This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/FPBrUaHiw1Xoqa349mDqQP88He8.roa File: FPBrUaHiw1Xoqa349mDqQP88He8.roa (raw, json) Hash identifier: 2Mp4pgNFrHCxPuX5oPFoUH8wMArYm0pR6I+49C7XFsM= Subject key identifier: 14:F0:6B:51:A1:E2:C3:55:E8:A9:AD:F8:F6:60:EA:40:FF:3C:1D:EF Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Certificate serial: 019B7C1285CDAFA39B326DC4C55E03C51EA8 Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/FPBrUaHiw1Xoqa349mDqQP88He8.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 80.66.84.0/24 maxlen: 24 130.49.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:85:cd:af:a3:9b:32:6d:c4:c5:5e:03:c5:1e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0 Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14f06b51a1e2c355e8a9adf8f660ea40ff3c1def Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:15:d4:18:0d:96:d5:7c:68:c6:e8:ed:f9: 42:59:11:81:8b:30:c6:cb:08:5a:74:4b:46:11:6d: 00:ae:a0:fb:c0:0a:50:84:28:c7:33:72:0b:61:29: be:2a:c8:5d:9e:c9:35:4f:02:a5:05:22:79:c6:02: e2:05:52:2f:a3:d2:a2:aa:37:7a:51:46:19:78:94: f1:2e:fb:86:d8:fc:e4:ab:63:d5:1a:55:7a:c9:fb: 50:c2:ad:b5:91:59:07:49:2f:24:43:9c:4c:f3:99: 41:ae:59:b0:f9:9a:f9:a3:a2:bd:61:fd:90:f7:d2: 3d:4b:a9:bc:91:28:a8:21:96:00:89:08:43:cf:67: 38:4c:80:a5:3e:c8:06:74:0f:c0:c6:1e:b8:73:92: b8:cf:8a:8f:dc:e4:20:ad:ca:ae:83:2e:1a:de:26: b7:f7:98:17:25:12:42:32:7f:56:89:31:01:04:7c: ce:07:94:43:21:92:2f:aa:ea:c5:37:52:f4:cd:47: d5:bc:2e:92:2d:00:b6:52:0e:55:d0:c4:c7:db:22: 6e:95:a4:df:b3:8a:76:95:7f:35:d0:75:a9:5b:28: 66:f6:f7:8d:fe:a1:91:ec:85:fd:6c:c9:cb:b7:de: 14:24:db:df:b7:81:f8:11:0a:d1:9f:46:9a:dc:57: f0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:F0:6B:51:A1:E2:C3:55:E8:A9:AD:F8:F6:60:EA:40:FF:3C:1D:EF X509v3 Authority Key Identifier: keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/FPBrUaHiw1Xoqa349mDqQP88He8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.66.84.0/24 130.49.214.0/24 Signature Algorithm: sha256WithRSAEncryption 99:bc:9f:d8:31:e1:5d:68:4c:45:fb:ff:a2:40:cb:b4:77:72: 7e:54:06:7f:50:36:86:35:fb:3e:81:af:30:54:30:36:c2:fe: c4:6e:6a:7b:6c:ca:61:93:f8:ff:29:4a:42:a2:63:10:b4:60: 3a:05:eb:a1:ab:c8:ef:09:8e:16:47:01:14:04:78:e9:74:b0: e8:36:63:27:93:5b:2b:27:f6:dd:b9:7f:ea:04:e3:4e:95:b1: b1:73:13:9c:27:6c:bf:a8:3b:60:bb:7b:17:8c:28:7c:e9:9e: d7:71:f6:9f:55:eb:6b:e8:97:8d:9d:f7:6e:09:01:91:2d:2b: 3f:7c:ca:df:e0:a8:8d:62:e7:00:de:55:b2:32:f4:7e:d5:ec: eb:d9:91:5e:d8:9f:54:fd:11:aa:7e:63:2d:a5:58:f8:3d:05: 95:92:6f:78:df:28:13:06:17:1b:e0:30:48:e1:d7:af:a6:17: 79:90:cc:46:b9:e4:d2:df:98:92:43:3d:c2:c6:74:4f:6f:3d: 05:d4:10:86:6d:28:b1:7c:54:19:be:e6:d4:6c:4f:df:83:6f: ed:21:9f:94:c0:fb:52:7b:0f:f8:f6:7c:51:b1:c8:e5:37:3c: d1:75:38:1a:c7:1f:6b:fb:0b:1b:f5:6b:f8:03:e8:25:26:96: 07:35:03:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EoXNr6ObMm3ExV4DxR6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz YzI4YzAwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGYwNmI1MWExZTJjMzU1ZThhOWFkZjhmNjYwZWE0MGZmM2MxZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiMV1BgNltV8aMbo7flCWRGBizDG ywhadEtGEW0ArqD7wApQhCjHM3ILYSm+Kshdnsk1TwKlBSJ5xgLiBVIvo9Kiqjd6 UUYZeJTxLvuG2Pzkq2PVGlV6yftQwq21kVkHSS8kQ5xM85lBrlmw+Zr5o6K9Yf2Q 99I9S6m8kSioIZYAiQhDz2c4TIClPsgGdA/Axh64c5K4z4qP3OQgrcqugy4a3ia3 95gXJRJCMn9WiTEBBHzOB5RDIZIvqurFN1L0zUfVvC6SLQC2Ug5V0MTH2yJulaTf s4p2lX810HWpWyhm9veN/qGR7IX9bMnLt94UJNvft4H4EQrRn0aa3Ffw8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBTwa1Gh4sNV6Kmt+PZg6kD/PB3vMB8GA1UdIwQY MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt YThkMzYxY2U2NGFhLzEvRlBCclVhSGl3MVhvcWEzNDltRHFRUDg4SGU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEJUAwQA gjHWMA0GCSqGSIb3DQEBCwUAA4IBAQCZvJ/YMeFdaExF+/+iQMu0d3J+VAZ/UDaG Nfs+ga8wVDA2wv7Ebmp7bMphk/j/KUpComMQtGA6Beuhq8jvCY4WRwEUBHjpdLDo NmMnk1srJ/bduX/qBONOlbGxcxOcJ2y/qDtgu3sXjCh86Z7XcfafVetr6JeNnfdu CQGRLSs/fMrf4KiNYucA3lWyMvR+1ezr2ZFe2J9U/RGqfmMtpVj4PQWVkm943ygT Bhcb4DBI4devphd5kMxGueTS35iSQz3CxnRPbz0F1BCGbSixfFQZvubUbE/fg2/t IZ+UwPtSew/49nxRscjlNzzRdTgaxx9r+wsb9Wv4A+glJpYHNQOc -----END CERTIFICATE-----Generated at Mon Jan 19 18:00:54 2026 by rpki-client