvopIzXu/UkmZUIxbEqpfTOlaXRid2TZbSnLzdCJ068075SrZMxAMilfBRDxk Qs+ITN69j+uN+HyXFXl8RbjPSQiyQZrl7jcbvr2jCFkhAopjsB72bSdgD7jpwqmP qxIUZsA6dRDksqtcdejKARAWHsY5HA11SB7iW0c+Sd+6Cck= -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:13 2026 by rpki-client