This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/FysDKPC-wZQOa869m-5wi9IwYao.roa File: FysDKPC-wZQOa869m-5wi9IwYao.roa (raw, json) Hash identifier: y1tXX9hX55Ne44LmOYPZ6N2LhWpKhLJJJ0cf+Tumuf8= Subject key identifier: 17:2B:03:28:F0:BE:C1:94:0E:6B:CE:BD:9B:EE:70:8B:D2:30:61:AA Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e Certificate serial: 019B7FF2A841D5A999ED8EA95E5D441B0E1E Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/FysDKPC-wZQOa869m-5wi9IwYao.roa Signing time: Fri 02 Jan 2026 18:22:47 +0000 ROA not before: Fri 02 Jan 2026 18:22:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 2a07:f240::/29 maxlen: 29 2a0b:8440::/29 maxlen: 29 2a0b:a4c0::/29 maxlen: 29 2a0b:b480::/29 maxlen: 29 2a0f:63c0::/29 maxlen: 29 2a0f:89c0::/29 maxlen: 29 2a10:7ac0::/29 maxlen: 29 2a10:a9c0::/29 maxlen: 29 2a13:5040::/29 maxlen: 29 2a13:bd40::/29 maxlen: 29 2a13:bec0::/29 maxlen: 29 2a13:cdc0::/29 maxlen: 29 2a13:d0c0::/29 maxlen: 29 2a13:d140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:a8:41:d5:a9:99:ed:8e:a9:5e:5d:44:1b:0e:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e Validity Not Before: Jan 2 18:22:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=172b0328f0bec1940e6bcebd9bee708bd23061aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:68:17:5e:f8:5a:d4:11:8f:1a:43:cd:ab: 0a:29:11:0b:50:4f:4c:11:ff:ee:bb:f1:18:96:2f: ab:f4:64:91:92:a7:78:f2:18:1f:4f:ec:89:03:85: a4:a8:61:59:4a:cd:5a:66:75:0e:66:63:3d:ef:c7: 14:f1:3c:b2:27:dc:b7:3b:d3:38:da:f4:c1:53:82: b4:9b:a9:5b:31:40:6f:a4:1d:73:b5:fd:83:3d:01: 46:e8:19:a4:78:35:d9:28:6a:9d:1a:17:53:a4:e4: fe:68:9d:66:01:9d:53:cd:e9:2a:c5:91:ff:93:b0: 36:4b:4b:d8:49:3a:85:67:97:68:93:f0:11:8d:07: c3:c8:4d:f9:b8:f7:c7:d0:c1:40:84:33:3e:e7:de: b5:d0:1f:fe:3c:69:50:ae:65:a3:b7:57:fa:f6:79: 8e:ac:2b:bc:d9:52:cd:05:77:43:a9:31:c6:12:74: c3:cc:b1:3b:8c:b9:06:b5:2f:bb:0a:0f:06:6a:8f: 9f:b6:62:90:70:39:34:73:85:49:bd:9b:07:43:8a: 3d:70:57:68:17:3a:48:b6:93:0e:18:16:b3:d1:6e: 47:86:93:c5:d1:2e:0e:06:e6:17:63:f5:10:df:67: 49:80:c3:b1:89:9e:75:9d:81:bf:05:93:a2:27:18: c8:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:2B:03:28:F0:BE:C1:94:0E:6B:CE:BD:9B:EE:70:8B:D2:30:61:AA X509v3 Authority Key Identifier: keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/FysDKPC-wZQOa869m-5wi9IwYao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:f240::/29 2a0b:8440::/29 2a0b:a4c0::/29 2a0b:b480::/29 2a0f:63c0::/29 2a0f:89c0::/29 2a10:7ac0::/29 2a10:a9c0::/29 2a13:5040::/29 2a13:bd40::/29 2a13:bec0::/29 2a13:cdc0::/29 2a13:d0c0::/29 2a13:d140::/29 Signature Algorithm: sha256WithRSAEncryption d3:61:24:fd:1a:c0:81:d3:d5:83:07:bb:3a:aa:8c:0a:9c:6a: 57:c7:fb:68:84:a9:30:b9:11:94:f6:52:40:76:57:22:d8:33: 3f:da:59:c1:f1:57:83:ef:14:33:fe:02:0e:9b:d3:60:6f:bd: e8:ad:e1:a4:93:e4:76:95:4e:21:c7:93:39:45:19:92:e1:ee: 39:47:b6:59:76:e1:06:11:61:46:08:47:52:c9:f5:31:09:65: cd:d5:4d:ec:37:0c:28:cd:73:8e:d5:b6:ff:e3:a0:64:10:d8: 5e:0f:db:86:bb:8e:96:9c:4b:b8:68:ab:33:30:93:71:f8:c3: ba:c1:81:f0:06:9d:00:35:a8:21:89:ad:11:e7:99:49:a8:4f: bb:b3:58:67:c3:32:69:0d:62:07:28:04:0a:8a:de:39:7d:05: 6c:2f:0f:c3:7c:b7:cc:87:51:e0:e4:be:34:83:c7:ea:b0:bd: a6:bc:a6:f9:4c:14:2c:44:97:67:01:f1:94:65:da:90:12:29: a4:b9:19:a7:39:d2:c0:ea:e2:de:6c:0e:ac:28:77:9b:16:e6: 58:64:00:5e:e5:e4:15:2d:9b:a4:20:eb:94:b9:30:3e:a6:69: d6:ba:0d:11:b6:b3:c1:69:9e:9b:9f:af:61:3b:14:66:82:b5: 97:9a:7b:c8 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZt/8qhB1amZ7Y6pXl1EGw4eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0 MWJlOWUwHhcNMjYwMTAyMTgyMjQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzJiMDMyOGYwYmVjMTk0MGU2YmNlYmQ5YmVlNzA4YmQyMzA2MWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhxoF174WtQRjxpDzasKKRELUE9M Ef/uu/EYli+r9GSRkqd48hgfT+yJA4WkqGFZSs1aZnUOZmM978cU8TyyJ9y3O9M4 2vTBU4K0m6lbMUBvpB1ztf2DPQFG6BmkeDXZKGqdGhdTpOT+aJ1mAZ1TzekqxZH/ k7A2S0vYSTqFZ5dok/ARjQfDyE35uPfH0MFAhDM+59610B/+PGlQrmWjt1f69nmO rCu82VLNBXdDqTHGEnTDzLE7jLkGtS+7Cg8Gao+ftmKQcDk0c4VJvZsHQ4o9cFdo FzpItpMOGBaz0W5HhpPF0S4OBuYXY/UQ32dJgMOxiZ51nYG/BZOiJxjItQIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFBcrAyjwvsGUDmvOvZvucIvSMGGqMB8GA1UdIwQY MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct MTFiM2NmM2ZkNGUxLzEvRnlzREtQQy13WlFPYTg2OW0tNXdpOUl3WWFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAAjBiAwUDKgfyQAMF AyoLhEADBQMqC6TAAwUDKgu0gAMFAyoPY8ADBQMqD4nAAwUDKhB6wAMFAyoQqcAD BQMqE1BAAwUDKhO9QAMFAyoTvsADBQMqE83AAwUDKhPQwAMFAyoT0UAwDQYJKoZI hvcNAQELBQADggEBANNhJP0awIHT1YMHuzqqjAqcalfH+2iEqTC5EZT2UkB2VyLY Mz/aWcHxV4PvFDP+Ag6b02Bvveit4aST5HaVTiHHkzlFGZLh7jlHtll24QYRYUYI R1LJ9TEJZc3VTew3DCjNc47Vtv/joGQQ2F4P24a7jpacS7hoqzMwk3H4w7rBgfAG nQA1qCGJrRHnmUmoT7uzWGfDMmkNYgcoBAqK3jl9BWwvD8N8t8yHUeDkvjSDx+qw vaa8pvlMFCxEl2cB8ZRl2pASKaS5Gac50sDq4t5sDqwod5sW5lhkAF7l5BUtm6Qg 65S5MD6mada6DRG2s8Fpnpufr2E7FGaCtZeae8g= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:44 2026 by rpki-client