This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/x_fb_Ih-hL4SDiaLLipYelQTm-4.roa File: x_fb_Ih-hL4SDiaLLipYelQTm-4.roa (raw, json) Hash identifier: wAFMeTIQGJQe6E16rlfM+KpcCZAN2/zyIJH9z0GrAq4= Subject key identifier: C7:F7:DB:FC:88:7E:84:BE:12:0E:26:8B:2E:2A:58:7A:54:13:9B:EE Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E3903CBD6DED3ABFC9E65114BF46C7E Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/x_fb_Ih-hL4SDiaLLipYelQTm-4.roa Signing time: Fri 02 Jan 2026 10:20:24 +0000 ROA not before: Fri 02 Jan 2026 10:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12389 IP address blocks: 82.137.176.0/20 maxlen: 21 194.149.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:03:cb:d6:de:d3:ab:fc:9e:65:11:4b:f4:6c:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7f7dbfc887e84be120e268b2e2a587a54139bee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d9:33:a3:42:6b:39:36:7a:d8:0b:90:1e:e1: 24:13:43:04:35:e7:01:b7:64:00:23:2a:6e:38:5e: 28:a6:64:48:5f:cd:8b:cc:fd:24:86:86:74:61:31: 85:03:7c:b8:c6:a7:ce:19:4c:41:91:17:36:05:9f: f0:b7:cd:ec:74:bb:3d:ad:63:78:e8:3a:a8:99:ac: 47:57:a8:47:bc:43:fa:37:72:6f:e9:aa:ed:53:d1: be:9b:fd:6f:89:2d:4e:96:ca:9b:bf:39:1d:0d:1b: 2b:5b:11:13:ee:28:0d:0a:a2:e3:c8:4a:8b:8a:5d: 11:1f:9d:9d:74:43:4b:1e:1a:7e:60:55:09:82:97: ea:99:b5:68:09:cd:ad:7b:63:d4:99:4b:c6:42:08: d6:0d:a9:fe:da:e2:14:a8:1a:a6:fd:7a:fe:08:43: 1c:9f:d7:96:a2:d1:ab:eb:1a:ea:8f:b8:46:57:83: dd:d5:21:4c:27:14:fb:72:f8:ff:60:20:3d:0a:f9: 01:c9:07:46:89:5c:3c:e6:82:37:e6:0f:db:97:96: 51:39:24:45:41:c0:06:33:2b:09:38:41:da:18:ac: 4b:ad:24:ee:d5:ff:08:06:5a:d3:6a:d2:6c:71:a2: d6:a3:47:d1:bb:b8:21:15:25:1e:a5:fc:3e:d6:4c: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F7:DB:FC:88:7E:84:BE:12:0E:26:8B:2E:2A:58:7A:54:13:9B:EE X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/x_fb_Ih-hL4SDiaLLipYelQTm-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.137.176.0/20 194.149.70.0/23 Signature Algorithm: sha256WithRSAEncryption 27:3d:9d:57:7c:94:f4:ba:c3:cd:98:13:ce:85:87:88:94:ec: e9:0c:f7:66:f0:01:8e:8d:de:c2:29:6e:09:f0:0f:ac:fc:48: 31:59:8b:1d:21:9e:31:86:33:f0:1e:8c:70:3a:ef:9e:0f:d4: bd:a8:96:99:86:3c:96:89:15:28:6c:e5:e0:d1:e9:fa:f3:94: 88:3f:ce:0d:be:f6:41:a6:0f:8c:e5:80:81:32:e7:30:dd:dc: 7d:92:2e:69:27:3f:96:fc:a9:da:a2:67:61:51:f0:c7:87:da: e5:5a:ef:0f:aa:01:13:46:11:49:60:1c:3f:ad:97:33:bf:bd: 45:26:f4:8b:84:db:fc:4c:53:23:52:89:42:d8:e4:bd:65:8f: d7:7d:81:29:c5:50:59:3a:43:06:e1:5e:c7:57:ef:83:c1:53: 56:3c:31:6c:4c:11:c5:28:fe:a4:42:17:c2:ea:94:9a:20:dc: 0d:ae:3c:ea:51:21:06:2f:83:65:6b:ff:77:71:5a:79:cf:b8: 85:69:a1:bc:22:3e:de:0d:94:d0:73:c9:0b:57:b4:17:a7:22: 7d:39:a4:0e:31:21:72:18:73:d8:83:de:b5:04:e8:1b:54:04: 34:3a:3b:1e:61:88:76:d4:34:07:8a:f5:34:10:04:18:96:a2: b4:4d:30:56 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OQPL1t7Tq/yeZRFL9Gx+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2Y3ZGJmYzg4N2U4NGJlMTIwZTI2OGIyZTJhNTg3YTU0MTM5YmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49kzo0JrOTZ62AuQHuEkE0MENecB t2QAIypuOF4opmRIX82LzP0khoZ0YTGFA3y4xqfOGUxBkRc2BZ/wt83sdLs9rWN4 6DqomaxHV6hHvEP6N3Jv6artU9G+m/1viS1OlsqbvzkdDRsrWxET7igNCqLjyEqL il0RH52ddENLHhp+YFUJgpfqmbVoCc2te2PUmUvGQgjWDan+2uIUqBqm/Xr+CEMc n9eWotGr6xrqj7hGV4Pd1SFMJxT7cvj/YCA9CvkByQdGiVw85oI35g/bl5ZROSRF QcAGMysJOEHaGKxLrSTu1f8IBlrTatJscaLWo0fRu7ghFSUepfw+1kyGNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMf32/yIfoS+Eg4miy4qWHpUE5vuMB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEveF9mYl9JaC1oTDRTRGlhTExpcFllbFFUbS00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEUomwAwQB wpVGMA0GCSqGSIb3DQEBCwUAA4IBAQAnPZ1XfJT0usPNmBPOhYeIlOzpDPdm8AGO jd7CKW4J8A+s/EgxWYsdIZ4xhjPwHoxwOu+eD9S9qJaZhjyWiRUobOXg0en685SI P84NvvZBpg+M5YCBMucw3dx9ki5pJz+W/KnaomdhUfDHh9rlWu8PqgETRhFJYBw/ rZczv71FJvSLhNv8TFMjUolC2OS9ZY/XfYEpxVBZOkMG4V7HV++DwVNWPDFsTBHF KP6kQhfC6pSaINwNrjzqUSEGL4Nla/93cVp5z7iFaaG8Ij7eDZTQc8kLV7QXpyJ9 OaQOMSFyGHPYg961BOgbVAQ0OjseYYh21DQHivU0EAQYlqK0TTBW -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:19 2026 by rpki-client