This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/fcl-EttwXxzdVTjzavFgoRNlwJI.roa File: fcl-EttwXxzdVTjzavFgoRNlwJI.roa (raw, json) Hash identifier: aFrd+hEOx0zldgqlIlCbagrbwCzJhdbfMgtfzgPtR+o= Subject key identifier: 7D:C9:7E:12:DB:70:5F:1C:DD:55:38:F3:6A:F1:60:A1:13:65:C0:92 Certificate issuer: /CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79 Certificate serial: 019B7EA73539B0BDFC46DCAA20ADB6C23F35 Authority key identifier: 4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/fcl-EttwXxzdVTjzavFgoRNlwJI.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212998 IP address blocks: 2001:678:dd4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.mft rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:35:39:b0:bd:fc:46:dc:aa:20:ad:b6:c2:3f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4bfc5a29410f1ffcf4de2a5a7058f51620b30b79 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dc97e12db705f1cdd5538f36af160a11365c092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e8:b5:3f:7f:e5:df:9f:1b:16:d0:a2:32:8e: e4:a4:d1:32:7e:ed:be:8d:e1:03:7c:32:fc:af:b0: f2:50:09:a4:a3:8c:99:23:31:50:4c:c6:14:ff:64: ca:ed:e9:44:0b:a2:68:2b:b0:b1:bd:1b:6c:00:0b: 2f:40:e6:41:be:e1:9c:8a:86:78:d3:68:ce:f5:8d: 20:4c:6d:dd:ae:78:3d:80:84:5a:34:7e:be:43:d9: 17:b3:ca:fc:9a:bb:83:88:46:71:09:d0:07:42:73: b7:dc:b4:d6:ca:57:74:54:0e:fe:c9:44:8c:e5:38: b2:40:82:76:05:46:c2:aa:16:16:00:53:fd:33:f3: 5d:c9:56:70:78:1d:68:a9:fb:5f:4f:27:5c:af:6d: 8f:d0:f7:0c:bf:e3:b9:5f:fd:c8:0e:71:d3:f7:9d: e3:71:64:84:27:ea:92:4c:e9:66:fe:b0:bd:43:ea: 07:f5:43:ed:0a:c7:30:25:b0:5b:ec:a0:40:0f:68: 5c:c5:08:a5:10:a0:68:b3:8e:07:53:d8:03:65:9a: 8d:0d:dd:16:7d:a1:5b:a9:58:e3:d9:ef:ba:b0:c3: 91:c4:0f:19:ea:29:e1:e8:fc:28:c8:58:52:4f:62: 0f:13:5c:a3:f3:aa:16:12:fb:b1:72:92:f7:f6:af: b7:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C9:7E:12:DB:70:5F:1C:DD:55:38:F3:6A:F1:60:A1:13:65:C0:92 X509v3 Authority Key Identifier: keyid:4B:FC:5A:29:41:0F:1F:FC:F4:DE:2A:5A:70:58:F5:16:20:B3:0B:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S_xaKUEPH_z03ipacFj1FiCzC3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/fcl-EttwXxzdVTjzavFgoRNlwJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b2bfd-60eb-4cbf-9f7f-136257e3076e/1/S_xaKUEPH_z03ipacFj1FiCzC3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:678:dd4::/48 Signature Algorithm: sha256WithRSAEncryption 35:2b:6e:2f:1d:30:ae:65:b0:06:32:80:96:d1:39:d9:4e:37: 77:63:19:04:7f:30:9f:d5:c0:50:c5:d8:32:b5:86:c1:0c:9a: 86:80:c1:c4:8b:c1:5d:86:56:05:d1:fe:83:dd:96:10:28:5c: fd:26:dd:4f:2c:46:26:0b:51:56:cf:ed:88:fc:a6:6d:53:6a: 7f:90:c5:7c:1e:21:5d:fd:de:ac:04:99:51:a4:b7:c0:1f:0d: c5:5d:9f:75:8b:93:ae:7c:10:0f:eb:69:7e:8d:dd:f1:eb:7f: f7:24:f9:b4:5e:e0:9a:09:62:f1:3d:9b:70:eb:9e:33:34:20: c3:86:30:84:e2:df:0a:58:48:43:94:97:39:29:5b:03:64:5a: d7:79:39:95:28:4c:69:8f:ff:51:4e:c0:bd:66:15:65:ea:dd: 08:ea:e0:a4:ff:39:31:a8:0e:09:92:a5:3a:75:fb:5b:0e:a8: ec:fc:94:e3:d4:5d:6f:62:30:af:8a:cc:60:1a:7b:a8:33:cd: 3c:d6:e5:3d:09:c2:14:4c:af:40:a2:c1:5e:f1:20:18:7b:4a: 1b:99:c7:8e:2e:26:aa:d4:33:81:2f:22:8e:1f:d1:e4:3a:3a: 47:46:33:e0:54:ee:a1:ec:f0:a7:5c:97:10:0e:17:b5:07:6d: 59:e6:35:b9 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+pzU5sL38RtyqIK22wj81MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZmM1YTI5NDEwZjFmZmNmNGRlMmE1YTcwNThmNTE2MjBi MzBiNzkwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGM5N2UxMmRiNzA1ZjFjZGQ1NTM4ZjM2YWYxNjBhMTEzNjVjMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOi1P3/l358bFtCiMo7kpNEyfu2+ jeEDfDL8r7DyUAmko4yZIzFQTMYU/2TK7elEC6JoK7CxvRtsAAsvQOZBvuGcioZ4 02jO9Y0gTG3drng9gIRaNH6+Q9kXs8r8mruDiEZxCdAHQnO33LTWyld0VA7+yUSM 5TiyQIJ2BUbCqhYWAFP9M/NdyVZweB1oqftfTydcr22P0PcMv+O5X/3IDnHT953j cWSEJ+qSTOlm/rC9Q+oH9UPtCscwJbBb7KBAD2hcxQilEKBos44HU9gDZZqNDd0W faFbqVjj2e+6sMORxA8Z6inh6PwoyFhST2IPE1yj86oWEvuxcpL39q+3DQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFH3JfhLbcF8c3VU482rxYKETZcCSMB8GA1UdIwQY MBaAFEv8WilBDx/89N4qWnBY9RYgswt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2Yt MTM2MjU3ZTMwNzZlLzEvZmNsLUV0dHdYeHpkVlRqemF2RmdvUk5sd0pJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8zYjJiZmQtNjBlYi00Y2JmLTlmN2YtMTM2MjU3ZTMwNzZl LzEvU194YUtVRVBIX3owM2lwYWNGajFGaUN6QzNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA3U MA0GCSqGSIb3DQEBCwUAA4IBAQA1K24vHTCuZbAGMoCW0TnZTjd3YxkEfzCf1cBQ xdgytYbBDJqGgMHEi8FdhlYF0f6D3ZYQKFz9Jt1PLEYmC1FWz+2I/KZtU2p/kMV8 HiFd/d6sBJlRpLfAHw3FXZ91i5OufBAP62l+jd3x63/3JPm0XuCaCWLxPZtw654z NCDDhjCE4t8KWEhDlJc5KVsDZFrXeTmVKExpj/9RTsC9ZhVl6t0I6uCk/zkxqA4J kqU6dftbDqjs/JTj1F1vYjCvisxgGnuoM8081uU9CcIUTK9AosFe8SAYe0obmceO Liaq1DOBLyKOH9HkOjpHRjPgVO6h7PCnXJcQDhe1B21Z5jW5 -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:07 2026 by rpki-client