This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FCTAEpKosOVpnz_as_a6hW-vIEo.roa File: FCTAEpKosOVpnz_as_a6hW-vIEo.roa (raw, json) Hash identifier: ceaY89VUsKMnjFtTHlz8NXIznaIC3GxC+vrM3A0S8Dc= Subject key identifier: 14:24:C0:12:92:A8:B0:E5:69:9F:3F:DA:B3:F6:BA:85:6F:AF:20:4A Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Certificate serial: 019B7EA768D6C0E7424820FB23264A1DFDFE Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FCTAEpKosOVpnz_as_a6hW-vIEo.roa Signing time: Fri 02 Jan 2026 12:20:59 +0000 ROA not before: Fri 02 Jan 2026 12:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216420 IP address blocks: 2a0d:6f80:1f72::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:68:d6:c0:e7:42:48:20:fb:23:26:4a:1d:fd:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5 Validity Not Before: Jan 2 12:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1424c01292a8b0e5699f3fdab3f6ba856faf204a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8d:38:51:ae:08:3b:79:1d:da:ff:bf:74:8e: 6c:f1:1e:51:be:96:74:9d:2b:19:7c:d9:42:eb:ca: 4e:f9:e1:0b:1b:8e:1e:e7:63:c9:87:22:79:55:3f: 86:d1:ef:1d:aa:b4:f4:20:8f:33:8d:13:c4:ff:e4: 78:92:ae:22:65:6b:e6:fa:10:f4:4d:49:50:a5:37: bd:28:83:00:7e:df:61:b3:23:36:24:b2:11:c1:f7: 34:5a:e9:4f:90:a5:94:f5:24:26:2f:a1:e1:d0:cb: 75:94:4e:81:45:3b:b3:f4:3f:fa:6c:94:04:7d:f9: d2:88:29:a0:68:48:ae:ba:1e:b2:61:c0:e7:9f:cf: 5b:f6:56:6c:5f:f8:ca:a4:ab:6f:0e:e7:5c:48:63: 6a:26:a3:29:e7:b0:10:42:24:7a:89:52:ed:00:b6: 22:65:b8:d9:8c:89:53:47:b7:ef:4a:4e:0d:3b:a4: ce:e6:37:4b:1e:83:b4:76:ea:4e:dc:13:e6:1f:20: d1:2b:08:0a:a8:fa:71:7d:96:63:54:67:23:8c:66: 00:a0:d6:1e:7d:5f:74:79:11:d9:9f:dd:62:ae:9a: d3:ac:fd:ba:82:84:54:52:a0:e4:b4:b6:17:07:ea: 17:1f:f1:41:5d:fd:50:8e:6e:66:fc:1d:d0:ae:02: 56:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:24:C0:12:92:A8:B0:E5:69:9F:3F:DA:B3:F6:BA:85:6F:AF:20:4A X509v3 Authority Key Identifier: keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FCTAEpKosOVpnz_as_a6hW-vIEo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0d:6f80:1f72::/48 Signature Algorithm: sha256WithRSAEncryption bb:72:2d:7e:1d:69:ed:14:29:e6:24:9a:64:f4:75:03:d7:f6: f9:8c:01:f0:1a:1a:57:4e:5e:d0:f2:58:d9:ff:a8:3d:30:b9: 68:b7:fd:e7:bd:a0:fd:82:ee:da:e8:aa:d9:3f:c5:a6:d9:d2: e1:db:00:19:1d:ed:60:4a:d1:26:08:42:8a:e2:3f:60:99:5f: d8:d0:bc:aa:fe:07:9b:bd:b1:d9:bf:2b:53:75:41:25:d0:15: e9:4e:b4:88:50:31:a0:c5:f1:17:9c:a9:4b:a0:ac:87:2e:f1: e2:dd:2d:e9:2f:86:9f:36:bd:ce:fd:21:f2:96:db:dc:83:db: 14:99:61:2e:ab:6b:ac:89:54:9a:a3:fc:b4:0e:1c:a3:6c:c9: 56:06:a0:96:68:bd:e6:4b:84:c1:ea:6c:4f:f8:35:fc:7c:52: cf:14:9d:9d:52:51:1e:94:bd:31:28:b0:73:c1:64:38:d4:18: e6:41:63:83:a7:3a:00:47:a3:e2:23:15:cb:c6:95:02:76:02: 98:2a:b1:d1:07:cc:4e:fa:80:ac:8e:62:2a:11:35:fa:3a:da: 2d:dc:9d:8d:0e:26:b5:4f:76:a8:01:ff:a4:ee:38:0e:71:9d: 54:7a:ee:74:27:1e:b6:d9:ab:2d:5c:40:05:46:cb:d2:8e:dc: 1d:95:62:50 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+p2jWwOdCSCD7IyZKHf3+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0 ZGIwYTUwHhcNMjYwMTAyMTIyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDI0YzAxMjkyYThiMGU1Njk5ZjNmZGFiM2Y2YmE4NTZmYWYyMDRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o04Ua4IO3kd2v+/dI5s8R5RvpZ0 nSsZfNlC68pO+eELG44e52PJhyJ5VT+G0e8dqrT0II8zjRPE/+R4kq4iZWvm+hD0 TUlQpTe9KIMAft9hsyM2JLIRwfc0WulPkKWU9SQmL6Hh0Mt1lE6BRTuz9D/6bJQE ffnSiCmgaEiuuh6yYcDnn89b9lZsX/jKpKtvDudcSGNqJqMp57AQQiR6iVLtALYi ZbjZjIlTR7fvSk4NO6TO5jdLHoO0dupO3BPmHyDRKwgKqPpxfZZjVGcjjGYAoNYe fV90eRHZn91irprTrP26goRUUqDktLYXB+oXH/FBXf1Qjm5m/B3QrgJW0wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBQkwBKSqLDlaZ8/2rP2uoVvryBKMB8GA1UdIwQY MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt YmFmYmRmYzgxMzJhLzEvRkNUQUVwS29zT1ZwbnpfYXNfYTZoVy12SUVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgB9y MA0GCSqGSIb3DQEBCwUAA4IBAQC7ci1+HWntFCnmJJpk9HUD1/b5jAHwGhpXTl7Q 8ljZ/6g9MLlot/3nvaD9gu7a6KrZP8Wm2dLh2wAZHe1gStEmCEKK4j9gmV/Y0Lyq /gebvbHZvytTdUEl0BXpTrSIUDGgxfEXnKlLoKyHLvHi3S3pL4afNr3O/SHyltvc g9sUmWEuq2usiVSao/y0DhyjbMlWBqCWaL3mS4TB6mxP+DX8fFLPFJ2dUlEelL0x KLBzwWQ41BjmQWODpzoAR6PiIxXLxpUCdgKYKrHRB8xO+oCsjmIqETX6Otot3J2N Dia1T3aoAf+k7jgOcZ1Ueu50Jx622astXEAFRsvSjtwdlWJQ -----END CERTIFICATE-----Generated at Sat Jan 3 18:58:52 2026 by rpki-client