This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/_FNuMkl3v2Nr-UBjOpxHlg0teXw.roa File: _FNuMkl3v2Nr-UBjOpxHlg0teXw.roa (raw, json) Hash identifier: 9cZpNueSaumO17rQqjzAi+IE89jzvt4E2xEEGBAq2wc= Subject key identifier: FC:53:6E:32:49:77:BF:63:6B:F9:40:63:3A:9C:47:96:0D:2D:79:7C Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478 Certificate serial: 019B7AC86FD9EEFA7A8F7DEDCC2B33A07FD5 Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/_FNuMkl3v2Nr-UBjOpxHlg0teXw.roa Signing time: Thu 01 Jan 2026 18:18:34 +0000 ROA not before: Thu 01 Jan 2026 18:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207483 IP address blocks: 2a0e:36c6:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6f:d9:ee:fa:7a:8f:7d:ed:cc:2b:33:a0:7f:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6d178f13851306b5634df159716319f4d82478 Validity Not Before: Jan 1 18:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc536e324977bf636bf940633a9c47960d2d797c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:07:04:89:8b:e6:ba:eb:9e:00:f1:2e:d6:ce: 9b:28:32:64:15:6b:1f:1b:69:58:f1:f6:53:e3:d0: a3:59:40:a6:93:0a:9c:0b:e0:d5:6b:fe:6b:58:6f: 58:ec:12:ff:5e:c9:1b:4c:0c:59:44:49:3f:44:df: 47:ea:4d:68:35:3b:74:e5:86:ab:5a:6b:7d:c4:d1: 46:1f:7e:a6:d2:47:8d:d9:e7:bc:4c:b6:af:fa:a9: b5:2b:4c:9f:cd:4a:75:59:c7:6b:84:03:82:e3:7d: 47:18:f9:24:f6:75:98:5e:14:c5:cc:c5:4c:1f:dc: d4:0b:f8:fa:eb:e9:cc:e3:58:77:aa:6c:f5:69:82: ae:ef:be:0f:1a:94:91:36:ac:5a:17:ec:6e:10:f2: a0:8e:30:fc:c8:44:69:db:45:eb:ac:fa:97:11:0c: a5:00:38:ab:95:ae:21:05:ac:e3:a6:2c:8b:c6:89: 36:d4:9e:39:45:fd:d0:a2:49:47:e2:e2:2c:6b:a7: bf:5c:b9:6e:47:25:8f:b8:82:83:f3:f8:ec:c0:5f: 52:ab:d6:cb:5b:d1:87:1b:5f:20:12:3b:c4:7e:e8: 1d:3d:92:ad:7b:90:39:87:c1:a0:aa:20:1b:02:03: c8:82:54:0d:6d:b2:6e:87:95:f6:99:17:81:55:ba: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:53:6E:32:49:77:BF:63:6B:F9:40:63:3A:9C:47:96:0D:2D:79:7C X509v3 Authority Key Identifier: keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/_FNuMkl3v2Nr-UBjOpxHlg0teXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:36c6:1000::/48 Signature Algorithm: sha256WithRSAEncryption 47:d4:e3:9d:b3:32:9a:38:60:cd:30:f1:65:ba:38:74:f9:eb: 82:4c:d0:71:0b:2c:20:bc:24:c8:be:cb:7d:d0:3d:ca:64:0c: f6:ea:72:92:f1:dd:cf:ec:6e:1a:de:a2:51:83:d8:eb:a4:b4: 9e:44:e0:26:79:16:8d:ea:fa:65:3e:cb:3a:bc:db:8e:07:48: e3:7d:2e:0a:b9:f6:a9:6e:a3:23:fc:9b:f2:36:59:f2:62:30: a2:00:35:2f:14:fc:22:a2:fb:fd:02:9f:cf:cd:4b:88:44:96: 03:f7:ad:27:d7:99:c2:7d:82:ea:f8:e0:5a:d0:90:f1:6c:b9: c6:b0:f4:82:59:85:46:b9:12:3b:cd:00:49:8b:e9:79:f8:00: 31:a4:71:ee:f7:1a:ed:26:2c:59:27:df:b2:70:78:14:82:bd: ab:ec:a9:fd:96:45:c2:7a:39:24:01:09:33:82:63:3b:53:be: 38:54:ee:63:99:ad:d8:80:f0:c2:63:7c:8f:38:63:48:2b:46: cf:f2:fe:82:35:ec:5e:8c:a4:d2:78:ad:7d:23:e0:d6:1c:05: e9:87:22:62:70:f4:5c:d1:08:46:33:1f:10:bf:99:c4:f2:55: e9:bc:85:03:1a:b0:63:4a:6b:6f:56:dd:e8:54:4c:e6:71:fb: b9:aa:72:05 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt6yG/Z7vp6j33tzCszoH/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk ODI0NzgwHhcNMjYwMTAxMTgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzUzNmUzMjQ5NzdiZjYzNmJmOTQwNjMzYTljNDc5NjBkMmQ3OTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QcEiYvmuuueAPEu1s6bKDJkFWsf G2lY8fZT49CjWUCmkwqcC+DVa/5rWG9Y7BL/XskbTAxZREk/RN9H6k1oNTt05Yar Wmt9xNFGH36m0keN2ee8TLav+qm1K0yfzUp1WcdrhAOC431HGPkk9nWYXhTFzMVM H9zUC/j66+nM41h3qmz1aYKu774PGpSRNqxaF+xuEPKgjjD8yERp20XrrPqXEQyl ADirla4hBazjpiyLxok21J45Rf3QoklH4uIsa6e/XLluRyWPuIKD8/jswF9Sq9bL W9GHG18gEjvEfugdPZKte5A5h8GgqiAbAgPIglQNbbJuh5X2mReBVbqUlQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFPxTbjJJd79ja/lAYzqcR5YNLXl8MB8GA1UdIwQY MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It NGJiOTRjYmMyZTczLzEvX0ZOdU1rbDN2Mk5yLVVCak9weEhsZzB0ZVh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg42xhAA MA0GCSqGSIb3DQEBCwUAA4IBAQBH1OOdszKaOGDNMPFlujh0+euCTNBxCywgvCTI vst90D3KZAz26nKS8d3P7G4a3qJRg9jrpLSeROAmeRaN6vplPss6vNuOB0jjfS4K ufapbqMj/JvyNlnyYjCiADUvFPwiovv9Ap/PzUuIRJYD960n15nCfYLq+OBa0JDx bLnGsPSCWYVGuRI7zQBJi+l5+AAxpHHu9xrtJixZJ9+ycHgUgr2r7Kn9lkXCejkk AQkzgmM7U744VO5jma3YgPDCY3yPOGNIK0bP8v6CNexejKTSeK19I+DWHAXphyJi cPRc0QhGMx8Qv5nE8lXpvIUDGrBjSmtvVt3oVEzmcfu5qnIF -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:37 2026 by rpki-client