This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/fcv9CeFZofVzFIT0OS1kEqSLEro.roa File: fcv9CeFZofVzFIT0OS1kEqSLEro.roa (raw, json) Hash identifier: mwt6iTwv8E5A7UEcMz2+LqSnC9Jb0HshexX8iDEURr4= Subject key identifier: 7D:CB:FD:09:E1:59:A1:F5:73:14:84:F4:39:2D:64:12:A4:8B:12:BA Certificate issuer: /CN=a15d9596b7a5ef0889a73971000d12630daca9a6 Certificate serial: 019B797E09D9AE1B3C6669292F1F4A636DE9 Authority key identifier: A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/fcv9CeFZofVzFIT0OS1kEqSLEro.roa Signing time: Thu 01 Jan 2026 12:17:41 +0000 ROA not before: Thu 01 Jan 2026 12:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5421 IP address blocks: 62.44.96.0/19 maxlen: 32 2001:67c:20d0::/47 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.mft rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:09:d9:ae:1b:3c:66:69:29:2f:1f:4a:63:6d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a15d9596b7a5ef0889a73971000d12630daca9a6 Validity Not Before: Jan 1 12:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dcbfd09e159a1f5731484f4392d6412a48b12ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:9a:37:26:95:40:8a:a5:2e:92:50:8a:e1: ca:98:9a:a1:1a:fe:aa:3f:c3:a3:27:c1:12:52:da: 19:1d:dc:6e:4d:9a:fc:91:fa:a3:a6:8c:15:b7:4d: c4:da:d1:c0:8d:ee:07:72:7d:3c:f5:65:0e:7a:99: 7f:98:f7:92:49:50:c6:57:7f:68:fa:8f:b8:c0:dc: 41:3f:a3:cc:69:12:a0:ac:fb:f4:2b:30:32:74:17: 4e:06:26:ab:6a:ee:b2:48:83:c7:61:ee:a8:22:88: a3:5d:6b:4c:03:ba:a5:e0:32:53:9b:ea:56:90:1e: 9a:72:0a:15:64:69:06:8e:d5:b3:3f:10:b4:19:a3: 90:39:bc:0a:db:35:b6:7a:f7:5e:28:04:44:8d:c6: 49:f2:ff:2d:57:61:14:25:42:ee:d1:d1:ff:0d:2a: 3c:92:a4:50:d9:02:b8:bf:5c:7f:f6:31:ed:85:7e: c0:53:cd:1c:f0:b9:aa:41:c7:31:7c:c7:61:43:c3: 63:33:0e:ec:b7:24:d7:cb:76:73:7b:c4:21:45:8c: b4:61:69:9e:56:aa:11:9a:ec:7b:e3:61:a3:4a:ba: 76:8c:a1:d2:0e:6f:15:70:94:c2:54:5f:1a:fd:f7: f9:ea:39:36:7c:2f:da:64:e7:67:6a:05:36:65:bf: e0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CB:FD:09:E1:59:A1:F5:73:14:84:F4:39:2D:64:12:A4:8B:12:BA X509v3 Authority Key Identifier: keyid:A1:5D:95:96:B7:A5:EF:08:89:A7:39:71:00:0D:12:63:0D:AC:A9:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV2Vlrel7wiJpzlxAA0SYw2sqaY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/fcv9CeFZofVzFIT0OS1kEqSLEro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/cf540f-97d6-4142-b603-3112467bbc88/1/oV2Vlrel7wiJpzlxAA0SYw2sqaY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.44.96.0/19 IPv6: 2001:67c:20d0::/47 Signature Algorithm: sha256WithRSAEncryption af:85:86:98:fd:82:04:7c:fc:07:74:bc:7f:66:ba:7d:59:b9: 79:51:d4:57:17:a6:7e:64:55:e4:90:d2:c2:f4:8d:fe:b7:ce: c6:e7:40:de:12:e9:48:e3:99:b4:bf:83:5a:50:92:7a:37:20: 6b:25:92:8d:0e:23:45:2d:14:ea:05:29:9e:98:fc:f9:0c:99: 5e:2a:ec:91:37:3e:8c:89:7c:ba:2c:c8:dc:38:4a:1e:04:d3: 6f:c7:6e:25:d9:4c:a1:2d:72:dd:48:9e:d9:f8:d3:18:93:fe: 1b:80:1f:be:72:27:39:03:7e:c2:99:46:89:5a:a1:85:4a:04: ed:88:d2:ba:05:c9:fe:a4:19:c6:de:3b:37:e9:a0:88:17:dd: 2f:a0:ce:86:4a:d6:25:34:0b:3b:e5:4c:84:e8:18:19:6f:2d: b3:bb:78:44:b6:46:af:27:37:56:b8:96:ae:c2:f6:54:84:5d: dd:6b:19:be:bc:e9:e6:58:67:5e:4e:72:62:a9:f2:6d:0d:c7: c0:1c:4c:e2:b5:1a:89:84:5b:6f:f7:51:14:b8:5c:43:7f:3b: 90:ed:38:9f:65:79:43:20:3f:68:79:87:ff:8f:8c:e6:12:c4: 2d:a9:f9:0c:60:25:28:e6:f9:b4:35:6d:1f:2b:97:1d:6e:28: fe:35:66:40 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fgnZrhs8ZmkpLx9KY23pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGExNWQ5NTk2YjdhNWVmMDg4OWE3Mzk3MTAwMGQxMjYzMGRh Y2E5YTYwHhcNMjYwMTAxMTIxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGNiZmQwOWUxNTlhMWY1NzMxNDg0ZjQzOTJkNjQxMmE0OGIxMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEqaNyaVQIqlLpJQiuHKmJqhGv6q P8OjJ8ESUtoZHdxuTZr8kfqjpowVt03E2tHAje4Hcn089WUOepl/mPeSSVDGV39o +o+4wNxBP6PMaRKgrPv0KzAydBdOBiarau6ySIPHYe6oIoijXWtMA7ql4DJTm+pW kB6acgoVZGkGjtWzPxC0GaOQObwK2zW2evdeKAREjcZJ8v8tV2EUJULu0dH/DSo8 kqRQ2QK4v1x/9jHthX7AU80c8LmqQccxfMdhQ8NjMw7styTXy3Zze8QhRYy0YWme VqoRmux742GjSrp2jKHSDm8VcJTCVF8a/ff56jk2fC/aZOdnagU2Zb/g1QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFH3L/QnhWaH1cxSE9DktZBKkixK6MB8GA1UdIwQY MBaAFKFdlZa3pe8Iiac5cQANEmMNrKmmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb1YyVmxyZWw3d2lKcHpseEFBMFNZdzJzcWFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9jZjU0MGYtOTdkNi00MTQyLWI2MDMt MzExMjQ2N2JiYzg4LzEvZmN2OUNlRlpvZlZ6RklUME9TMWtFcVNMRXJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9jZjU0MGYtOTdkNi00MTQyLWI2MDMtMzExMjQ2N2JiYzg4 LzEvb1YyVmxyZWw3d2lKcHpseEFBMFNZdzJzcWFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQFPixgMA8E AgACMAkDBwEgAQZ8INAwDQYJKoZIhvcNAQELBQADggEBAK+Fhpj9ggR8/Ad0vH9m un1ZuXlR1FcXpn5kVeSQ0sL0jf63zsbnQN4S6UjjmbS/g1pQkno3IGslko0OI0Ut FOoFKZ6Y/PkMmV4q7JE3PoyJfLosyNw4Sh4E02/HbiXZTKEtct1Intn40xiT/huA H75yJzkDfsKZRolaoYVKBO2I0roFyf6kGcbeOzfpoIgX3S+gzoZK1iU0CzvlTITo GBlvLbO7eES2Rq8nN1a4lq7C9lSEXd1rGb686eZYZ15OcmKp8m0Nx8AcTOK1GomE W2/3URS4XEN/O5DtOJ9leUMgP2h5h/+PjOYSxC2p+QxgJSjm+bQ1bR8rlx1uKP41 ZkA= -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:27 2026 by rpki-client