This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/_FU_b8oeqaoyn6FpjAqgWUPLhV4.roa File: _FU_b8oeqaoyn6FpjAqgWUPLhV4.roa (raw, json) Hash identifier: Lq5rPk3+pCvDEMORepBuUYdy9i9sFctjO+UeBNNLphk= Subject key identifier: FC:55:3F:6F:CA:1E:A9:AA:32:9F:A1:69:8C:0A:A0:59:43:CB:85:5E Certificate issuer: /CN=e1257eaabbf604d4570055c2cd8ac249bb29c106 Certificate serial: 019B7E393627D9A3F1025D742FE0FFFA5E8F Authority key identifier: E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/_FU_b8oeqaoyn6FpjAqgWUPLhV4.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214652 IP address blocks: 2a14:4c40::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.mft rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:36:27:d9:a3:f1:02:5d:74:2f:e0:ff:fa:5e:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1257eaabbf604d4570055c2cd8ac249bb29c106 Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc553f6fca1ea9aa329fa1698c0aa05943cb855e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:31:a3:bb:a0:e3:99:8f:e1:ff:f6:c8:da:a5: 5b:ea:32:be:39:1c:bf:32:4e:14:69:31:55:ee:fc: 77:09:b9:87:d0:7f:46:25:01:63:54:dc:74:f8:21: cd:34:90:0c:68:17:6f:51:fb:fe:a8:73:5b:a3:90: a4:d7:47:1f:7f:85:1a:70:7b:af:d9:1d:5e:f8:dc: 7f:18:ca:e7:63:49:de:5b:27:a6:34:0e:d3:b0:e3: 04:c5:85:9e:46:4b:07:ab:c2:ea:3f:fc:8f:65:53: 34:1d:a7:2d:8d:a4:c7:a1:be:04:3a:57:ef:38:45: 9d:11:1b:a5:e5:99:97:9c:a0:79:ff:32:86:76:3a: d6:b8:d3:c2:28:07:02:a4:a5:1a:aa:9d:35:45:6f: 64:e5:19:ee:db:0a:96:c2:bd:ee:04:a0:93:9a:81: 80:e4:1c:51:7c:18:67:bb:80:6b:9e:9c:7f:dd:ab: 48:01:1e:b1:06:85:18:fe:78:7b:0c:f5:e9:e5:9b: e8:6f:1a:ec:33:76:de:69:23:e4:91:3d:82:4b:a1: 2d:1f:2b:f3:b8:18:26:be:c0:61:81:38:b6:1a:9c: c0:dc:e6:2d:58:3b:79:5e:bd:9b:82:16:dc:26:c9: 61:ce:25:e4:48:3d:4e:ea:ab:68:ee:c3:09:b9:ac: 9e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:55:3F:6F:CA:1E:A9:AA:32:9F:A1:69:8C:0A:A0:59:43:CB:85:5E X509v3 Authority Key Identifier: keyid:E1:25:7E:AA:BB:F6:04:D4:57:00:55:C2:CD:8A:C2:49:BB:29:C1:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SV-qrv2BNRXAFXCzYrCSbspwQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/_FU_b8oeqaoyn6FpjAqgWUPLhV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/49bbd2-fe36-45d7-8def-81fa874ee2ed/1/4SV-qrv2BNRXAFXCzYrCSbspwQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a14:4c40::/40 Signature Algorithm: sha256WithRSAEncryption 2f:21:87:45:07:b7:11:23:ee:c4:35:7b:69:29:8c:c7:bd:43: 7e:e7:60:a5:56:ab:32:61:20:58:93:66:c8:8f:d8:0b:ec:99: 69:ac:9a:3a:a9:28:cb:af:1e:80:9b:e7:c9:8f:28:f2:b6:66: 51:5e:a8:72:50:58:22:bf:87:76:41:0f:e2:70:e1:68:08:d3: 58:7d:40:63:90:e2:00:32:80:8a:7b:55:50:e7:9a:a2:55:db: 51:d1:a4:c9:84:20:80:60:e9:04:00:da:84:2c:17:bf:3e:16: a9:ec:91:3f:c8:a8:51:62:90:3c:75:11:0b:53:94:a8:5d:b5: 31:76:08:ce:51:9e:cf:95:76:59:a8:03:9f:28:43:28:47:b6: 4c:cb:bc:71:a8:c7:01:37:83:c1:35:13:bc:fa:b6:37:ff:47: a0:c1:b7:30:10:b4:3d:09:e5:62:ef:26:2d:14:29:e4:3d:bf: 39:b9:bb:56:61:b7:03:f2:d6:58:7c:fe:09:5f:68:cb:70:af: b6:4d:9f:79:72:a7:0a:9f:ef:32:d3:6a:ac:ea:16:fe:f2:51: 7a:ca:9a:2a:3c:83:f5:23:5b:c3:57:31:00:54:3a:ec:1d:99: 1c:ab:55:18:c8:d8:e1:40:c0:a1:6f:bc:14:cc:32:b9:9f:5d: 9b:18:01:70 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt+OTYn2aPxAl10L+D/+l6PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMjU3ZWFhYmJmNjA0ZDQ1NzAwNTVjMmNkOGFjMjQ5YmIy OWMxMDYwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzU1M2Y2ZmNhMWVhOWFhMzI5ZmExNjk4YzBhYTA1OTQzY2I4NTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzGju6DjmY/h//bI2qVb6jK+ORy/ Mk4UaTFV7vx3CbmH0H9GJQFjVNx0+CHNNJAMaBdvUfv+qHNbo5Ck10cff4UacHuv 2R1e+Nx/GMrnY0neWyemNA7TsOMExYWeRksHq8LqP/yPZVM0HactjaTHob4EOlfv OEWdERul5ZmXnKB5/zKGdjrWuNPCKAcCpKUaqp01RW9k5Rnu2wqWwr3uBKCTmoGA 5BxRfBhnu4Brnpx/3atIAR6xBoUY/nh7DPXp5ZvobxrsM3beaSPkkT2CS6EtHyvz uBgmvsBhgTi2GpzA3OYtWDt5Xr2bghbcJslhziXkSD1O6qto7sMJuayevQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFPxVP2/KHqmqMp+haYwKoFlDy4VeMB8GA1UdIwQY MBaAFOElfqq79gTUVwBVws2Kwkm7KcEGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFNWLXFydjJCTlJYQUZYQ3pZckNTYnNwd1FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS80OWJiZDItZmUzNi00NWQ3LThkZWYt ODFmYTg3NGVlMmVkLzEvX0ZVX2I4b2VxYW95bjZGcGpBcWdXVVBMaFY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS80OWJiZDItZmUzNi00NWQ3LThkZWYtODFmYTg3NGVlMmVk LzEvNFNWLXFydjJCTlJYQUZYQ3pZckNTYnNwd1FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhRMQAAw DQYJKoZIhvcNAQELBQADggEBAC8hh0UHtxEj7sQ1e2kpjMe9Q37nYKVWqzJhIFiT ZsiP2AvsmWmsmjqpKMuvHoCb58mPKPK2ZlFeqHJQWCK/h3ZBD+Jw4WgI01h9QGOQ 4gAygIp7VVDnmqJV21HRpMmEIIBg6QQA2oQsF78+FqnskT/IqFFikDx1EQtTlKhd tTF2CM5Rns+VdlmoA58oQyhHtkzLvHGoxwE3g8E1E7z6tjf/R6DBtzAQtD0J5WLv Ji0UKeQ9vzm5u1ZhtwPy1lh8/glfaMtwr7ZNn3lypwqf7zLTaqzqFv7yUXrKmio8 g/UjW8NXMQBUOuwdmRyrVRjI2OFAwKFvvBTMMrmfXZsYAXA= -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:57 2026 by rpki-client