This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa File: FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa (raw, json) Hash identifier: rfgPddg851fVgVKnw41GRuMBmvRne+mWFfK25xMp0U0= Subject key identifier: 14:A2:2B:12:72:D5:10:65:04:8D:C4:80:B7:34:72:AF:62:A5:1D:11 Certificate issuer: /CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Certificate serial: 019B7CECE2E4E1AE368973BF73B4CD5CE419 Authority key identifier: 65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa Signing time: Fri 02 Jan 2026 04:17:37 +0000 ROA not before: Fri 02 Jan 2026 04:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56867 IP address blocks: 2a02:20c8:1421::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.mft rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:e2:e4:e1:ae:36:89:73:bf:73:b4:cd:5c:e4:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65bdcff77bf060d5da12de45e2072e1cff4560a7 Validity Not Before: Jan 2 04:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14a22b1272d51065048dc480b73472af62a51d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2a:26:9f:bb:4d:77:17:f4:72:80:37:c9:0a: c5:e4:02:05:4c:bc:bc:83:a9:07:f8:d0:24:2f:57: c3:3c:00:d1:55:83:77:c3:9a:c2:79:5d:22:5f:59: 4d:6a:16:68:9f:54:cf:a5:47:3c:12:8f:f0:79:75: 64:4b:bc:83:c6:8d:e6:03:e5:00:52:48:a7:29:ad: b6:6a:ef:12:eb:b8:8a:34:01:d9:31:89:53:cd:fe: 05:2a:19:11:7e:f5:94:d8:dc:cf:09:a5:e3:09:34: 4b:de:4b:42:bd:e7:7d:fa:3a:63:25:8e:44:43:d1: cb:d5:0d:20:cb:a3:59:23:77:18:45:5e:c9:9b:62: 25:76:4b:dc:4e:1a:23:58:3f:72:9e:da:c6:43:81: b4:ea:10:9a:00:a8:ff:bd:92:27:6b:37:61:42:25: 13:1b:42:f0:e6:dd:5f:d2:b9:b9:52:1a:cf:2e:ed: a1:02:49:f0:fe:4b:da:76:18:89:0d:7f:fd:46:fa: 30:d8:18:bf:8e:5f:13:4a:f0:03:d6:64:d9:31:9c: d8:70:04:10:bf:27:da:40:b0:a6:f2:d4:9f:92:68: 23:84:31:99:e6:ff:41:81:21:bd:6a:63:21:33:3d: 4b:a6:b1:d5:37:ed:c0:46:4d:35:15:db:df:68:42: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A2:2B:12:72:D5:10:65:04:8D:C4:80:B7:34:72:AF:62:A5:1D:11 X509v3 Authority Key Identifier: keyid:65:BD:CF:F7:7B:F0:60:D5:DA:12:DE:45:E2:07:2E:1C:FF:45:60:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zb3P93vwYNXaEt5F4gcuHP9FYKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/FKIrEnLVEGUEjcSAtzRyr2KlHRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/195f3d-a851-455a-9b0f-d70cd97f4857/1/Zb3P93vwYNXaEt5F4gcuHP9FYKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:20c8:1421::/48 Signature Algorithm: sha256WithRSAEncryption 61:e2:d7:7c:14:bc:70:05:71:d5:85:51:d3:09:d3:06:7e:c5: b2:f8:ab:af:ef:d8:0a:cb:be:c0:19:84:f3:f3:1a:0b:08:3b: 8c:82:10:eb:34:71:02:25:b6:fe:90:c6:bd:4e:f6:a2:32:ed: 20:c5:40:57:af:3b:5a:4f:04:21:fd:4d:02:0a:5f:e1:8a:8f: 80:8e:cd:ae:af:de:1b:c2:e9:eb:cb:3c:fe:2a:5e:fb:f1:dc: 89:f8:16:a7:8e:99:2f:e7:6a:51:db:a3:a0:ed:d3:a1:b0:ef: 47:dd:24:5a:4a:f9:ae:fd:0c:89:ed:27:88:8b:72:b8:31:d9: ea:31:da:ce:96:4e:7e:26:20:3d:11:d9:63:c4:24:74:46:37: 48:cf:40:b8:47:de:36:6e:26:e0:27:db:75:a4:34:f5:63:81: b7:e0:01:89:c4:ca:3f:28:0b:47:cc:7c:bd:1b:07:92:66:04: 36:4b:6c:5a:43:8d:5c:3d:a7:85:22:80:71:76:dd:1f:6f:01: a5:1c:bc:69:02:0b:b6:bc:83:1b:87:12:95:7c:9f:6f:7d:95: 86:69:47:f4:1a:e9:07:9d:18:fd:eb:a8:49:df:aa:d6:fb:48: a6:5c:1c:ff:8b:af:a7:8b:86:d0:d0:73:ec:17:d9:1f:50:a9: 02:14:83:f4 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt87OLk4a42iXO/c7TNXOQZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YmRjZmY3N2JmMDYwZDVkYTEyZGU0NWUyMDcyZTFjZmY0 NTYwYTcwHhcNMjYwMTAyMDQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGEyMmIxMjcyZDUxMDY1MDQ4ZGM0ODBiNzM0NzJhZjYyYTUxZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSomn7tNdxf0coA3yQrF5AIFTLy8 g6kH+NAkL1fDPADRVYN3w5rCeV0iX1lNahZon1TPpUc8Eo/weXVkS7yDxo3mA+UA UkinKa22au8S67iKNAHZMYlTzf4FKhkRfvWU2NzPCaXjCTRL3ktCved9+jpjJY5E Q9HL1Q0gy6NZI3cYRV7Jm2IldkvcThojWD9yntrGQ4G06hCaAKj/vZInazdhQiUT G0Lw5t1f0rm5UhrPLu2hAknw/kvadhiJDX/9Rvow2Bi/jl8TSvAD1mTZMZzYcAQQ vyfaQLCm8tSfkmgjhDGZ5v9BgSG9amMhMz1LprHVN+3ARk01FdvfaEKEGQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBSiKxJy1RBlBI3EgLc0cq9ipR0RMB8GA1UdIwQY MBaAFGW9z/d78GDV2hLeReIHLhz/RWCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYt ZDcwY2Q5N2Y0ODU3LzEvRktJckVuTFZFR1VFamNTQXR6UnlyMktsSFJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8xOTVmM2QtYTg1MS00NTVhLTliMGYtZDcwY2Q5N2Y0ODU3 LzEvWmIzUDkzdndZTlhhRXQ1RjRnY3VIUDlGWUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIgyBQh MA0GCSqGSIb3DQEBCwUAA4IBAQBh4td8FLxwBXHVhVHTCdMGfsWy+Kuv79gKy77A GYTz8xoLCDuMghDrNHECJbb+kMa9TvaiMu0gxUBXrztaTwQh/U0CCl/hio+Ajs2u r94bwunryzz+Kl778dyJ+Banjpkv52pR26Og7dOhsO9H3SRaSvmu/QyJ7SeIi3K4 MdnqMdrOlk5+JiA9EdljxCR0RjdIz0C4R942bibgJ9t1pDT1Y4G34AGJxMo/KAtH zHy9GweSZgQ2S2xaQ41cPaeFIoBxdt0fbwGlHLxpAgu2vIMbhxKVfJ9vfZWGaUf0 GukHnRj966hJ36rW+0imXBz/i6+ni4bQ0HPsF9kfUKkCFIP0 -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:45 2026 by rpki-client