This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/t0cVkqPZjARFv36ftR5F1LXB_P8.roa File: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (raw, json) Hash identifier: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0= Subject key identifier: B7:47:15:92:A3:D9:8C:04:45:BF:7E:9F:B5:1E:45:D4:B5:C1:FC:FF Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019B7758BEBD428CC526C35AA07031F0AF94 Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/t0cVkqPZjARFv36ftR5F1LXB_P8.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212914 IP address blocks: 2a01:4020:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:be:bd:42:8c:c5:26:c3:5a:a0:70:31:f0:af:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7471592a3d98c0445bf7e9fb51e45d4b5c1fcff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ad:bb:6e:71:e9:b4:6c:c4:7d:20:30:f2:c5: 34:7a:cb:1b:e9:f2:f1:ca:6d:b3:f6:ef:0e:95:df: 63:7e:b5:cd:d0:53:db:07:a4:5d:8a:ba:4c:12:42: 68:e6:14:ad:8a:34:1a:67:0e:73:0a:bd:17:f6:95: ce:89:7e:7e:80:ad:80:bb:25:6a:c1:bb:8a:6f:d6: a7:a1:a9:98:b3:15:f8:24:d5:b9:05:d6:83:9c:fb: a1:48:f6:ae:a0:27:9d:4f:27:ec:df:e7:3e:75:1d: 05:bc:96:8e:62:dd:2c:60:5f:88:64:47:ff:72:6a: e7:7b:1d:86:28:6f:fa:49:d1:e5:46:0e:5a:42:f3: 7e:18:7d:b5:ba:cb:c8:ca:1c:63:d7:fc:9e:74:8b: b6:90:ca:c0:86:8f:d8:89:fc:ee:6f:aa:8e:04:16: 84:00:c8:58:ac:75:b0:d3:97:e1:70:1d:c5:05:f9: 39:83:49:97:18:9d:97:5a:99:8b:21:3a:a2:51:94: 43:80:10:c3:c0:c7:64:dd:83:79:53:0c:dd:f0:76: 5a:d0:af:8a:c2:f9:f6:48:13:98:a8:64:be:85:f3: 4b:1d:89:41:cb:ea:2b:db:88:02:92:dc:e1:97:88: e6:9a:3c:83:4f:a6:55:58:f7:07:a2:a1:15:e0:df: 3f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:47:15:92:A3:D9:8C:04:45:BF:7E:9F:B5:1E:45:D4:B5:C1:FC:FF X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/t0cVkqPZjARFv36ftR5F1LXB_P8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a01:4020:6::/48 Signature Algorithm: sha256WithRSAEncryption 3c:1f:8e:e0:3e:66:8b:66:ba:7b:7b:71:93:cd:ca:7b:6e:aa: 1e:b0:5e:d7:d5:ee:71:98:b4:be:41:3f:1e:1b:c5:b4:24:3a: 48:fa:87:f0:b9:0c:65:fe:18:85:3b:82:24:a4:5f:bd:2e:f6: 1b:60:39:9f:bf:7b:1e:b1:aa:b6:a4:62:21:78:9e:92:83:85: da:07:86:c4:37:d1:6d:b6:87:16:b7:ed:6b:2d:e5:9a:1f:e6: c9:d7:06:3f:a5:78:2b:9e:c7:1c:68:53:7b:a7:d0:e5:6d:51: 2f:d8:b6:3e:29:e2:54:49:31:65:d1:73:2c:98:8f:37:d3:f7: d7:7f:c8:13:1a:d5:da:03:05:17:62:72:7b:60:8e:8a:70:98: 73:45:1b:d1:b3:b6:82:91:0b:70:88:8c:8c:8a:04:a8:d6:a0: 73:13:43:4e:a5:33:32:3b:9c:b6:3e:50:c2:68:51:45:11:db: 29:d3:0e:d8:f7:f8:00:41:bd:af:21:be:11:91:86:80:66:f0: f8:56:53:25:8f:41:15:c8:9c:8d:5f:7d:73:4f:92:0c:a8:61: 16:c2:df:58:39:aa:e5:74:ab:8f:67:db:38:fe:c9:a3:57:bc: ed:c9:c0:c3:95:e2:7d:55:91:c1:d0:11:20:b3:a4:e2:f3:5b: be:05:42:d3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt3WL69QozFJsNaoHAx8K+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzQ3MTU5MmEzZDk4YzA0NDViZjdlOWZiNTFlNDVkNGI1YzFmY2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt627bnHptGzEfSAw8sU0essb6fLx ym2z9u8Old9jfrXN0FPbB6RdirpMEkJo5hStijQaZw5zCr0X9pXOiX5+gK2AuyVq wbuKb9anoamYsxX4JNW5BdaDnPuhSPauoCedTyfs3+c+dR0FvJaOYt0sYF+IZEf/ cmrnex2GKG/6SdHlRg5aQvN+GH21usvIyhxj1/yedIu2kMrAho/Yifzub6qOBBaE AMhYrHWw05fhcB3FBfk5g0mXGJ2XWpmLITqiUZRDgBDDwMdk3YN5Uwzd8HZa0K+K wvn2SBOYqGS+hfNLHYlBy+or24gCktzhl4jmmjyDT6ZVWPcHoqEV4N8/fwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFLdHFZKj2YwERb9+n7UeRdS1wfz/MB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvdDBjVmtxUFpqQVJGdjM2ZnRSNUYxTFhCX1A4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgFAIAAG MA0GCSqGSIb3DQEBCwUAA4IBAQA8H47gPmaLZrp7e3GTzcp7bqoesF7X1e5xmLS+ QT8eG8W0JDpI+ofwuQxl/hiFO4IkpF+9LvYbYDmfv3sesaq2pGIheJ6Sg4XaB4bE N9FttocWt+1rLeWaH+bJ1wY/pXgrnsccaFN7p9DlbVEv2LY+KeJUSTFl0XMsmI83 0/fXf8gTGtXaAwUXYnJ7YI6KcJhzRRvRs7aCkQtwiIyMigSo1qBzE0NOpTMyO5y2 PlDCaFFFEdsp0w7Y9/gAQb2vIb4RkYaAZvD4VlMlj0EVyJyNX31zT5IMqGEWwt9Y OarldKuPZ9s4/smjV7ztycDDleJ9VZHB0BEgs6Ti81u+BULT -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:42 2026 by rpki-client