This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fgn-EWMReeTfmhfUp01I98TTr04.roa File: fgn-EWMReeTfmhfUp01I98TTr04.roa (raw, json) Hash identifier: N4asGpK5g/LeihIckvTuR3dGkGkCZdR0/239C+W4cV4= Subject key identifier: 7E:09:FE:11:63:11:79:E4:DF:9A:17:D4:A7:4D:48:F7:C4:D3:AF:4E Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AAB0CF29CBEC4A34BF8ED9BF4C2E2 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fgn-EWMReeTfmhfUp01I98TTr04.roa Signing time: Thu 01 Jan 2026 16:18:40 +0000 ROA not before: Thu 01 Jan 2026 16:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60982 IP address blocks: 82.152.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ab:0c:f2:9c:be:c4:a3:4b:f8:ed:9b:f4:c2:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e09fe11631179e4df9a17d4a74d48f7c4d3af4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:12:8a:7f:f5:42:4d:59:fa:5c:c5:28:a5:0a: ee:a3:16:ad:c3:95:0e:12:2a:b4:d5:d4:0f:b9:57: 47:c3:03:79:60:ae:24:7e:f3:9f:bb:ab:c7:bf:c3: db:2e:10:27:9f:2a:c7:70:41:9e:37:68:17:30:44: 04:69:63:14:b6:b0:9d:af:d8:cb:09:bc:88:1a:87: 79:4b:37:bd:98:37:0d:9b:27:8d:13:e7:c9:23:03: 67:f5:c5:99:76:3c:47:da:e1:db:fc:d4:b4:28:a4: ed:c9:40:be:78:29:1a:a8:d3:d6:34:0d:d6:e3:5b: 3c:89:db:4b:41:1c:60:30:b9:4e:15:3c:5a:af:09: e1:24:35:27:ed:00:f8:18:2a:ef:26:14:79:04:6f: c2:17:77:dc:cc:c5:43:a6:c2:da:95:0b:1b:48:5c: 35:b1:6e:ac:bc:07:b9:16:a2:69:20:5a:ff:58:24: d3:61:36:d2:10:ff:3b:51:c0:87:94:54:7f:2f:c1: 86:95:51:55:6c:d6:9b:ff:72:31:c0:80:2d:f5:48: d1:ef:fe:10:98:d4:bc:6f:25:15:f6:d3:9e:cc:7f: 80:57:29:aa:44:d7:f2:29:85:de:27:03:06:b8:37: 35:a5:98:b2:d1:a3:28:17:be:60:88:89:ee:a0:c6: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:09:FE:11:63:11:79:E4:DF:9A:17:D4:A7:4D:48:F7:C4:D3:AF:4E X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fgn-EWMReeTfmhfUp01I98TTr04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.132.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:2d:72:b0:2b:5e:58:58:3e:8f:76:a2:38:6d:08:b5:86:d4: 5d:c6:51:bb:c1:6b:e6:43:c4:b4:c3:eb:63:70:42:92:44:5c: 28:57:88:22:46:4e:4e:a3:4a:2b:39:f0:af:b8:6b:d6:ee:76: 71:25:e2:87:37:ea:81:47:e1:f4:bb:7a:0e:56:0c:eb:11:9e: 38:d5:48:2f:70:ae:b1:ca:fe:05:0d:85:d2:8c:24:cb:c5:50: ac:c9:39:2e:90:c5:fc:b3:2d:fa:f9:ad:39:51:60:c3:51:3d: 1e:c2:83:79:1a:58:4c:66:bf:11:50:ab:ba:0d:29:22:e5:ab: df:0c:7f:0d:9f:49:7b:9e:fa:68:20:ab:1a:ab:d0:67:94:fd: bb:3d:38:b8:26:cb:20:51:f6:97:dd:73:cc:4d:f5:f3:47:d8: 36:b2:66:48:69:2d:65:46:5a:67:40:6d:f3:61:72:46:90:30: 0a:08:d1:b2:23:69:c1:14:91:4e:7a:a7:b7:fc:af:1d:60:bc: de:c5:97:2a:c0:70:58:10:33:51:6e:00:2a:22:b3:1b:38:f3: 23:db:9f:be:b5:a1:38:f7:b0:5a:c9:32:5b:c7:90:00:a2:e4: bb:07:a2:a4:05:86:c9:6b:f8:23:6a:89:0e:72:bd:d2:39:5d: 82:84:f2:8c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqsM8py+xKNL+O2b9MLiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTA5ZmUxMTYzMTE3OWU0ZGY5YTE3ZDRhNzRkNDhmN2M0ZDNhZjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BKKf/VCTVn6XMUopQruoxatw5UO Eiq01dQPuVdHwwN5YK4kfvOfu6vHv8PbLhAnnyrHcEGeN2gXMEQEaWMUtrCdr9jL CbyIGod5Sze9mDcNmyeNE+fJIwNn9cWZdjxH2uHb/NS0KKTtyUC+eCkaqNPWNA3W 41s8idtLQRxgMLlOFTxarwnhJDUn7QD4GCrvJhR5BG/CF3fczMVDpsLalQsbSFw1 sW6svAe5FqJpIFr/WCTTYTbSEP87UcCHlFR/L8GGlVFVbNab/3IxwIAt9UjR7/4Q mNS8byUV9tOezH+AVymqRNfyKYXeJwMGuDc1pZiy0aMoF75giInuoMZdAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH4J/hFjEXnk35oX1KdNSPfE069OMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvZmduLUVXTVJlZVRmbWhmVXAwMUk5OFRUcjA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpiEMA0G CSqGSIb3DQEBCwUAA4IBAQAbLXKwK15YWD6PdqI4bQi1htRdxlG7wWvmQ8S0w+tj cEKSRFwoV4giRk5Oo0orOfCvuGvW7nZxJeKHN+qBR+H0u3oOVgzrEZ441UgvcK6x yv4FDYXSjCTLxVCsyTkukMX8sy36+a05UWDDUT0ewoN5GlhMZr8RUKu6DSki5avf DH8Nn0l7nvpoIKsaq9BnlP27PTi4JssgUfaX3XPMTfXzR9g2smZIaS1lRlpnQG3z YXJGkDAKCNGyI2nBFJFOeqe3/K8dYLzexZcqwHBYEDNRbgAqIrMbOPMj25++taE4 97BayTJbx5AAouS7B6KkBYbJa/gjaokOcr3SOV2ChPKM -----END CERTIFICATE-----Generated at Sun Jan 25 08:47:41 2026 by rpki-client