This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/fiv0OI-AqtRVVrzWS5rFRgZaVys.roa File: fiv0OI-AqtRVVrzWS5rFRgZaVys.roa (raw, json) Hash identifier: oh8Kp8XMS/i+hHdda1I22uBBGuzEAYFA2en/nHrlnSs= Subject key identifier: 7E:2B:F4:38:8F:80:AA:D4:55:56:BC:D6:4B:9A:C5:46:06:5A:57:2B Certificate issuer: /CN=e80ec31635f4d91bb11312ba0a3465c18f233f68 Certificate serial: 019B7CED78C8546D761C99329B2ADD8DACA9 Authority key identifier: E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/fiv0OI-AqtRVVrzWS5rFRgZaVys.roa Signing time: Fri 02 Jan 2026 04:18:16 +0000 ROA not before: Fri 02 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214078 IP address blocks: 2a10:ed40:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.mft rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:78:c8:54:6d:76:1c:99:32:9b:2a:dd:8d:ac:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e80ec31635f4d91bb11312ba0a3465c18f233f68 Validity Not Before: Jan 2 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e2bf4388f80aad45556bcd64b9ac546065a572b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c9:14:c9:3e:e8:d7:30:56:b7:c3:bc:58:7e: 9c:5b:05:f9:37:df:c6:2d:0b:05:af:08:71:eb:a9: 78:d4:f5:1c:73:5e:46:64:6f:eb:e2:c6:9c:0a:0b: cb:c9:91:6c:3f:4e:75:8a:16:0b:4d:16:d0:bc:7c: ff:02:61:ef:a5:75:a2:30:c0:7f:93:12:65:bc:cf: 5c:a2:a8:21:ca:ce:72:a4:7a:e3:28:8b:b4:8d:cb: 38:f3:cc:d8:94:0e:48:71:b0:40:b5:e4:53:af:a9: 8b:af:c0:cc:f0:31:70:b1:29:cb:c8:cc:18:fd:3f: af:ed:5d:1f:32:91:f7:0b:b4:4b:be:17:76:2f:03: 56:99:5e:fc:f4:cd:2a:c0:90:f3:df:86:55:91:90: 9e:77:0d:16:0e:e8:9f:39:0e:5b:9c:bc:d2:16:5e: c0:17:ce:81:46:e2:cf:ff:2b:eb:a7:46:14:11:9f: b9:ec:d8:f7:21:b0:6c:8a:43:1a:96:49:fa:e4:53: c2:62:4a:6e:dc:fd:6d:4d:a5:18:45:c9:7d:27:17: e2:7d:49:b4:29:00:8a:9c:41:da:4f:b5:de:07:66: 2a:e5:af:8b:c5:58:81:ea:60:fe:f0:81:9e:08:36: 90:01:2b:29:5a:dd:ca:1e:f9:2f:91:b2:9e:64:4b: 22:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2B:F4:38:8F:80:AA:D4:55:56:BC:D6:4B:9A:C5:46:06:5A:57:2B X509v3 Authority Key Identifier: keyid:E8:0E:C3:16:35:F4:D9:1B:B1:13:12:BA:0A:34:65:C1:8F:23:3F:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6A7DFjX02RuxExK6CjRlwY8jP2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/fiv0OI-AqtRVVrzWS5rFRgZaVys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/13072f-178d-4f0c-9ffb-4dbe10c3a71f/1/6A7DFjX02RuxExK6CjRlwY8jP2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a10:ed40:8::/48 Signature Algorithm: sha256WithRSAEncryption 1e:77:f8:45:61:3d:91:5f:c2:c4:d5:33:5a:cd:07:df:5f:86: ad:f4:a2:f1:19:ba:c7:1c:0f:d2:ca:54:b0:81:04:63:a1:0b: 13:ee:51:2c:2f:af:51:96:43:77:24:e4:60:ec:4e:b4:5a:5a: 67:6f:00:1f:9c:52:14:bd:7f:71:81:cc:91:01:e1:38:03:8f: 29:ce:07:e9:66:15:69:67:67:37:bf:66:de:73:bc:83:6d:e1: 46:cd:c5:49:7b:41:3d:ce:98:94:87:d3:d1:02:9e:3f:57:3f: de:75:b4:ec:89:f8:b8:69:b5:4f:45:c2:ad:dd:6b:bf:af:0c: f7:f7:21:8b:08:01:51:aa:02:eb:3f:14:e4:6d:1d:a2:a2:c8: 44:dc:70:98:89:f7:52:a0:ca:c1:22:0a:02:a9:c9:b7:c4:54: f1:46:77:17:53:00:61:14:f4:19:8c:02:db:d4:ef:a7:50:9f: 1c:33:f7:98:26:1f:37:d6:b6:df:78:c7:c9:d0:73:37:c2:0f: 5f:fb:be:a9:b5:c6:01:ef:9e:87:eb:c2:3a:1d:13:a1:a0:17: f1:74:05:2e:5c:d0:cb:25:f5:dc:51:34:ce:69:24:e4:17:02: 09:dc:f9:bf:b5:fa:2d:99:ae:c2:76:8c:ab:ce:50:a7:f1:ab: c9:6a:6c:d6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87XjIVG12HJkymyrdjaypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MGVjMzE2MzVmNGQ5MWJiMTEzMTJiYTBhMzQ2NWMxOGYy MzNmNjgwHhcNMjYwMTAyMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTJiZjQzODhmODBhYWQ0NTU1NmJjZDY0YjlhYzU0NjA2NWE1NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMkUyT7o1zBWt8O8WH6cWwX5N9/G LQsFrwhx66l41PUcc15GZG/r4sacCgvLyZFsP051ihYLTRbQvHz/AmHvpXWiMMB/ kxJlvM9coqghys5ypHrjKIu0jcs488zYlA5IcbBAteRTr6mLr8DM8DFwsSnLyMwY /T+v7V0fMpH3C7RLvhd2LwNWmV789M0qwJDz34ZVkZCedw0WDuifOQ5bnLzSFl7A F86BRuLP/yvrp0YUEZ+57Nj3IbBsikMalkn65FPCYkpu3P1tTaUYRcl9JxfifUm0 KQCKnEHaT7XeB2Yq5a+LxViB6mD+8IGeCDaQASspWt3KHvkvkbKeZEsiwwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH4r9DiPgKrUVVa81kuaxUYGWlcrMB8GA1UdIwQY MBaAFOgOwxY19NkbsRMSugo0ZcGPIz9oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkE3REZqWDAyUnV4RXhLNkNqUmx3WThqUDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8xMzA3MmYtMTc4ZC00ZjBjLTlmZmIt NGRiZTEwYzNhNzFmLzEvZml2ME9JLUFxdFJWVnJ6V1M1ckZSZ1phVnlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC8xMzA3MmYtMTc4ZC00ZjBjLTlmZmItNGRiZTEwYzNhNzFm LzEvNkE3REZqWDAyUnV4RXhLNkNqUmx3WThqUDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhDtQAAI MA0GCSqGSIb3DQEBCwUAA4IBAQAed/hFYT2RX8LE1TNazQffX4at9KLxGbrHHA/S ylSwgQRjoQsT7lEsL69RlkN3JORg7E60WlpnbwAfnFIUvX9xgcyRAeE4A48pzgfp ZhVpZ2c3v2bec7yDbeFGzcVJe0E9zpiUh9PRAp4/Vz/edbTsifi4abVPRcKt3Wu/ rwz39yGLCAFRqgLrPxTkbR2ioshE3HCYifdSoMrBIgoCqcm3xFTxRncXUwBhFPQZ jALb1O+nUJ8cM/eYJh831rbfeMfJ0HM3wg9f+76ptcYB756H68I6HROhoBfxdAUu XNDLJfXcUTTOaSTkFwIJ3Pm/tfotma7CdoyrzlCn8avJamzW -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:30 2026 by rpki-client