This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/FC_VFDWxRgvoLdyaf52ezfjlzY4.roa File: FC_VFDWxRgvoLdyaf52ezfjlzY4.roa (raw, json) Hash identifier: ikf5D2Q+V7XdSE1hWi8KX7L8XUe1goHfTjIB4LBsAqg= Subject key identifier: 14:2F:D5:14:35:B1:46:0B:E8:2D:DC:9A:7F:9D:9E:CD:F8:E5:CD:8E Certificate issuer: /CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1 Certificate serial: 019B78A2487DB426C789FC265344ADCEF046 Authority key identifier: 85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/FC_VFDWxRgvoLdyaf52ezfjlzY4.roa Signing time: Thu 01 Jan 2026 08:17:39 +0000 ROA not before: Thu 01 Jan 2026 08:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50349 IP address blocks: 91.214.0.0/22 maxlen: 22 93.190.36.0/22 maxlen: 22 2a06:a380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.mft rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:48:7d:b4:26:c7:89:fc:26:53:44:ad:ce:f0:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=853f1d5a188ae6b2b5f2aa138db8f99aa5aad7a1 Validity Not Before: Jan 1 08:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=142fd51435b1460be82ddc9a7f9d9ecdf8e5cd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:60:ae:3c:09:b6:4e:10:5a:37:16:25:0b: 3b:83:b9:c1:07:cf:c3:21:1c:4c:27:b7:e5:1c:cc: bc:0d:41:a9:aa:b8:a1:2c:d1:3c:bb:34:49:36:c9: 1b:a9:b7:65:db:1c:2d:b0:c0:71:f4:4c:ba:19:ee: eb:de:e1:0d:3b:10:53:09:89:5f:be:dc:27:6c:c9: 7f:f5:7e:da:c2:5d:a9:71:20:7d:c0:c7:c5:f2:75: b6:b2:ab:48:be:cc:fc:67:3b:d1:75:ec:f4:f2:f1: a1:9e:7f:35:8d:b4:28:da:14:88:66:cf:58:7d:8c: b8:88:15:48:26:0a:89:35:10:d0:02:d0:2c:57:c8: 6b:3c:ae:c8:92:d6:d6:02:54:a3:f4:c3:b9:21:ba: 6b:7e:4e:d6:a3:f2:16:09:34:04:55:eb:a7:8c:f1: 98:61:aa:23:bf:f0:55:f3:11:80:9a:12:4f:81:a6: 96:34:4d:4c:8c:c3:91:53:40:ac:3b:33:2d:ad:f2: 47:fa:79:b4:31:3d:73:98:c7:d8:eb:89:c4:f0:81: 21:f3:46:f7:83:fb:b8:2d:8e:52:af:09:1c:06:d1: c4:58:da:2e:dc:3d:d1:31:07:bc:c0:97:3c:bf:ce: 5d:49:fa:ae:54:cb:ec:e1:f4:83:de:31:4f:1a:d4: 7d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2F:D5:14:35:B1:46:0B:E8:2D:DC:9A:7F:9D:9E:CD:F8:E5:CD:8E X509v3 Authority Key Identifier: keyid:85:3F:1D:5A:18:8A:E6:B2:B5:F2:AA:13:8D:B8:F9:9A:A5:AA:D7:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hT8dWhiK5rK18qoTjbj5mqWq16E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/FC_VFDWxRgvoLdyaf52ezfjlzY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/72c095-d640-41ec-a0bd-8d320062ae89/1/hT8dWhiK5rK18qoTjbj5mqWq16E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.214.0.0/22 93.190.36.0/22 IPv6: 2a06:a380::/29 Signature Algorithm: sha256WithRSAEncryption 65:5c:a9:87:54:76:01:68:8f:64:49:3a:8a:fd:0c:e6:d7:23: 87:bf:b1:69:8b:a2:87:72:63:cb:8a:3d:0a:16:9b:e0:a0:5a: 20:18:fa:a0:16:77:90:b9:0f:7f:30:48:c9:a5:df:83:ca:0b: 86:2e:45:5a:36:a3:2b:ea:d5:9c:60:39:41:4b:8d:d2:a7:64: 94:03:22:e8:63:57:ac:c3:ad:87:e9:da:6e:f2:20:fc:2d:e7: 0d:37:1a:90:ac:a6:d8:c1:8b:be:3e:d4:2b:9f:8c:9d:6f:7d: 85:4e:5c:be:19:03:13:c5:5c:0b:13:70:2d:bc:2a:fc:93:eb: b8:e6:2a:0c:c0:8e:6a:13:56:98:8d:cc:c7:bc:34:86:1d:11: 7d:b8:e9:7b:bd:1e:ac:0c:41:e4:af:fe:18:30:47:fb:87:7c: 5e:9d:5e:65:6a:96:98:58:15:e8:91:16:4a:b3:5e:59:ae:22: fa:7c:a6:98:82:86:cf:b7:71:11:67:48:f0:4d:29:37:58:a7: 43:79:20:f1:1f:23:b9:f9:fa:f2:93:f4:52:3a:f7:86:f6:7e: 8c:db:e4:f4:65:e2:4f:87:dc:10:16:d7:a6:4f:24:06:52:2b: 93:d3:03:cb:b1:96:fd:0f:65:dc:05:85:95:b6:a9:2e:e5:06: 97:9a:64:7f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4okh9tCbHifwmU0StzvBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1M2YxZDVhMTg4YWU2YjJiNWYyYWExMzhkYjhmOTlhYTVh YWQ3YTEwHhcNMjYwMTAxMDgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDJmZDUxNDM1YjE0NjBiZTgyZGRjOWE3ZjlkOWVjZGY4ZTVjZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHtgrjwJtk4QWjcWJQs7g7nBB8/D IRxMJ7flHMy8DUGpqrihLNE8uzRJNskbqbdl2xwtsMBx9Ey6Ge7r3uENOxBTCYlf vtwnbMl/9X7awl2pcSB9wMfF8nW2sqtIvsz8ZzvRdez08vGhnn81jbQo2hSIZs9Y fYy4iBVIJgqJNRDQAtAsV8hrPK7IktbWAlSj9MO5Ibprfk7Wo/IWCTQEVeunjPGY Yaojv/BV8xGAmhJPgaaWNE1MjMORU0CsOzMtrfJH+nm0MT1zmMfY64nE8IEh80b3 g/u4LY5SrwkcBtHEWNou3D3RMQe8wJc8v85dSfquVMvs4fSD3jFPGtR9dQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBQv1RQ1sUYL6C3cmn+dns345c2OMB8GA1UdIwQY MBaAFIU/HVoYiuaytfKqE424+ZqlqtehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MmMwOTUtZDY0MC00MWVjLWEwYmQt OGQzMjAwNjJhZTg5LzEvRkNfVkZEV3hSZ3ZvTGR5YWY1MmV6Zmpselk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC83MmMwOTUtZDY0MC00MWVjLWEwYmQtOGQzMjAwNjJhZTg5 LzEvaFQ4ZFdoaUs1cksxOHFvVGpiajVtcVdxMTZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCW9YAAwQC Xb4kMA0EAgACMAcDBQMqBqOAMA0GCSqGSIb3DQEBCwUAA4IBAQBlXKmHVHYBaI9k STqK/Qzm1yOHv7Fpi6KHcmPLij0KFpvgoFogGPqgFneQuQ9/MEjJpd+DyguGLkVa NqMr6tWcYDlBS43Sp2SUAyLoY1esw62H6dpu8iD8LecNNxqQrKbYwYu+PtQrn4yd b32FTly+GQMTxVwLE3AtvCr8k+u45ioMwI5qE1aYjczHvDSGHRF9uOl7vR6sDEHk r/4YMEf7h3xenV5lapaYWBXokRZKs15ZriL6fKaYgobPt3ERZ0jwTSk3WKdDeSDx HyO5+fryk/RSOveG9n6M2+T0ZeJPh9wQFtemTyQGUiuT0wPLsZb9D2XcBYWVtqku 5QaXmmR/ -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:18 2026 by rpki-client