This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/FGCvGo_FF1y6VXdxoaCm7btJD2E.roa File: FGCvGo_FF1y6VXdxoaCm7btJD2E.roa (raw, json) Hash identifier: vXuMCtD2CIeHzdIPx/woOB45K5n8YN7sXP34o5vK8JA= Subject key identifier: 14:60:AF:1A:8F:C5:17:5C:BA:55:77:71:A1:A0:A6:ED:BB:49:0F:61 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B775944927A9F90A8CFD8C425AA16A70D Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/FGCvGo_FF1y6VXdxoaCm7btJD2E.roa Signing time: Thu 01 Jan 2026 02:18:17 +0000 ROA not before: Thu 01 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34714 IP address blocks: 89.40.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:44:92:7a:9f:90:a8:cf:d8:c4:25:aa:16:a7:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1460af1a8fc5175cba557771a1a0a6edbb490f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:4e:5e:ed:3f:48:f1:3a:64:83:c7:ab:60: e0:c5:2d:12:ca:f0:bf:76:6c:cc:11:3d:7c:a1:06: 36:04:19:d7:61:e3:18:ba:aa:51:8f:8c:4f:e3:6b: f7:ab:68:20:f2:43:cf:5f:99:ba:96:18:11:b8:b9: 3a:6d:c6:de:e5:32:43:da:80:d9:ea:19:7f:63:2e: ca:33:de:73:32:70:a9:62:2a:90:28:b1:e2:e7:ed: 34:d6:02:81:71:82:3b:89:d2:f4:d3:b6:2b:71:3b: 54:e1:2e:ff:7a:2d:20:72:64:8f:c5:bf:06:cc:96: 69:c9:94:56:b8:36:f2:12:55:c4:7a:e7:e4:e5:79: 46:fd:ec:d0:97:be:5d:ad:60:17:07:e6:0d:14:6d: 21:af:2a:0e:2d:2d:e5:2e:ce:25:41:4e:9d:75:e6: 6a:9e:f1:ad:bc:be:2d:b3:8d:58:ae:d9:f9:65:40: 5d:e4:c4:6d:5e:53:34:db:96:ea:c6:d3:95:fb:f1: a9:4b:bb:50:a8:c5:06:c5:3e:ed:15:99:fd:9d:82: 92:db:65:b7:12:86:1a:00:ab:63:08:d4:95:b2:94: a6:06:0e:e6:3c:0e:c6:d5:63:71:92:55:37:9d:af: 3d:8c:0c:7f:eb:a6:ee:1e:b1:2d:5a:1c:75:66:d6: 8a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:60:AF:1A:8F:C5:17:5C:BA:55:77:71:A1:A0:A6:ED:BB:49:0F:61 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/FGCvGo_FF1y6VXdxoaCm7btJD2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.40.34.0/24 Signature Algorithm: sha256WithRSAEncryption e9:4d:81:2a:2b:be:75:5b:46:1e:18:5a:cb:13:b1:dc:01:77: 68:c6:02:5f:ed:92:df:30:3f:21:e2:9b:48:8a:a6:86:5b:be: 9c:b0:6a:6b:e5:85:5b:ee:d1:04:41:c1:65:bf:60:35:86:c8: f5:0b:fb:37:3c:f9:03:74:8a:a6:a1:d5:48:3d:3c:44:61:21: 17:bb:e2:b9:83:2a:4d:76:95:45:9e:8b:2e:ce:47:87:83:61: ec:e4:fe:d5:b7:c5:f7:ee:89:af:7c:a7:da:9a:aa:6b:55:f9: 5c:00:f9:fe:4f:3f:0c:ca:58:e5:dd:78:7b:0a:d6:f5:56:65: 02:84:76:e0:5c:ad:a1:c2:85:f1:e0:eb:43:5d:0f:33:15:b6: a4:6f:e1:79:d8:cf:ef:a7:0e:9c:82:07:ab:b4:77:dd:46:1f: 54:a6:68:1b:5b:00:5b:03:67:ee:9e:b0:42:14:66:8b:de:31: b3:4d:0d:d3:5f:bc:45:56:94:39:c5:4e:21:7f:2f:df:a4:00: e6:e3:69:70:07:de:6e:6a:ee:57:56:b2:12:50:28:ec:b8:4d: c6:76:f0:d1:8f:8b:d9:7c:dc:62:0c:0f:84:dc:93:a5:b1:a7: cb:97:5c:ba:61:6d:02:ff:f1:5f:37:29:c6:0a:1d:27:7e:c9: 88:bc:04:25 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WUSSep+QqM/YxCWqFqcNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDYwYWYxYThmYzUxNzVjYmE1NTc3NzFhMWEwYTZlZGJiNDkwZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKxOXu0/SPE6ZIPHq2DgxS0SyvC/ dmzMET18oQY2BBnXYeMYuqpRj4xP42v3q2gg8kPPX5m6lhgRuLk6bcbe5TJD2oDZ 6hl/Yy7KM95zMnCpYiqQKLHi5+001gKBcYI7idL007YrcTtU4S7/ei0gcmSPxb8G zJZpyZRWuDbyElXEeufk5XlG/ezQl75drWAXB+YNFG0hryoOLS3lLs4lQU6ddeZq nvGtvL4ts41Yrtn5ZUBd5MRtXlM025bqxtOV+/GpS7tQqMUGxT7tFZn9nYKS22W3 EoYaAKtjCNSVspSmBg7mPA7G1WNxklU3na89jAx/66buHrEtWhx1ZtaKCwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBRgrxqPxRdculV3caGgpu27SQ9hMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0ZHQ3ZHb19GRjF5NlZYZHhvYUNtN2J0SkQyRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZKCIw DQYJKoZIhvcNAQELBQADggEBAOlNgSorvnVbRh4YWssTsdwBd2jGAl/tkt8wPyHi m0iKpoZbvpywamvlhVvu0QRBwWW/YDWGyPUL+zc8+QN0iqah1Ug9PERhIRe74rmD Kk12lUWeiy7OR4eDYezk/tW3xffuia98p9qaqmtV+VwA+f5PPwzKWOXdeHsK1vVW ZQKEduBcraHChfHg60NdDzMVtqRv4XnYz++nDpyCB6u0d91GH1SmaBtbAFsDZ+6e sEIUZoveMbNNDdNfvEVWlDnFTiF/L9+kAObjaXAH3m5q7ldWshJQKOy4TcZ28NGP i9l83GIMD4Tck6Wxp8uXXLphbQL/8V83KcYKHSd+yYi8BCU= -----END CERTIFICATE-----Generated at Sun Jan 25 14:32:00 2026 by rpki-client