This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/Fdl_nZxVedWv2AmqCyx2ob7psNo.roa File: Fdl_nZxVedWv2AmqCyx2ob7psNo.roa (raw, json) Hash identifier: dF6kmKpoSTBGTgpAPWKjMIqwVCyeLlpSw1AmDj1OHIE= Subject key identifier: 15:D9:7F:9D:9C:55:79:D5:AF:D8:09:AA:0B:2C:76:A1:BE:E9:B0:DA Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c Certificate serial: 019B7C807E46614DB2E62C58A63E7A0C8C6B Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/Fdl_nZxVedWv2AmqCyx2ob7psNo.roa Signing time: Fri 02 Jan 2026 02:19:14 +0000 ROA not before: Fri 02 Jan 2026 02:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10310 IP address blocks: 77.238.189.0/24 maxlen: 25 2a00:1288:f03e::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:7e:46:61:4d:b2:e6:2c:58:a6:3e:7a:0c:8c:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c Validity Not Before: Jan 2 02:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15d97f9d9c5579d5afd809aa0b2c76a1bee9b0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1a:9f:da:c8:71:02:06:06:17:6d:61:ff:11: ca:6e:da:74:6e:73:7f:d0:5b:18:cb:b1:af:8c:b5: 10:a3:65:49:06:40:54:2a:21:c0:67:a1:98:c8:91: a1:e3:c8:ae:23:8b:8b:0d:8d:cb:b6:80:a4:45:9e: 15:9d:25:8a:4f:a8:78:70:8a:b1:73:c3:53:78:8b: 38:cc:fa:7e:62:4f:be:13:21:14:3a:c1:53:ec:f4: 87:54:73:87:75:6c:46:a5:59:f8:db:34:98:15:0c: 75:46:5e:1f:a8:d7:f5:09:81:7c:5c:e7:30:8a:46: 4c:21:1d:2b:fe:9e:f9:dd:b9:3f:52:b5:c6:6b:cd: 9a:2a:0d:0f:6a:24:7b:ac:1c:b5:25:05:c3:ce:e8: ab:01:f4:db:30:e0:dd:a3:49:18:ca:a9:94:4e:35: 3d:80:c1:c1:fe:df:12:e6:4e:c7:3b:b3:e5:56:fe: 0f:d9:58:fb:af:17:98:04:6d:d4:79:4c:e0:ef:a0: a4:9e:c0:ee:a1:c3:91:e2:f9:81:df:59:21:b0:5c: 92:c3:ab:6d:68:b3:72:fb:f7:e3:c3:b8:08:c6:bb: b9:af:35:9e:da:a7:7b:28:aa:e3:f6:de:a9:63:78: 34:29:23:cd:fe:09:35:12:a0:11:41:01:f5:a6:29: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D9:7F:9D:9C:55:79:D5:AF:D8:09:AA:0B:2C:76:A1:BE:E9:B0:DA X509v3 Authority Key Identifier: keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/Fdl_nZxVedWv2AmqCyx2ob7psNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.238.189.0/24 IPv6: 2a00:1288:f03e::/48 Signature Algorithm: sha256WithRSAEncryption 8c:a6:60:99:cc:37:af:1e:ba:6b:de:68:20:50:2a:12:2d:75: 4a:38:a0:de:b1:9a:54:d0:7e:fe:48:82:2e:28:62:16:69:7d: 5d:35:a9:b0:a6:6b:52:12:c7:ef:63:a7:f4:83:27:ee:7d:08: c5:d7:b7:21:81:e3:89:56:44:b9:02:79:ee:86:4c:b2:f3:25: 8b:d1:c1:6b:25:83:1d:a8:e5:09:c9:c4:a6:83:66:e5:03:89: 39:a5:e6:f2:0a:35:0f:cd:a9:35:2a:2a:2a:ff:bc:2f:fc:c3: c2:39:4f:5f:46:e1:8d:df:c3:a6:81:17:86:53:97:7f:46:58: 5e:8e:2a:09:31:a9:63:42:c4:65:42:17:d0:c0:48:49:98:e1: b4:6d:23:d6:18:75:51:cd:ec:7a:31:a9:8b:2c:ee:08:22:48: d9:a9:54:4c:50:b7:e7:47:52:b1:bf:69:14:56:05:86:20:aa: 68:d5:e1:1a:21:34:db:10:aa:38:cb:4e:f6:cb:0b:23:54:3b: 12:64:99:2a:6c:5c:a3:99:01:17:f3:66:80:78:d6:74:f5:3a: 1f:d9:43:4a:a7:e1:3e:b1:d4:a5:b8:39:f2:c8:1d:b8:08:87: ee:3f:70:d3:7a:77:23:c9:64:8f:24:39:8f:57:40:3a:08:dc: a0:39:ac:4a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gH5GYU2y5ixYpj56DIxrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZjE0NTcyN2QzNGFlNjYwN2E2MTUzMDEyODNlZWViZDVk NjI5MWMwHhcNMjYwMTAyMDIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWQ5N2Y5ZDljNTU3OWQ1YWZkODA5YWEwYjJjNzZhMWJlZTliMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Rqf2shxAgYGF21h/xHKbtp0bnN/ 0FsYy7GvjLUQo2VJBkBUKiHAZ6GYyJGh48iuI4uLDY3LtoCkRZ4VnSWKT6h4cIqx c8NTeIs4zPp+Yk++EyEUOsFT7PSHVHOHdWxGpVn42zSYFQx1Rl4fqNf1CYF8XOcw ikZMIR0r/p753bk/UrXGa82aKg0PaiR7rBy1JQXDzuirAfTbMODdo0kYyqmUTjU9 gMHB/t8S5k7HO7PlVv4P2Vj7rxeYBG3UeUzg76CknsDuocOR4vmB31khsFySw6tt aLNy+/fjw7gIxru5rzWe2qd7KKrj9t6pY3g0KSPN/gk1EqARQQH1pilC6wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFBXZf52cVXnVr9gJqgssdqG+6bDaMB8GA1UdIwQY MBaAFBbxRXJ9NK5mB6YVMBKD7uvV1ikcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZGRmNuMDBybVlIcGhVd0VvUHU2OVhXS1J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82YzgwOGUtMDAxNS00ZDYyLTgxZDgt ZWNiN2FlMjcyMmMxLzEvRmRsX25aeFZlZFd2MkFtcUN5eDJvYjdwc05vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi82YzgwOGUtMDAxNS00ZDYyLTgxZDgtZWNiN2FlMjcyMmMx LzEvRnZGRmNuMDBybVlIcGhVd0VvUHU2OVhXS1J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQATe69MA8E AgACMAkDBwAqABKI8D4wDQYJKoZIhvcNAQELBQADggEBAIymYJnMN68eumveaCBQ KhItdUo4oN6xmlTQfv5Igi4oYhZpfV01qbCma1ISx+9jp/SDJ+59CMXXtyGB44lW RLkCee6GTLLzJYvRwWslgx2o5QnJxKaDZuUDiTml5vIKNQ/NqTUqKir/vC/8w8I5 T19G4Y3fw6aBF4ZTl39GWF6OKgkxqWNCxGVCF9DASEmY4bRtI9YYdVHN7HoxqYss 7ggiSNmpVExQt+dHUrG/aRRWBYYgqmjV4RohNNsQqjjLTvbLCyNUOxJkmSpsXKOZ ARfzZoB41nT1Oh/ZQ0qn4T6x1KW4OfLIHbgIh+4/cNN6dyPJZI8kOY9XQDoI3KA5 rEo= -----END CERTIFICATE-----Generated at Sun Jan 25 19:02:27 2026 by rpki-client