This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/fkjKY1GubqopgVMFItI3Dks0F0s.roa File: fkjKY1GubqopgVMFItI3Dks0F0s.roa (raw, json) Hash identifier: XHHriZ3RedEv637kMieJw9uopGlbC5EMU7/X4VulIbY= Subject key identifier: 7E:48:CA:63:51:AE:6E:AA:29:81:53:05:22:D2:37:0E:4B:34:17:4B Certificate issuer: /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Certificate serial: 019B7C80833637DDCF83D26BBB4A03238E45 Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/fkjKY1GubqopgVMFItI3Dks0F0s.roa Signing time: Fri 02 Jan 2026 02:19:15 +0000 ROA not before: Fri 02 Jan 2026 02:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29119 IP address blocks: 2.59.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:83:36:37:dd:cf:83:d2:6b:bb:4a:03:23:8e:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2 Validity Not Before: Jan 2 02:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e48ca6351ae6eaa2981530522d2370e4b34174b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:44:7c:b4:f7:f6:78:4b:8b:d2:1b:8e:39:fc: d6:f7:e7:54:c6:df:1c:bc:9a:02:3e:58:28:dc:d7: 29:19:89:5b:9d:19:d1:6b:eb:a2:00:bd:43:12:24: 9c:f1:66:49:9c:be:64:dd:aa:68:46:ab:ee:25:05: 37:f9:52:bf:a4:bb:df:6d:8e:7a:bf:c1:b0:17:17: 62:b3:8c:f7:cd:6e:99:35:1b:18:30:f4:c5:64:04: d1:e2:28:e8:34:8a:7e:8a:6c:51:10:df:52:05:8f: a7:a0:7c:a5:ed:c2:2c:ed:3d:cf:d6:64:53:e5:c1: c4:31:25:54:96:a3:b5:46:8c:30:9f:1e:f5:18:4b: 01:65:2b:cd:38:c7:a6:2f:1e:de:21:e1:17:ed:8d: de:b9:f4:2a:d1:e2:1e:b4:12:9a:26:e3:8a:d7:b1: df:f7:dc:ae:0c:83:c2:82:3e:50:92:7d:be:55:1f: 68:05:bc:62:e8:d1:15:50:a9:da:eb:ec:0b:fb:04: 5e:95:96:84:15:0a:a2:9c:0f:2e:19:af:63:8f:99: 9e:6a:31:f1:9c:28:3f:75:f5:08:ae:7e:94:f5:0e: 01:47:d3:7f:ae:60:9f:d3:89:6a:a7:74:5e:4a:45: e6:c3:91:53:fc:5b:fb:4e:c3:4d:9f:61:fb:54:ac: ca:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:48:CA:63:51:AE:6E:AA:29:81:53:05:22:D2:37:0E:4B:34:17:4B X509v3 Authority Key Identifier: keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/fkjKY1GubqopgVMFItI3Dks0F0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.92.0/22 Signature Algorithm: sha256WithRSAEncryption 47:46:b1:73:02:8c:7b:52:fc:54:e1:18:96:42:de:10:d1:90: f1:40:b3:45:5f:95:ac:3b:d8:8d:d0:c5:48:e4:25:9e:24:d4: 62:c3:71:2a:1a:af:5a:c5:43:85:2a:89:d4:4e:b4:7b:21:6a: de:3a:4d:7b:17:3a:ac:2f:82:95:29:9c:61:17:3e:ea:20:02: 80:ee:34:7a:e3:20:e9:a6:5c:ff:de:f8:5c:cd:cb:2e:07:d4: 02:22:2f:ee:76:f8:82:c7:9b:80:ce:35:cc:1e:5a:12:be:28: de:ce:9c:6e:9b:e7:cb:fd:e5:6d:60:eb:a1:b8:40:96:89:03: f0:5a:b0:91:11:c6:7f:d6:4b:1b:ad:ca:5f:e6:fe:84:45:4f: 0e:67:60:1d:64:fb:2e:2d:d9:65:f4:96:2f:8a:fd:5f:23:33: 7f:76:6e:51:f0:c1:b2:9b:d5:d2:cc:46:84:10:c2:d8:f4:a0: 62:99:2a:e9:ac:b4:0b:70:d3:c8:68:18:87:87:46:a5:9a:4c: 10:d8:62:71:ee:47:26:d9:29:52:bc:08:6b:4c:a6:aa:4d:cf: 1e:da:6b:37:d3:af:5e:04:a0:9a:73:a0:11:9e:30:61:89:ed: 27:eb:0b:52:c6:a5:67:ef:0e:e0:41:bb:0a:65:cc:9f:b3:ff: b4:0a:81:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gIM2N93Pg9Jru0oDI45FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZmU5OTNkMWYzMTBlODE3M2MxN2NlOTI3OGYxZTlmOGUy MmUzYzIwHhcNMjYwMTAyMDIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTQ4Y2E2MzUxYWU2ZWFhMjk4MTUzMDUyMmQyMzcwZTRiMzQxNzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUR8tPf2eEuL0huOOfzW9+dUxt8c vJoCPlgo3NcpGYlbnRnRa+uiAL1DEiSc8WZJnL5k3apoRqvuJQU3+VK/pLvfbY56 v8GwFxdis4z3zW6ZNRsYMPTFZATR4ijoNIp+imxREN9SBY+noHyl7cIs7T3P1mRT 5cHEMSVUlqO1Rowwnx71GEsBZSvNOMemLx7eIeEX7Y3eufQq0eIetBKaJuOK17Hf 99yuDIPCgj5Qkn2+VR9oBbxi6NEVUKna6+wL+wRelZaEFQqinA8uGa9jj5meajHx nCg/dfUIrn6U9Q4BR9N/rmCf04lqp3ReSkXmw5FT/Fv7TsNNn2H7VKzKRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5IymNRrm6qKYFTBSLSNw5LNBdLMB8GA1UdIwQY MBaAFML+mT0fMQ6Bc8F86SePHp+OIuPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDIt NjliNDMyNzk5MzcyLzEvZmtqS1kxR3VicW9wZ1ZNRkl0STNEa3MwRjBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNTMxMmItODQzOS00YmI0LTg2ZDItNjliNDMyNzk5Mzcy LzEvd3Y2WlBSOHhEb0Z6d1h6cEo0OGVuNDRpNDhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCAjtcMA0G CSqGSIb3DQEBCwUAA4IBAQBHRrFzAox7UvxU4RiWQt4Q0ZDxQLNFX5WsO9iN0MVI 5CWeJNRiw3EqGq9axUOFKonUTrR7IWreOk17FzqsL4KVKZxhFz7qIAKA7jR64yDp plz/3vhczcsuB9QCIi/udviCx5uAzjXMHloSvijezpxum+fL/eVtYOuhuECWiQPw WrCREcZ/1ksbrcpf5v6ERU8OZ2AdZPsuLdll9JYviv1fIzN/dm5R8MGym9XSzEaE EMLY9KBimSrprLQLcNPIaBiHh0almkwQ2GJx7kcm2SlSvAhrTKaqTc8e2ms3069e BKCac6ARnjBhie0n6wtSxqVn7w7gQbsKZcyfs/+0CoGV -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:25 2026 by rpki-client