This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/FKy4QquWDiXsB6434vLtVQiZ1BI.roa File: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (raw, json) Hash identifier: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I= Subject key identifier: 14:AC:B8:42:AB:96:0E:25:EC:07:AE:37:E2:F2:ED:55:08:99:D4:12 Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b Certificate serial: 019B7758C241E2A38B23C0DE66F2B0624921 Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/FKy4QquWDiXsB6434vLtVQiZ1BI.roa Signing time: Thu 01 Jan 2026 02:17:44 +0000 ROA not before: Thu 01 Jan 2026 02:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56566 IP address blocks: 31.31.224.0/19 maxlen: 24 91.224.64.0/23 maxlen: 24 91.224.100.0/23 maxlen: 24 2a00:de00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c2:41:e2:a3:8b:23:c0:de:66:f2:b0:62:49:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b Validity Not Before: Jan 1 02:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14acb842ab960e25ec07ae37e2f2ed550899d412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:4e:1c:df:b0:8d:a2:29:61:dd:5c:66:17: 9d:81:57:c6:1e:c3:a0:d4:02:d8:d1:92:7a:c3:45: 97:59:7e:bb:0b:a7:55:ee:86:17:2c:27:e3:fb:f6: 2d:66:9f:33:ce:ec:5a:0c:21:4d:c2:95:b5:43:67: ad:d2:11:f1:50:d7:97:c6:15:22:00:14:bb:67:2f: 0a:52:a2:3b:8e:35:22:e2:4d:61:cf:b0:f9:99:a2: ec:64:0f:ee:e1:89:0c:08:f6:8d:1a:7e:98:53:62: e5:dd:64:6f:17:f9:9d:7d:e7:0a:b5:4e:05:ec:b0: 0e:c1:75:48:dd:16:18:19:96:4a:5f:c6:41:33:68: 50:60:b0:4a:d2:cf:c1:79:d3:24:60:67:a5:b0:3d: b8:3a:cb:29:6b:fb:20:4f:d6:03:2d:a3:b7:a0:c8: 7f:e8:58:bb:6d:51:98:a9:17:15:07:56:6d:68:59: c2:39:08:e1:ba:16:0c:ba:66:b5:13:1a:a5:29:78: ea:43:12:b6:ba:72:ec:ed:b0:dd:9a:50:4a:5b:1e: 9b:28:31:fd:fa:a6:bb:33:9a:c9:a3:0c:a5:fc:43: 5f:d9:ca:e8:5f:e3:84:49:01:28:13:b2:45:95:a9: 52:01:cd:84:1c:c1:cc:87:b7:0b:4e:e5:01:bf:a1: 6a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AC:B8:42:AB:96:0E:25:EC:07:AE:37:E2:F2:ED:55:08:99:D4:12 X509v3 Authority Key Identifier: keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/FKy4QquWDiXsB6434vLtVQiZ1BI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.31.224.0/19 91.224.64.0/23 91.224.100.0/23 IPv6: 2a00:de00::/32 Signature Algorithm: sha256WithRSAEncryption 7b:a9:c7:27:8f:89:8f:a7:58:25:c7:8e:36:49:3d:60:77:c2: 81:87:6a:46:18:c4:a5:94:3a:fa:09:12:e6:f1:2a:67:52:c7: 8d:bb:a3:c9:c6:1c:ab:7f:35:01:34:83:da:63:44:e1:76:86: 2e:90:a9:ef:14:82:29:ce:9d:e0:8f:b7:a9:d9:b4:7d:09:f1: c1:6e:3d:d1:81:8e:72:21:fb:89:b1:52:aa:ed:2e:2f:05:5d: e5:a5:3c:8f:ad:70:de:41:0c:bd:80:f6:5d:cd:a2:44:76:bb: 61:a7:c4:d6:6d:cc:87:3e:c2:2f:a2:c2:f3:c9:f3:56:56:fd: ab:4f:b0:8b:68:2d:49:1e:67:f5:56:ad:89:3f:ba:ad:5d:49: 80:54:67:ed:47:e3:15:44:92:ba:74:81:ea:c7:38:d5:3e:4c: 10:de:04:b4:60:2a:ef:fc:e8:54:96:56:f5:0c:1f:4c:ce:c0: da:91:a6:e2:a0:cc:59:ed:ee:e0:f2:34:84:28:42:30:8d:f1: 95:92:71:f2:6f:b2:2d:58:59:9b:46:15:21:7c:75:72:0b:ad: e7:38:7a:5a:b4:71:8e:9a:d7:f9:0d:2e:a1:08:92:e0:f8:39: 7d:c8:dd:2e:4e:46:e9:c3:cf:cb:14:f9:3d:c9:1a:1c:9c:fb: 74:db:cb:84 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt3WMJB4qOLI8DeZvKwYkkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTRlODE1M2NkM2Y5MWMzMzM5N2Y5YjdkZjkxYmYxNzNj NGQxNmIwHhcNMjYwMTAxMDIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGFjYjg0MmFiOTYwZTI1ZWMwN2FlMzdlMmYyZWQ1NTA4OTlkNDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9ZOHN+wjaIpYd1cZhedgVfGHsOg 1ALY0ZJ6w0WXWX67C6dV7oYXLCfj+/YtZp8zzuxaDCFNwpW1Q2et0hHxUNeXxhUi ABS7Zy8KUqI7jjUi4k1hz7D5maLsZA/u4YkMCPaNGn6YU2Ll3WRvF/mdfecKtU4F 7LAOwXVI3RYYGZZKX8ZBM2hQYLBK0s/BedMkYGelsD24Osspa/sgT9YDLaO3oMh/ 6Fi7bVGYqRcVB1ZtaFnCOQjhuhYMuma1ExqlKXjqQxK2unLs7bDdmlBKWx6bKDH9 +qa7M5rJowyl/ENf2croX+OESQEoE7JFlalSAc2EHMHMh7cLTuUBv6FqmQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFBSsuEKrlg4l7AeuN+Ly7VUImdQSMB8GA1UdIwQY MBaAFPoU6BU80/kcMzl/m335G/FzxNFrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oVG9GVHpULVJ3ek9YLWJmZmtiOFhQRTBXcy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMjQwNzgwLTgxMTAtNDVkNy1iZDcz LWZkZmQyZDcyYjU0MS8xL0ZLeTRRcXVXRGlYc0I2NDM0dkx0VlFpWjFCSS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzcvMjQwNzgwLTgxMTAtNDVkNy1iZDczLWZkZmQyZDcyYjU0 MS8xLzEtaFRvRlR6VC1Sd3pPWC1iZmZrYjhYUEUwV3MuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwOgYIKwYBBQUHAQcBAf8EKzApMBgEAgABMBIDBAUfH+AD BAFb4EADBAFb4GQwDQQCAAIwBwMFACoA3gAwDQYJKoZIhvcNAQELBQADggEBAHup xyePiY+nWCXHjjZJPWB3woGHakYYxKWUOvoJEubxKmdSx427o8nGHKt/NQE0g9pj ROF2hi6Qqe8UginOneCPt6nZtH0J8cFuPdGBjnIh+4mxUqrtLi8FXeWlPI+tcN5B DL2A9l3NokR2u2GnxNZtzIc+wi+iwvPJ81ZW/atPsItoLUkeZ/VWrYk/uq1dSYBU Z+1H4xVEkrp0gerHONU+TBDeBLRgKu/86FSWVvUMH0zOwNqRpuKgzFnt7uDyNIQo QjCN8ZWScfJvsi1YWZtGFSF8dXILrec4elq0cY6a1/kNLqEIkuD4OX3I3S5ORunD z8sU+T3JGhyc+3Tby4Q= -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:14 2026 by rpki-client