This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa File: FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa (raw, json) Hash identifier: WfwyKtSywEHryZ+M6HznzFfEjcPQAgXonMv0QamAIn4= Subject key identifier: 17:34:25:5C:93:2B:B9:E3:85:59:20:11:F0:BF:21:E9:4A:FE:85:97 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12F6CFEC3DE7BE23F7FCB9028EEAFE Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138987 IP address blocks: 2a0d:1a40:faf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f6:cf:ec:3d:e7:be:23:f7:fc:b9:02:8e:ea:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1734255c932bb9e385592011f0bf21e94afe8597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:57:65:3f:53:b1:8f:75:07:31:35:18:02:64: 99:58:fc:ba:da:e8:2c:ea:2b:17:75:38:e0:79:fa: 5a:8a:1b:18:0f:f6:e9:e2:31:3d:eb:4e:9b:0b:e4: 3d:d2:55:1d:bf:3e:60:97:fa:c3:e8:2e:4d:c8:38: 96:2d:0d:25:3f:9a:d4:92:52:76:be:45:e2:1b:09: fb:e7:fe:8d:10:e5:7e:7d:a4:35:7a:58:09:3f:10: a3:3d:51:64:c2:81:fd:f1:32:38:99:7a:84:bc:c2: 67:36:81:3a:a9:22:97:b5:c2:32:22:ff:cd:05:4d: 43:bb:3b:c1:d4:4b:0f:39:b1:f9:59:0c:27:e8:0e: d2:d8:b1:2e:43:3e:9b:42:d7:89:fc:7d:b0:52:dc: 52:cf:78:a1:4a:ad:46:3c:97:38:92:03:17:4f:1d: 0a:30:6f:54:5d:23:0f:a2:c6:c0:d7:0f:33:e1:9f: f7:06:6a:4b:69:58:80:45:3f:90:10:b5:af:d7:1d: ba:8e:53:1e:30:f0:65:7c:26:cb:7d:96:39:8c:61: 53:12:c5:4b:7d:65:fe:93:42:94:5a:21:b4:44:81: 0e:fc:a6:db:a4:32:a1:e6:e1:56:7f:db:f2:7e:54: 63:22:ed:f5:61:d5:54:3f:89:ab:1a:7a:06:1d:c6: 29:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:34:25:5C:93:2B:B9:E3:85:59:20:11:F0:BF:21:E9:4A:FE:85:97 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/FzQlXJMrueOFWSAR8L8h6Ur-hZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:1a40:faf::/48 Signature Algorithm: sha256WithRSAEncryption 00:c8:6b:33:a0:db:72:c5:23:0d:b6:bc:01:05:8f:9f:e4:f6: c7:c8:d1:f1:13:2a:2e:bb:ac:a1:df:27:5d:f7:81:2d:d7:bf: 77:92:22:84:8f:ce:2e:01:42:fa:8c:42:c5:42:14:e8:87:e3: 5b:d7:a3:bf:43:4b:80:91:e9:6f:01:8e:42:4a:9c:34:20:16: d8:2a:fe:29:d4:84:7a:bf:1c:14:10:49:8b:da:5f:c0:8a:ff: b2:8f:74:5c:e9:a7:0d:84:48:e9:f2:7b:83:7f:97:70:e8:2a: b8:ab:8d:d1:be:7a:de:2d:19:a0:44:57:70:08:84:5c:86:b4: f4:c2:e5:1f:04:6a:c9:b7:69:2f:eb:e7:4f:8c:ac:55:85:33: 3a:4a:f4:32:d7:e0:9a:01:51:64:da:c6:1a:b3:4d:f0:de:52: 9a:4a:b4:1b:40:df:b0:25:e7:fb:d2:d2:bd:95:12:6d:bf:e3: 88:57:cd:57:50:eb:07:1a:12:da:1a:38:e6:a8:38:34:44:36: 8d:7c:39:82:6f:be:ab:69:ca:65:fa:66:bd:de:bb:5f:d6:9a: 93:98:64:19:43:75:43:8c:99:44:2a:42:d9:f4:5b:67:41:35: 13:dd:9e:06:55:71:3e:f7:01:41:c1:37:85:ad:77:75:05:3c: 00:f6:0d:d8 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EvbP7D3nviP3/LkCjur+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzM0MjU1YzkzMmJiOWUzODU1OTIwMTFmMGJmMjFlOTRhZmU4NTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqldlP1Oxj3UHMTUYAmSZWPy62ugs 6isXdTjgefpaihsYD/bp4jE9606bC+Q90lUdvz5gl/rD6C5NyDiWLQ0lP5rUklJ2 vkXiGwn75/6NEOV+faQ1elgJPxCjPVFkwoH98TI4mXqEvMJnNoE6qSKXtcIyIv/N BU1DuzvB1EsPObH5WQwn6A7S2LEuQz6bQteJ/H2wUtxSz3ihSq1GPJc4kgMXTx0K MG9UXSMPosbA1w8z4Z/3BmpLaViART+QELWv1x26jlMeMPBlfCbLfZY5jGFTEsVL fWX+k0KUWiG0RIEO/KbbpDKh5uFWf9vyflRjIu31YdVUP4mrGnoGHcYp3QIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBc0JVyTK7njhVkgEfC/IelK/oWXMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvRnpRbFhKTXJ1ZU9GV1NBUjhMOGg2VXItaFpjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg0aQA+v MA0GCSqGSIb3DQEBCwUAA4IBAQAAyGszoNtyxSMNtrwBBY+f5PbHyNHxEyouu6yh 3ydd94Et1793kiKEj84uAUL6jELFQhToh+Nb16O/Q0uAkelvAY5CSpw0IBbYKv4p 1IR6vxwUEEmL2l/Aiv+yj3Rc6acNhEjp8nuDf5dw6Cq4q43RvnreLRmgRFdwCIRc hrT0wuUfBGrJt2kv6+dPjKxVhTM6SvQy1+CaAVFk2sYas03w3lKaSrQbQN+wJef7 0tK9lRJtv+OIV81XUOsHGhLaGjjmqDg0RDaNfDmCb76racpl+ma93rtf1pqTmGQZ Q3VDjJlEKkLZ9FtnQTUT3Z4GVXE+9wFBwTeFrXd1BTwA9g3Y -----END CERTIFICATE-----Generated at Wed Jan 7 15:55:55 2026 by rpki-client