This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/FD-L71vOa8KLs_76ysrN9aQ0pzM.roa File: FD-L71vOa8KLs_76ysrN9aQ0pzM.roa (raw, json) Hash identifier: noRO8/x+O1Zr80AJy00hkuf+fSAmumdFD5w61Of+JBo= Subject key identifier: 14:3F:8B:EF:5B:CE:6B:C2:8B:B3:FE:FA:CA:CA:CD:F5:A4:34:A7:33 Certificate issuer: /CN=67415cba22e331ada91ff4dc6688e5fa0af45769 Certificate serial: 019B7C7F55DE3C98F5CAA72213CD1A0114FF Authority key identifier: 67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/FD-L71vOa8KLs_76ysrN9aQ0pzM.roa Signing time: Fri 02 Jan 2026 02:17:58 +0000 ROA not before: Fri 02 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41090 IP address blocks: 194.62.174.0/24 maxlen: 24 194.62.188.0/24 maxlen: 24 194.62.233.0/24 maxlen: 24 194.69.206.0/24 maxlen: 24 2a0f:ad40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:55:de:3c:98:f5:ca:a7:22:13:cd:1a:01:14:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67415cba22e331ada91ff4dc6688e5fa0af45769 Validity Not Before: Jan 2 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=143f8bef5bce6bc28bb3fefacacacdf5a434a733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:61:26:ac:96:82:89:a3:ec:28:48:21:fd:55: 1a:fc:43:3d:f5:f4:5c:94:1b:a3:29:b4:83:1e:72: 61:d2:3b:6e:97:40:62:fc:47:af:82:59:27:e2:fe: 50:ea:c4:6b:05:e3:f7:a9:8a:b5:6f:41:ab:1a:fa: 71:a7:20:e5:bd:c9:8c:0b:51:69:0a:39:dc:51:9c: 39:d5:e3:18:d6:cc:f9:a0:25:1c:50:a6:af:4c:4e: 71:27:b7:3f:1b:af:42:35:47:77:ee:f9:44:5d:88: ec:4d:d0:78:1f:4c:3e:ed:35:f8:d0:81:7a:32:69: 7d:71:fa:0b:c4:47:8d:1c:70:7b:f5:5e:2f:59:0e: 73:cb:5c:0b:57:4d:0b:4b:12:d8:a0:8f:16:64:1c: 6e:88:a8:57:b9:28:63:bb:6b:80:58:0b:81:52:9c: 81:d2:07:88:77:b5:9c:95:35:8b:17:b4:13:c6:5c: b7:89:70:6c:2d:c6:a0:a5:7e:f6:ee:2e:5d:15:b3: b1:5a:e4:77:5d:84:32:25:b6:cf:28:65:b7:84:bd: 6e:db:10:f9:57:9f:e0:d1:ad:61:a3:92:e1:70:3d: e2:9e:59:de:0e:43:d1:03:9f:cb:cb:22:e7:63:e8: a4:9a:bb:e7:9b:a5:1a:46:ff:20:9e:82:3d:6c:ec: 5e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3F:8B:EF:5B:CE:6B:C2:8B:B3:FE:FA:CA:CA:CD:F5:A4:34:A7:33 X509v3 Authority Key Identifier: keyid:67:41:5C:BA:22:E3:31:AD:A9:1F:F4:DC:66:88:E5:FA:0A:F4:57:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0FcuiLjMa2pH_TcZojl-gr0V2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/FD-L71vOa8KLs_76ysrN9aQ0pzM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0c3b-a969-4847-bd02-66643e0663df/1/Z0FcuiLjMa2pH_TcZojl-gr0V2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.174.0/24 194.62.188.0/24 194.62.233.0/24 194.69.206.0/24 IPv6: 2a0f:ad40::/32 Signature Algorithm: sha256WithRSAEncryption 6e:81:f6:d3:99:c4:1c:b4:8d:a7:45:f0:d5:55:f5:82:ae:0f: fa:49:ce:00:a4:20:4d:18:64:45:7e:ed:82:c2:c1:b5:b7:39: c5:e6:75:20:a6:ec:ca:d3:8a:a6:66:de:3e:4c:80:99:fe:9e: 4b:3c:49:a9:36:1e:e4:9b:09:c4:fd:6a:39:b9:91:69:60:ac: 10:a9:7c:c7:8b:06:2c:2e:4d:7c:f1:64:fd:34:44:28:0c:03: 69:af:4f:97:46:cf:d5:c6:b0:d5:3d:60:14:18:29:6d:58:e1: 2b:a0:38:96:ce:e1:89:8b:1f:62:a0:56:4f:80:0b:69:c9:a0: bd:0e:c9:47:3a:da:e3:f0:da:0c:63:0e:4e:11:ed:9c:9d:8d: c9:10:6b:60:26:62:69:b2:c5:03:d3:d6:b9:e2:d5:6b:07:1d: 29:20:03:28:9d:69:9f:4c:41:da:d8:1c:7c:09:3d:44:7b:a2: d6:df:c7:ce:87:95:a4:10:0e:f0:c7:c4:ea:3b:a6:86:b5:d5: 4a:8f:7e:1c:75:72:65:a6:19:8e:e9:44:98:74:bf:74:74:28: e6:e8:a7:f6:5c:39:54:a1:6e:59:a0:0c:4d:56:fd:b7:99:ba: ee:b1:f1:3a:85:f9:42:7a:da:71:20:0d:8e:7a:eb:41:47:3f: 15:6c:35:52 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8f1XePJj1yqciE80aART/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDE1Y2JhMjJlMzMxYWRhOTFmZjRkYzY2ODhlNWZhMGFm NDU3NjkwHhcNMjYwMTAyMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDNmOGJlZjViY2U2YmMyOGJiM2ZlZmFjYWNhY2RmNWE0MzRhNzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWEmrJaCiaPsKEgh/VUa/EM99fRc lBujKbSDHnJh0jtul0Bi/Eevglkn4v5Q6sRrBeP3qYq1b0GrGvpxpyDlvcmMC1Fp CjncUZw51eMY1sz5oCUcUKavTE5xJ7c/G69CNUd37vlEXYjsTdB4H0w+7TX40IF6 Mml9cfoLxEeNHHB79V4vWQ5zy1wLV00LSxLYoI8WZBxuiKhXuShju2uAWAuBUpyB 0geId7WclTWLF7QTxly3iXBsLcagpX727i5dFbOxWuR3XYQyJbbPKGW3hL1u2xD5 V5/g0a1ho5LhcD3inlneDkPRA5/LyyLnY+ikmrvnm6UaRv8gnoI9bOxeHQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFBQ/i+9bzmvCi7P++srKzfWkNKczMB8GA1UdIwQY MBaAFGdBXLoi4zGtqR/03GaI5foK9FdpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jYTBjM2ItYTk2OS00ODQ3LWJkMDIt NjY2NDNlMDY2M2RmLzEvRkQtTDcxdk9hOEtMc183Nnlzck45YVEwcHpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9jYTBjM2ItYTk2OS00ODQ3LWJkMDItNjY2NDNlMDY2M2Rm LzEvWjBGY3VpTGpNYTJwSF9UY1pvamwtZ3IwVjJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAwj6uAwQA wj68AwQAwj7pAwQAwkXOMA0EAgACMAcDBQAqD61AMA0GCSqGSIb3DQEBCwUAA4IB AQBugfbTmcQctI2nRfDVVfWCrg/6Sc4ApCBNGGRFfu2CwsG1tznF5nUgpuzK04qm Zt4+TICZ/p5LPEmpNh7kmwnE/Wo5uZFpYKwQqXzHiwYsLk188WT9NEQoDANpr0+X Rs/VxrDVPWAUGCltWOEroDiWzuGJix9ioFZPgAtpyaC9DslHOtrj8NoMYw5OEe2c nY3JEGtgJmJpssUD09a54tVrBx0pIAMonWmfTEHa2Bx8CT1Ee6LW38fOh5WkEA7w x8TqO6aGtdVKj34cdXJlphmO6USYdL90dCjm6Kf2XDlUoW5ZoAxNVv23mbrusfE6 hflCetpxIA2OeutBRz8VbDVS -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:38 2026 by rpki-client