This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FAIRqpWK3EBV9CqOF-VGwGa_HdE.roa File: FAIRqpWK3EBV9CqOF-VGwGa_HdE.roa (raw, json) Hash identifier: hXzkXC4nHm31dzjdvIBfOMtBT7OdSkigpPIFYuvinLg= Subject key identifier: 14:02:11:AA:95:8A:DC:40:55:F4:2A:8E:17:E5:46:C0:66:BF:1D:D1 Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Certificate serial: 019B46F2026E8C1C168ED93EA3D784F01C4F Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FAIRqpWK3EBV9CqOF-VGwGa_HdE.roa Signing time: Mon 22 Dec 2025 16:43:44 +0000 ROA not before: Mon 22 Dec 2025 16:43:44 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204982 IP address blocks: 2a0e:46c3:100::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:f2:02:6e:8c:1c:16:8e:d9:3e:a3:d7:84:f0:1c:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008 Validity Not Before: Dec 22 16:43:44 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=140211aa958adc4055f42a8e17e546c066bf1dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8c:52:8c:9d:25:06:2c:fd:3c:9c:cc:f1:4a: 77:ee:e1:80:83:5b:40:f3:67:4d:97:60:5c:f6:4b: 62:2c:75:9d:90:8f:06:a1:06:e2:f4:c4:d1:65:79: 95:33:a1:be:11:d4:36:e6:74:52:cd:3e:16:2b:d5: 41:58:c9:dc:68:73:c6:ad:1c:07:2d:fe:2e:20:b4: 52:b7:d2:83:fa:04:70:21:fe:09:8e:fc:99:9d:7b: f9:54:cf:8e:59:ae:a6:d1:93:9b:c5:83:e9:30:53: a3:68:11:80:b6:12:cb:ae:de:3e:aa:ee:b0:ed:90: e3:e1:fc:71:72:88:4c:5f:38:06:2f:5d:c1:e2:07: 2c:b8:ac:4d:8c:cb:04:67:20:a3:5f:a8:57:4f:60: 40:ba:b0:bb:48:3d:c6:0d:89:73:e4:3f:f7:30:33: 16:e7:04:3b:72:90:74:75:9c:df:32:25:01:0a:4b: dd:28:16:5c:d0:72:20:c8:9a:51:7b:07:d3:53:ff: 56:b3:97:74:fb:01:0f:6c:a0:35:e0:ad:eb:1f:a7: 1d:6a:bc:21:e4:87:0a:d3:50:5c:7d:21:e4:d5:d7: 0e:6e:ac:aa:77:dc:66:2b:44:da:08:81:c7:0d:27: f7:93:04:9e:50:9c:f9:5a:7a:8a:f7:40:23:88:c6: 4d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:02:11:AA:95:8A:DC:40:55:F4:2A:8E:17:E5:46:C0:66:BF:1D:D1 X509v3 Authority Key Identifier: keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FAIRqpWK3EBV9CqOF-VGwGa_HdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:46c3:100::/40 Signature Algorithm: sha256WithRSAEncryption 94:e5:e3:77:c4:5d:4e:14:87:6e:42:d8:48:2b:ce:b4:c2:86: ee:f9:5f:39:35:e6:4c:02:95:99:a3:fc:2b:3c:12:9f:c9:07: 9c:8e:4e:82:23:72:95:58:5a:b5:57:1f:33:bd:34:94:63:2b: 31:72:5a:e1:c8:b9:89:51:76:15:74:55:e0:af:71:b5:cf:c3: 85:c5:53:ce:6c:27:71:89:6e:e7:43:b7:b3:ab:cb:79:a0:ae: 8e:20:ef:e9:a0:c9:46:69:8e:6a:ba:8d:5c:e9:48:af:89:f7: 75:1d:51:70:bb:f5:ef:52:34:d6:07:10:fc:93:76:f6:d0:0f: 22:59:39:98:7c:fb:27:77:a1:28:6f:37:9d:66:82:34:cf:54: 55:79:de:ea:56:08:56:c4:0c:9e:82:bf:aa:47:e4:2b:15:5c: 71:3f:29:b2:12:39:91:5a:ff:bf:1c:29:a7:43:a5:28:61:40: ee:fa:ca:f7:36:2b:0a:4a:21:db:51:31:d8:ef:f8:f0:5f:48: 98:6b:23:e2:0e:c7:28:c2:4d:3f:7d:d9:3f:49:e9:29:b9:f3: ce:54:07:63:18:1f:40:f4:98:f4:a1:94:a8:f5:09:64:8d:a4: 19:e2:30:36:34:c8:f0:80:0a:d1:d2:e7:13:1b:9a:4b:8a:31: da:55:f0:0d -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZtG8gJujBwWjtk+o9eE8BxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl NDgwMDgwHhcNMjUxMjIyMTY0MzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDAyMTFhYTk1OGFkYzQwNTVmNDJhOGUxN2U1NDZjMDY2YmYxZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4xSjJ0lBiz9PJzM8Up37uGAg1tA 82dNl2Bc9ktiLHWdkI8GoQbi9MTRZXmVM6G+EdQ25nRSzT4WK9VBWMncaHPGrRwH Lf4uILRSt9KD+gRwIf4JjvyZnXv5VM+OWa6m0ZObxYPpMFOjaBGAthLLrt4+qu6w 7ZDj4fxxcohMXzgGL13B4gcsuKxNjMsEZyCjX6hXT2BAurC7SD3GDYlz5D/3MDMW 5wQ7cpB0dZzfMiUBCkvdKBZc0HIgyJpRewfTU/9Ws5d0+wEPbKA14K3rH6cdarwh 5IcK01BcfSHk1dcObqyqd9xmK0TaCIHHDSf3kwSeUJz5WnqK90AjiMZN2wIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBQCEaqVitxAVfQqjhflRsBmvx3RMB8GA1UdIwQY MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt YmY0ZTUyN2I5ZmE4LzEvRkFJUnFwV0szRUJWOUNxT0YtVkd3R2FfSGRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4 LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg5GwwEw DQYJKoZIhvcNAQELBQADggEBAJTl43fEXU4Uh25C2EgrzrTChu75Xzk15kwClZmj /Cs8Ep/JB5yOToIjcpVYWrVXHzO9NJRjKzFyWuHIuYlRdhV0VeCvcbXPw4XFU85s J3GJbudDt7Ory3mgro4g7+mgyUZpjmq6jVzpSK+J93UdUXC79e9SNNYHEPyTdvbQ DyJZOZh8+yd3oShvN51mgjTPVFV53upWCFbEDJ6Cv6pH5CsVXHE/KbISOZFa/78c KadDpShhQO76yvc2KwpKIdtRMdjv+PBfSJhrI+IOxyjCTT992T9J6Sm5885UB2MY H0D0mPShlKj1CWSNpBniMDY0yPCACtHS5xMbmkuKMdpV8A0= -----END CERTIFICATE-----Generated at Sat Dec 27 00:40:35 2025 by rpki-client