This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa File: FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa (raw, json) Hash identifier: 6lS73JUDNo7BbYfLMWtS8VyH4+hvb7PzpHKXOKKSc8o= Subject key identifier: 14:23:AA:17:FB:10:46:04:01:25:44:59:C3:3E:4B:4B:26:8E:8C:9F Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Certificate serial: 019B7B36B170F0E08530C66515CE79711C82 Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.136.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b1:70:f0:e0:85:30:c6:65:15:ce:79:71:1c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1423aa17fb10460401254459c33e4b4b268e8c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:02:74:7c:64:e8:d2:7a:1b:28:e1:07:ed:fc: 6c:0d:4d:86:de:ee:d8:fd:30:df:96:01:ea:7e:aa: 30:bb:4a:1a:94:5e:f1:ee:65:f6:39:ca:68:2f:34: 01:9a:ee:38:48:95:18:14:20:23:7d:42:65:35:77: 5d:f1:b7:c4:b2:3e:71:ba:94:ab:a1:0f:f8:15:4b: 1d:f6:c8:1d:0f:67:92:9f:b2:26:a4:6e:70:61:73: ec:8c:05:b2:2b:c8:80:f7:5a:26:57:ad:b2:cf:8c: a0:f1:18:35:9e:db:19:92:27:d7:36:01:ca:d4:ef: 49:ce:5e:52:68:1c:33:f6:24:70:8f:4d:79:d0:4f: 8d:85:35:c9:f7:d8:9e:ea:a6:a1:e6:1b:c1:8e:70: db:e6:f4:b3:94:f5:65:40:41:d1:ec:98:f7:ef:6b: 4b:d6:7d:f6:da:0b:44:23:14:8b:0f:c6:91:f9:b1: 43:5a:22:ea:23:b5:b4:3f:48:de:b3:8f:1c:9e:08: 36:c9:79:73:c6:60:e5:1b:d5:7b:b8:19:29:7f:ed: 71:ae:1f:bd:b2:a6:a8:1b:26:51:9a:81:f9:f4:e0: ae:07:b7:19:34:e5:2a:e5:b6:de:ee:56:d4:ad:fe: 95:47:e7:0b:96:7d:10:6f:2a:88:23:6b:77:86:7d: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:23:AA:17:FB:10:46:04:01:25:44:59:C3:3E:4B:4B:26:8E:8C:9F X509v3 Authority Key Identifier: keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/FCOqF_sQRgQBJURZwz5LSyaOjJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.240.0/22 Signature Algorithm: sha256WithRSAEncryption 04:2d:bf:47:99:1e:43:15:32:58:c3:1a:4e:15:e1:7c:87:b1: ca:af:4b:c5:92:0a:1d:01:89:01:81:0f:9b:fc:6b:62:ca:18: 2d:86:0e:36:f7:62:ca:3d:1d:8d:8c:2e:8e:7d:fd:ff:fe:fc: 1d:f7:26:be:47:5f:e5:6f:50:7b:67:d9:1e:fa:46:35:37:d3: 29:1c:29:da:e4:6d:25:d5:a9:e6:26:2e:f0:04:13:81:c3:fa: db:bb:58:52:d2:94:a4:d3:b3:50:d0:eb:22:61:22:4f:78:61: dd:d4:ae:af:cd:5e:e8:9a:45:9d:79:80:0a:7b:e7:93:31:b8: bc:cd:1a:dc:85:4a:0f:02:58:8b:ca:6d:56:1a:32:5b:95:20: 63:d9:74:8f:a5:c5:5c:46:41:33:9f:c6:d3:71:24:0d:76:95: 59:b1:40:2c:1f:da:f6:97:36:14:6a:97:3b:2c:93:e1:b5:a2: 9e:d0:ae:23:4a:b5:5e:21:5b:56:e0:20:20:2f:73:67:27:2d: 93:3f:c3:41:43:86:c2:96:01:f0:ae:2c:d6:3c:21:04:2d:d7: 0b:9a:6f:1f:6a:35:fd:e4:8a:ae:dc:c8:03:cc:fa:4b:f3:5c: ac:7d:e9:dd:8f:bd:ce:da:b6:5c:6a:3e:f2:51:a5:a2:18:e4: fb:93:75:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NrFw8OCFMMZlFc55cRyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjE5ZWIwZGQ0OGUxYjI0OTI0OTA4YmI1YjY4NDhjYzE2 Nzg1NDYwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDIzYWExN2ZiMTA0NjA0MDEyNTQ0NTljMzNlNGI0YjI2OGU4YzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AJ0fGTo0nobKOEH7fxsDU2G3u7Y /TDflgHqfqowu0oalF7x7mX2OcpoLzQBmu44SJUYFCAjfUJlNXdd8bfEsj5xupSr oQ/4FUsd9sgdD2eSn7ImpG5wYXPsjAWyK8iA91omV62yz4yg8Rg1ntsZkifXNgHK 1O9Jzl5SaBwz9iRwj0150E+NhTXJ99ie6qah5hvBjnDb5vSzlPVlQEHR7Jj372tL 1n322gtEIxSLD8aR+bFDWiLqI7W0P0jes48cngg2yXlzxmDlG9V7uBkpf+1xrh+9 sqaoGyZRmoH59OCuB7cZNOUq5bbe7lbUrf6VR+cLln0QbyqII2t3hn0WWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBQjqhf7EEYEASVEWcM+S0smjoyfMB8GA1UdIwQY MBaAFLXxnrDdSOGySSSQi7W2hIzBZ4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQt MzVjNjZkN2M1MjYwLzEvRkNPcUZfc1FSZ1FCSlVSWnd6NUxTeWFPako4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQtMzVjNjZkN2M1MjYw LzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYjwMA0G CSqGSIb3DQEBCwUAA4IBAQAELb9HmR5DFTJYwxpOFeF8h7HKr0vFkgodAYkBgQ+b /Gtiyhgthg4292LKPR2NjC6Off3//vwd9ya+R1/lb1B7Z9ke+kY1N9MpHCna5G0l 1anmJi7wBBOBw/rbu1hS0pSk07NQ0OsiYSJPeGHd1K6vzV7omkWdeYAKe+eTMbi8 zRrchUoPAliLym1WGjJblSBj2XSPpcVcRkEzn8bTcSQNdpVZsUAsH9r2lzYUapc7 LJPhtaKe0K4jSrVeIVtW4CAgL3NnJy2TP8NBQ4bClgHwrizWPCEELdcLmm8fajX9 5Iqu3MgDzPpL81ysfendj73O2rZcaj7yUaWiGOT7k3WK -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:10 2026 by rpki-client