This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/fZsIPfL9S4voGBxd602ugAHQTGg.roa File: fZsIPfL9S4voGBxd602ugAHQTGg.roa (raw, json) Hash identifier: 4czAOMzmZPhLzyU1X7HGGIfH3KkGeuh600HJEYAWRjg= Subject key identifier: 7D:9B:08:3D:F2:FD:4B:8B:E8:18:1C:5D:EB:4D:AE:80:01:D0:4C:68 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019B7F1519373465E8A2D64A15D76C659EC0 Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/fZsIPfL9S4voGBxd602ugAHQTGg.roa Signing time: Fri 02 Jan 2026 14:20:47 +0000 ROA not before: Fri 02 Jan 2026 14:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215127 IP address blocks: 2a14:c380:240::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:19:37:34:65:e8:a2:d6:4a:15:d7:6c:65:9e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 2 14:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d9b083df2fd4b8be8181c5deb4dae8001d04c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:44:f8:a2:5a:1b:ad:b2:ce:1e:40:ee:78:8b: c2:6f:ee:61:38:bf:c1:df:22:4b:0a:2f:95:27:53: 4e:ea:c2:23:0a:7d:2e:0d:e2:8c:61:f9:99:5d:64: cc:63:76:04:84:55:c7:56:a3:86:60:1a:8e:51:0c: 41:d7:60:96:5f:67:71:2b:18:99:84:28:f7:c9:36: 5d:e5:ef:2d:04:f8:64:58:b3:85:6e:44:e2:a5:79: 58:b3:1d:2a:82:96:8c:34:be:ee:64:70:b9:b8:a6: cc:d4:88:7f:ae:85:87:f9:15:ec:9c:a7:c6:9d:f9: 55:10:45:33:0b:f9:4b:c3:f4:1a:b2:84:48:cf:1e: 9a:b5:c2:59:75:4f:d4:d5:51:69:b9:e2:ce:f8:f0: 09:ed:c1:56:46:e3:f3:5b:d4:57:6b:5c:a0:80:83: b5:bb:ec:9b:37:d0:cd:93:2c:37:52:16:d6:99:60: b8:ed:10:89:eb:be:5d:bd:8b:8d:64:b4:d8:07:54: c7:ff:88:58:a5:67:73:80:31:73:94:42:06:f5:a5: a4:cf:73:ac:35:38:95:ff:7a:ba:37:37:b0:f7:43: 98:91:ab:aa:74:9f:ad:29:62:0c:2e:4f:6d:4d:ca: 24:ec:36:fb:b7:43:60:3a:ca:cb:d6:26:77:14:95: d6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9B:08:3D:F2:FD:4B:8B:E8:18:1C:5D:EB:4D:AE:80:01:D0:4C:68 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/fZsIPfL9S4voGBxd602ugAHQTGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:240::/44 Signature Algorithm: sha256WithRSAEncryption 6d:00:89:2e:dd:ab:02:ce:26:92:eb:2d:40:3b:0c:88:83:f1: 7d:40:21:db:a6:db:5c:ec:11:ed:a6:c7:ba:2f:37:15:0e:ed: fa:dc:76:1d:fe:8f:57:c0:93:13:f5:e3:ba:8e:ac:eb:98:fd: 0a:1b:72:9b:46:49:53:26:48:79:6e:44:12:4c:28:31:b9:dc: a1:17:36:ed:94:73:ce:67:85:4e:e6:7c:44:8b:6e:a3:b1:08: da:0b:6d:a5:67:3a:11:08:93:f5:4f:9e:39:d1:de:3f:da:7f: d8:72:df:41:c1:5e:59:86:fe:76:cb:16:33:3d:5c:90:ff:9c: 5b:e2:7b:b8:28:6b:bb:6e:ed:64:65:ff:7b:68:d5:fc:09:2c: 2d:7b:aa:11:9e:4f:f8:91:e7:fc:c3:3b:c8:ab:0b:ed:a5:3e: 58:70:9c:ef:23:47:7d:00:a3:7d:3e:09:72:e0:b9:d1:d3:8b: 61:ef:08:76:a1:bf:a5:7c:fc:1c:62:b3:bd:e7:d7:fc:0d:8a: f7:3f:73:31:a6:ee:a8:9b:a0:80:8f:09:83:b0:73:74:e5:d2: f3:11:92:10:8b:83:73:36:0f:42:59:5b:f4:a1:86:14:14:b7: 92:40:1b:5f:ee:1d:84:ec:1a:df:c2:3e:c7:1e:fe:6d:76:b6: c6:b0:34:4e -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FRk3NGXootZKFddsZZ7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTAyMTQyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDliMDgzZGYyZmQ0YjhiZTgxODFjNWRlYjRkYWU4MDAxZDA0YzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kT4olobrbLOHkDueIvCb+5hOL/B 3yJLCi+VJ1NO6sIjCn0uDeKMYfmZXWTMY3YEhFXHVqOGYBqOUQxB12CWX2dxKxiZ hCj3yTZd5e8tBPhkWLOFbkTipXlYsx0qgpaMNL7uZHC5uKbM1Ih/roWH+RXsnKfG nflVEEUzC/lLw/QasoRIzx6atcJZdU/U1VFpueLO+PAJ7cFWRuPzW9RXa1yggIO1 u+ybN9DNkyw3UhbWmWC47RCJ675dvYuNZLTYB1TH/4hYpWdzgDFzlEIG9aWkz3Os NTiV/3q6Nzew90OYkauqdJ+tKWIMLk9tTcok7Db7t0NgOsrL1iZ3FJXWKQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH2bCD3y/UuL6BgcXetNroAB0ExoMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvZlpzSVBmTDlTNHZvR0J4ZDYwMnVnQUhRVEdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhTDgAJA MA0GCSqGSIb3DQEBCwUAA4IBAQBtAIku3asCziaS6y1AOwyIg/F9QCHbpttc7BHt pse6LzcVDu363HYd/o9XwJMT9eO6jqzrmP0KG3KbRklTJkh5bkQSTCgxudyhFzbt lHPOZ4VO5nxEi26jsQjaC22lZzoRCJP1T5450d4/2n/Yct9BwV5Zhv52yxYzPVyQ /5xb4nu4KGu7bu1kZf97aNX8CSwte6oRnk/4kef8wzvIqwvtpT5YcJzvI0d9AKN9 Pgly4LnR04th7wh2ob+lfPwcYrO959f8DYr3P3Mxpu6om6CAjwmDsHN05dLzEZIQ i4NzNg9CWVv0oYYUFLeSQBtf7h2E7Brfwj7HHv5tdrbGsDRO -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:47 2026 by rpki-client