This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fMBBJ-SSLLS9m7s9_l8zg_WZWEM.roa File: fMBBJ-SSLLS9m7s9_l8zg_WZWEM.roa (raw, json) Hash identifier: hzgNSU+rDi2/ADzjcQ7hi291bWqXF9cwMFyECdVrw/o= Subject key identifier: 7C:C0:41:27:E4:92:2C:B4:BD:9B:BB:3D:FE:5F:33:83:F5:99:58:43 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D07152BB6DAA74444C60679F3EFCD Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fMBBJ-SSLLS9m7s9_l8zg_WZWEM.roa Signing time: Fri 02 Jan 2026 06:20:07 +0000 ROA not before: Fri 02 Jan 2026 06:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207252 IP address blocks: 2a06:de00:400::/38 maxlen: 48 2a0e:97c0:db0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:07:15:2b:b6:da:a7:44:44:c6:06:79:f3:ef:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cc04127e4922cb4bd9bbb3dfe5f3383f5995843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e5:cd:9e:de:93:b5:6a:ab:ff:68:fd:75:d6: a3:73:a1:e4:29:48:a3:d0:ff:07:fc:71:09:01:88: 33:71:5b:db:20:ca:5e:8d:b7:d7:4b:bb:ee:ab:ee: a0:48:48:9a:ac:42:d6:e2:42:13:d6:5c:2c:65:58: 38:64:ed:99:fd:b6:c9:3a:0f:bb:99:63:62:c9:30: fa:be:51:bf:7c:f7:92:01:c2:f8:29:f5:1c:48:b4: e9:a5:d3:37:a1:b8:c2:7a:18:83:63:ed:3c:89:ce: da:a3:43:e1:43:cf:4d:40:c6:bb:09:ee:72:2b:c0: 6b:7f:b4:e2:c6:30:5d:f4:ec:cf:35:36:79:e5:da: 94:52:9b:a1:da:b8:2a:71:56:92:55:5f:5d:02:89: 95:76:e1:8c:9f:94:54:a1:49:45:1a:0e:97:a2:ef: c8:2b:7c:e7:f6:75:04:fc:43:07:da:95:8c:c3:71: 1e:60:3b:df:43:37:c3:0c:56:2c:3e:2e:5d:7c:74: e2:6a:fe:ea:ca:d1:70:98:0d:ae:fa:5e:d0:01:52: 96:18:f6:0e:06:d7:da:f2:10:57:71:b0:a7:e4:7e: b4:87:5d:55:e9:12:76:81:7a:56:a5:0b:f6:97:dc: fb:9e:71:ab:84:30:53:55:ee:29:ae:29:08:82:1a: 77:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C0:41:27:E4:92:2C:B4:BD:9B:BB:3D:FE:5F:33:83:F5:99:58:43 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fMBBJ-SSLLS9m7s9_l8zg_WZWEM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a06:de00:400::/38 2a0e:97c0:db0::/48 Signature Algorithm: sha256WithRSAEncryption a8:7d:92:7b:c6:91:7e:31:f7:f1:02:61:9b:40:69:65:8a:b9: ed:01:23:e2:d8:21:c5:f5:7a:7d:e3:52:4f:f4:84:d6:8e:89: 71:75:e3:b8:a3:bf:87:47:4d:ed:f9:86:0b:e8:e5:74:58:76: f6:47:47:98:e4:bc:8f:0c:aa:1b:06:47:9c:a5:5f:98:cc:1f: 2c:27:cf:6e:52:03:c4:91:e5:a2:e5:02:66:45:60:55:6d:11: c0:0f:8f:eb:2e:b2:b8:8b:b6:83:8f:83:89:f1:6c:9f:3a:7f: 4f:4c:d4:c1:cd:dd:07:0a:c9:f0:b3:78:ee:80:c4:f1:aa:fc: ae:78:95:ec:c5:4a:aa:3e:f2:36:05:d9:f8:c1:97:ab:10:0a: 80:a7:b8:63:d5:cb:96:c5:c6:0d:f0:42:0c:5a:eb:3c:cf:1d: 23:a8:79:7a:02:e6:cb:18:bf:40:a4:03:e9:ce:fc:8d:83:36: bf:9d:6e:df:a3:91:01:3c:41:59:c3:40:3b:ac:f4:4d:86:b9: 3a:d8:16:07:c6:c0:bf:22:93:c6:fc:90:f7:97:bb:d5:6f:df: 77:19:68:59:57:43:61:8b:87:8d:d5:ef:d8:19:d5:d1:d3:09: 53:03:92:5b:ca:b7:7f:c4:91:c4:92:ad:ce:4f:1b:9e:c2:48: b7:95:4e:ac -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgISAZt9XQcVK7bap0RExgZ58+/NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2MwNDEyN2U0OTIyY2I0YmQ5YmJiM2RmZTVmMzM4M2Y1OTk1ODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OXNnt6TtWqr/2j9ddajc6HkKUij 0P8H/HEJAYgzcVvbIMpejbfXS7vuq+6gSEiarELW4kIT1lwsZVg4ZO2Z/bbJOg+7 mWNiyTD6vlG/fPeSAcL4KfUcSLTppdM3objCehiDY+08ic7ao0PhQ89NQMa7Ce5y K8Brf7TixjBd9OzPNTZ55dqUUpuh2rgqcVaSVV9dAomVduGMn5RUoUlFGg6Xou/I K3zn9nUE/EMH2pWMw3EeYDvfQzfDDFYsPi5dfHTiav7qytFwmA2u+l7QAVKWGPYO Btfa8hBXcbCn5H60h11V6RJ2gXpWpQv2l9z7nnGrhDBTVe4prikIghp37QIDAQAB o4ICFDCCAhAwHQYDVR0OBBYEFHzAQSfkkiy0vZu7Pf5fM4P1mVhDMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZk1CQkotU1NMTFM5bTdzOV9sOHpnX1daV0VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwYCKgbeAAQD BwAqDpfADbAwDQYJKoZIhvcNAQELBQADggEBAKh9knvGkX4x9/ECYZtAaWWKue0B I+LYIcX1en3jUk/0hNaOiXF147ijv4dHTe35hgvo5XRYdvZHR5jkvI8MqhsGR5yl X5jMHywnz25SA8SR5aLlAmZFYFVtEcAPj+susriLtoOPg4nxbJ86f09M1MHN3QcK yfCzeO6AxPGq/K54lezFSqo+8jYF2fjBl6sQCoCnuGPVy5bFxg3wQgxa6zzPHSOo eXoC5ssYv0CkA+nO/I2DNr+dbt+jkQE8QVnDQDus9E2GuTrYFgfGwL8ik8b8kPeX u9Vv33cZaFlXQ2GLh43V79gZ1dHTCVMDklvKt3/EkcSSrc5PG57CSLeVTqw= -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:49 2026 by rpki-client