This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/_FB3a1IMmiFPJpYG4zHFh_Bnma4.roa File: _FB3a1IMmiFPJpYG4zHFh_Bnma4.roa (raw, json) Hash identifier: 6QQmSkfHFBHFiPCb7O/MO/s0noXwpbC2rqthJpYrs20= Subject key identifier: FC:50:77:6B:52:0C:9A:21:4F:26:96:06:E3:31:C5:87:F0:67:99:AE Certificate issuer: /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47 Certificate serial: 019B7FF285F4CA8BA8805836ADE238C52AD4 Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/_FB3a1IMmiFPJpYG4zHFh_Bnma4.roa Signing time: Fri 02 Jan 2026 18:22:39 +0000 ROA not before: Fri 02 Jan 2026 18:22:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49130 IP address blocks: 185.56.106.0/24 maxlen: 24 2a00:7fc0:8000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:85:f4:ca:8b:a8:80:58:36:ad:e2:38:c5:2a:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47 Validity Not Before: Jan 2 18:22:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc50776b520c9a214f269606e331c587f06799ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9a:ea:d2:6a:23:a0:39:2a:f3:bc:bd:5d:cf: 62:8d:2c:06:24:67:99:f7:fb:3c:cf:6e:18:42:bc: 59:a0:a5:d0:1f:64:7f:1e:55:80:bb:97:23:3d:83: f5:ad:d0:1d:f6:bd:fc:6b:dc:5e:14:53:fe:2b:50: 06:a9:f5:96:da:a7:1f:c3:38:c5:8d:db:2e:47:98: f1:78:c9:1e:4c:ad:b0:fb:d7:d2:46:48:a0:04:36: 3a:b2:22:9a:6d:75:c2:57:62:d2:34:f7:b1:ba:16: f3:38:30:f6:28:29:6f:10:a3:15:c3:e9:3a:6c:53: af:b5:17:98:95:b3:14:0e:dd:dd:43:67:6a:ec:73: b0:04:3c:21:f2:d4:bf:cc:e7:3f:ed:2b:d7:08:76: ea:01:20:d5:ae:8c:6c:73:59:90:5d:b1:a4:60:48: 6c:28:9b:60:0b:6b:c3:7f:d5:5b:68:bf:7a:4f:ae: e5:d4:06:f5:7e:0d:62:5b:7f:6e:8b:25:68:d5:67: f7:2f:6b:9c:1e:28:ba:90:dc:6c:d8:e9:34:4f:e7: c0:b9:0d:e3:3a:87:25:0c:f0:8e:b0:f9:57:41:31: e2:7e:30:4b:df:ab:43:0d:52:43:30:c4:d9:a3:4e: fe:60:5b:e4:a9:4e:7c:af:e0:8d:a5:76:10:5b:52: a9:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:50:77:6B:52:0C:9A:21:4F:26:96:06:E3:31:C5:87:F0:67:99:AE X509v3 Authority Key Identifier: keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/_FB3a1IMmiFPJpYG4zHFh_Bnma4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.106.0/24 IPv6: 2a00:7fc0:8000::/48 Signature Algorithm: sha256WithRSAEncryption 9b:ad:b8:f9:83:ab:92:96:cf:83:63:06:fa:cf:0e:65:7d:e9: db:cb:7e:86:f2:50:3c:4c:a0:bb:43:c5:60:72:72:a4:b6:bb: 26:42:fc:0a:9f:99:39:5d:07:a9:74:e4:b6:4c:38:e1:31:80: 94:8a:0b:d3:8a:ae:3d:d5:b8:07:db:ff:c3:87:46:e7:d5:34: 54:2e:6b:bb:27:d4:91:09:3a:e6:c9:8a:d8:53:13:3c:c7:9c: 65:af:f0:24:79:7c:77:9d:87:35:68:ac:85:a2:f5:11:4e:c4: 2e:24:b7:56:93:1c:05:fa:87:8b:f8:fc:79:71:16:f7:52:f2: ba:dc:69:c6:da:91:21:bb:66:6f:e3:cb:87:4f:b7:2e:47:1e: c1:77:21:ac:c4:c4:33:42:4f:28:b3:97:09:a3:ed:7f:ef:1e: 00:06:a1:20:f8:44:2f:c5:50:88:e0:38:37:b0:5c:f9:58:3c: 4a:5a:ec:12:ba:bd:42:e8:84:35:2c:a7:df:08:13:e8:ac:5d: b4:d1:1c:08:b3:25:87:d9:82:06:c5:4c:0c:e5:8a:c5:82:40: 50:1a:58:35:a5:60:ca:43:a3:e2:a5:fc:30:39:69:d4:21:c3: 34:da:23:ee:93:24:9f:32:b0:21:6c:4b:ab:31:7c:3f:15:6e: 46:6c:c1:f8 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/8oX0youogFg2reI4xSrUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYzI2YWJjOWUwNmMxYWZlZjliNWZkMmRhNDA0MTJlN2Fl ZTZiNDcwHhcNMjYwMTAyMTgyMjM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzUwNzc2YjUyMGM5YTIxNGYyNjk2MDZlMzMxYzU4N2YwNjc5OWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZrq0mojoDkq87y9Xc9ijSwGJGeZ 9/s8z24YQrxZoKXQH2R/HlWAu5cjPYP1rdAd9r38a9xeFFP+K1AGqfWW2qcfwzjF jdsuR5jxeMkeTK2w+9fSRkigBDY6siKabXXCV2LSNPexuhbzODD2KClvEKMVw+k6 bFOvtReYlbMUDt3dQ2dq7HOwBDwh8tS/zOc/7SvXCHbqASDVroxsc1mQXbGkYEhs KJtgC2vDf9VbaL96T67l1Ab1fg1iW39uiyVo1Wf3L2ucHii6kNxs2Ok0T+fAuQ3j OoclDPCOsPlXQTHifjBL36tDDVJDMMTZo07+YFvkqU58r+CNpXYQW1KpFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPxQd2tSDJohTyaWBuMxxYfwZ5muMB8GA1UdIwQY MBaAFHLCaryeBsGv75tf0tpAQS567mtHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMt Y2Q3ZDYxOTEzMjg4LzEvX0ZCM2ExSU1taUZQSnBZRzR6SEZoX0JubWE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMtY2Q3ZDYxOTEzMjg4 LzEvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuThqMA8E AgACMAkDBwAqAH/AgAAwDQYJKoZIhvcNAQELBQADggEBAJutuPmDq5KWz4NjBvrP DmV96dvLfobyUDxMoLtDxWBycqS2uyZC/AqfmTldB6l05LZMOOExgJSKC9OKrj3V uAfb/8OHRufVNFQua7sn1JEJOubJithTEzzHnGWv8CR5fHedhzVorIWi9RFOxC4k t1aTHAX6h4v4/HlxFvdS8rrcacbakSG7Zm/jy4dPty5HHsF3IazExDNCTyizlwmj 7X/vHgAGoSD4RC/FUIjgODewXPlYPEpa7BK6vULohDUsp98IE+isXbTRHAizJYfZ ggbFTAzlisWCQFAaWDWlYMpDo+Kl/DA5adQhwzTaI+6TJJ8ysCFsS6sxfD8VbkZs wfg= -----END CERTIFICATE-----Generated at Mon Jan 26 00:13:53 2026 by rpki-client