This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/FCbP3k2rGutoC5ZIVI42Yy4D044.roa File: FCbP3k2rGutoC5ZIVI42Yy4D044.roa (raw, json) Hash identifier: YEtesgH5hZKksi2t3ICvpYYP+6hkAxgaGRoHD54GMj4= Subject key identifier: 14:26:CF:DE:4D:AB:1A:EB:68:0B:96:48:54:8E:36:63:2E:03:D3:8E Certificate issuer: /CN=c592786ced6ce597585468bb4f36b31cf6acec6e Certificate serial: 019B7F1541DA3EA3D246CE0967FDEB55E67A Authority key identifier: C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/FCbP3k2rGutoC5ZIVI42Yy4D044.roa Signing time: Fri 02 Jan 2026 14:20:58 +0000 ROA not before: Fri 02 Jan 2026 14:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8473 IP address blocks: 81.88.72.0/22 maxlen: 22 81.88.78.0/23 maxlen: 23 2a01:460::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.mft rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:41:da:3e:a3:d2:46:ce:09:67:fd:eb:55:e6:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c592786ced6ce597585468bb4f36b31cf6acec6e Validity Not Before: Jan 2 14:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1426cfde4dab1aeb680b9648548e36632e03d38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d5:7a:63:23:63:be:b3:75:42:65:1f:83:4d: 64:f6:bb:43:97:95:80:27:b4:26:85:99:a0:93:7b: 89:5f:32:72:1e:e6:0c:ce:5b:b1:a9:43:24:a2:49: 7f:f5:f7:5c:46:e8:de:ae:89:71:f5:1c:ae:43:3a: 3a:33:5f:df:5b:5d:8f:70:54:df:c4:7a:7e:37:4a: 96:1b:80:e7:05:48:bf:b0:45:1f:b7:02:0d:3d:22: 79:cc:77:89:e5:a3:2b:f3:c8:1b:8f:12:81:67:51: a5:a8:0b:58:04:86:e4:f7:9e:9c:db:4b:9c:ad:7d: 9e:65:bc:2d:a9:0d:f6:41:cf:e6:a4:17:fe:65:14: 83:44:d6:74:34:90:33:b8:45:1d:4a:5e:79:bd:71: 82:9a:08:1b:75:0e:ef:66:77:b1:8f:24:14:1c:8b: 33:44:53:e1:69:3d:23:d8:e7:a9:17:a5:a6:0d:62: fa:77:71:d6:0d:aa:f1:6a:56:a4:f5:2d:fb:91:a4: af:72:07:31:1e:72:9e:b9:d1:05:3d:b9:83:ca:de: 2a:12:23:28:a5:1d:78:dd:9f:47:2d:70:1d:ba:e7: c5:29:0a:26:6b:24:4f:aa:15:bd:a4:ee:27:0b:eb: e9:24:9d:4f:56:10:76:70:d2:13:7f:6f:fd:62:17: 46:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:26:CF:DE:4D:AB:1A:EB:68:0B:96:48:54:8E:36:63:2E:03:D3:8E X509v3 Authority Key Identifier: keyid:C5:92:78:6C:ED:6C:E5:97:58:54:68:BB:4F:36:B3:1C:F6:AC:EC:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZJ4bO1s5ZdYVGi7TzazHPas7G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/FCbP3k2rGutoC5ZIVI42Yy4D044.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9c0b7-a23a-458f-8f64-ba37511404c2/1/xZJ4bO1s5ZdYVGi7TzazHPas7G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.88.72.0/22 81.88.78.0/23 IPv6: 2a01:460::/32 Signature Algorithm: sha256WithRSAEncryption 95:fb:d8:4e:92:52:4f:58:a2:16:16:a6:4d:c0:47:13:6a:68: 6c:f1:77:bb:2b:50:57:9a:f9:57:ac:d9:57:71:0a:70:42:19: bf:22:40:51:52:ad:04:86:77:36:ed:d0:23:95:70:a7:76:6f: 05:a9:a4:a0:ac:5e:f1:87:61:ba:81:f4:d2:da:8b:ea:87:ea: d4:bd:98:e0:ae:cd:a5:da:49:3a:09:5e:33:a0:ed:f6:e9:12: a4:b4:3f:a4:de:6a:21:52:38:6b:46:ce:3d:de:97:d2:fb:2e: 40:6b:98:8e:0d:68:4c:5a:33:75:91:00:86:ed:64:81:32:44: c6:25:6b:1a:a1:ad:41:d3:dc:82:9d:a2:fa:a3:91:c6:cc:eb: 98:a1:df:49:17:fe:bc:e1:69:ed:f8:b7:39:1b:f7:c8:d5:b2: 91:a9:90:9e:70:46:97:4e:b1:21:1b:bb:07:4a:7e:13:13:7f: a4:d8:ab:02:df:9e:18:8b:e1:d6:5c:ac:85:6d:f9:75:88:f8: 73:67:8f:c3:c7:d9:d4:58:d6:fd:ab:dc:d1:fd:af:d2:4e:83: d5:b0:60:88:25:42:65:39:77:a8:f3:23:18:57:09:ff:f8:6a: 9b:17:f2:03:5a:88:49:a6:10:40:b8:79:86:f5:e7:e1:65:ba: ac:96:c2:ae -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/FUHaPqPSRs4JZ/3rVeZ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTI3ODZjZWQ2Y2U1OTc1ODU0NjhiYjRmMzZiMzFjZjZh Y2VjNmUwHhcNMjYwMTAyMTQyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDI2Y2ZkZTRkYWIxYWViNjgwYjk2NDg1NDhlMzY2MzJlMDNkMzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztV6YyNjvrN1QmUfg01k9rtDl5WA J7QmhZmgk3uJXzJyHuYMzluxqUMkokl/9fdcRujerolx9RyuQzo6M1/fW12PcFTf xHp+N0qWG4DnBUi/sEUftwINPSJ5zHeJ5aMr88gbjxKBZ1GlqAtYBIbk956c20uc rX2eZbwtqQ32Qc/mpBf+ZRSDRNZ0NJAzuEUdSl55vXGCmggbdQ7vZnexjyQUHIsz RFPhaT0j2OepF6WmDWL6d3HWDarxalak9S37kaSvcgcxHnKeudEFPbmDyt4qEiMo pR143Z9HLXAduufFKQomayRPqhW9pO4nC+vpJJ1PVhB2cNITf2/9YhdGYwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBQmz95NqxrraAuWSFSONmMuA9OOMB8GA1UdIwQY MBaAFMWSeGztbOWXWFRou082sxz2rOxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQt YmEzNzUxMTQwNGMyLzEvRkNiUDNrMnJHdXRvQzVaSVZJNDJZeTREMDQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9hOWMwYjctYTIzYS00NThmLThmNjQtYmEzNzUxMTQwNGMy LzEveFpKNGJPMXM1WmRZVkdpN1R6YXpIUGFzN0c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCUVhIAwQB UVhOMA0EAgACMAcDBQAqAQRgMA0GCSqGSIb3DQEBCwUAA4IBAQCV+9hOklJPWKIW FqZNwEcTamhs8Xe7K1BXmvlXrNlXcQpwQhm/IkBRUq0Ehnc27dAjlXCndm8FqaSg rF7xh2G6gfTS2ovqh+rUvZjgrs2l2kk6CV4zoO326RKktD+k3mohUjhrRs493pfS +y5Aa5iODWhMWjN1kQCG7WSBMkTGJWsaoa1B09yCnaL6o5HGzOuYod9JF/684Wnt +Lc5G/fI1bKRqZCecEaXTrEhG7sHSn4TE3+k2KsC354Yi+HWXKyFbfl1iPhzZ4/D x9nUWNb9q9zR/a/SToPVsGCIJUJlOXeo8yMYVwn/+GqbF/IDWohJphBAuHmG9efh ZbqslsKu -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:17 2026 by rpki-client