This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa File: FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa (raw, json) Hash identifier: 0UT4BMzVy0MhF6zVNibE40BOm7AXKt6Q7+fr4Nz5duo= Subject key identifier: 15:80:7E:8B:9A:78:D7:0D:D8:26:90:B7:0E:3D:50:A5:FA:75:AA:E7 Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511 Certificate serial: 019B7DCAF2FC1BEA434E54E993FCF522EF27 Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa Signing time: Fri 02 Jan 2026 08:20:11 +0000 ROA not before: Fri 02 Jan 2026 08:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50902 IP address blocks: 2a0f:fc80::/32 maxlen: 32 2a0f:fc81::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:f2:fc:1b:ea:43:4e:54:e9:93:fc:f5:22:ef:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511 Validity Not Before: Jan 2 08:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15807e8b9a78d70dd82690b70e3d50a5fa75aae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d9:aa:b2:64:68:b6:26:bd:f6:2b:b9:7e:00: e9:fc:16:ef:62:df:28:6e:d9:ec:2d:9a:a0:f9:d1: ab:50:b4:f7:c0:9f:97:4b:f8:e6:b5:d3:04:90:0f: 3e:e6:48:79:b0:b4:38:6c:e3:fa:32:bf:7d:e9:25: fd:c8:18:66:17:1d:6a:02:77:3e:9f:e1:15:4f:02: 8d:70:51:2d:1a:22:77:c9:5d:d5:48:d4:21:13:f9: d2:ae:3e:4b:db:11:29:89:5a:c0:1b:36:00:99:5c: e5:b7:9a:38:28:df:cc:22:f5:84:54:f9:17:3d:bd: 5c:58:00:73:51:c2:ba:b5:5d:0c:41:bc:07:9b:40: 80:3e:7b:c6:2c:e4:e0:92:22:22:d7:5a:55:55:82: bc:46:34:0d:3b:a7:ee:46:15:4c:e2:2e:83:7e:d9: d2:80:f7:ec:be:50:e0:81:35:0f:4c:aa:ad:62:c3: c8:df:ec:51:7c:22:65:ef:98:13:79:01:32:02:47: b2:cb:d2:85:57:4b:20:0c:65:22:dd:28:e0:36:f8: 27:6e:52:be:14:a0:9b:c9:63:cd:83:dd:f8:ae:47: cd:b0:f2:55:9f:a4:63:53:df:ae:89:73:ff:ae:38: 8c:cc:1a:07:5d:f8:25:d5:9d:48:d6:c4:89:f6:61: a3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:80:7E:8B:9A:78:D7:0D:D8:26:90:B7:0E:3D:50:A5:FA:75:AA:E7 X509v3 Authority Key Identifier: keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/FYB-i5p41w3YJpC3Dj1Qpfp1quc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:fc80::/31 Signature Algorithm: sha256WithRSAEncryption 2d:ba:65:62:e3:d2:66:67:2d:2f:65:9a:ea:e7:10:b4:c2:d4: 33:6a:c4:c7:1f:2b:e3:52:81:fe:0a:37:70:e6:2b:95:b6:d6: b9:7e:54:71:7e:60:c9:ad:fa:2d:9c:fc:76:bb:32:50:62:9d: de:c0:be:27:4a:6f:48:fa:b1:fd:a6:17:8a:ab:a8:cc:73:0b: 27:c1:17:e4:eb:b8:ba:21:06:a8:0a:44:a4:2d:3e:78:2b:45: cb:39:1b:7a:21:d2:2c:41:bf:d7:fa:b3:d1:15:90:37:ef:a2: 07:4d:a1:ce:66:bd:6f:bd:d5:f8:1e:21:15:a6:09:5c:d7:d3: 33:5a:f2:21:b9:52:91:d8:ed:eb:9d:7a:6a:6d:37:83:a9:24: fc:f5:5d:32:7b:b2:f0:d8:17:16:a4:ee:ce:d4:55:a6:51:be: 69:5c:87:8d:96:fe:f4:67:2e:f2:e0:71:6f:f6:95:85:1c:dc: aa:6c:d5:87:2e:03:71:64:bb:8e:cd:b2:e4:a4:5f:08:14:f2: 05:1b:63:d2:b7:df:1e:5e:c2:d3:fe:c9:ab:7f:53:7f:4c:49: 21:63:cb:84:95:77:48:92:97:4c:4e:2c:05:0f:c3:5b:6c:12: 68:03:7a:10:b2:5c:18:02:7e:61:4a:ec:20:cb:64:66:c3:57: 7c:e1:0e:ce -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yvL8G+pDTlTpk/z1Iu8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl OGM1MTEwHhcNMjYwMTAyMDgyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTgwN2U4YjlhNzhkNzBkZDgyNjkwYjcwZTNkNTBhNWZhNzVhYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNmqsmRotia99iu5fgDp/BbvYt8o btnsLZqg+dGrULT3wJ+XS/jmtdMEkA8+5kh5sLQ4bOP6Mr996SX9yBhmFx1qAnc+ n+EVTwKNcFEtGiJ3yV3VSNQhE/nSrj5L2xEpiVrAGzYAmVzlt5o4KN/MIvWEVPkX Pb1cWABzUcK6tV0MQbwHm0CAPnvGLOTgkiIi11pVVYK8RjQNO6fuRhVM4i6DftnS gPfsvlDggTUPTKqtYsPI3+xRfCJl75gTeQEyAkeyy9KFV0sgDGUi3SjgNvgnblK+ FKCbyWPNg934rkfNsPJVn6RjU9+uiXP/rjiMzBoHXfgl1Z1I1sSJ9mGj2QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBWAfouaeNcN2CaQtw49UKX6darnMB8GA1UdIwQY MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct OTY4NTU1NTE5MGM0LzEvRllCLWk1cDQxdzNZSnBDM0RqMVFwZnAxcXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0 LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUBKg/8gDAN BgkqhkiG9w0BAQsFAAOCAQEALbplYuPSZmctL2Wa6ucQtMLUM2rExx8r41KB/go3 cOYrlbbWuX5UcX5gya36LZz8drsyUGKd3sC+J0pvSPqx/aYXiquozHMLJ8EX5Ou4 uiEGqApEpC0+eCtFyzkbeiHSLEG/1/qz0RWQN++iB02hzma9b73V+B4hFaYJXNfT M1ryIblSkdjt6516am03g6kk/PVdMnuy8NgXFqTuztRVplG+aVyHjZb+9Gcu8uBx b/aVhRzcqmzVhy4DcWS7js2y5KRfCBTyBRtj0rffHl7C0/7Jq39Tf0xJIWPLhJV3 SJKXTE4sBQ/DW2wSaAN6ELJcGAJ+YUrsIMtkZsNXfOEOzg== -----END CERTIFICATE-----Generated at Tue Feb 10 02:24:50 2026 by rpki-client