This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/FUcbBOzjjlbY_wlRLYHqupvBQoY.roa File: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (raw, json) Hash identifier: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs= Subject key identifier: 15:47:1B:04:EC:E3:8E:56:D8:FF:09:51:2D:81:EA:BA:9B:C1:42:86 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 019B76EB86FA734B33E83FCBFD2F4ADF87E8 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/FUcbBOzjjlbY_wlRLYHqupvBQoY.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55808 IP address blocks: 46.16.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:86:fa:73:4b:33:e8:3f:cb:fd:2f:4a:df:87:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15471b04ece38e56d8ff09512d81eaba9bc14286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ee:56:71:0a:b2:a9:22:15:b6:22:fa:22:7f: 91:97:a3:87:b4:ba:f2:05:07:e9:cb:34:48:a2:2b: 56:f9:cf:a0:a7:3f:de:a6:df:23:8b:d5:b5:1f:4c: 81:cf:28:80:b9:80:1f:4e:16:1e:41:71:95:51:e8: 7f:10:f3:f9:b8:5b:1a:96:f6:0c:a3:41:3d:b8:58: fa:4f:13:4d:48:5f:80:9d:b8:30:07:34:85:e2:55: 9a:54:b1:0c:97:d1:34:ba:f8:5f:22:22:04:77:31: 99:ac:64:4c:5c:7a:4a:04:71:f1:34:2d:15:4b:2e: 6e:f2:36:f6:50:0d:7e:2c:48:d8:fd:f4:fa:48:b2: 6b:68:79:56:54:c7:ab:2c:69:e1:a0:dc:6e:a5:06: 1d:a5:15:3f:8f:7f:9d:1a:c6:f1:f0:db:0c:65:3c: 9f:14:e7:4d:57:75:8c:8d:c1:94:de:e0:a8:3a:8d: 3f:3c:c1:b1:b4:fe:b3:38:7a:3f:40:8a:93:9b:2a: 5e:5f:78:96:20:55:54:56:b1:6b:9c:7f:e2:3a:91: 2e:84:5a:36:04:58:b3:e9:5e:9f:f7:a5:44:1a:4a: c4:55:db:ba:bf:a6:ae:18:0b:1e:0b:3b:f5:41:52: 15:9c:fa:51:1f:70:aa:11:c4:b4:70:d7:ae:d5:5b: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:47:1B:04:EC:E3:8E:56:D8:FF:09:51:2D:81:EA:BA:9B:C1:42:86 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/FUcbBOzjjlbY_wlRLYHqupvBQoY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.129.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:1d:27:0e:61:1d:1a:36:7c:63:b5:b6:fe:b8:2b:23:2c:e8: ea:fc:34:89:15:16:46:c4:b1:52:8a:71:f3:0f:b4:51:08:ea: 53:63:22:90:1b:42:34:52:53:92:2c:b2:97:f1:3a:b6:98:6a: b0:33:3b:bd:5b:ca:5f:a7:c8:95:92:59:c6:9a:4a:ea:6e:3d: 50:2e:72:68:54:fb:09:80:63:fd:89:96:d1:89:77:b4:65:bc: ee:a2:8e:b4:95:74:f1:a5:12:f0:a9:c2:c6:c5:a3:d8:2e:9c: 66:4b:d6:d8:dc:05:11:46:36:cf:fe:12:7f:bb:82:40:d6:3b: 49:bc:b0:45:c6:4e:d5:d4:6d:63:b0:19:f6:cf:09:79:0e:e0: 71:63:c8:f4:46:9e:43:dc:21:00:20:d4:91:c9:1f:bc:7a:d2: cd:40:ca:73:08:39:2a:70:b0:5a:83:23:01:d6:2f:ce:98:48: 11:35:47:63:46:ed:8e:97:82:f7:98:10:30:97:54:94:71:90: 9d:a0:31:01:7d:da:87:0b:52:98:24:aa:fa:70:fd:f8:c6:0a: d3:2b:43:39:5c:4e:34:3f:1d:d8:a7:32:86:56:dc:5f:f3:71: 97:2f:57:68:29:44:8e:54:b7:91:36:62:4e:fe:f6:c5:35:bd: 0d:ee:b9:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264b6c0sz6D/L/S9K34foMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTQ3MWIwNGVjZTM4ZTU2ZDhmZjA5NTEyZDgxZWFiYTliYzE0Mjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+5WcQqyqSIVtiL6In+Rl6OHtLry BQfpyzRIoitW+c+gpz/ept8ji9W1H0yBzyiAuYAfThYeQXGVUeh/EPP5uFsalvYM o0E9uFj6TxNNSF+AnbgwBzSF4lWaVLEMl9E0uvhfIiIEdzGZrGRMXHpKBHHxNC0V Sy5u8jb2UA1+LEjY/fT6SLJraHlWVMerLGnhoNxupQYdpRU/j3+dGsbx8NsMZTyf FOdNV3WMjcGU3uCoOo0/PMGxtP6zOHo/QIqTmypeX3iWIFVUVrFrnH/iOpEuhFo2 BFiz6V6f96VEGkrEVdu6v6auGAseCzv1QVIVnPpRH3CqEcS0cNeu1Vu3GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBVHGwTs445W2P8JUS2B6rqbwUKGMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvRlVjYkJPempqbGJZX3dsUkxZSHF1cHZCUW9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhCBMA0G CSqGSIb3DQEBCwUAA4IBAQBKHScOYR0aNnxjtbb+uCsjLOjq/DSJFRZGxLFSinHz D7RRCOpTYyKQG0I0UlOSLLKX8Tq2mGqwMzu9W8pfp8iVklnGmkrqbj1QLnJoVPsJ gGP9iZbRiXe0Zbzuoo60lXTxpRLwqcLGxaPYLpxmS9bY3AURRjbP/hJ/u4JA1jtJ vLBFxk7V1G1jsBn2zwl5DuBxY8j0Rp5D3CEAINSRyR+8etLNQMpzCDkqcLBagyMB 1i/OmEgRNUdjRu2Ol4L3mBAwl1SUcZCdoDEBfdqHC1KYJKr6cP34xgrTK0M5XE40 Px3YpzKGVtxf83GXL1doKUSOVLeRNmJO/vbFNb0N7rkh -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:15 2026 by rpki-client