This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/F0uaFyEwMtXKV0pSh35XdcCZhN4.roa File: F0uaFyEwMtXKV0pSh35XdcCZhN4.roa (raw, json) Hash identifier: mHxAFmcEXu/yVB/slBokI1yXK42U9FtshPQzKmef+ZE= Subject key identifier: 17:4B:9A:17:21:30:32:D5:CA:57:4A:52:87:7E:57:75:C0:99:84:DE Certificate issuer: /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb Certificate serial: 019B7F153C14256E7EBEE28FB27D9D92DD04 Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/F0uaFyEwMtXKV0pSh35XdcCZhN4.roa Signing time: Fri 02 Jan 2026 14:20:56 +0000 ROA not before: Fri 02 Jan 2026 14:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200233 IP address blocks: 2a13:181::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:3c:14:25:6e:7e:be:e2:8f:b2:7d:9d:92:dd:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb Validity Not Before: Jan 2 14:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=174b9a17213032d5ca574a52877e5775c09984de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6e:c6:15:0d:9f:5c:35:ae:ef:d7:a1:6d:8b: 2d:21:eb:4f:b3:6f:88:da:92:5b:23:24:1d:e0:79: bb:d9:da:7b:8f:3c:23:d6:cc:7f:f9:75:1b:61:67: 4f:15:ec:a2:b9:57:0b:e3:8a:50:06:61:d7:af:e9: 74:aa:75:a1:f2:8d:7c:72:14:4e:cd:c8:e1:12:a9: e2:e2:50:ed:5b:cb:81:78:9b:a3:a8:c9:65:38:a5: f4:73:26:fb:f8:26:58:f4:3a:b1:67:a2:a8:b7:b4: 6d:04:75:1c:ae:db:9b:a9:3f:b1:1c:bf:13:d5:20: ec:83:30:fe:51:4d:8d:5d:12:67:d6:0e:80:f4:78: 38:eb:a1:89:11:f1:ad:59:2a:1b:71:a4:2e:5e:e4: 6b:93:af:2d:4c:dd:e9:fd:fe:6e:70:d4:99:1f:5f: 1f:ad:45:74:14:75:39:9c:8e:26:a3:b9:5c:ed:67: 01:b3:da:e3:c1:2b:4b:73:c7:bb:0d:72:73:9b:77: 06:70:ae:36:27:df:49:70:92:f2:8f:b7:c4:66:6c: 17:d4:ee:d5:b6:71:5a:9d:39:17:fc:d6:b4:cb:dc: 51:d3:b5:67:84:88:9e:7e:96:d1:44:89:fb:06:2b: 2f:84:25:3e:ca:b3:55:3f:b0:22:e5:c5:86:f0:bf: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:4B:9A:17:21:30:32:D5:CA:57:4A:52:87:7E:57:75:C0:99:84:DE X509v3 Authority Key Identifier: keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/F0uaFyEwMtXKV0pSh35XdcCZhN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a13:181::/32 Signature Algorithm: sha256WithRSAEncryption 27:c1:48:d0:83:56:ad:7a:26:04:27:20:ac:1f:85:76:d4:b5: 7c:3b:66:f9:92:46:cc:c0:03:bb:fa:4a:1c:30:fe:be:7e:0a: df:be:00:e6:c2:4b:45:cc:84:b5:aa:ba:82:7b:5e:9c:97:dd: 50:c0:97:17:da:78:1f:83:ae:fd:c4:99:18:12:4e:3b:49:2b: 7c:f6:53:55:d3:04:81:0b:2b:45:ac:63:0c:30:6c:7b:4b:39: 44:0c:99:63:1b:57:4c:0f:e7:b7:b9:59:d7:11:18:77:b3:d8: e0:c8:11:b7:9a:0b:f5:bf:e7:6b:b1:60:5b:b2:eb:4c:8e:28: 8a:c4:32:bb:d6:26:2f:69:b7:79:c9:5e:d3:bf:97:7c:d7:d3: 8d:a7:f4:8b:ab:57:0e:6c:8c:25:bb:83:ca:e6:90:1f:cc:54: a8:17:37:c7:d7:10:a1:23:79:57:be:f0:fe:b1:b9:94:e0:fd: 00:11:48:2b:18:7b:4b:e1:42:45:f6:5d:2c:6c:7e:aa:27:61: 56:4c:ed:57:48:55:94:fa:28:7c:51:ac:54:29:6d:2a:64:52: 35:f6:04:2a:6c:6c:ea:a0:93:dc:72:21:99:e9:19:4b:de:e9: 67:67:c9:16:43:4c:08:51:34:53:6f:3c:da:ab:4e:2f:45:10: b6:0b:39:d4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/FTwUJW5+vuKPsn2dkt0EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNzU4ZmJkNjJjNmVhYmFhM2M5ODc1MzA1ZjIwNzgwNWUz N2NkY2IwHhcNMjYwMTAyMTQyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzRiOWExNzIxMzAzMmQ1Y2E1NzRhNTI4NzdlNTc3NWMwOTk4NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW7GFQ2fXDWu79ehbYstIetPs2+I 2pJbIyQd4Hm72dp7jzwj1sx/+XUbYWdPFeyiuVcL44pQBmHXr+l0qnWh8o18chRO zcjhEqni4lDtW8uBeJujqMllOKX0cyb7+CZY9DqxZ6Kot7RtBHUcrtubqT+xHL8T 1SDsgzD+UU2NXRJn1g6A9Hg466GJEfGtWSobcaQuXuRrk68tTN3p/f5ucNSZH18f rUV0FHU5nI4mo7lc7WcBs9rjwStLc8e7DXJzm3cGcK42J99JcJLyj7fEZmwX1O7V tnFanTkX/Na0y9xR07VnhIiefpbRRIn7BisvhCU+yrNVP7Ai5cWG8L+vPQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBdLmhchMDLVyldKUod+V3XAmYTeMB8GA1UdIwQY MBaAFPp1j71ixuq6o8mHUwXyB4BeN83LMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1uV1B2V0xHNnJxanlZZFRCZklIZ0Y0M3pjcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvNDZhNGNmLWJlNmYtNDA3Ny04ZDRj LWJjYTRjYjUxYTczOS8xL0YwdWFGeUV3TXRYS1YwcFNoMzVYZGNDWmhONC5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWQvNDZhNGNmLWJlNmYtNDA3Ny04ZDRjLWJjYTRjYjUxYTcz OS8xLzEtbldQdldMRzZycWp5WWRUQmZJSGdGNDN6Y3MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAqEwGB MA0GCSqGSIb3DQEBCwUAA4IBAQAnwUjQg1ateiYEJyCsH4V21LV8O2b5kkbMwAO7 +kocMP6+fgrfvgDmwktFzIS1qrqCe16cl91QwJcX2ngfg679xJkYEk47SSt89lNV 0wSBCytFrGMMMGx7SzlEDJljG1dMD+e3uVnXERh3s9jgyBG3mgv1v+drsWBbsutM jiiKxDK71iYvabd5yV7Tv5d819ONp/SLq1cObIwlu4PK5pAfzFSoFzfH1xChI3lX vvD+sbmU4P0AEUgrGHtL4UJF9l0sbH6qJ2FWTO1XSFWU+ih8UaxUKW0qZFI19gQq bGzqoJPcciGZ6RlL3ulnZ8kWQ0wIUTRTbzzaq04vRRC2CznU -----END CERTIFICATE-----Generated at Mon Jan 26 03:40:34 2026 by rpki-client