This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/Fb1LxadIV7oBDqCNnGTm-OSYcpU.roa File: Fb1LxadIV7oBDqCNnGTm-OSYcpU.roa (raw, json) Hash identifier: Fl5GSOOt62GrdSA1DfCyrlVCI+6NRse3s+pMK1jPEng= Subject key identifier: 15:BD:4B:C5:A7:48:57:BA:01:0E:A0:8D:9C:64:E6:F8:E4:98:72:95 Certificate issuer: /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Certificate serial: 019B7C11199C77E936591B64F6F6E2E0F4D3 Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/Fb1LxadIV7oBDqCNnGTm-OSYcpU.roa Signing time: Fri 02 Jan 2026 00:17:33 +0000 ROA not before: Fri 02 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6718 IP address blocks: 2a06:a880:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:19:9c:77:e9:36:59:1b:64:f6:f6:e2:e0:f4:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f Validity Not Before: Jan 2 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15bd4bc5a74857ba010ea08d9c64e6f8e4987295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:36:7d:d2:34:fc:29:f1:5a:f0:b9:4f:ca:58: 6a:03:1a:23:75:f6:28:81:0a:bf:9b:82:61:b8:aa: 4b:91:ba:a5:5e:20:41:a0:53:9f:32:68:13:79:0c: e7:29:94:d0:a2:df:10:5c:22:d1:de:3c:de:8c:f4: 7d:dc:18:fc:56:82:c7:61:36:89:fd:c6:e6:f5:d5: 1a:a9:43:ac:e9:c8:2d:e7:ea:16:70:62:17:96:83: f3:47:ea:08:d9:68:16:45:34:45:2d:b5:4a:6a:10: f2:11:26:ac:4a:1d:f4:de:80:1a:63:88:8c:6b:b2: 7e:72:9a:7e:1f:b5:0e:b0:bc:70:46:4b:c7:2c:90: 86:93:ba:d1:b6:bd:fe:a1:dd:51:68:4d:5c:d5:5a: 7f:3b:52:bf:ec:29:a4:47:4e:fd:f4:27:3f:29:b0: ee:8e:c9:9a:85:8c:12:2d:27:8d:59:50:4d:a1:58: a8:7d:5d:70:5e:c5:dc:c4:cc:e8:6a:10:f3:26:76: 19:8b:9d:e3:04:ed:e6:a7:c5:05:26:bf:08:fe:e1: 3a:13:83:ad:a7:b9:bd:3b:78:70:7c:1a:e2:df:ac: a6:4c:12:86:ca:ff:53:51:cf:a0:4d:d9:49:06:60: c1:09:91:92:f0:1c:da:04:c7:26:a9:31:ff:54:6a: fb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:BD:4B:C5:A7:48:57:BA:01:0E:A0:8D:9C:64:E6:F8:E4:98:72:95 X509v3 Authority Key Identifier: keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/Fb1LxadIV7oBDqCNnGTm-OSYcpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:a880:1::/48 Signature Algorithm: sha256WithRSAEncryption 66:d2:6b:a4:8e:cb:e8:4f:47:c2:65:9e:e8:32:45:3e:57:43: 04:4e:aa:af:47:66:68:ff:1b:e8:68:54:ea:cf:2e:89:5d:ee: 5f:d8:0c:16:90:b2:8c:ed:de:50:37:06:88:20:21:df:ae:5d: ac:86:44:86:ac:73:f7:9b:2b:6e:df:0a:7c:a2:0e:3a:43:14: 52:29:8b:e6:da:d6:1c:e3:8d:f9:db:f9:d6:d0:6f:eb:3e:66: 96:a0:75:b2:7d:0a:b0:8d:24:65:ba:c5:3d:37:0c:bb:07:dc: 03:65:16:76:c3:5a:cc:49:16:d5:b2:73:64:23:8b:16:d1:ba: 82:22:1b:65:92:88:0d:f3:12:14:dc:6e:f4:1d:14:ef:dd:5f: f6:16:1b:13:34:5a:b0:7a:a8:87:30:4b:f2:91:7e:07:d9:b0: f6:ad:46:ec:17:a4:6d:cb:ad:58:68:b2:d3:74:9b:34:ab:88: c1:eb:a6:85:a6:e1:25:f1:7a:d8:cc:19:e9:4b:ea:47:1c:a9: 58:4f:76:a5:12:18:ac:ca:77:3e:e2:fd:b1:05:3d:64:70:94: c3:6f:ab:1c:7c:4a:f2:0e:3f:6b:09:6b:53:72:3b:12:58:ac: 3c:fb:92:c1:52:5f:0c:6a:34:3c:ed:bc:4c:2a:78:fc:f1:41: 81:81:56:7c -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8ERmcd+k2WRtk9vbi4PTTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYzA1OTFlMmViNDlkMDU1OWU2ZmNlN2VlMmFhODFmMGY1 OWJhNmYwHhcNMjYwMTAyMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWJkNGJjNWE3NDg1N2JhMDEwZWEwOGQ5YzY0ZTZmOGU0OTg3Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzZ90jT8KfFa8LlPylhqAxojdfYo gQq/m4JhuKpLkbqlXiBBoFOfMmgTeQznKZTQot8QXCLR3jzejPR93Bj8VoLHYTaJ /cbm9dUaqUOs6cgt5+oWcGIXloPzR+oI2WgWRTRFLbVKahDyESasSh303oAaY4iM a7J+cpp+H7UOsLxwRkvHLJCGk7rRtr3+od1RaE1c1Vp/O1K/7CmkR0799Cc/KbDu jsmahYwSLSeNWVBNoViofV1wXsXcxMzoahDzJnYZi53jBO3mp8UFJr8I/uE6E4Ot p7m9O3hwfBri36ymTBKGyv9TUc+gTdlJBmDBCZGS8BzaBMcmqTH/VGr7CwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBW9S8WnSFe6AQ6gjZxk5vjkmHKVMB8GA1UdIwQY MBaAFMPAWR4utJ0FWeb85+4qqB8PWbpvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQt ZTM0MDcxNzQ2NjNiLzEvRmIxTHhhZElWN29CRHFDTm5HVG0tT1NZY3BVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80YjhhYWItMjA5OS00M2FmLWI0MWQtZTM0MDcxNzQ2NjNi LzEvdzhCWkhpNjBuUVZaNXZ6bjdpcW9IdzladW04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgaogAAB MA0GCSqGSIb3DQEBCwUAA4IBAQBm0mukjsvoT0fCZZ7oMkU+V0METqqvR2Zo/xvo aFTqzy6JXe5f2AwWkLKM7d5QNwaIICHfrl2shkSGrHP3mytu3wp8og46QxRSKYvm 2tYc44352/nW0G/rPmaWoHWyfQqwjSRlusU9Nwy7B9wDZRZ2w1rMSRbVsnNkI4sW 0bqCIhtlkogN8xIU3G70HRTv3V/2FhsTNFqweqiHMEvykX4H2bD2rUbsF6Rty61Y aLLTdJs0q4jB66aFpuEl8XrYzBnpS+pHHKlYT3alEhisync+4v2xBT1kcJTDb6sc fEryDj9rCWtTcjsSWKw8+5LBUl8MajQ87bxMKnj88UGBgVZ8 -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:28 2026 by rpki-client