This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/fny2WANL9Kakl_hzClrFytLGIbA.roa File: fny2WANL9Kakl_hzClrFytLGIbA.roa (raw, json) Hash identifier: Li0zLoSXMQkOWimSeqYniHU5WmqmT1OGtibQ573h2wE= Subject key identifier: 7E:7C:B6:58:03:4B:F4:A6:A4:97:F8:73:0A:5A:C5:CA:D2:C6:21:B0 Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Certificate serial: 019B7D5B6A6AF107C1A37A080811ECA19BAA Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/fny2WANL9Kakl_hzClrFytLGIbA.roa Signing time: Fri 02 Jan 2026 06:18:21 +0000 ROA not before: Fri 02 Jan 2026 06:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203564 IP address blocks: 2a0a:d6c0:2035::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6a:6a:f1:07:c1:a3:7a:08:08:11:ec:a1:9b:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8 Validity Not Before: Jan 2 06:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e7cb658034bf4a6a497f8730a5ac5cad2c621b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:63:2b:18:13:04:90:53:13:a3:8a:58:25: 39:77:bc:3b:81:8f:7b:79:3a:7d:cf:a5:44:a6:72: 34:86:0c:a8:42:94:06:46:8a:61:db:60:4b:c2:b4: d1:f6:90:cc:1a:fa:5d:12:b7:ee:57:cf:e1:2d:7b: 7e:e3:a5:9b:00:fe:e3:47:73:24:58:7a:be:cd:28: 9e:54:9d:26:1b:03:23:24:d9:cf:a1:c9:50:05:26: 4b:1c:f3:36:d5:7a:20:2d:d4:58:53:b3:91:fb:19: 60:eb:11:c5:ec:e6:53:0e:2d:d9:c1:74:1b:09:00: ba:58:8b:10:d0:63:53:f7:51:dc:35:46:f4:be:19: b0:3e:f1:20:1c:14:08:4b:ac:0e:82:e2:4e:98:5d: 23:c1:d0:58:67:28:62:d9:63:7e:46:ca:8b:54:d3: 85:36:b9:d2:a9:00:f2:2c:ed:5b:bd:e3:ab:c2:26: 72:be:af:4c:77:41:2f:ab:65:f3:f1:fa:bb:d2:90: 60:89:13:49:d4:c1:f7:1a:36:cf:d4:19:18:34:d1: 6f:32:f7:96:36:4a:99:38:99:0c:ce:10:d0:77:0b: 84:8d:d7:90:65:51:d5:2d:d1:63:f0:e8:b7:c9:9c: 38:c5:c0:f0:53:48:89:14:05:be:17:2b:bb:b1:c2: 8b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:7C:B6:58:03:4B:F4:A6:A4:97:F8:73:0A:5A:C5:CA:D2:C6:21:B0 X509v3 Authority Key Identifier: keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/fny2WANL9Kakl_hzClrFytLGIbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:d6c0:2035::/48 Signature Algorithm: sha256WithRSAEncryption 97:26:6a:7e:ab:16:72:51:a9:6a:ed:2f:23:bc:70:e6:57:46: 51:8d:31:e4:c6:21:30:28:f7:88:e2:7e:da:99:de:8c:c0:ea: 2a:4d:51:5f:55:db:a5:33:1f:e1:22:4d:61:9b:5c:47:ce:19: 00:f7:bd:64:0a:c9:b1:f6:15:53:da:8d:34:fd:33:39:4c:e5: 62:2e:65:47:32:5d:45:58:3d:0b:d7:d3:bb:9e:16:07:00:c5: df:c9:c7:a0:f8:2b:d1:0e:38:74:a5:a3:f7:2e:d9:ff:bd:12: 13:a8:1b:b1:88:96:fa:f1:fe:84:34:d9:79:15:4c:5d:85:08: 28:57:dc:24:31:34:d6:fd:f9:18:69:69:67:fe:31:ed:44:d9: 2e:86:a4:d3:ee:c0:99:ce:9b:f5:97:76:8f:a3:c3:bb:bc:bf: c2:1b:bd:a0:5c:30:de:d5:5c:b5:b1:d1:8a:2f:01:6f:9d:32: 52:c0:22:8f:af:9a:97:5d:36:43:69:6e:a1:7c:91:e9:a1:b3: e6:05:a3:0b:65:cb:c9:7d:e1:f8:19:ba:72:04:98:aa:c7:d1: 9b:d8:e1:75:9a:05:5b:60:60:cf:0b:f8:05:dd:fa:0f:77:65: f0:88:90:ed:f7:c5:ea:62:50:b0:04:e8:5b:e6:d7:6e:a2:8f: 50:6b:97:62 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9W2pq8QfBo3oICBHsoZuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm OGNiZDgwHhcNMjYwMTAyMDYxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTdjYjY1ODAzNGJmNGE2YTQ5N2Y4NzMwYTVhYzVjYWQyYzYyMWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIVjKxgTBJBTE6OKWCU5d7w7gY97 eTp9z6VEpnI0hgyoQpQGRoph22BLwrTR9pDMGvpdErfuV8/hLXt+46WbAP7jR3Mk WHq+zSieVJ0mGwMjJNnPoclQBSZLHPM21XogLdRYU7OR+xlg6xHF7OZTDi3ZwXQb CQC6WIsQ0GNT91HcNUb0vhmwPvEgHBQIS6wOguJOmF0jwdBYZyhi2WN+RsqLVNOF NrnSqQDyLO1bveOrwiZyvq9Md0Evq2Xz8fq70pBgiRNJ1MH3GjbP1BkYNNFvMveW NkqZOJkMzhDQdwuEjdeQZVHVLdFj8Oi3yZw4xcDwU0iJFAW+Fyu7scKLnwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH58tlgDS/SmpJf4cwpaxcrSxiGwMB8GA1UdIwQY MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt NjA5YTQ4YjJiMTRkLzEvZm55MldBTkw5S2FrbF9oekNsckZ5dExHSWJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgrWwCA1 MA0GCSqGSIb3DQEBCwUAA4IBAQCXJmp+qxZyUalq7S8jvHDmV0ZRjTHkxiEwKPeI 4n7amd6MwOoqTVFfVdulMx/hIk1hm1xHzhkA971kCsmx9hVT2o00/TM5TOViLmVH Ml1FWD0L19O7nhYHAMXfyceg+CvRDjh0paP3Ltn/vRITqBuxiJb68f6ENNl5FUxd hQgoV9wkMTTW/fkYaWln/jHtRNkuhqTT7sCZzpv1l3aPo8O7vL/CG72gXDDe1Vy1 sdGKLwFvnTJSwCKPr5qXXTZDaW6hfJHpobPmBaMLZcvJfeH4GbpyBJiqx9Gb2OF1 mgVbYGDPC/gF3foPd2XwiJDt98XqYlCwBOhb5tduoo9Qa5di -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:59 2026 by rpki-client