This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/FwbsSA-LLYDwJveOiIwWRQL8O4A.roa File: FwbsSA-LLYDwJveOiIwWRQL8O4A.roa (raw, json) Hash identifier: LZ4xTrrdN0a7so3riKKQBkOHl1SW+eGzBvkpE5DQJok= Subject key identifier: 17:06:EC:48:0F:8B:2D:80:F0:26:F7:8E:88:8C:16:45:02:FC:3B:80 Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B7A5B8F444141123AC1C061D0A6B8EE3C Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/FwbsSA-LLYDwJveOiIwWRQL8O4A.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 159.254.52.0/24 maxlen: 24 159.254.53.0/24 maxlen: 24 159.254.104.0/21 maxlen: 24 159.254.112.0/21 maxlen: 24 159.254.120.0/21 maxlen: 24 159.254.128.0/21 maxlen: 24 159.254.136.0/21 maxlen: 24 159.254.144.0/21 maxlen: 24 159.254.152.0/21 maxlen: 24 159.254.160.0/21 maxlen: 24 159.254.168.0/21 maxlen: 24 2a03:eec0:3701::/48 maxlen: 48 2a03:eec0:3702::/48 maxlen: 48 2a03:eec0:3703::/48 maxlen: 48 2a03:eec0:3704::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8f:44:41:41:12:3a:c1:c0:61:d0:a6:b8:ee:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1706ec480f8b2d80f026f78e888c164502fc3b80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0a:d8:75:96:1f:0a:55:45:5f:af:78:76:59: 29:d1:98:2a:cf:42:3b:09:d0:68:6e:56:08:ba:a5: 0c:f7:93:86:e7:90:d9:30:d2:76:31:22:1e:08:8d: 7f:e6:f9:77:a4:50:3b:27:55:99:e1:b2:98:50:ad: 96:71:e5:25:73:1d:fc:10:c4:10:a4:7b:45:bb:36: dd:de:0f:c0:40:80:9b:b9:7a:54:80:29:cd:2e:b3: cb:cf:2b:fd:78:c7:1c:fa:21:11:bf:48:ec:83:f7: bc:f7:08:d7:6d:1a:6e:9a:1f:ba:69:ed:82:ef:70: 79:19:89:95:3a:98:2d:27:76:df:c8:63:2f:38:ed: 15:9e:22:fd:25:3c:64:3f:71:57:04:13:2a:98:0d: 62:eb:ce:ea:e6:99:d0:ad:5d:d0:10:0c:5a:7f:04: bb:51:5e:5d:d5:72:4b:48:af:41:4a:3f:99:ce:8d: 7c:69:a3:df:09:23:fe:9a:de:8f:be:68:74:0b:38: 74:bb:17:94:b7:08:d4:0f:e4:21:9a:ce:e6:4a:2e: 8d:87:ff:b1:4d:d5:40:b3:33:f0:6a:b2:50:f7:4e: a6:72:a3:46:e3:a9:ba:f4:c2:45:e5:b6:ea:41:b5: 3b:84:6a:a5:54:44:f5:8b:87:15:7d:4c:4d:e3:16: 0c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:06:EC:48:0F:8B:2D:80:F0:26:F7:8E:88:8C:16:45:02:FC:3B:80 X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/FwbsSA-LLYDwJveOiIwWRQL8O4A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 159.254.52.0/23 159.254.104.0-159.254.175.255 IPv6: 2a03:eec0:3701::-2a03:eec0:3704:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 41:8b:61:45:c8:23:62:20:2e:89:88:b2:38:6b:93:b0:8c:9a: f3:be:55:a3:d1:1b:40:eb:d6:11:22:8b:31:e9:55:48:e7:32: 2e:a0:85:22:90:4a:a1:da:4f:2e:22:94:11:d6:3f:85:9e:cd: 02:9f:c4:7d:8f:c0:c6:45:c5:d4:01:e5:a3:c6:ea:01:37:ee: 34:75:d0:1d:3f:17:3b:ae:1b:fa:ea:11:73:b9:df:ab:df:61: dd:1d:c0:a3:20:f7:83:ea:fd:e6:59:69:f8:3b:2b:7b:c0:43: 74:b7:f1:7e:a0:77:a3:9e:6d:54:fd:dc:aa:0c:30:55:27:2e: e3:61:17:cc:99:d4:38:4e:6c:a6:70:b7:52:e2:4b:5d:b9:bb: 58:32:1d:67:f7:ab:25:96:6c:63:9c:ed:58:a4:98:a2:1c:6c: 0b:83:c2:5d:c7:28:0b:03:2e:c2:57:bc:2e:fa:4c:58:4f:ba: 4d:2e:64:6f:f9:48:74:52:a5:e8:3d:2b:9f:34:42:4b:ad:cf: d0:8a:43:91:84:52:ba:47:21:d1:eb:5a:83:b8:fc:4e:cc:52: d2:e8:a0:85:ab:03:c3:26:eb:cd:3a:52:8c:84:f7:c6:a1:f0: a8:82:29:cd:e6:0c:5b:e1:5d:d8:83:9c:02:ec:c0:97:48:dd: 97:22:5f:9f -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt6W49EQUESOsHAYdCmuO48MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzA2ZWM0ODBmOGIyZDgwZjAyNmY3OGU4ODhjMTY0NTAyZmMzYjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wrYdZYfClVFX694dlkp0Zgqz0I7 CdBoblYIuqUM95OG55DZMNJ2MSIeCI1/5vl3pFA7J1WZ4bKYUK2WceUlcx38EMQQ pHtFuzbd3g/AQICbuXpUgCnNLrPLzyv9eMcc+iERv0jsg/e89wjXbRpumh+6ae2C 73B5GYmVOpgtJ3bfyGMvOO0VniL9JTxkP3FXBBMqmA1i687q5pnQrV3QEAxafwS7 UV5d1XJLSK9BSj+Zzo18aaPfCSP+mt6Pvmh0Czh0uxeUtwjUD+Qhms7mSi6Nh/+x TdVAszPwarJQ906mcqNG46m69MJF5bbqQbU7hGqlVET1i4cVfUxN4xYMAwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFBcG7EgPiy2A8Cb3joiMFkUC/DuAMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvRndic1NBLUxMWUR3SnZlT2lJd1dSUUw4TzRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODAaBAIAATAUAwQBn/40MAwD BAOf/mgDBASf/qAwGgQCAAIwFDASAwcAKgPuwDcBAwcAKgPuwDcEMA0GCSqGSIb3 DQEBCwUAA4IBAQBBi2FFyCNiIC6JiLI4a5OwjJrzvlWj0RtA69YRIosx6VVI5zIu oIUikEqh2k8uIpQR1j+Fns0Cn8R9j8DGRcXUAeWjxuoBN+40ddAdPxc7rhv66hFz ud+r32HdHcCjIPeD6v3mWWn4Oyt7wEN0t/F+oHejnm1U/dyqDDBVJy7jYRfMmdQ4 TmymcLdS4ktdubtYMh1n96sllmxjnO1YpJiiHGwLg8JdxygLAy7CV7wu+kxYT7pN LmRv+Uh0UqXoPSufNEJLrc/QikORhFK6RyHR61qDuPxOzFLS6KCFqwPDJuvNOlKM hPfGofCoginN5gxb4V3Yg5wC7MCXSN2XIl+f -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:11 2026 by rpki-client