This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa File: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (raw, json) Hash identifier: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc= Subject key identifier: 16:93:11:DF:FC:1B:C8:FA:10:DD:2A:4B:0B:79:AC:40:5B:87:04:27 Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8 Certificate serial: 019B78A37863FA360A0B66FEBB519853F788 Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa Signing time: Thu 01 Jan 2026 08:18:57 +0000 ROA not before: Thu 01 Jan 2026 08:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41730 IP address blocks: 193.201.240.0/24 maxlen: 24 193.201.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:78:63:fa:36:0a:0b:66:fe:bb:51:98:53:f7:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8 Validity Not Before: Jan 1 08:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=169311dffc1bc8fa10dd2a4b0b79ac405b870427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:69:ba:63:97:4c:ea:01:d8:85:d3:5d:8d:5e: 13:87:7c:d5:a7:8e:1c:0f:d3:f1:55:41:ad:c5:60: 1b:c2:77:2a:a0:e7:e6:29:06:2a:0e:01:31:91:8d: 69:bd:01:cc:7c:e1:c0:a4:71:71:61:0e:93:be:2e: 02:c5:8f:01:53:10:77:17:a2:2a:1e:6c:2f:4c:68: 39:a5:3e:57:47:19:a8:a4:20:5f:63:32:bb:8d:e2: 49:62:2f:f7:ab:25:64:a8:46:29:8a:ac:9b:d3:68: 62:ac:38:f7:4c:40:42:c7:29:f9:22:39:6c:be:e7: c6:fc:32:3a:30:a1:6f:61:04:36:f6:3a:6f:23:7e: 6b:ff:11:10:82:fd:fe:cf:77:a8:22:08:99:b6:4a: 27:02:fd:98:61:14:f9:ba:1f:27:2e:16:ac:f6:b1: 97:aa:f8:fe:29:ee:e3:61:06:c0:b2:28:7e:ce:ba: e0:56:bb:05:43:0d:83:0f:37:5a:cf:6e:4e:df:bd: 57:58:d4:ce:5f:15:63:d1:9f:f6:66:94:c1:e8:4b: ff:69:30:8f:fd:13:06:22:f9:9c:c6:5c:a1:eb:e7: c7:ff:35:78:d0:93:91:3c:0a:86:c5:1f:3f:d3:8f: f7:92:aa:c0:20:38:0d:7d:12:a9:52:da:9c:96:42: a9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:93:11:DF:FC:1B:C8:FA:10:DD:2A:4B:0B:79:AC:40:5B:87:04:27 X509v3 Authority Key Identifier: keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.201.240.0/23 Signature Algorithm: sha256WithRSAEncryption 21:ed:36:35:14:8a:e4:e6:25:d4:d5:84:aa:d5:22:b1:ed:d7: 1e:cf:1a:57:48:e3:99:af:8f:fb:6e:0f:89:63:75:f7:1e:fd: 44:1b:00:7d:ac:46:cf:88:74:04:7a:5f:45:e8:73:1c:4c:c7: ab:7f:0e:10:db:9b:af:b3:7b:9f:9a:99:e9:0b:ab:f0:4f:8d: e3:fa:97:42:e9:61:84:ff:40:bf:fc:a3:10:35:e2:02:39:f8: 67:5c:af:f4:23:f8:32:b0:c0:5b:cf:96:07:c1:1a:5e:f7:78: 5e:4b:99:bb:03:b0:76:bd:ba:ef:c7:44:eb:6b:60:27:5a:bc: 0a:fb:f6:2c:10:b5:1d:51:23:b3:98:c1:eb:32:e4:dd:77:ee: bc:34:6a:73:35:5a:8b:a4:f1:8d:f6:34:13:f6:69:ea:e3:71: e5:c7:7e:da:cb:f9:10:c1:7c:a1:a9:27:a5:08:48:27:d3:8f: d5:44:03:1d:25:32:ab:5b:32:ec:1b:e0:4f:f5:30:7c:7c:ee: 11:9b:74:35:5e:4d:6c:27:29:9e:7e:1c:ae:6f:00:c0:fb:ff: 16:71:3c:fa:db:35:95:b9:92:a1:e0:27:d8:61:6b:4b:eb:40: 13:ad:45:ee:16:91:cd:f3:f7:ba:f4:93:97:81:b4:7c:10:e5: a6:f3:58:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o3hj+jYKC2b+u1GYU/eIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmODJhZTlhMzA0YWMwODJjMThhMjg5MTY2NmY2NGNlZTgx ZDVjYTgwHhcNMjYwMTAxMDgxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjkzMTFkZmZjMWJjOGZhMTBkZDJhNGIwYjc5YWM0MDViODcwNDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2m6Y5dM6gHYhdNdjV4Th3zVp44c D9PxVUGtxWAbwncqoOfmKQYqDgExkY1pvQHMfOHApHFxYQ6Tvi4CxY8BUxB3F6Iq HmwvTGg5pT5XRxmopCBfYzK7jeJJYi/3qyVkqEYpiqyb02hirDj3TEBCxyn5Ijls vufG/DI6MKFvYQQ29jpvI35r/xEQgv3+z3eoIgiZtkonAv2YYRT5uh8nLhas9rGX qvj+Ke7jYQbAsih+zrrgVrsFQw2DDzdaz25O371XWNTOXxVj0Z/2ZpTB6Ev/aTCP /RMGIvmcxlyh6+fH/zV40JORPAqGxR8/04/3kqrAIDgNfRKpUtqclkKpwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBaTEd/8G8j6EN0qSwt5rEBbhwQnMB8GA1UdIwQY MBaAFF+CrpowSsCCwYookWZvZM7oHVyoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTct M2VjNDQ3MzEwZGZiLzEvRnBNUjNfd2J5UG9RM1NwTEMzbXNRRnVIQkNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9kNmRiZDgtNjQ2Ni00OGQwLWE1OTctM2VjNDQ3MzEwZGZi LzEvWDRLdW1qQkt3SUxCaWlpUlptOWt6dWdkWEtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcnwMA0G CSqGSIb3DQEBCwUAA4IBAQAh7TY1FIrk5iXU1YSq1SKx7dcezxpXSOOZr4/7bg+J Y3X3Hv1EGwB9rEbPiHQEel9F6HMcTMerfw4Q25uvs3ufmpnpC6vwT43j+pdC6WGE /0C//KMQNeICOfhnXK/0I/gysMBbz5YHwRpe93heS5m7A7B2vbrvx0Tra2AnWrwK +/YsELUdUSOzmMHrMuTdd+68NGpzNVqLpPGN9jQT9mnq43Hlx37ay/kQwXyhqSel CEgn04/VRAMdJTKrWzLsG+BP9TB8fO4Rm3Q1Xk1sJymefhyubwDA+/8WcTz62zWV uZKh4CfYYWtL60ATrUXuFpHN8/e69JOXgbR8EOWm81gI -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:37 2026 by rpki-client