This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/FC3W89E7lPxHMttdKdqwUZ8ayGo.roa File: FC3W89E7lPxHMttdKdqwUZ8ayGo.roa (raw, json) Hash identifier: P2wT7iaUIOeyGlWOhw0T1qRlFG0Wm2TszirFqNtZ4G8= Subject key identifier: 14:2D:D6:F3:D1:3B:94:FC:47:32:DB:5D:29:DA:B0:51:9F:1A:C8:6A Certificate issuer: /CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931 Certificate serial: 019B7C7F9F73A323E475C45CF4407F04CBE0 Authority key identifier: C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/FC3W89E7lPxHMttdKdqwUZ8ayGo.roa Signing time: Fri 02 Jan 2026 02:18:17 +0000 ROA not before: Fri 02 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201494 IP address blocks: 185.73.40.0/22 maxlen: 24 2a05:3f80::/29 maxlen: 29 2a05:3f80:41::/48 maxlen: 48 2a05:3f80:42::/48 maxlen: 48 2a05:3f80:43::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.mft rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:9f:73:a3:23:e4:75:c4:5c:f4:40:7f:04:cb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27964aabf404dda3f5e0ecc1c706ab327c6f931 Validity Not Before: Jan 2 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=142dd6f3d13b94fc4732db5d29dab0519f1ac86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:ef:cf:b3:9c:a6:e1:0c:43:33:7c:9e:96: 7b:96:b9:cf:7a:2f:54:1e:ba:3b:9b:dc:99:96:87: b3:58:ea:d5:51:e1:96:4c:d9:48:c6:2b:b8:fe:46: f9:b8:e6:ae:d7:95:1e:9c:e8:80:68:6f:11:d6:0b: c4:d3:5a:69:5c:57:34:10:13:15:c4:e4:d4:a8:66: a0:e4:99:c3:2b:e0:fa:47:44:2c:ba:4a:fb:40:96: 75:37:96:55:97:91:bc:b9:36:95:9e:09:59:b7:ee: 3d:f6:f2:20:76:b0:79:1f:12:8c:30:82:85:da:25: 02:58:9c:e1:4f:ca:00:90:45:28:10:4f:44:b8:71: e4:be:4a:1e:20:cd:10:d7:4f:0a:c8:92:56:5f:fa: 66:96:06:1e:f1:81:84:e1:02:98:6f:b7:a9:d8:07: 74:71:d4:56:57:ea:d8:cb:ca:8b:cc:e8:d7:da:f1: 06:60:83:58:96:a3:44:94:eb:fa:74:13:39:28:68: 23:21:85:f0:58:b0:13:b8:39:69:ba:bb:70:5a:ff: 21:4d:22:dc:d0:8a:fe:93:96:b1:42:09:fd:29:f5: fa:86:50:e2:e1:e7:82:07:12:5f:ed:ed:a0:38:d0: 47:4f:a5:03:d7:d0:3e:30:f7:db:62:3c:c3:91:83: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:2D:D6:F3:D1:3B:94:FC:47:32:DB:5D:29:DA:B0:51:9F:1A:C8:6A X509v3 Authority Key Identifier: keyid:C2:79:64:AA:BF:40:4D:DA:3F:5E:0E:CC:1C:70:6A:B3:27:C6:F9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/FC3W89E7lPxHMttdKdqwUZ8ayGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/807954-aa7e-48e9-87fa-5ebf2a54eb6d/1/wnlkqr9ATdo_Xg7MHHBqsyfG-TE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.40.0/22 IPv6: 2a05:3f80::/29 Signature Algorithm: sha256WithRSAEncryption 6d:13:9b:17:ab:d1:3f:f4:24:7e:e6:91:f8:21:eb:ce:0d:e8: e7:ae:fc:d9:af:9f:e7:b6:58:18:09:d6:5b:1b:9b:13:16:ff: da:45:f6:6f:34:2c:a0:92:6c:e8:cf:50:f3:93:a2:9e:e1:ea: 12:6d:46:1d:62:11:46:dc:76:b6:3b:7c:94:bd:f3:ea:6d:b7: ec:ad:a5:81:25:26:67:a8:88:35:8a:f5:86:e6:47:8e:91:84: 7b:aa:19:ed:1b:95:f0:78:b5:35:a9:75:fc:d9:53:15:1b:d6: 64:47:9a:57:bf:15:e6:c3:da:0e:35:94:18:ac:2a:2f:99:9f: 8a:c2:b8:c7:d7:3c:15:6e:b3:b7:43:34:02:e8:9a:46:39:ce: f0:46:78:73:b1:b8:91:d6:58:80:35:a8:ac:9f:ef:d0:6e:42: f7:cd:68:2e:76:8b:f7:f6:b3:44:36:18:1a:2c:42:01:5f:01: 99:c9:3c:ca:e9:e4:4d:a8:40:ee:54:2b:8c:2b:f9:b1:0d:f9: d2:3a:c1:c1:9a:2e:47:fe:5d:de:83:78:f5:c6:de:9e:02:61: b8:27:65:78:11:cd:fa:bf:47:87:ed:be:ca:a4:9b:5e:30:fd: 93:41:6f:73:f7:f7:9a:a3:d1:20:fa:1c:61:09:50:b0:fa:d5: 86:7d:24:f7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f59zoyPkdcRc9EB/BMvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzk2NGFhYmY0MDRkZGEzZjVlMGVjYzFjNzA2YWIzMjdj NmY5MzEwHhcNMjYwMTAyMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDJkZDZmM2QxM2I5NGZjNDczMmRiNWQyOWRhYjA1MTlmMWFjODZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwInvz7OcpuEMQzN8npZ7lrnPei9U Hro7m9yZloezWOrVUeGWTNlIxiu4/kb5uOau15UenOiAaG8R1gvE01ppXFc0EBMV xOTUqGag5JnDK+D6R0Qsukr7QJZ1N5ZVl5G8uTaVnglZt+499vIgdrB5HxKMMIKF 2iUCWJzhT8oAkEUoEE9EuHHkvkoeIM0Q108KyJJWX/pmlgYe8YGE4QKYb7ep2Ad0 cdRWV+rYy8qLzOjX2vEGYINYlqNElOv6dBM5KGgjIYXwWLATuDlpurtwWv8hTSLc 0Ir+k5axQgn9KfX6hlDi4eeCBxJf7e2gONBHT6UD19A+MPfbYjzDkYMPbwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBQt1vPRO5T8RzLbXSnasFGfGshqMB8GA1UdIwQY MBaAFMJ5ZKq/QE3aP14OzBxwarMnxvkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEt NWViZjJhNTRlYjZkLzEvRkMzVzg5RTdsUHhITXR0ZEtkcXdVWjhheUdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi84MDc5NTQtYWE3ZS00OGU5LTg3ZmEtNWViZjJhNTRlYjZk LzEvd25sa3FyOUFUZG9fWGc3TUhIQnFzeWZHLVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuUkoMA0E AgACMAcDBQMqBT+AMA0GCSqGSIb3DQEBCwUAA4IBAQBtE5sXq9E/9CR+5pH4IevO DejnrvzZr5/ntlgYCdZbG5sTFv/aRfZvNCygkmzoz1Dzk6Ke4eoSbUYdYhFG3Ha2 O3yUvfPqbbfsraWBJSZnqIg1ivWG5keOkYR7qhntG5XweLU1qXX82VMVG9ZkR5pX vxXmw9oONZQYrCovmZ+KwrjH1zwVbrO3QzQC6JpGOc7wRnhzsbiR1liANaisn+/Q bkL3zWgudov39rNENhgaLEIBXwGZyTzK6eRNqEDuVCuMK/mxDfnSOsHBmi5H/l3e g3j1xt6eAmG4J2V4Ec36v0eH7b7KpJteMP2TQW9z9/eao9Eg+hxhCVCw+tWGfST3 -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:59 2026 by rpki-client