This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxfAkKPGHPCXHa2Bx1-mGCSFOeo.roa File: fxfAkKPGHPCXHa2Bx1-mGCSFOeo.roa (raw, json) Hash identifier: NO+gakYHdLbSQWp6qGJ6gQQEvjldOBZLgDlI9BmffHg= Subject key identifier: 7F:17:C0:90:A3:C6:1C:F0:97:1D:AD:81:C7:5F:A6:18:24:85:39:EA Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CF6989582D7FCFEADF26311DD9332 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxfAkKPGHPCXHa2Bx1-mGCSFOeo.roa Signing time: Fri 02 Jan 2026 06:20:02 +0000 ROA not before: Fri 02 Jan 2026 06:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203899 IP address blocks: 2a0e:b107:1b20::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f6:98:95:82:d7:fc:fe:ad:f2:63:11:dd:93:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f17c090a3c61cf0971dad81c75fa618248539ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:2c:62:88:ba:d1:ec:c0:3b:38:fc:73:7b: 82:b7:5c:af:80:01:48:ab:31:93:a4:e9:09:80:ff: 90:ef:4a:46:67:2d:a8:45:a0:a9:87:8b:44:37:e4: ff:8b:50:89:d5:6c:10:2d:1d:16:5e:d0:d6:4e:46: 2e:49:89:c0:ed:89:79:41:28:16:14:11:8e:d0:5e: ec:7d:24:fa:9e:92:9d:d2:14:2c:96:6b:38:b4:11: d4:81:8b:a9:a5:35:6f:dc:8a:ef:8a:7b:f0:02:bf: 17:d9:ce:62:9f:9e:da:ba:01:47:a5:53:0d:f9:43: e5:18:53:ea:09:ce:13:04:7c:e5:c1:5e:f7:40:ba: 4a:ed:e3:47:59:c1:49:e5:68:43:d9:ad:8b:90:2d: 00:23:f8:04:bf:20:4d:5a:60:81:e8:8e:c7:4b:ef: da:64:f6:ae:0d:3e:8d:2c:91:db:da:ad:07:ab:26: 48:b6:13:a5:5a:38:40:5a:e5:ec:46:30:51:32:c5: b5:75:20:ea:f2:55:ac:59:d5:a0:06:96:91:70:48: f3:0a:b1:28:19:ed:88:07:01:31:73:12:82:e3:eb: f9:69:d7:fb:2c:dd:90:76:c2:c9:c7:ae:4b:58:79: d9:20:7b:7d:b8:fc:09:db:d0:0c:82:9e:49:c6:1b: b6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:17:C0:90:A3:C6:1C:F0:97:1D:AD:81:C7:5F:A6:18:24:85:39:EA X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxfAkKPGHPCXHa2Bx1-mGCSFOeo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:b107:1b20::/44 Signature Algorithm: sha256WithRSAEncryption 6f:b1:2a:c2:54:51:c3:87:e1:b7:07:56:d2:5f:f9:d2:43:4a: 34:1a:49:00:6e:eb:43:eb:c0:10:63:8d:48:50:2c:b8:0d:f2: 79:dd:c4:4e:1b:4e:af:12:f5:f8:01:63:ed:e7:94:a9:bf:81: e7:db:15:d7:7c:ad:34:3b:40:51:e5:58:10:9f:ed:45:90:b9: fd:19:f2:fa:a4:1b:ed:3b:e1:72:7d:cc:1a:10:9d:83:47:9c: 0d:2b:d3:8c:7b:01:8f:0c:53:84:97:2d:fd:06:e2:21:2e:8d: 72:94:aa:37:5e:e6:f9:88:e9:d0:8a:cc:72:2d:36:78:68:31: 33:e2:dc:8b:9c:24:3b:c9:15:34:49:83:90:76:1f:f4:39:a9: 8c:78:f6:3b:69:3d:bd:43:9b:16:72:45:a5:77:ec:03:55:95: ca:14:79:8d:b1:16:f5:1a:99:13:a4:13:e5:fe:88:bf:6c:e4: 84:a2:78:1b:b2:84:e0:3a:d9:a8:f4:49:b0:34:54:24:7f:36: 58:35:e9:9c:99:84:52:6b:59:6f:94:a1:67:88:1b:60:e3:97: 96:4e:a3:d5:55:68:a5:fb:87:28:98:af:4a:27:d8:bb:59:4f: 3d:64:96:ba:7e:be:5e:9a:5a:83:d5:aa:5f:14:1c:4a:b8:45: 69:2a:57:7b -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt9XPaYlYLX/P6t8mMR3ZMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjE3YzA5MGEzYzYxY2YwOTcxZGFkODFjNzVmYTYxODI0ODUzOWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsagsYoi60ezAOzj8c3uCt1yvgAFI qzGTpOkJgP+Q70pGZy2oRaCph4tEN+T/i1CJ1WwQLR0WXtDWTkYuSYnA7Yl5QSgW FBGO0F7sfST6npKd0hQslms4tBHUgYuppTVv3IrvinvwAr8X2c5in57augFHpVMN +UPlGFPqCc4TBHzlwV73QLpK7eNHWcFJ5WhD2a2LkC0AI/gEvyBNWmCB6I7HS+/a ZPauDT6NLJHb2q0HqyZIthOlWjhAWuXsRjBRMsW1dSDq8lWsWdWgBpaRcEjzCrEo Ge2IBwExcxKC4+v5adf7LN2QdsLJx65LWHnZIHt9uPwJ29AMgp5Jxhu2qQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH8XwJCjxhzwlx2tgcdfphgkhTnqMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvZnhmQWtLUEdIUENYSGEyQngxLW1HQ1NGT2VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6xBxsg MA0GCSqGSIb3DQEBCwUAA4IBAQBvsSrCVFHDh+G3B1bSX/nSQ0o0GkkAbutD68AQ Y41IUCy4DfJ53cROG06vEvX4AWPt55Spv4Hn2xXXfK00O0BR5VgQn+1FkLn9GfL6 pBvtO+FyfcwaEJ2DR5wNK9OMewGPDFOEly39BuIhLo1ylKo3Xub5iOnQisxyLTZ4 aDEz4tyLnCQ7yRU0SYOQdh/0OamMePY7aT29Q5sWckWld+wDVZXKFHmNsRb1GpkT pBPl/oi/bOSEongbsoTgOtmo9EmwNFQkfzZYNemcmYRSa1lvlKFniBtg45eWTqPV VWil+4comK9KJ9i7WU89ZJa6fr5emlqD1apfFBxKuEVpKld7 -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:57 2026 by rpki-client