This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/fcPpzxOqbrccUQadoe87Uad0TIE.roa File: fcPpzxOqbrccUQadoe87Uad0TIE.roa (raw, json) Hash identifier: bZNC4F18tX7DhHmEHjEaGHkxFk5LtxXBx5M2eycD1yo= Subject key identifier: 7D:C3:E9:CF:13:AA:6E:B7:1C:51:06:9D:A1:EF:3B:51:A7:74:4C:81 Certificate issuer: /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02 Certificate serial: 019A574EA458060CD5E27E9637DE38DE894E Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/fcPpzxOqbrccUQadoe87Uad0TIE.roa Signing time: Thu 06 Nov 2025 03:56:02 +0000 ROA not before: Thu 06 Nov 2025 03:56:02 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137182 IP address blocks: 45.157.132.0/22 maxlen: 24 2a0f:4280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:57:4e:a4:58:06:0c:d5:e2:7e:96:37:de:38:de:89:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02 Validity Not Before: Nov 6 03:56:02 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7dc3e9cf13aa6eb71c51069da1ef3b51a7744c81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9d:b1:c9:a5:82:b1:c8:a8:a3:33:71:4f:1b: ca:c7:ca:d8:65:8b:df:35:be:95:a2:8e:11:6b:8e: ef:eb:f8:05:8c:22:5d:68:82:b9:79:5c:98:9b:b5: 80:65:72:ed:46:20:ed:5e:71:16:98:68:26:70:af: ee:4f:0d:cb:de:07:c7:9d:6d:38:a4:47:bf:c9:e9: 9b:e9:74:46:e2:67:3a:35:c9:fa:99:c8:56:a1:50: 4b:c6:38:9b:aa:c6:10:26:77:e6:bf:b6:0c:33:f8: 13:c8:ea:da:43:e9:1e:f7:89:e1:6f:28:bb:31:4f: d9:a7:92:36:9d:29:c1:15:19:d5:22:a5:ba:b8:63: 6e:13:99:1a:92:bd:6f:56:4c:da:33:57:0f:45:df: ac:94:49:ff:19:0b:9f:94:8f:91:27:e5:97:95:70: 8d:73:05:96:96:eb:88:05:d2:db:c4:eb:43:19:fd: 45:ca:a0:f4:b3:4d:4c:8e:10:8e:fc:d9:e8:8c:63: 77:64:cc:95:b1:94:62:93:43:d3:9c:4b:36:90:01: 3b:06:49:ca:26:7e:c3:2a:4d:99:87:ac:71:d3:d4: 5c:e4:9c:59:8b:f4:c0:50:29:12:cb:eb:3d:4b:ce: 64:c8:71:13:1c:b4:5b:87:96:17:8a:09:bb:ba:8c: 02:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C3:E9:CF:13:AA:6E:B7:1C:51:06:9D:A1:EF:3B:51:A7:74:4C:81 X509v3 Authority Key Identifier: keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/fcPpzxOqbrccUQadoe87Uad0TIE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.132.0/22 IPv6: 2a0f:4280::/29 Signature Algorithm: sha256WithRSAEncryption 3e:f4:9b:ae:dc:15:80:b4:02:bc:ac:27:33:5e:e7:ce:df:ea: c4:e5:ff:3a:b5:85:68:de:6e:59:b5:96:f0:aa:ff:d7:0f:c5: 19:69:5d:42:2b:73:26:28:f6:49:10:55:fa:a8:ed:ff:63:8c: a8:ff:af:c9:11:bc:08:3c:f3:d6:94:3d:7c:fb:49:63:c7:d1: 5f:15:25:1f:e3:ee:1b:f2:a3:ea:71:bf:b5:09:a3:9f:f2:e3: 0b:df:6c:49:1e:5e:2e:43:b8:07:f7:69:1e:a0:cc:36:30:4a: 04:04:90:3e:09:e6:03:bb:0d:69:6f:49:a9:ba:a5:2e:73:e3: 34:a7:76:ae:bb:b1:ef:bf:2e:ee:b1:3d:de:5f:a5:47:f0:4f: 5e:2c:b5:6d:be:e8:88:46:37:37:6c:da:76:82:d9:64:fc:45: 55:f8:5f:ec:70:e7:c7:2a:a9:16:e5:47:14:5b:ec:a6:9a:fb: 18:a9:a2:b7:64:44:72:ad:21:1d:f8:0c:62:2b:82:fa:4a:9f: 29:85:2b:9c:5f:49:a6:f9:73:fe:82:36:13:1f:1d:7e:e6:eb: 92:5e:89:7f:93:ce:03:5a:26:05:4e:f7:56:29:7a:44:85:5c: be:23:36:e4:ca:46:7c:68:18:0d:8f:38:60:d8:a0:98:2d:05: 1f:52:bd:b2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZpXTqRYBgzV4n6WN9443olOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3Y2IxNGE0MWY4ZDllNjI4ZGFlODhmNDc1MjgyMmZjNzdk ZmVjMDIwHhcNMjUxMTA2MDM1NjAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGMzZTljZjEzYWE2ZWI3MWM1MTA2OWRhMWVmM2I1MWE3NzQ0YzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy52xyaWCscioozNxTxvKx8rYZYvf Nb6Voo4Ra47v6/gFjCJdaIK5eVyYm7WAZXLtRiDtXnEWmGgmcK/uTw3L3gfHnW04 pEe/yemb6XRG4mc6Ncn6mchWoVBLxjibqsYQJnfmv7YMM/gTyOraQ+ke94nhbyi7 MU/Zp5I2nSnBFRnVIqW6uGNuE5kakr1vVkzaM1cPRd+slEn/GQuflI+RJ+WXlXCN cwWWluuIBdLbxOtDGf1FyqD0s01MjhCO/NnojGN3ZMyVsZRik0PTnEs2kAE7BknK Jn7DKk2Zh6xx09Rc5JxZi/TAUCkSy+s9S85kyHETHLRbh5YXigm7uowCVQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH3D6c8Tqm63HFEGnaHvO1GndEyBMB8GA1UdIwQY MBaAFPfLFKQfjZ5ija6I9HUoIvx33+wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOThzVXBCLU5ubUtOcm9qMGRTZ2lfSGZmN0FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC84OTAzMTEtNDhlZS00ODZkLTkzNTkt ZTdlZTRlNzVkM2FmLzEvZmNQcHp4T3FicmNjVVFhZG9lODdVYWQwVElFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC84OTAzMTEtNDhlZS00ODZkLTkzNTktZTdlZTRlNzVkM2Fm LzEvOThzVXBCLU5ubUtOcm9qMGRTZ2lfSGZmN0FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZ2EMA0E AgACMAcDBQMqD0KAMA0GCSqGSIb3DQEBCwUAA4IBAQA+9Juu3BWAtAK8rCczXufO 3+rE5f86tYVo3m5ZtZbwqv/XD8UZaV1CK3MmKPZJEFX6qO3/Y4yo/6/JEbwIPPPW lD18+0ljx9FfFSUf4+4b8qPqcb+1CaOf8uML32xJHl4uQ7gH92keoMw2MEoEBJA+ CeYDuw1pb0mpuqUuc+M0p3auu7Hvvy7usT3eX6VH8E9eLLVtvuiIRjc3bNp2gtlk /EVV+F/scOfHKqkW5UcUW+ymmvsYqaK3ZERyrSEd+AxiK4L6Sp8phSucX0mm+XP+ gjYTHx1+5uuSXol/k84DWiYFTvdWKXpEhVy+IzbkykZ8aBgNjzhg2KCYLQUfUr2y -----END CERTIFICATE-----Generated at Sat Dec 6 17:47:28 2025 by rpki-client