This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/fdLjtQ7VP8SPjHcv_0cwyfdBWSk.roa File: fdLjtQ7VP8SPjHcv_0cwyfdBWSk.roa (raw, json) Hash identifier: MiNC2Gr6CsiH2lFaCNJQkR6f6qQFPG2gdhD4KgOM3J4= Subject key identifier: 7D:D2:E3:B5:0E:D5:3F:C4:8F:8C:77:2F:FF:47:30:C9:F7:41:59:29 Certificate issuer: /CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Certificate serial: 019BE0796495DC636035DAF12EE6C620C76B Authority key identifier: 58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/fdLjtQ7VP8SPjHcv_0cwyfdBWSk.roa Signing time: Wed 21 Jan 2026 12:13:30 +0000 ROA not before: Wed 21 Jan 2026 12:13:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 2a14:c380:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.mft rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:79:64:95:dc:63:60:35:da:f1:2e:e6:c6:20:c7:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b3de5f9adb50fe41f6dc78ffd0a2c9086d2512 Validity Not Before: Jan 21 12:13:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dd2e3b50ed53fc48f8c772fff4730c9f7415929 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fb:9c:d9:69:c5:d4:3a:a7:20:08:5d:82:73: 40:3e:10:c8:ea:87:fc:47:3b:43:e4:24:00:6b:36: e4:da:77:e6:11:11:cd:49:b9:3d:12:61:35:53:e5: a4:99:40:38:9e:d1:df:32:52:86:0f:d2:71:33:96: 2f:cd:b5:cc:46:ce:58:e3:74:d4:8f:51:2e:40:28: 24:e4:70:73:b1:f4:23:4b:d5:8b:fe:cd:c0:99:bc: 4e:48:ac:26:7a:d9:39:f3:e3:27:f0:ec:14:9e:73: cb:4c:93:42:d3:4a:b9:11:02:05:3f:40:b2:b8:de: 63:5c:44:59:40:6c:25:30:83:de:54:24:70:28:3e: 26:43:96:de:a4:78:8a:4f:51:07:c3:56:2f:53:88: 22:53:5e:40:35:d8:cf:4f:32:f5:72:2f:34:2d:ff: b3:2b:b8:b3:a8:4a:20:d4:51:12:c1:2c:2c:4f:d4: bc:ca:ae:29:53:37:a4:81:ed:37:61:5a:55:e6:8a: e8:81:1b:56:f3:e5:f3:ab:64:7b:0b:34:46:ef:07: 27:be:e8:a5:92:f8:1c:cd:43:c7:3f:83:49:f1:77: e8:07:b7:20:ae:7c:e0:64:d7:55:9e:cb:61:97:11: f7:68:94:99:16:ec:65:5c:df:a9:cf:6e:ff:37:ed: 2c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D2:E3:B5:0E:D5:3F:C4:8F:8C:77:2F:FF:47:30:C9:F7:41:59:29 X509v3 Authority Key Identifier: keyid:58:B3:DE:5F:9A:DB:50:FE:41:F6:DC:78:FF:D0:A2:C9:08:6D:25:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLPeX5rbUP5B9tx4_9CiyQhtJRI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/fdLjtQ7VP8SPjHcv_0cwyfdBWSk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/6b7490-e10a-42e0-9e2e-5321d69d979d/1/WLPeX5rbUP5B9tx4_9CiyQhtJRI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:c380:20::/48 Signature Algorithm: sha256WithRSAEncryption 69:0a:80:69:cc:44:3d:a4:6a:68:06:2c:c8:43:aa:21:b5:96: 12:d1:f2:8f:5d:b0:7d:8c:e7:0a:f6:b3:eb:0c:b9:1f:0a:c8: 19:cd:19:86:98:82:09:77:8a:8e:48:6f:9a:40:6d:9e:7e:65: 8f:c8:d0:33:93:70:00:2a:89:af:e9:90:ac:16:84:73:96:56: b1:5f:1c:98:be:25:66:99:5e:8b:8d:e6:d4:c3:33:7b:31:1a: e3:c7:58:81:db:71:ab:43:e0:44:e0:71:da:26:5e:ca:fe:8a: f7:88:7e:c6:13:97:ea:41:fb:bf:93:be:6e:8b:87:54:9b:e3: c4:af:e7:61:0b:e5:a4:1c:e6:98:d4:81:f1:5b:c6:a7:8e:62: c2:52:b1:ef:7d:0e:70:64:8a:79:d5:f9:96:57:12:cb:07:dd: 32:6f:3a:ca:20:b3:26:fe:7e:5a:4e:53:a8:8e:6e:5f:60:4a: 31:a6:07:73:2f:f2:e9:7d:fa:e3:ee:ce:49:51:b9:b9:bc:fb: 15:fa:19:62:1e:df:cf:f4:d8:9c:a2:4c:98:8b:cf:2b:f0:98: 3e:47:d8:fc:4b:1a:bb:12:a5:d3:33:ab:76:13:1e:90:18:f3: 50:ab:dc:70:80:90:d4:77:a7:ef:14:23:b0:8d:87:0c:60:aa: 1e:41:0f:4f -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZvgeWSV3GNgNdrxLubGIMdrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjNkZTVmOWFkYjUwZmU0MWY2ZGM3OGZmZDBhMmM5MDg2 ZDI1MTIwHhcNMjYwMTIxMTIxMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGQyZTNiNTBlZDUzZmM0OGY4Yzc3MmZmZjQ3MzBjOWY3NDE1OTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfuc2WnF1DqnIAhdgnNAPhDI6of8 RztD5CQAazbk2nfmERHNSbk9EmE1U+WkmUA4ntHfMlKGD9JxM5YvzbXMRs5Y43TU j1EuQCgk5HBzsfQjS9WL/s3AmbxOSKwmetk58+Mn8OwUnnPLTJNC00q5EQIFP0Cy uN5jXERZQGwlMIPeVCRwKD4mQ5bepHiKT1EHw1YvU4giU15ANdjPTzL1ci80Lf+z K7izqEog1FESwSwsT9S8yq4pUzekge03YVpV5orogRtW8+Xzq2R7CzRG7wcnvuil kvgczUPHP4NJ8XfoB7cgrnzgZNdVnsthlxH3aJSZFuxlXN+pz27/N+0szwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH3S47UO1T/Ej4x3L/9HMMn3QVkpMB8GA1UdIwQY MBaAFFiz3l+a21D+QfbceP/QoskIbSUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUt NTMyMWQ2OWQ5NzlkLzEvZmRManRRN1ZQOFNQakhjdl8wY3d5ZmRCV1NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82Yjc0OTAtZTEwYS00MmUwLTllMmUtNTMyMWQ2OWQ5Nzlk LzEvV0xQZVg1cmJVUDVCOXR4NF85Q2l5UWh0SlJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhTDgAAg MA0GCSqGSIb3DQEBCwUAA4IBAQBpCoBpzEQ9pGpoBizIQ6ohtZYS0fKPXbB9jOcK 9rPrDLkfCsgZzRmGmIIJd4qOSG+aQG2efmWPyNAzk3AAKomv6ZCsFoRzllaxXxyY viVmmV6LjebUwzN7MRrjx1iB23GrQ+BE4HHaJl7K/or3iH7GE5fqQfu/k75ui4dU m+PEr+dhC+WkHOaY1IHxW8anjmLCUrHvfQ5wZIp51fmWVxLLB90ybzrKILMm/n5a TlOojm5fYEoxpgdzL/Lpffrj7s5JUbm5vPsV+hliHt/P9NicokyYi88r8Jg+R9j8 Sxq7EqXTM6t2Ex6QGPNQq9xwgJDUd6fvFCOwjYcMYKoeQQ9P -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:47 2026 by rpki-client