This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/FKPDUKEH3RWf-_A6oyRKO4_LVBY.roa File: FKPDUKEH3RWf-_A6oyRKO4_LVBY.roa (raw, json) Hash identifier: hV9SiFdAv7sVh4TN2I3na70oOpO2IrQF3ksLQ7b5hl8= Subject key identifier: 14:A3:C3:50:A1:07:DD:15:9F:FB:F0:3A:A3:24:4A:3B:8F:CB:54:16 Certificate issuer: /CN=864abd435f899d570a8e5fb83bdad1153455dee0 Certificate serial: 019B7834A33CB07EC244276739D5DB79236B Authority key identifier: 86:4A:BD:43:5F:89:9D:57:0A:8E:5F:B8:3B:DA:D1:15:34:55:DE:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/FKPDUKEH3RWf-_A6oyRKO4_LVBY.roa Signing time: Thu 01 Jan 2026 06:17:53 +0000 ROA not before: Thu 01 Jan 2026 06:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38924 IP address blocks: 95.87.0.0/18 maxlen: 24 2a00:fc40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.mft rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:a3:3c:b0:7e:c2:44:27:67:39:d5:db:79:23:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=864abd435f899d570a8e5fb83bdad1153455dee0 Validity Not Before: Jan 1 06:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14a3c350a107dd159ffbf03aa3244a3b8fcb5416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:22:56:7e:df:96:86:04:74:92:f2:2e:d2: 23:2f:94:be:e1:e1:3d:14:3e:f3:51:e4:f3:1b:15: 49:85:be:9c:b1:2e:0d:38:f8:8b:f4:5c:f2:b2:c9: 4a:6e:10:e8:79:5e:14:b0:a3:b4:a9:3c:a6:f9:35: 5f:7a:d0:86:f2:ae:2d:2e:db:dd:a2:c2:ed:55:c3: e8:05:6c:d2:8e:48:d9:4f:5d:12:43:8e:04:de:f0: 30:60:00:f9:64:e0:ca:8b:e8:c7:bf:5f:d0:60:fb: 06:e3:92:9c:7a:d8:b3:9d:76:d7:b3:00:97:41:a6: 46:dc:38:47:ab:90:41:c8:63:23:51:bc:29:4f:d6: 97:79:83:78:b3:0f:70:53:17:d9:6c:72:99:ed:5d: 15:c8:2e:33:61:88:3f:58:b1:13:26:27:c6:87:a2: ac:7c:d1:8b:14:e8:c5:d3:ba:15:e2:23:cb:1f:7f: f9:08:19:98:9d:4d:68:1a:85:bb:7d:60:45:27:1d: d9:d9:7d:c1:08:3a:b9:11:30:37:19:74:4c:3d:18: 7b:4c:5a:31:e5:7f:f9:d6:ca:18:34:4a:65:e2:65: b9:91:3f:ed:90:dd:02:36:23:26:c8:bf:3c:5a:4f: fd:a8:31:79:df:c2:29:27:85:a5:c6:e4:b8:48:2c: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A3:C3:50:A1:07:DD:15:9F:FB:F0:3A:A3:24:4A:3B:8F:CB:54:16 X509v3 Authority Key Identifier: keyid:86:4A:BD:43:5F:89:9D:57:0A:8E:5F:B8:3B:DA:D1:15:34:55:DE:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/FKPDUKEH3RWf-_A6oyRKO4_LVBY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3f133f-1c81-4a4b-a255-3e3646591aa0/1/hkq9Q1-JnVcKjl-4O9rRFTRV3uA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.87.0.0/18 IPv6: 2a00:fc40::/32 Signature Algorithm: sha256WithRSAEncryption 9d:4e:9b:a7:ec:3b:00:5f:aa:48:85:4d:53:6c:42:0f:85:99: 64:b4:76:fd:f8:92:5c:be:91:5e:dd:ec:22:b7:c7:cc:e5:90: 1f:78:74:78:cd:b4:f9:cf:42:d7:56:02:d9:4c:2e:e1:6a:ad: a0:73:67:0b:60:60:ba:f0:95:6b:86:ee:b9:59:8b:d8:2b:78: 6b:0a:a5:43:ca:32:42:4d:bd:9e:66:52:4c:74:c6:08:27:ee: 36:f6:b7:b4:b9:59:10:77:3a:3a:d9:62:25:47:eb:a6:ee:39: c7:a8:83:6c:bc:92:06:4d:22:2f:10:c5:17:95:bd:08:37:1f: 26:5b:47:4d:e1:69:cb:5d:82:6c:0c:23:b4:68:66:7d:f3:69: da:c9:29:4c:28:ed:d9:af:d1:d7:4d:d2:de:9c:ca:21:51:ec: 84:61:ad:89:fc:bd:ff:06:ca:dc:35:c9:75:52:fa:c3:09:c4: 9c:c5:e6:ff:f1:37:a0:69:78:4f:45:43:95:df:50:f4:e6:0d: fe:77:b6:60:37:32:9f:f4:e1:c6:1c:a7:30:59:26:99:5b:5e: 17:00:96:50:33:95:1d:c2:72:81:ec:f2:e2:0c:8a:58:cc:24: 1e:9d:5f:b1:1d:e1:01:0d:6a:bf:50:89:f4:09:23:9b:c3:ba: 7d:5d:fc:23 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NKM8sH7CRCdnOdXbeSNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2NGFiZDQzNWY4OTlkNTcwYThlNWZiODNiZGFkMTE1MzQ1 NWRlZTAwHhcNMjYwMTAxMDYxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGEzYzM1MGExMDdkZDE1OWZmYmYwM2FhMzI0NGEzYjhmY2I1NDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TsiVn7floYEdJLyLtIjL5S+4eE9 FD7zUeTzGxVJhb6csS4NOPiL9FzysslKbhDoeV4UsKO0qTym+TVfetCG8q4tLtvd osLtVcPoBWzSjkjZT10SQ44E3vAwYAD5ZODKi+jHv1/QYPsG45KcetiznXbXswCX QaZG3DhHq5BByGMjUbwpT9aXeYN4sw9wUxfZbHKZ7V0VyC4zYYg/WLETJifGh6Ks fNGLFOjF07oV4iPLH3/5CBmYnU1oGoW7fWBFJx3Z2X3BCDq5ETA3GXRMPRh7TFox 5X/51soYNEpl4mW5kT/tkN0CNiMmyL88Wk/9qDF538IpJ4WlxuS4SCyFKwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBSjw1ChB90Vn/vwOqMkSjuPy1QWMB8GA1UdIwQY MBaAFIZKvUNfiZ1XCo5fuDva0RU0Vd7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGtxOVExLUpuVmNLamwtNE85clJGVFJWM3VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zZjEzM2YtMWM4MS00YTRiLWEyNTUt M2UzNjQ2NTkxYWEwLzEvRktQRFVLRUgzUldmLV9BNm95UktPNF9MVkJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zZjEzM2YtMWM4MS00YTRiLWEyNTUtM2UzNjQ2NTkxYWEw LzEvaGtxOVExLUpuVmNLamwtNE85clJGVFJWM3VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGX1cAMA0E AgACMAcDBQAqAPxAMA0GCSqGSIb3DQEBCwUAA4IBAQCdTpun7DsAX6pIhU1TbEIP hZlktHb9+JJcvpFe3ewit8fM5ZAfeHR4zbT5z0LXVgLZTC7haq2gc2cLYGC68JVr hu65WYvYK3hrCqVDyjJCTb2eZlJMdMYIJ+429re0uVkQdzo62WIlR+um7jnHqINs vJIGTSIvEMUXlb0INx8mW0dN4WnLXYJsDCO0aGZ982naySlMKO3Zr9HXTdLenMoh UeyEYa2J/L3/BsrcNcl1UvrDCcScxeb/8TegaXhPRUOV31D05g3+d7ZgNzKf9OHG HKcwWSaZW14XAJZQM5UdwnKB7PLiDIpYzCQenV+xHeEBDWq/UIn0CSObw7p9Xfwj -----END CERTIFICATE-----Generated at Mon Feb 9 18:43:45 2026 by rpki-client