This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/fPatpWdNAbZy6ojdptQs2lNi1EE.roa File: fPatpWdNAbZy6ojdptQs2lNi1EE.roa (raw, json) Hash identifier: X9tWk7+bmsyMGDUglxjA0jdRl4uO9c2P7cIjkiKVhfo= Subject key identifier: 7C:F6:AD:A5:67:4D:01:B6:72:EA:88:DD:A6:D4:2C:DA:53:62:D4:41 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019B7D5B6CC3D2CCC097CD166F2464EE9714 Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/fPatpWdNAbZy6ojdptQs2lNi1EE.roa Signing time: Fri 02 Jan 2026 06:18:22 +0000 ROA not before: Fri 02 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210596 IP address blocks: 2a0a:d6c0:9145::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6c:c3:d2:cc:c0:97:cd:16:6f:24:64:ee:97:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 2 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cf6ada5674d01b672ea88dda6d42cda5362d441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:d7:0c:8e:7b:14:9f:e8:8d:d2:71:df:25: 2b:e4:2a:b7:8a:4d:59:ad:50:d8:65:18:38:1f:1c: 0e:94:94:7c:52:b8:61:66:7e:55:8d:c1:f4:be:04: 35:ee:8b:cc:f3:4c:63:f7:ac:80:18:15:4d:ea:b1: e1:aa:6e:9e:d6:4b:cb:41:f6:eb:53:c1:62:18:47: 1b:77:40:3f:16:e6:ae:e0:d9:87:ba:c0:cd:a7:4d: a4:07:7c:1a:e8:4e:0e:79:80:28:08:e0:c3:ac:a6: f3:93:dc:ea:ce:52:df:81:15:e2:c2:6e:c7:25:d6: c9:8b:15:3c:54:51:12:06:93:0d:96:be:bb:fc:fe: 52:63:bf:12:8e:2b:21:f9:02:0f:43:a6:60:f5:f3: 8c:f2:97:c4:5f:ef:73:6c:c5:d1:b2:f2:84:fd:4a: e6:66:5a:d9:2c:6a:b5:7c:c4:28:a3:51:e5:5f:e5: ee:ba:6b:64:be:a7:8a:10:9f:f5:7c:c0:9d:59:7b: aa:ed:d7:d0:6c:25:4b:db:bb:fe:f9:81:37:6b:c5: ad:4c:69:6e:53:11:ac:1a:37:f6:05:75:5d:b1:35: 99:48:80:02:6b:22:57:62:cd:18:3d:e4:cf:49:57: c8:3b:36:a2:2f:25:c2:93:d7:20:b2:16:c3:a9:41: 91:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:F6:AD:A5:67:4D:01:B6:72:EA:88:DD:A6:D4:2C:DA:53:62:D4:41 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/fPatpWdNAbZy6ojdptQs2lNi1EE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d6c0:9145::/48 Signature Algorithm: sha256WithRSAEncryption 29:e6:c5:ca:e0:27:1f:2e:86:07:62:19:eb:91:9f:c3:70:87: 15:b5:98:20:f4:f6:ea:ee:7e:08:4c:f4:f0:f6:42:79:95:27: 70:c7:eb:50:76:3c:17:a5:1f:95:87:59:a4:8b:20:80:46:a1: ba:ce:01:17:03:77:e3:69:c9:3b:2b:00:58:81:90:e2:3d:04: 26:38:4d:fe:23:85:1a:03:e1:86:c9:62:8c:e8:d3:85:31:e6: 09:d1:ca:00:9e:d4:38:00:ae:90:15:2d:ee:91:59:a3:b3:60: 65:dc:d9:65:8c:4f:42:af:b7:77:a0:e0:0a:7e:d2:4b:ab:aa: e1:da:73:5d:2c:8b:80:61:36:6f:94:28:92:84:f9:b4:a4:23: dd:14:e1:55:25:14:a1:c9:cb:9f:62:5d:97:f9:80:9e:f7:a6: c0:ee:f0:89:28:5a:bb:cc:83:29:75:55:73:de:4f:af:12:c1: 52:65:41:e4:b5:ee:6e:77:5f:47:ce:9b:c9:82:0f:03:2e:99: b6:c1:3a:05:ff:21:4b:16:43:c1:03:f6:b8:62:29:de:80:65: d1:70:66:1f:f3:e2:fb:19:fe:dc:5d:8a:de:c4:21:53:b3:5d: 62:bb:55:11:b0:26:8b:b6:5c:d8:d5:c8:87:6b:20:34:cf:db: ec:00:7a:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9W2zD0szAl80WbyRk7pcUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTAyMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2Y2YWRhNTY3NGQwMWI2NzJlYTg4ZGRhNmQ0MmNkYTUzNjJkNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCPXDI57FJ/ojdJx3yUr5Cq3ik1Z rVDYZRg4HxwOlJR8UrhhZn5VjcH0vgQ17ovM80xj96yAGBVN6rHhqm6e1kvLQfbr U8FiGEcbd0A/Fuau4NmHusDNp02kB3wa6E4OeYAoCODDrKbzk9zqzlLfgRXiwm7H JdbJixU8VFESBpMNlr67/P5SY78Sjish+QIPQ6Zg9fOM8pfEX+9zbMXRsvKE/Urm ZlrZLGq1fMQoo1HlX+XuumtkvqeKEJ/1fMCdWXuq7dfQbCVL27v++YE3a8WtTGlu UxGsGjf2BXVdsTWZSIACayJXYs0YPeTPSVfIOzaiLyXCk9cgshbDqUGRPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHz2raVnTQG2cuqI3abULNpTYtRBMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvZlBhdHBXZE5BYlp5Nm9qZHB0UXMybE5pMUVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgrWwJFF MA0GCSqGSIb3DQEBCwUAA4IBAQAp5sXK4CcfLoYHYhnrkZ/DcIcVtZgg9Pbq7n4I TPTw9kJ5lSdwx+tQdjwXpR+Vh1mkiyCARqG6zgEXA3fjack7KwBYgZDiPQQmOE3+ I4UaA+GGyWKM6NOFMeYJ0coAntQ4AK6QFS3ukVmjs2Bl3NlljE9Cr7d3oOAKftJL q6rh2nNdLIuAYTZvlCiShPm0pCPdFOFVJRShycufYl2X+YCe96bA7vCJKFq7zIMp dVVz3k+vEsFSZUHkte5ud19HzpvJgg8DLpm2wToF/yFLFkPBA/a4YinegGXRcGYf 8+L7Gf7cXYrexCFTs11iu1URsCaLtlzY1ciHayA0z9vsAHr/ -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:19 2026 by rpki-client