This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/FDQzyl-rmR6oM8fvayGaAbR8jXM.roa File: FDQzyl-rmR6oM8fvayGaAbR8jXM.roa (raw, json) Hash identifier: om6dO1jietNjIahTo0heBTOJARVlUpLyjegJk+RlSrc= Subject key identifier: 14:34:33:CA:5F:AB:99:1E:A8:33:C7:EF:6B:21:9A:01:B4:7C:8D:73 Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b Certificate serial: 019B78348C9D7FED747F27C102632117EBA9 Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/FDQzyl-rmR6oM8fvayGaAbR8jXM.roa Signing time: Thu 01 Jan 2026 06:17:48 +0000 ROA not before: Thu 01 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200482 IP address blocks: 45.89.142.0/24 maxlen: 24 193.187.255.0/24 maxlen: 24 2a12:3e80::/38 maxlen: 48 2a12:3e80::/40 maxlen: 48 2a12:3e80:100::/48 maxlen: 48 2a12:3e80:200::/39 maxlen: 48 2a12:3e80:200::/40 maxlen: 40 2a12:3e80:300::/40 maxlen: 40 2a12:3e80:402::/48 maxlen: 48 2a12:3e80:404::/48 maxlen: 48 2a12:3e80:500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:8c:9d:7f:ed:74:7f:27:c1:02:63:21:17:eb:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b Validity Not Before: Jan 1 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=143433ca5fab991ea833c7ef6b219a01b47c8d73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:92:a5:d6:21:9e:53:9d:54:20:93:19:ca:d3: d4:42:14:ed:ce:94:d7:03:b1:17:d4:71:1c:14:2b: 03:7d:4d:4b:7d:be:4a:b5:49:fc:be:e7:ac:10:ff: c9:e8:d3:4f:d5:b1:be:05:a5:0f:f5:29:37:7c:11: a2:fc:02:26:32:30:9c:79:ce:6b:c5:ba:ff:c6:2b: 7c:c3:01:f5:a8:a9:2f:fe:be:8b:b0:ea:b9:45:c8: dc:1c:80:6a:b1:57:7b:94:3a:0d:fe:d4:9b:80:ef: 58:63:d4:c7:78:7d:f1:fb:c3:5b:e4:eb:90:7a:0c: 95:72:a6:3b:d4:dd:ff:b7:26:23:92:05:e1:fb:0a: 5f:56:b3:d9:f5:8e:f0:4c:12:0d:e3:95:2c:45:61: 50:31:6c:c5:3c:f1:ed:05:0b:08:93:14:3c:df:bd: fc:9f:1e:2c:12:c6:cf:4c:7a:03:b1:63:a2:80:4d: 1c:c7:2f:fc:ab:07:a2:db:26:8f:67:53:50:55:b7: c6:fc:b4:6c:8c:c3:ef:a9:8c:a9:be:fd:ba:61:a2: 9b:7f:8f:26:e2:68:40:4c:4e:d0:df:01:e5:03:d1: d8:eb:28:a4:15:2e:37:18:c5:d4:61:12:6c:41:ae: bb:8b:b5:10:ea:5c:73:9e:a0:31:e6:33:52:30:ee: 0e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:34:33:CA:5F:AB:99:1E:A8:33:C7:EF:6B:21:9A:01:B4:7C:8D:73 X509v3 Authority Key Identifier: keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/FDQzyl-rmR6oM8fvayGaAbR8jXM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.142.0/24 193.187.255.0/24 IPv6: 2a12:3e80::/38 2a12:3e80:402::/48 2a12:3e80:404::/48 2a12:3e80:500::/40 Signature Algorithm: sha256WithRSAEncryption 0f:3c:70:65:51:92:dc:f3:ba:7e:05:38:95:f6:b5:d5:3f:0c: 26:43:77:cf:0a:6d:b4:b6:d0:3c:89:e0:74:72:28:29:32:fb: 3a:67:ec:25:2b:bd:66:7f:20:ec:df:52:5d:6d:b7:98:e9:ef: 35:47:0e:b3:c8:f9:16:1b:d2:c1:e7:d9:4f:23:f4:25:31:33: 8f:9e:68:63:22:72:ee:f9:59:fe:45:47:6d:86:f0:47:04:cd: c2:e8:cd:c8:b8:82:00:66:44:50:23:1a:c8:5f:bc:66:f8:55: 7e:12:67:47:2e:2a:ba:56:04:ab:fc:e2:02:41:83:f5:48:68: 42:11:f0:cf:05:20:ec:9d:ee:8c:31:88:3d:4d:56:7a:15:cb: fe:c5:a1:ab:e4:a6:61:bc:04:a7:84:1b:ff:80:db:a2:5d:29: ef:06:20:f2:b4:df:34:7d:87:7e:c5:52:7a:f8:75:a0:f8:89: fd:b1:13:f7:0c:16:a9:e4:a2:5a:ff:6e:d5:30:67:d9:c3:d4: 0e:4d:38:8f:f1:5a:8f:a9:1b:82:d0:f1:3a:45:3e:b2:2f:e9: 4f:c7:0e:0a:c0:bf:8b:c4:f0:4d:63:3b:49:ee:24:d3:4d:46: 07:17:60:a9:c2:fd:21:49:58:a9:a8:e9:c5:ad:e1:77:fa:46: 2b:aa:0d:a4 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt4NIydf+10fyfBAmMhF+upMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1 ZjU1NGIwHhcNMjYwMTAxMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDM0MzNjYTVmYWI5OTFlYTgzM2M3ZWY2YjIxOWEwMWI0N2M4ZDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5Kl1iGeU51UIJMZytPUQhTtzpTX A7EX1HEcFCsDfU1Lfb5KtUn8vuesEP/J6NNP1bG+BaUP9Sk3fBGi/AImMjCcec5r xbr/xit8wwH1qKkv/r6LsOq5RcjcHIBqsVd7lDoN/tSbgO9YY9THeH3x+8Nb5OuQ egyVcqY71N3/tyYjkgXh+wpfVrPZ9Y7wTBIN45UsRWFQMWzFPPHtBQsIkxQ83738 nx4sEsbPTHoDsWOigE0cxy/8qwei2yaPZ1NQVbfG/LRsjMPvqYypvv26YaKbf48m 4mhATE7Q3wHlA9HY6yikFS43GMXUYRJsQa67i7UQ6lxznqAx5jNSMO4OuwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFBQ0M8pfq5keqDPH72shmgG0fI1zMB8GA1UdIwQY MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It YTI2YmM2NTNiMDZiLzEvRkRRenlsLXJtUjZvTThmdmF5R2FBYlI4alhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjASBAIAATAMAwQALVmOAwQA wbv/MCgEAgACMCIDBgIqEj6AAAMHACoSPoAEAgMHACoSPoAEBAMGACoSPoAFMA0G CSqGSIb3DQEBCwUAA4IBAQAPPHBlUZLc87p+BTiV9rXVPwwmQ3fPCm20ttA8ieB0 cigpMvs6Z+wlK71mfyDs31JdbbeY6e81Rw6zyPkWG9LB59lPI/QlMTOPnmhjInLu +Vn+RUdthvBHBM3C6M3IuIIAZkRQIxrIX7xm+FV+EmdHLiq6VgSr/OICQYP1SGhC EfDPBSDsne6MMYg9TVZ6Fcv+xaGr5KZhvASnhBv/gNuiXSnvBiDytN80fYd+xVJ6 +HWg+In9sRP3DBap5KJa/27VMGfZw9QOTTiP8VqPqRuC0PE6RT6yL+lPxw4KwL+L xPBNYztJ7iTTTUYHF2Cpwv0hSVipqOnFreF3+kYrqg2k -----END CERTIFICATE-----Generated at Sun Jan 25 16:09:46 2026 by rpki-client