This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/fIGWD-4Fshb7d4r83OFbyVwjqBY.roa File: fIGWD-4Fshb7d4r83OFbyVwjqBY.roa (raw, json) Hash identifier: Ks+OV7JB0vGipKpWHkMisr6xMryLFUgnnDUUzg6XUBQ= Subject key identifier: 7C:81:96:0F:EE:05:B2:16:FB:77:8A:FC:DC:E1:5B:C9:5C:23:A8:16 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12F91E4DF4374A3D74DC8B2EFD57F8 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/fIGWD-4Fshb7d4r83OFbyVwjqBY.roa Signing time: Fri 02 Jan 2026 00:19:36 +0000 ROA not before: Fri 02 Jan 2026 00:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207480 IP address blocks: 2a06:1e82::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f9:1e:4d:f4:37:4a:3d:74:dc:8b:2e:fd:57:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c81960fee05b216fb778afcdce15bc95c23a816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2b:bf:36:68:47:20:a8:3c:cd:eb:c3:5b:90: 0d:12:b9:fa:5a:1e:14:54:a9:ff:99:99:86:86:93: 6e:12:7e:dc:c0:3a:fb:11:c5:87:14:f7:df:5a:3a: d9:45:e5:7c:90:c9:6b:90:0e:31:10:65:de:7c:48: e9:03:64:3e:76:22:6c:2e:3c:fa:99:1c:86:19:12: a1:89:10:73:f4:76:ce:2f:4c:42:8c:99:ea:85:d4: a1:5c:c9:af:e7:8d:89:b6:02:13:42:75:60:c5:a8: bb:63:35:00:46:b6:fb:0f:85:f3:56:9e:42:75:c4: da:51:76:7c:2a:7b:20:54:69:e2:7e:d1:1f:a1:24: 6d:43:7f:12:b5:af:66:ab:64:8d:2e:30:fb:d9:fe: cb:f2:51:db:5a:2a:5a:cd:87:dd:42:b9:4f:4b:e9: ba:27:65:42:e0:65:a3:04:54:f2:17:0e:55:59:a5: a1:9c:ca:d4:2a:49:db:ab:c5:7d:76:e1:e7:8e:5b: 3b:39:d5:e5:ed:66:f8:d5:5f:c4:29:de:58:e1:1f: 05:e5:63:4d:3e:58:e9:8f:2b:12:c1:ad:86:8f:af: 3d:89:8e:7c:20:b2:cf:4a:69:51:a1:dd:7d:84:be: af:99:49:aa:1f:af:d3:91:8a:4f:f5:61:09:c4:79: fe:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:81:96:0F:EE:05:B2:16:FB:77:8A:FC:DC:E1:5B:C9:5C:23:A8:16 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/fIGWD-4Fshb7d4r83OFbyVwjqBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:1e82::/44 Signature Algorithm: sha256WithRSAEncryption 75:38:a6:81:54:a0:ff:0d:f3:f3:d9:32:b5:79:51:07:d4:76: ba:5f:fc:b6:29:1b:e4:ef:9b:4d:33:91:e1:1f:d1:3f:52:7b: 77:f8:96:d0:d8:e9:db:5c:ee:7f:73:ff:48:8b:8a:e0:9f:d4: ab:5c:1a:1b:ad:76:47:08:14:04:63:a4:7e:26:47:9e:4f:75: e8:10:29:2b:a5:29:c9:95:c6:b9:33:45:df:de:3d:2c:e7:d0: 97:63:27:9c:02:c8:b6:95:dd:d5:ae:fc:7c:11:44:5f:9f:89: a0:87:92:15:2d:49:71:73:63:86:d8:12:85:59:bf:49:99:99: 9b:01:64:9e:a2:7e:8d:e5:d0:1c:d4:7b:64:e4:4c:e8:df:d5: df:ad:89:6c:aa:64:39:d1:16:50:4c:c7:2a:92:44:fd:ed:75: 0c:86:d8:50:b4:5a:93:35:e0:bd:60:fc:bd:c4:61:a7:d1:18: 2d:94:62:2a:0e:89:6d:e1:11:0d:41:42:19:0b:c4:86:ad:05: 6c:37:43:1a:7a:67:30:39:c5:72:f5:f3:38:18:78:1b:2c:28: 9e:22:76:69:81:22:d0:33:11:3f:7d:0e:8d:b8:b5:41:c5:99: 10:a3:fe:01:a8:c2:1e:8d:04:d7:88:61:5a:82:c5:27:b1:ae: 4a:07:a5:d5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt8EvkeTfQ3Sj103Isu/Vf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzgxOTYwZmVlMDViMjE2ZmI3NzhhZmNkY2UxNWJjOTVjMjNhODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiu/NmhHIKg8zevDW5ANErn6Wh4U VKn/mZmGhpNuEn7cwDr7EcWHFPffWjrZReV8kMlrkA4xEGXefEjpA2Q+diJsLjz6 mRyGGRKhiRBz9HbOL0xCjJnqhdShXMmv542JtgITQnVgxai7YzUARrb7D4XzVp5C dcTaUXZ8KnsgVGniftEfoSRtQ38Sta9mq2SNLjD72f7L8lHbWipazYfdQrlPS+m6 J2VC4GWjBFTyFw5VWaWhnMrUKknbq8V9duHnjls7OdXl7Wb41V/EKd5Y4R8F5WNN PljpjysSwa2Gj689iY58ILLPSmlRod19hL6vmUmqH6/TkYpP9WEJxHn+CQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFHyBlg/uBbIW+3eK/NzhW8lcI6gWMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvZklHV0QtNEZzaGI3ZDRyODNPRmJ5VndqcUJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgYeggAA MA0GCSqGSIb3DQEBCwUAA4IBAQB1OKaBVKD/DfPz2TK1eVEH1Ha6X/y2KRvk75tN M5HhH9E/Unt3+JbQ2OnbXO5/c/9Ii4rgn9SrXBobrXZHCBQEY6R+JkeeT3XoECkr pSnJlca5M0Xf3j0s59CXYyecAsi2ld3Vrvx8EURfn4mgh5IVLUlxc2OG2BKFWb9J mZmbAWSeon6N5dAc1Htk5Ezo39XfrYlsqmQ50RZQTMcqkkT97XUMhthQtFqTNeC9 YPy9xGGn0RgtlGIqDolt4RENQUIZC8SGrQVsN0MaemcwOcVy9fM4GHgbLCieInZp gSLQMxE/fQ6NuLVBxZkQo/4BqMIejQTXiGFagsUnsa5KB6XV -----END CERTIFICATE-----Generated at Wed Jan 7 15:56:08 2026 by rpki-client