This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/fD9BwG2lJTji8xqQ2DVkA0J_2g4.roa File: fD9BwG2lJTji8xqQ2DVkA0J_2g4.roa (raw, json) Hash identifier: 73MVhXAtrYpsnQSFZjVinUD/kayOZxyIGMiP64m+B2U= Subject key identifier: 7C:3F:41:C0:6D:A5:25:38:E2:F3:1A:90:D8:35:64:03:42:7F:DA:0E Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019B7E383C8100EFFD63E6FCCD78441C6E22 Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/fD9BwG2lJTji8xqQ2DVkA0J_2g4.roa Signing time: Fri 02 Jan 2026 10:19:33 +0000 ROA not before: Fri 02 Jan 2026 10:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60262 IP address blocks: 2a04:ca80::/29 maxlen: 29 2a07:dd80::/29 maxlen: 29 2a09:8140::/29 maxlen: 29 2a0a:ca40::/29 maxlen: 29 2a0c:b140::/29 maxlen: 29 2a0c:b500::/29 maxlen: 29 2a11:2dc0::/29 maxlen: 29 2a11:4840::/29 maxlen: 29 2a11:4d00::/29 maxlen: 29 2a11:5a00::/29 maxlen: 29 2a11:5c00::/29 maxlen: 29 2a11:5e40::/29 maxlen: 29 2a11:76c0::/29 maxlen: 29 2a11:9f80::/29 maxlen: 29 2a11:a4c0::/29 maxlen: 29 2a11:a900::/29 maxlen: 29 2a11:bf40::/29 maxlen: 29 2a11:cf80::/29 maxlen: 29 2a11:fa00::/29 maxlen: 29 2a12:200::/29 maxlen: 29 2a12:3000::/29 maxlen: 29 2a12:4480::/29 maxlen: 29 2a12:7500::/29 maxlen: 29 2a12:a680::/29 maxlen: 29 2a12:e600::/29 maxlen: 29 2a12:f700::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:3c:81:00:ef:fd:63:e6:fc:cd:78:44:1c:6e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Jan 2 10:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c3f41c06da52538e2f31a90d8356403427fda0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9a:33:67:6b:80:21:52:01:58:26:5f:13:af: 7b:dc:bd:bc:0e:6a:52:e9:ff:b6:38:36:65:44:4b: 77:3c:1a:2d:f1:af:67:bd:eb:46:00:81:f3:ca:16: 8e:74:2d:e7:d1:a7:90:cf:bd:03:7b:2c:a6:e4:94: 26:ad:2b:70:99:f8:96:b0:aa:f2:a3:2f:1f:84:66: 42:08:42:41:82:46:72:61:1f:4e:28:a9:e6:3e:ee: 2b:fa:24:aa:02:3f:c7:59:84:a0:b1:8f:8e:fb:31: b2:de:80:3c:98:0b:77:44:16:71:65:98:20:1a:f9: 5a:21:cc:b0:1a:5e:e2:8b:8a:04:a1:ab:68:f6:a0: e6:5b:ac:b6:cb:03:3d:60:25:76:af:46:42:69:a4: 7f:0c:f2:9c:b4:c8:0d:41:5d:58:23:28:8b:54:09: ff:bf:f8:8a:04:70:85:e7:aa:8a:c6:d8:77:01:b4: c7:d0:6c:88:9d:08:70:0c:7c:f4:dc:f3:7e:48:ee: 7f:38:63:41:e3:c4:e7:49:69:f0:c4:9f:2b:b8:5d: 83:f1:ed:5b:44:99:d3:60:2e:6a:a0:0c:a3:bf:99: 0b:30:2b:84:c6:53:77:ba:db:4c:d6:f8:05:3f:f5: 1c:4d:7f:4a:15:7a:4d:0e:19:2e:5b:e6:dd:6d:3e: d8:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3F:41:C0:6D:A5:25:38:E2:F3:1A:90:D8:35:64:03:42:7F:DA:0E X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/fD9BwG2lJTji8xqQ2DVkA0J_2g4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:ca80::/29 2a07:dd80::/29 2a09:8140::/29 2a0a:ca40::/29 2a0c:b140::/29 2a0c:b500::/29 2a11:2dc0::/29 2a11:4840::/29 2a11:4d00::/29 2a11:5a00::/29 2a11:5c00::/29 2a11:5e40::/29 2a11:76c0::/29 2a11:9f80::/29 2a11:a4c0::/29 2a11:a900::/29 2a11:bf40::/29 2a11:cf80::/29 2a11:fa00::/29 2a12:200::/29 2a12:3000::/29 2a12:4480::/29 2a12:7500::/29 2a12:a680::/29 2a12:e600::/29 2a12:f700::/29 Signature Algorithm: sha256WithRSAEncryption 06:b6:c9:2a:db:d6:89:19:c9:df:77:d8:fe:b3:6d:58:97:93: cf:14:6e:9c:32:99:27:32:8a:7c:ba:89:da:8a:c7:62:a1:d0: a2:2a:58:20:d4:a2:40:9e:7b:1d:b7:10:14:d0:ec:9b:28:f6: 88:13:13:5b:c6:da:74:1c:27:ea:3e:44:0b:9e:bf:ce:58:00: d2:d8:6a:6e:eb:9c:1d:fe:af:94:0d:bb:7d:ba:9a:17:6e:cb: 32:49:f3:4a:6c:cd:e1:29:f3:c3:3c:a8:c3:2c:38:b3:b6:1f: 6d:99:b4:17:0a:b0:f2:73:ba:dd:b5:7d:23:e7:95:2e:ed:b4: 41:49:8e:10:3f:cc:75:fb:fb:8f:d4:2a:e5:c0:25:86:39:cc: 22:c2:94:78:f7:bc:06:1e:0a:3d:07:02:ca:49:ea:f1:b0:cf: b6:71:41:36:99:2f:ca:d2:89:61:a8:3e:aa:10:2a:d2:99:40: fa:71:7f:ef:db:ec:84:fb:b4:be:e4:cf:36:4a:d0:1b:68:11: bb:b8:81:73:2a:9b:77:0e:94:9a:fb:40:4b:8c:0d:7a:df:13: d9:7a:f4:b3:e6:06:0b:9e:7c:74:a3:85:a4:d8:61:c2:a9:5b: 35:80:ff:49:8c:1b:e0:5e:d1:41:c3:37:e3:33:bb:57:1e:44: 26:27:b6:0a -----BEGIN CERTIFICATE----- MIIFsjCCBJqgAwIBAgISAZt+ODyBAO/9Y+b8zXhEHG4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjYwMTAyMTAxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzNmNDFjMDZkYTUyNTM4ZTJmMzFhOTBkODM1NjQwMzQyN2ZkYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJozZ2uAIVIBWCZfE6973L28DmpS 6f+2ODZlREt3PBot8a9nvetGAIHzyhaOdC3n0aeQz70Deyym5JQmrStwmfiWsKry oy8fhGZCCEJBgkZyYR9OKKnmPu4r+iSqAj/HWYSgsY+O+zGy3oA8mAt3RBZxZZgg GvlaIcywGl7ii4oEoato9qDmW6y2ywM9YCV2r0ZCaaR/DPKctMgNQV1YIyiLVAn/ v/iKBHCF56qKxth3AbTH0GyInQhwDHz03PN+SO5/OGNB48TnSWnwxJ8ruF2D8e1b RJnTYC5qoAyjv5kLMCuExlN3uttM1vgFP/UcTX9KFXpNDhkuW+bdbT7YHwIDAQAB o4ICvjCCArowHQYDVR0OBBYEFHw/QcBtpSU44vMakNg1ZANCf9oOMB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvZkQ5QndHMmxKVGppOHhxUTJEVmtBMEpfMmc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHTBggrBgEFBQcBBwEB/wSBwzCBwDCBvQQCAAIwgbYDBQMq BMqAAwUDKgfdgAMFAyoJgUADBQMqCspAAwUDKgyxQAMFAyoMtQADBQMqES3AAwUD KhFIQAMFAyoRTQADBQMqEVoAAwUDKhFcAAMFAyoRXkADBQMqEXbAAwUDKhGfgAMF AyoRpMADBQMqEakAAwUDKhG/QAMFAyoRz4ADBQMqEfoAAwUDKhICAAMFAyoSMAAD BQMqEkSAAwUDKhJ1AAMFAyoSpoADBQMqEuYAAwUDKhL3ADANBgkqhkiG9w0BAQsF AAOCAQEABrbJKtvWiRnJ33fY/rNtWJeTzxRunDKZJzKKfLqJ2orHYqHQoipYINSi QJ57HbcQFNDsmyj2iBMTW8badBwn6j5EC56/zlgA0thqbuucHf6vlA27fbqaF27L MknzSmzN4Snzwzyowyw4s7YfbZm0Fwqw8nO63bV9I+eVLu20QUmOED/Mdfv7j9Qq 5cAlhjnMIsKUePe8Bh4KPQcCyknq8bDPtnFBNpkvytKJYag+qhAq0plA+nF/79vs hPu0vuTPNkrQG2gRu7iBcyqbdw6UmvtAS4wNet8T2Xr0s+YGC558dKOFpNhhwqlb NYD/SYwb4F7RQcM34zO7Vx5EJie2Cg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:14 2026 by rpki-client