This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/FXkLPO07K0oGiHX6N80HucLUmQk.roa File: FXkLPO07K0oGiHX6N80HucLUmQk.roa (raw, json) Hash identifier: pJpxLX/J3IKaGvymzNo/eP+WscosiFBoX/gscobrkA8= Subject key identifier: 15:79:0B:3C:ED:3B:2B:4A:06:88:75:FA:37:CD:07:B9:C2:D4:99:09 Certificate issuer: /CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Certificate serial: 019B77C722168373FF6F8E9E7C2D027ACCAC Authority key identifier: 66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/FXkLPO07K0oGiHX6N80HucLUmQk.roa Signing time: Thu 01 Jan 2026 04:18:17 +0000 ROA not before: Thu 01 Jan 2026 04:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61135 IP address blocks: 212.64.214.0/24 maxlen: 32 212.64.217.0/24 maxlen: 32 212.64.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 10:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:22:16:83:73:ff:6f:8e:9e:7c:2d:02:7a:cc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6640f89ce22645b97297d7803726dc2fb0e5f4b9 Validity Not Before: Jan 1 04:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15790b3ced3b2b4a068875fa37cd07b9c2d49909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e4:48:8d:97:07:12:3a:a2:d9:35:3b:d9:2e: 7a:8d:30:5f:04:2a:05:13:56:13:f0:ea:d3:10:bb: e1:85:e5:25:ec:38:c6:45:7c:c7:c2:35:3f:ae:27: 75:95:5e:37:8f:50:fe:fb:73:76:6a:ef:09:db:c8: 1e:d6:6e:f4:43:4e:cc:d7:6a:24:c3:d2:aa:50:0b: de:11:65:83:a9:38:e9:8a:38:94:b5:1e:18:98:4a: e1:15:79:65:78:0b:49:0a:59:9f:49:86:a9:33:e0: 26:c9:41:5c:27:53:04:7d:80:52:38:d8:a4:f7:73: a3:30:80:0f:75:e1:e8:f5:3f:c4:27:48:e0:55:c4: bf:88:a1:e4:4b:b3:5c:ca:35:dd:fe:0f:66:e7:91: cb:0a:20:40:a7:d0:6c:b7:8e:01:a9:35:80:95:9c: 40:d5:c7:98:80:a4:74:01:75:65:2e:12:e4:02:79: 73:65:39:3c:4a:b6:3a:6c:75:37:e7:cc:e0:f3:dc: 77:a7:77:51:b9:b6:4b:30:3f:57:dc:23:c5:8d:66: f3:d2:81:2f:cc:37:fa:fe:d1:4e:d8:d3:be:bc:f2: 65:ed:c6:1c:56:53:89:78:f7:8e:c2:d4:52:11:5f: a4:4b:74:dc:59:cd:b1:1c:07:66:09:9f:6d:66:01: c2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:79:0B:3C:ED:3B:2B:4A:06:88:75:FA:37:CD:07:B9:C2:D4:99:09 X509v3 Authority Key Identifier: keyid:66:40:F8:9C:E2:26:45:B9:72:97:D7:80:37:26:DC:2F:B0:E5:F4:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkD4nOImRblyl9eANybcL7Dl9Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/FXkLPO07K0oGiHX6N80HucLUmQk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c3ad2e-b52e-441c-89ba-44ab7a9d7dea/1/ZkD4nOImRblyl9eANybcL7Dl9Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.64.214.0/24 212.64.217.0-212.64.218.255 Signature Algorithm: sha256WithRSAEncryption 4f:19:92:ea:05:c8:bd:f7:ab:4d:84:f9:eb:2e:97:e2:63:b8: eb:29:3c:a6:3a:6d:c0:30:b2:6e:43:0c:d6:dc:5f:9c:5b:9b: 2f:9b:7a:a7:a5:49:56:ae:72:ab:32:b6:85:d8:5a:1d:7d:ec: 4e:98:61:77:1e:07:ca:43:03:d7:b4:b2:04:c6:e2:a2:61:23: b0:56:50:4c:ca:38:49:5d:fd:58:a7:27:e7:e2:0c:76:f3:35: a5:24:f6:28:5d:ab:f2:e9:45:a4:93:80:db:a3:63:ed:48:6e: 36:d5:9c:d3:e8:a6:fa:13:c8:de:16:df:af:32:c6:a9:86:03: 06:20:bf:4e:35:0a:6e:60:e6:e8:98:14:74:48:68:fa:1c:96: c7:25:fc:fd:37:9b:e5:21:97:61:65:0f:6e:81:9b:c8:7f:02: 93:52:42:32:5a:49:c7:a3:bc:b9:33:a2:95:0a:d6:98:cd:1d: 0f:8a:0f:c0:1f:6b:82:56:03:d6:4e:1e:7c:2a:6a:fc:95:d1: 24:5e:16:ec:a8:f7:13:1c:fa:75:9b:11:21:d2:45:79:61:b9: 5d:88:f0:45:1f:13:63:ff:49:87:9e:d4:33:7c:5f:da:90:e9: 6f:8b:c5:ac:06:67:ae:2f:3b:b3:b8:db:34:1e:94:5d:6a:2b: b4:62:e1:df -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3xyIWg3P/b46efC0CesysMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDBmODljZTIyNjQ1Yjk3Mjk3ZDc4MDM3MjZkYzJmYjBl NWY0YjkwHhcNMjYwMTAxMDQxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTc5MGIzY2VkM2IyYjRhMDY4ODc1ZmEzN2NkMDdiOWMyZDQ5OTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eRIjZcHEjqi2TU72S56jTBfBCoF E1YT8OrTELvhheUl7DjGRXzHwjU/rid1lV43j1D++3N2au8J28ge1m70Q07M12ok w9KqUAveEWWDqTjpijiUtR4YmErhFXlleAtJClmfSYapM+AmyUFcJ1MEfYBSONik 93OjMIAPdeHo9T/EJ0jgVcS/iKHkS7NcyjXd/g9m55HLCiBAp9Bst44BqTWAlZxA 1ceYgKR0AXVlLhLkAnlzZTk8SrY6bHU358zg89x3p3dRubZLMD9X3CPFjWbz0oEv zDf6/tFO2NO+vPJl7cYcVlOJePeOwtRSEV+kS3TcWc2xHAdmCZ9tZgHCfwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFBV5CzztOytKBoh1+jfNB7nC1JkJMB8GA1UdIwQY MBaAFGZA+JziJkW5cpfXgDcm3C+w5fS5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEt NDRhYjdhOWQ3ZGVhLzEvRlhrTFBPMDdLMG9HaUhYNk44MEh1Y0xVbVFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9jM2FkMmUtYjUyZS00NDFjLTg5YmEtNDRhYjdhOWQ3ZGVh LzEvWmtENG5PSW1SYmx5bDllQU55YmNMN0RsOUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQA1EDWMAwD BADUQNkDBADUQNowDQYJKoZIhvcNAQELBQADggEBAE8ZkuoFyL33q02E+esul+Jj uOspPKY6bcAwsm5DDNbcX5xbmy+beqelSVaucqsytoXYWh197E6YYXceB8pDA9e0 sgTG4qJhI7BWUEzKOEld/VinJ+fiDHbzNaUk9ihdq/LpRaSTgNujY+1IbjbVnNPo pvoTyN4W368yxqmGAwYgv041Cm5g5uiYFHRIaPoclscl/P03m+Uhl2FlD26Bm8h/ ApNSQjJaScejvLkzopUK1pjNHQ+KD8Afa4JWA9ZOHnwqavyV0SReFuyo9xMc+nWb ESHSRXlhuV2I8EUfE2P/SYee1DN8X9qQ6W+LxawGZ64vO7O42zQelF1qK7Ri4d8= -----END CERTIFICATE-----Generated at Wed Jan 21 19:07:16 2026 by rpki-client