This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/FwV9_soW4dQWq_CwmZwM9y_Yg24.roa File: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (raw, json) Hash identifier: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw= Subject key identifier: 17:05:7D:FE:CA:16:E1:D4:16:AB:F0:B0:99:9C:0C:F7:2F:D8:83:6E Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019B77C768006E840876E2A743E4333716F1 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/FwV9_soW4dQWq_CwmZwM9y_Yg24.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204916 IP address blocks: 2a0e:7040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:68:00:6e:84:08:76:e2:a7:43:e4:33:37:16:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17057dfeca16e1d416abf0b0999c0cf72fd8836e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:49:b1:86:1b:3c:22:63:c6:e7:90:7d:62:f1: 7b:7a:26:2c:ca:06:87:de:82:fb:44:75:07:c7:bf: 5d:cc:30:a2:5a:fd:9e:1f:d6:85:c8:04:aa:b9:15: ef:02:6d:fc:8d:c3:2f:d8:71:67:4f:a8:d5:2e:c1: d8:cb:da:5b:9e:96:e0:3d:92:cc:f0:6e:2d:c3:4d: 53:be:7d:50:27:2c:80:0d:d3:ec:bf:6d:cb:60:fe: 24:69:4a:9b:e4:61:06:8f:80:ca:ce:27:19:c1:08: 74:92:ae:00:c3:c7:e8:55:0b:e7:74:5e:d2:f0:e5: a4:e2:af:9d:33:dd:79:ad:b5:28:89:bb:77:af:db: 9e:0a:15:5c:89:5e:6f:33:55:99:e6:71:d2:bb:f5: f5:6d:77:fa:ce:45:3c:e9:ad:58:a6:d9:e0:eb:e6: 78:c9:dd:03:26:78:67:41:b1:9e:d8:33:02:fd:cf: cd:28:95:1a:50:39:0e:7d:4d:cb:83:7e:4b:51:91: ac:1a:be:75:29:c8:33:85:32:b5:1b:7e:76:bd:3b: 65:f4:a6:02:68:ca:06:b6:0e:73:08:b9:a4:04:59: 6a:17:15:3e:6a:96:59:c1:7c:67:91:16:b8:ac:9b: c5:39:32:88:b5:26:7c:60:71:b7:75:f5:c9:32:42: 60:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:05:7D:FE:CA:16:E1:D4:16:AB:F0:B0:99:9C:0C:F7:2F:D8:83:6E X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/FwV9_soW4dQWq_CwmZwM9y_Yg24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:7040::/29 Signature Algorithm: sha256WithRSAEncryption 3f:fc:cd:ff:98:0b:a2:58:47:a3:ad:ef:b0:35:8b:bd:40:02: d4:69:80:33:27:b7:06:a6:cd:3e:06:08:7e:53:51:78:5e:88: 4e:0c:79:6a:67:dd:a7:65:7d:3b:d4:29:a1:12:78:73:fa:0c: 9a:eb:70:78:35:9f:a0:78:7a:0e:bc:89:ba:7e:4e:c0:82:cd: 81:bf:a9:1d:e6:9e:ea:00:58:d9:29:a4:66:e0:9d:9d:f3:83: 1a:a7:58:92:95:de:42:e6:7a:64:98:d1:b7:ba:0a:a8:98:15: 7c:b6:0f:30:a6:35:ce:f2:4c:6e:a7:50:bf:54:20:74:79:55: fa:c8:b8:6e:fc:c6:b8:ed:71:00:3a:3b:cd:d0:2d:e0:a7:d6: 89:b2:75:a2:52:41:06:1b:80:04:0a:e6:f9:20:bc:ea:e8:de: a7:be:81:e9:ff:40:fa:01:d5:4e:57:1c:26:50:1a:ce:75:25: 61:f8:d4:f2:f2:63:d4:23:68:c4:81:6d:44:1a:48:68:e6:c3: f4:a8:5e:ba:bd:60:b1:b5:9b:28:7a:d8:e1:cd:60:68:87:62: 61:42:91:dc:5a:64:9f:d3:b3:c2:3a:58:6a:be:ec:97:26:f7: 5b:81:db:6d:b4:24:18:0e:0b:83:6a:19:d8:01:8b:22:c0:a3: 8e:8c:9a:c4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3x2gAboQIduKnQ+QzNxbxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzA1N2RmZWNhMTZlMWQ0MTZhYmYwYjA5OTljMGNmNzJmZDg4MzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEmxhhs8ImPG55B9YvF7eiYsygaH 3oL7RHUHx79dzDCiWv2eH9aFyASquRXvAm38jcMv2HFnT6jVLsHYy9pbnpbgPZLM 8G4tw01Tvn1QJyyADdPsv23LYP4kaUqb5GEGj4DKzicZwQh0kq4Aw8foVQvndF7S 8OWk4q+dM915rbUoibt3r9ueChVciV5vM1WZ5nHSu/X1bXf6zkU86a1Yptng6+Z4 yd0DJnhnQbGe2DMC/c/NKJUaUDkOfU3Lg35LUZGsGr51KcgzhTK1G352vTtl9KYC aMoGtg5zCLmkBFlqFxU+apZZwXxnkRa4rJvFOTKItSZ8YHG3dfXJMkJghQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBcFff7KFuHUFqvwsJmcDPcv2INuMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvRndWOV9zb1c0ZFFXcV9Dd21ad005eV9ZZzI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg5wQDAN BgkqhkiG9w0BAQsFAAOCAQEAP/zN/5gLolhHo63vsDWLvUAC1GmAMye3BqbNPgYI flNReF6ITgx5amfdp2V9O9QpoRJ4c/oMmutweDWfoHh6DryJun5OwILNgb+pHeae 6gBY2SmkZuCdnfODGqdYkpXeQuZ6ZJjRt7oKqJgVfLYPMKY1zvJMbqdQv1QgdHlV +si4bvzGuO1xADo7zdAt4KfWibJ1olJBBhuABArm+SC86ujep76B6f9A+gHVTlcc JlAaznUlYfjU8vJj1CNoxIFtRBpIaObD9Kheur1gsbWbKHrY4c1gaIdiYUKR3Fpk n9OzwjpYar7slyb3W4HbbbQkGA4Lg2oZ2AGLIsCjjoyaxA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:40 2026 by rpki-client