This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/FbP_56k1b6aGcmDhdpjVA4rmcAc.roa File: FbP_56k1b6aGcmDhdpjVA4rmcAc.roa (raw, json) Hash identifier: IaKEOoYyppV+DdDU0hXMblKkbM/K5lk0d74Bwp+5+M4= Subject key identifier: 15:B3:FF:E7:A9:35:6F:A6:86:72:60:E1:76:98:D5:03:8A:E6:70:07 Certificate issuer: /CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Certificate serial: 019B79ED45D1720366BD84156821078A0DEA Authority key identifier: 0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/FbP_56k1b6aGcmDhdpjVA4rmcAc.roa Signing time: Thu 01 Jan 2026 14:19:11 +0000 ROA not before: Thu 01 Jan 2026 14:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18041 IP address blocks: 2a0f:607:1051::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:45:d1:72:03:66:bd:84:15:68:21:07:8a:0d:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c21b925b4c4bcc30f77c9c41ba8d040ac95dfc6 Validity Not Before: Jan 1 14:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15b3ffe7a9356fa6867260e17698d5038ae67007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d6:a8:6a:24:00:10:97:df:7e:fa:a1:36:c9: 30:b7:1a:d8:c9:30:3a:5f:29:7c:58:2f:f6:f7:94: f3:5f:8a:d9:5e:c8:d7:72:83:f9:38:3c:56:6d:ad: e1:62:f7:e6:b1:e3:e9:d9:0e:b0:9a:96:6e:43:e4: 91:44:33:49:87:ed:e1:ba:e7:82:fa:47:d1:fc:80: ea:59:69:48:44:b8:80:e1:ad:bb:ed:65:79:a4:21: 92:15:15:62:0f:46:a1:f5:1f:19:5e:7d:62:6b:db: 48:3e:05:a2:dd:a6:64:79:9d:97:23:10:a9:b5:9a: e5:bb:3e:11:19:9b:fc:e6:89:4d:d7:c0:98:05:e3: 28:f7:99:45:b2:65:24:91:e2:e0:71:b2:67:7a:15: 76:fe:b4:c8:50:86:22:72:56:c2:12:90:0c:7b:13: 7e:9f:57:62:ae:aa:0c:b7:f9:ad:fb:f1:5f:6d:4e: 49:c9:a1:63:1a:8b:7b:b4:ba:2b:56:dc:8f:62:6e: 89:50:72:93:43:7e:e4:5f:c5:c4:44:3e:09:45:8b: 72:a5:24:b1:88:4b:36:67:87:55:30:20:bf:2f:72: e5:c4:cb:dc:12:80:63:83:be:8f:1e:1b:3d:f5:3c: 04:a3:91:55:90:e7:a2:df:96:4b:0f:ef:74:ad:ed: 7f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B3:FF:E7:A9:35:6F:A6:86:72:60:E1:76:98:D5:03:8A:E6:70:07 X509v3 Authority Key Identifier: keyid:0C:21:B9:25:B4:C4:BC:C3:0F:77:C9:C4:1B:A8:D0:40:AC:95:DF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCG5JbTEvMMPd8nEG6jQQKyV38Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/FbP_56k1b6aGcmDhdpjVA4rmcAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/c0bd67-f7dd-4ce2-ab7e-a347564158f8/1/DCG5JbTEvMMPd8nEG6jQQKyV38Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0f:607:1051::/48 Signature Algorithm: sha256WithRSAEncryption a7:9a:8d:49:11:9e:68:0d:2e:d7:2c:d8:66:f0:3c:6f:6e:b6: e4:f3:f4:de:e1:23:2c:7e:3f:9c:a7:5d:27:ce:56:33:9c:98: 3a:ee:9d:63:4e:25:7d:b1:e1:ab:e9:88:69:e6:bd:99:16:fe: 12:b9:17:fc:5f:ed:ae:78:c0:94:2e:cb:d5:04:ae:36:9d:3c: c8:ad:a4:b3:a7:02:88:2b:bf:88:44:df:17:19:4e:e5:44:1f: e0:c5:88:64:b9:bf:e5:e1:91:0d:e6:bd:05:d7:ca:e8:57:02: bc:3e:18:50:64:1c:86:12:05:cf:fc:a5:c9:3a:d7:b7:4c:f4: 44:3f:8e:c5:cb:b8:82:fb:c3:9e:61:a6:ff:2c:a0:05:6c:db: 4e:46:0e:85:7b:14:90:c6:4d:29:04:f3:6c:7a:24:7a:0d:d4: ab:60:37:3f:d7:ac:a2:eb:2a:36:f9:4c:60:68:3b:6d:fa:97: a2:12:ba:13:c7:32:61:da:a3:d0:1e:78:56:47:09:7c:c8:c3: 81:75:40:32:71:09:fe:f3:53:4e:a8:82:fa:8f:57:8e:35:87: 6c:b0:66:d3:4b:b4:c2:17:0b:91:dc:d6:10:e4:76:2e:28:ac: a1:fc:11:77:20:51:bd:7b:19:7f:49:fd:fa:54:56:87:59:56: bc:54:71:2d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt57UXRcgNmvYQVaCEHig3qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMjFiOTI1YjRjNGJjYzMwZjc3YzljNDFiYThkMDQwYWM5 NWRmYzYwHhcNMjYwMTAxMTQxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWIzZmZlN2E5MzU2ZmE2ODY3MjYwZTE3Njk4ZDUwMzhhZTY3MDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7taoaiQAEJfffvqhNskwtxrYyTA6 Xyl8WC/295TzX4rZXsjXcoP5ODxWba3hYvfmsePp2Q6wmpZuQ+SRRDNJh+3huueC +kfR/IDqWWlIRLiA4a277WV5pCGSFRViD0ah9R8ZXn1ia9tIPgWi3aZkeZ2XIxCp tZrluz4RGZv85olN18CYBeMo95lFsmUkkeLgcbJnehV2/rTIUIYiclbCEpAMexN+ n1dirqoMt/mt+/FfbU5JyaFjGot7tLorVtyPYm6JUHKTQ37kX8XERD4JRYtypSSx iEs2Z4dVMCC/L3LlxMvcEoBjg76PHhs99TwEo5FVkOei35ZLD+90re1/fQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBWz/+epNW+mhnJg4XaY1QOK5nAHMB8GA1UdIwQY MBaAFAwhuSW0xLzDD3fJxBuo0ECsld/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2Ut YTM0NzU2NDE1OGY4LzEvRmJQXzU2azFiNmFHY21EaGRwalZBNHJtY0FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jMGJkNjctZjdkZC00Y2UyLWFiN2UtYTM0NzU2NDE1OGY4 LzEvRENHNUpiVEV2TU1QZDhuRUc2alFRS3lWMzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8GBxBR MA0GCSqGSIb3DQEBCwUAA4IBAQCnmo1JEZ5oDS7XLNhm8Dxvbrbk8/Te4SMsfj+c p10nzlYznJg67p1jTiV9seGr6Yhp5r2ZFv4SuRf8X+2ueMCULsvVBK42nTzIraSz pwKIK7+IRN8XGU7lRB/gxYhkub/l4ZEN5r0F18roVwK8PhhQZByGEgXP/KXJOte3 TPREP47Fy7iC+8OeYab/LKAFbNtORg6FexSQxk0pBPNseiR6DdSrYDc/16yi6yo2 +UxgaDtt+peiEroTxzJh2qPQHnhWRwl8yMOBdUAycQn+81NOqIL6j1eONYdssGbT S7TCFwuR3NYQ5HYuKKyh/BF3IFG9exl/Sf36VFaHWVa8VHEt -----END CERTIFICATE-----Generated at Thu Jan 8 00:39:24 2026 by rpki-client