This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/ffUc8_MFuN5GuGa6IoP-AwjDMng.roa File: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (raw, json) Hash identifier: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k= Subject key identifier: 7D:F5:1C:F3:F3:05:B8:DE:46:B8:66:BA:22:83:FE:03:08:C3:32:78 Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152 Certificate serial: 019B76EAF758FCBF82DDDBCF967DB730ACE8 Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/ffUc8_MFuN5GuGa6IoP-AwjDMng.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201281 IP address blocks: 2001:678:794::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f7:58:fc:bf:82:dd:db:cf:96:7d:b7:30:ac:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df51cf3f305b8de46b866ba2283fe0308c33278 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1b:40:f5:57:4e:a6:5b:a7:da:e1:3c:c6:40: ea:f4:22:c3:3d:45:06:2d:a2:43:62:b7:ea:03:a7: 45:7c:18:43:4d:1f:ae:8f:c4:09:05:f0:24:a4:a3: a6:78:22:53:f3:51:a6:ca:3c:9c:c3:3a:19:c6:fe: 03:cf:b0:ef:b2:d0:d7:99:c8:9d:3a:45:a8:f6:70: 4e:7a:00:b7:21:02:ff:eb:c2:71:d0:40:e6:bb:cd: 7a:be:7b:b0:7c:ab:7b:57:22:70:a5:8f:06:57:74: 52:94:0b:de:ac:e1:43:2f:68:30:fb:6a:6e:f2:63: 1e:94:1b:3c:1f:cf:42:79:4f:5b:7a:c6:7d:07:c8: e5:8b:62:da:a3:4e:dd:4f:6e:22:12:41:da:b9:31: 36:25:6a:2e:11:a6:5a:5a:43:7c:9c:ac:91:2d:31: e3:29:47:98:0f:bb:a9:e7:d9:a4:ee:8c:6a:1c:d0: db:cf:e3:b6:f6:cc:83:5b:98:3d:6a:fd:b0:eb:7d: 59:7b:48:e3:4e:ad:ec:d9:40:fe:a0:00:c0:05:a7: 33:cc:9c:6b:12:e5:27:a0:76:5b:49:d8:91:ea:1d: 27:96:64:45:ce:21:76:db:5c:71:d8:fa:e3:cb:f3: 5f:e0:42:23:65:77:57:94:ee:4e:3e:f2:a0:a4:a9: 3f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F5:1C:F3:F3:05:B8:DE:46:B8:66:BA:22:83:FE:03:08:C3:32:78 X509v3 Authority Key Identifier: keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/ffUc8_MFuN5GuGa6IoP-AwjDMng.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:794::/48 Signature Algorithm: sha256WithRSAEncryption 85:7c:17:22:b8:cc:b9:56:ee:13:4f:c2:16:10:4a:bc:e4:dd: 9e:a7:75:a6:e2:17:4c:a9:40:d5:c2:aa:88:aa:3e:8c:70:a4: ea:71:d6:99:04:8c:f3:6f:bc:4c:28:19:51:58:3d:83:69:1c: 1c:d3:34:82:50:b5:86:10:35:80:c2:58:31:6c:28:fc:69:5f: 9f:20:06:0f:20:cc:11:d4:5c:41:e8:a4:e6:4d:a6:e6:ac:c4: 39:d2:6e:48:e1:01:d2:e0:ed:40:7a:c0:8f:e1:7f:ef:02:92: 7c:a3:9c:08:c2:f7:5f:e2:14:69:d2:e9:c3:9e:09:3f:8a:1c: 10:79:8e:3c:44:9d:72:63:80:a7:02:1d:45:17:0b:c5:47:6b: ea:c7:d8:90:de:e1:fe:48:96:f9:8d:72:e0:9d:6c:5a:12:20: 72:f3:86:0b:bb:87:08:44:f4:35:18:fc:39:9e:40:70:93:56: 55:69:8c:ed:31:44:2e:b9:11:46:01:4c:53:08:6b:48:70:b7: 57:9b:d1:13:9e:0a:15:f5:09:55:e2:d6:7b:55:da:84:ec:4d: 44:d4:ca:30:0d:cd:4b:c6:1e:82:a4:fe:af:b7:e5:90:81:88: e3:49:15:ef:21:b5:6f:ea:82:a0:94:7b:5e:98:a8:77:3f:b6: e5:a4:9f:16 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt26vdY/L+C3dvPln23MKzoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYzM1ZDRmMmYyZDI0N2VhMDhjNGEwMTE3ZDMyOGU0ZThl ZGYxNTIwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGY1MWNmM2YzMDViOGRlNDZiODY2YmEyMjgzZmUwMzA4YzMzMjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphtA9VdOplun2uE8xkDq9CLDPUUG LaJDYrfqA6dFfBhDTR+uj8QJBfAkpKOmeCJT81GmyjycwzoZxv4Dz7DvstDXmcid OkWo9nBOegC3IQL/68Jx0EDmu816vnuwfKt7VyJwpY8GV3RSlAverOFDL2gw+2pu 8mMelBs8H89CeU9besZ9B8jli2Lao07dT24iEkHauTE2JWouEaZaWkN8nKyRLTHj KUeYD7up59mk7oxqHNDbz+O29syDW5g9av2w631Ze0jjTq3s2UD+oADABaczzJxr EuUnoHZbSdiR6h0nlmRFziF221xx2Prjy/Nf4EIjZXdXlO5OPvKgpKk/5QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH31HPPzBbjeRrhmuiKD/gMIwzJ4MB8GA1UdIwQY MBaAFP7DXU8vLSR+oIxKARfTKOTo7fFSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3NOZFR5OHRKSDZnakVvQkY5TW81T2p0OFZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9kMDAzYWUtMzVhNi00NGYyLWFhZDgt ZjhiMTJmOTgyZmUyLzEvZmZVYzhfTUZ1TjVHdUdhNklvUC1Bd2pETW5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9kMDAzYWUtMzVhNi00NGYyLWFhZDgtZjhiMTJmOTgyZmUy LzEvX3NOZFR5OHRKSDZnakVvQkY5TW81T2p0OFZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAeU MA0GCSqGSIb3DQEBCwUAA4IBAQCFfBciuMy5Vu4TT8IWEEq85N2ep3Wm4hdMqUDV wqqIqj6McKTqcdaZBIzzb7xMKBlRWD2DaRwc0zSCULWGEDWAwlgxbCj8aV+fIAYP IMwR1FxB6KTmTabmrMQ50m5I4QHS4O1AesCP4X/vApJ8o5wIwvdf4hRp0unDngk/ ihwQeY48RJ1yY4CnAh1FFwvFR2vqx9iQ3uH+SJb5jXLgnWxaEiBy84YLu4cIRPQ1 GPw5nkBwk1ZVaYztMUQuuRFGAUxTCGtIcLdXm9ETngoV9QlV4tZ7VdqE7E1E1Mow Dc1Lxh6CpP6vt+WQgYjjSRXvIbVv6oKglHtemKh3P7blpJ8W -----END CERTIFICATE-----Generated at Tue Jan 27 00:24:05 2026 by rpki-client