This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/FL9A-Wc7z5VMCe364E-fjxzBfRE.roa File: FL9A-Wc7z5VMCe364E-fjxzBfRE.roa (raw, json) Hash identifier: ICmFI8eTAGCEVNybXrRIRxi+lptZELNrevDuYYLtLB8= Subject key identifier: 14:BF:40:F9:67:3B:CF:95:4C:09:ED:FA:E0:4F:9F:8F:1C:C1:7D:11 Certificate issuer: /CN=33e278ba28261a2d1e553dbef6df8409a21c1aef Certificate serial: 019B7D5B5CDAFDF2F9A0181D63224D79BF3C Authority key identifier: 33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/FL9A-Wc7z5VMCe364E-fjxzBfRE.roa Signing time: Fri 02 Jan 2026 06:18:18 +0000 ROA not before: Fri 02 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200342 IP address blocks: 194.39.200.0/22 maxlen: 22 194.39.200.0/24 maxlen: 24 194.39.201.0/24 maxlen: 24 194.39.202.0/24 maxlen: 24 194.39.203.0/24 maxlen: 24 2a0c:f0c0::/29 maxlen: 29 2a0c:f0c0::/31 maxlen: 31 2a0c:f0c2::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.mft rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:5c:da:fd:f2:f9:a0:18:1d:63:22:4d:79:bf:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33e278ba28261a2d1e553dbef6df8409a21c1aef Validity Not Before: Jan 2 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14bf40f9673bcf954c09edfae04f9f8f1cc17d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:79:e4:13:71:76:8d:7a:56:19:c6:4b:45:29: 74:7a:d3:38:49:46:9e:ea:28:fa:e9:10:33:50:05: f3:88:9c:71:57:f3:89:7c:fb:e1:67:bf:b7:e6:3f: d1:00:41:15:44:54:ea:a4:d2:b5:33:cf:bd:ca:59: 45:ff:b5:e1:19:e8:22:8f:3c:2d:e7:82:8f:ec:bd: 83:d4:0c:6d:f7:95:e4:84:cf:cf:46:a0:82:4b:50: 48:0b:86:1f:7f:7c:c5:79:e8:88:11:ce:0d:ca:58: 73:f1:33:c3:78:38:fa:fb:7c:25:bb:9d:07:48:cf: 1e:a2:d2:73:88:69:b1:36:81:96:36:15:25:98:30: dc:ec:4f:26:42:e0:6a:53:17:b1:a7:1d:98:10:f2: 94:ae:c8:7e:54:a8:ce:ff:f4:fa:c1:a0:76:d1:16: 02:c3:9c:96:6b:3b:b2:f3:8a:bf:69:2d:68:66:18: c8:8c:3b:ea:50:7f:b9:09:69:03:7c:91:7e:4b:c0: f2:e6:1c:fe:9f:85:c5:b7:45:41:0a:9f:00:5e:b5: cf:b7:f1:ed:c7:ca:54:74:a0:c0:78:da:56:50:f4: 9a:a6:47:2e:0b:c4:0e:b0:f1:e7:49:30:4c:fc:66: 86:db:c9:98:d9:ec:97:52:80:01:ce:b7:4f:8f:92: 90:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:BF:40:F9:67:3B:CF:95:4C:09:ED:FA:E0:4F:9F:8F:1C:C1:7D:11 X509v3 Authority Key Identifier: keyid:33:E2:78:BA:28:26:1A:2D:1E:55:3D:BE:F6:DF:84:09:A2:1C:1A:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M-J4uigmGi0eVT2-9t-ECaIcGu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/FL9A-Wc7z5VMCe364E-fjxzBfRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2c5fb9-c9b3-4e56-bdf1-22ea3ad5de5c/1/M-J4uigmGi0eVT2-9t-ECaIcGu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.39.200.0/22 IPv6: 2a0c:f0c0::/29 Signature Algorithm: sha256WithRSAEncryption 18:eb:7b:96:1b:0b:49:2e:5e:a3:85:03:3f:cb:bc:78:25:f1: 3f:2a:0f:07:e1:a9:6e:39:cb:9a:6d:06:6f:5d:ec:6e:2e:80: 29:e7:09:7d:d1:bf:38:b3:2c:af:9c:11:59:fe:40:83:0c:d3: 35:7a:bf:4a:13:f9:ae:55:9d:6e:0e:c0:8e:79:53:d6:45:55: 92:c7:a9:bc:fa:c5:bc:dd:17:4b:fa:a5:32:06:f3:65:cf:9c: 57:14:4b:1e:a8:af:de:7e:a7:6c:cd:76:e3:e2:b2:70:d1:16: 84:92:f3:4f:e9:4f:a4:8f:0b:df:2b:bd:91:8c:9d:43:4b:a9: 8d:81:19:57:ed:f2:d6:b7:9c:c4:f5:d7:48:6f:e3:90:fa:db: c4:80:ca:55:7a:de:3c:bf:41:82:d2:5c:73:04:c8:4f:1e:a5: 67:69:21:4a:5b:f1:99:b2:6b:66:25:2e:4b:40:b9:66:34:f3: e0:44:84:e4:e7:d6:6c:d3:c2:6f:19:1d:bd:75:14:49:02:7b: 83:51:15:fa:d8:00:11:40:7a:fd:a2:9e:a8:e0:67:c2:0d:ba: 13:0f:84:71:21:93:d3:49:e3:d9:a4:d6:b4:e7:c1:e8:82:dc: cf:6c:31:d9:fc:4f:21:16:7e:66:ed:69:94:4d:2d:1c:c7:38: e3:44:a1:ff -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W1za/fL5oBgdYyJNeb88MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZTI3OGJhMjgyNjFhMmQxZTU1M2RiZWY2ZGY4NDA5YTIx YzFhZWYwHhcNMjYwMTAyMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGJmNDBmOTY3M2JjZjk1NGMwOWVkZmFlMDRmOWY4ZjFjYzE3ZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63nkE3F2jXpWGcZLRSl0etM4SUae 6ij66RAzUAXziJxxV/OJfPvhZ7+35j/RAEEVRFTqpNK1M8+9yllF/7XhGegijzwt 54KP7L2D1Axt95XkhM/PRqCCS1BIC4Yff3zFeeiIEc4Nylhz8TPDeDj6+3wlu50H SM8eotJziGmxNoGWNhUlmDDc7E8mQuBqUxexpx2YEPKUrsh+VKjO//T6waB20RYC w5yWazuy84q/aS1oZhjIjDvqUH+5CWkDfJF+S8Dy5hz+n4XFt0VBCp8AXrXPt/Ht x8pUdKDAeNpWUPSapkcuC8QOsPHnSTBM/GaG28mY2eyXUoABzrdPj5KQUQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBS/QPlnO8+VTAnt+uBPn48cwX0RMB8GA1UdIwQY MBaAFDPieLooJhotHlU9vvbfhAmiHBrvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEt MjJlYTNhZDVkZTVjLzEvRkw5QS1XYzd6NVZNQ2UzNjRFLWZqeHpCZlJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8yYzVmYjktYzliMy00ZTU2LWJkZjEtMjJlYTNhZDVkZTVj LzEvTS1KNHVpZ21HaTBlVlQyLTl0LUVDYUljR3U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwifIMA0E AgACMAcDBQMqDPDAMA0GCSqGSIb3DQEBCwUAA4IBAQAY63uWGwtJLl6jhQM/y7x4 JfE/Kg8H4aluOcuabQZvXexuLoAp5wl90b84syyvnBFZ/kCDDNM1er9KE/muVZ1u DsCOeVPWRVWSx6m8+sW83RdL+qUyBvNlz5xXFEseqK/efqdszXbj4rJw0RaEkvNP 6U+kjwvfK72RjJ1DS6mNgRlX7fLWt5zE9ddIb+OQ+tvEgMpVet48v0GC0lxzBMhP HqVnaSFKW/GZsmtmJS5LQLlmNPPgRITk59Zs08JvGR29dRRJAnuDURX62AARQHr9 op6o4GfCDboTD4RxIZPTSePZpNa058HogtzPbDHZ/E8hFn5m7WmUTS0cxzjjRKH/ -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:12 2026 by rpki-client