This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/FPyM8uE4L6Nml7nHO2klAcUhOyU.roa File: FPyM8uE4L6Nml7nHO2klAcUhOyU.roa (raw, json) Hash identifier: dlXbUtTSWpw7O4SezJZ5EEDYXStl7ouFc1E3qpPS7+w= Subject key identifier: 14:FC:8C:F2:E1:38:2F:A3:66:97:B9:C7:3B:69:25:01:C5:21:3B:25 Certificate issuer: /CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a Certificate serial: 019B7FF2A5E55062BE068DB4E89F8A8D0068 Authority key identifier: AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/FPyM8uE4L6Nml7nHO2klAcUhOyU.roa Signing time: Fri 02 Jan 2026 18:22:47 +0000 ROA not before: Fri 02 Jan 2026 18:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210035 IP address blocks: 193.203.227.0/24 maxlen: 24 2a12:7d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.mft rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a5:e5:50:62:be:06:8d:b4:e8:9f:8a:8d:00:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca8ecfee51f68d5f803aae6fbfc1fdc4190262a Validity Not Before: Jan 2 18:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14fc8cf2e1382fa36697b9c73b692501c5213b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:b6:65:ad:ae:32:e3:56:27:b4:0b:05:00: 53:46:38:7e:e0:54:c3:ca:cf:28:2a:1b:3c:30:22: f2:c9:f1:27:b0:38:fd:38:e9:8e:8a:97:5a:12:94: 84:b2:1d:e4:2b:53:45:16:6b:e6:3a:7b:a2:78:0d: 94:98:fe:00:0b:8f:f5:f1:56:3e:a2:30:fe:dc:bd: 2c:33:5e:5e:f7:45:3d:cc:cb:dc:ff:2a:65:c1:f2: b6:d8:a6:92:82:b7:1e:91:a5:d2:5c:02:c1:8d:e6: b3:58:2e:9e:b8:78:58:5b:62:0c:fe:78:9c:df:01: 1d:c7:58:92:11:03:97:02:5f:d8:49:b0:21:7e:e4: a4:28:84:fb:48:2f:c9:2d:7e:e1:dc:c5:3d:fd:b8: c2:96:8c:a1:1e:1e:cc:b0:bb:ac:d7:e3:00:94:77: e7:7a:d4:1e:fd:23:23:34:eb:70:4e:4e:8f:4e:7d: 81:99:8f:b9:3e:2b:8d:fb:d1:a7:14:e9:3f:db:44: 18:87:4e:f0:41:c6:24:c5:21:4a:10:02:c3:bd:34: 88:b9:1f:f0:67:c5:c1:ee:06:36:0c:d7:9b:35:1d: da:cd:16:02:f1:db:c3:63:a1:f0:1c:ad:95:c1:b9: 1c:96:21:fe:0a:3d:f6:7b:92:cd:59:f6:9b:ec:d9: c6:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FC:8C:F2:E1:38:2F:A3:66:97:B9:C7:3B:69:25:01:C5:21:3B:25 X509v3 Authority Key Identifier: keyid:AC:A8:EC:FE:E5:1F:68:D5:F8:03:AA:E6:FB:FC:1F:DC:41:90:26:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKjs_uUfaNX4A6rm-_wf3EGQJio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/FPyM8uE4L6Nml7nHO2klAcUhOyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b09530-9ca0-4407-8a05-bbd7b0aba6ab/1/rKjs_uUfaNX4A6rm-_wf3EGQJio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.203.227.0/24 IPv6: 2a12:7d40::/32 Signature Algorithm: sha256WithRSAEncryption 10:65:81:9b:e6:d9:79:90:b8:fc:77:ce:7e:5f:6f:eb:57:02: 0e:74:c6:6f:80:a1:29:e0:71:17:08:71:fc:a7:7b:3b:b1:ee: fe:ce:f7:4c:ae:73:c1:4d:7c:6c:2b:d2:bd:bc:82:10:4b:62: 0a:f5:a0:ac:f9:4f:d4:de:ea:83:62:9b:9e:ca:b8:28:c0:f5: 5a:6e:37:30:80:8c:4d:01:74:37:66:a7:49:86:66:28:4b:ae: a7:d4:4d:2a:bf:2a:4a:0b:0e:08:03:8f:10:00:d2:58:dd:6a: 94:ac:bd:48:80:49:7a:f6:39:7d:21:ca:24:5c:c9:2c:c8:59: 42:76:8d:6e:68:0b:c7:c8:dc:31:4c:26:20:3a:29:c4:8f:8b: 74:48:ec:ea:13:c0:aa:fd:bd:5f:90:6b:ce:b2:7c:ca:43:be: b7:a3:45:5b:c5:2a:1c:4b:72:69:df:04:b5:93:db:af:32:f7: ed:88:a8:df:2e:6f:c6:66:ef:1f:74:60:63:c7:4b:70:1b:96: 9e:76:92:99:ea:36:eb:11:d5:ec:ac:34:0f:92:0b:3a:db:d2: 8f:48:64:c7:ed:41:29:6d:3e:22:40:fd:7e:46:e1:9e:87:e3: fc:46:be:4d:3c:b7:1f:7b:82:49:96:12:b2:fd:ae:cb:ab:65: 3b:2b:f9:f1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/8qXlUGK+Bo206J+KjQBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYThlY2ZlZTUxZjY4ZDVmODAzYWFlNmZiZmMxZmRjNDE5 MDI2MmEwHhcNMjYwMTAyMTgyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGZjOGNmMmUxMzgyZmEzNjY5N2I5YzczYjY5MjUwMWM1MjEzYjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0e2Za2uMuNWJ7QLBQBTRjh+4FTD ys8oKhs8MCLyyfEnsDj9OOmOipdaEpSEsh3kK1NFFmvmOnuieA2UmP4AC4/18VY+ ojD+3L0sM15e90U9zMvc/yplwfK22KaSgrcekaXSXALBjeazWC6euHhYW2IM/nic 3wEdx1iSEQOXAl/YSbAhfuSkKIT7SC/JLX7h3MU9/bjCloyhHh7MsLus1+MAlHfn etQe/SMjNOtwTk6PTn2BmY+5PiuN+9GnFOk/20QYh07wQcYkxSFKEALDvTSIuR/w Z8XB7gY2DNebNR3azRYC8dvDY6HwHK2VwbkcliH+Cj32e5LNWfab7NnG3QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBT8jPLhOC+jZpe5xztpJQHFITslMB8GA1UdIwQY MBaAFKyo7P7lH2jV+AOq5vv8H9xBkCYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUt YmJkN2IwYWJhNmFiLzEvRlB5TTh1RTRMNk5tbDduSE8ya2xBY1VoT3lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iMDk1MzAtOWNhMC00NDA3LThhMDUtYmJkN2IwYWJhNmFi LzEvcktqc191VWZhTlg0QTZybS1fd2YzRUdRSmlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwcvjMA0E AgACMAcDBQAqEn1AMA0GCSqGSIb3DQEBCwUAA4IBAQAQZYGb5tl5kLj8d85+X2/r VwIOdMZvgKEp4HEXCHH8p3s7se7+zvdMrnPBTXxsK9K9vIIQS2IK9aCs+U/U3uqD YpueyrgowPVabjcwgIxNAXQ3ZqdJhmYoS66n1E0qvypKCw4IA48QANJY3WqUrL1I gEl69jl9IcokXMksyFlCdo1uaAvHyNwxTCYgOinEj4t0SOzqE8Cq/b1fkGvOsnzK Q763o0VbxSocS3Jp3wS1k9uvMvftiKjfLm/GZu8fdGBjx0twG5aedpKZ6jbrEdXs rDQPkgs629KPSGTH7UEpbT4iQP1+RuGeh+P8Rr5NPLcfe4JJlhKy/a7Lq2U7K/nx -----END CERTIFICATE-----Generated at Mon Feb 2 08:03:06 2026 by rpki-client