This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/_FiCFPS2WDQr7qrNaK4jqE3Fo30.roa File: _FiCFPS2WDQr7qrNaK4jqE3Fo30.roa (raw, json) Hash identifier: 85eMzcmnZYam84IsG9UXFtajYX0CoTdOe5qhVA9kejg= Subject key identifier: FC:58:82:14:F4:B6:58:34:2B:EE:AA:CD:68:AE:23:A8:4D:C5:A3:7D Certificate issuer: /CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Certificate serial: 019BE56FDEDCFC8B2E42F19AEF36D9C756F7 Authority key identifier: 3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/_FiCFPS2WDQr7qrNaK4jqE3Fo30.roa Signing time: Thu 22 Jan 2026 11:21:12 +0000 ROA not before: Thu 22 Jan 2026 11:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 86.109.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 17:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:6f:de:dc:fc:8b:2e:42:f1:9a:ef:36:d9:c7:56:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7b9dffaae33ec2cf19b5ad4e49c1e9eb1d9d64 Validity Not Before: Jan 22 11:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc588214f4b658342beeaacd68ae23a84dc5a37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:22:b0:7d:01:7a:39:42:21:c3:7e:1e:37:dc: 33:53:ac:de:e2:87:8d:71:dc:57:65:a9:09:d4:c5: 78:f1:1e:99:36:98:80:4b:14:00:86:22:fc:92:c2: 91:2a:b5:c7:e3:37:80:2e:70:b9:a9:10:e3:7f:80: 54:b6:ae:ed:5a:19:ea:75:7b:70:5b:b1:5e:d1:bf: 83:bd:f5:b0:a2:c8:4d:f6:98:c3:56:0f:b2:9e:5d: 2b:99:76:1e:62:de:c6:48:d9:96:7e:52:ed:1c:9e: f0:15:1d:05:b9:80:cc:ab:ac:5e:a8:24:42:fd:62: e3:9c:04:7c:82:5f:33:f4:c3:a5:14:00:e6:e4:2a: 1c:8c:2e:82:ad:9b:32:ea:27:d0:d5:69:5f:12:67: f3:1c:d1:49:41:bd:82:19:10:7a:35:35:2b:6d:3f: 32:49:8a:2d:fd:aa:41:ad:79:3f:73:26:03:05:3a: 8c:a2:e9:98:59:df:ff:db:51:24:c4:97:07:51:1d: bb:f3:78:2f:f6:98:61:48:8f:09:1c:be:56:cd:13: 94:10:a3:ec:9b:17:0c:30:14:9b:89:38:21:6f:10: 2d:34:c0:29:91:10:f6:47:70:b7:f0:0b:bd:5d:0b: cd:d0:df:ec:1e:28:db:d2:af:35:3b:3d:71:cc:97: 3b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:58:82:14:F4:B6:58:34:2B:EE:AA:CD:68:AE:23:A8:4D:C5:A3:7D X509v3 Authority Key Identifier: keyid:3D:7B:9D:FF:AA:E3:3E:C2:CF:19:B5:AD:4E:49:C1:E9:EB:1D:9D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXud_6rjPsLPGbWtTknB6esdnWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/_FiCFPS2WDQr7qrNaK4jqE3Fo30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/49195b-2909-46e0-abce-422523c4e68b/1/PXud_6rjPsLPGbWtTknB6esdnWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.109.74.0/24 Signature Algorithm: sha256WithRSAEncryption 45:87:d4:d4:d9:c9:7d:60:ce:ec:e1:f5:26:72:71:e4:3c:02: 2c:58:9d:eb:44:4c:14:18:9d:7c:94:6f:6c:34:63:60:24:df: ce:ff:ff:a6:a3:d4:e5:77:5e:41:db:a4:51:72:d3:61:db:43: 35:55:6e:4e:e6:85:46:a0:6f:f3:3a:9e:d8:e7:eb:f7:7f:34: 19:7e:77:d1:0b:04:4a:51:e3:e4:05:83:5f:7f:88:a9:61:2b: 25:d6:9e:74:a6:6d:cd:91:d0:8b:2a:cb:6c:fa:1a:70:bd:a0: 8e:1e:c8:4b:39:d5:d3:ab:fd:08:b4:8a:48:63:dc:04:76:ca: bf:fe:c1:b5:e3:48:42:6e:4f:68:4e:72:c8:b2:1e:0b:78:15: db:0f:40:3b:31:4d:e5:4d:eb:68:7f:a7:6d:4c:69:98:66:62: 30:3c:d1:27:72:9e:58:e6:a5:3d:22:fc:e5:cf:ca:a8:c0:e0: 50:ae:68:eb:a4:76:83:84:bd:e1:88:98:dc:b5:98:d6:22:53: 21:70:81:53:3b:cf:67:44:72:26:2f:ba:4a:b7:b0:83:10:8f: 7e:66:3a:a2:42:c5:ab:e9:bf:18:dd:0e:56:b8:49:7f:32:d3: e6:57:85:58:43:9f:b4:6b:5d:2f:c7:5c:4c:37:f3:ff:7e:04: 2f:c8:5d:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvlb97c/IsuQvGa7zbZx1b3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkN2I5ZGZmYWFlMzNlYzJjZjE5YjVhZDRlNDljMWU5ZWIx ZDlkNjQwHhcNMjYwMTIyMTEyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzU4ODIxNGY0YjY1ODM0MmJlZWFhY2Q2OGFlMjNhODRkYzVhMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iKwfQF6OUIhw34eN9wzU6ze4oeN cdxXZakJ1MV48R6ZNpiASxQAhiL8ksKRKrXH4zeALnC5qRDjf4BUtq7tWhnqdXtw W7Fe0b+DvfWwoshN9pjDVg+ynl0rmXYeYt7GSNmWflLtHJ7wFR0FuYDMq6xeqCRC /WLjnAR8gl8z9MOlFADm5CocjC6CrZsy6ifQ1WlfEmfzHNFJQb2CGRB6NTUrbT8y SYot/apBrXk/cyYDBTqMoumYWd//21EkxJcHUR2783gv9phhSI8JHL5WzROUEKPs mxcMMBSbiTghbxAtNMApkRD2R3C38Au9XQvN0N/sHijb0q81Oz1xzJc77wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPxYghT0tlg0K+6qzWiuI6hNxaN9MB8GA1UdIwQY MBaAFD17nf+q4z7Czxm1rU5JwenrHZ1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2Ut NDIyNTIzYzRlNjhiLzEvX0ZpQ0ZQUzJXRFFyN3FyTmFLNGpxRTNGbzMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80OTE5NWItMjkwOS00NmUwLWFiY2UtNDIyNTIzYzRlNjhi LzEvUFh1ZF82cmpQc0xQR2JXdFRrbkI2ZXNkbldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVm1KMA0G CSqGSIb3DQEBCwUAA4IBAQBFh9TU2cl9YM7s4fUmcnHkPAIsWJ3rREwUGJ18lG9s NGNgJN/O//+mo9Tld15B26RRctNh20M1VW5O5oVGoG/zOp7Y5+v3fzQZfnfRCwRK UePkBYNff4ipYSsl1p50pm3NkdCLKsts+hpwvaCOHshLOdXTq/0ItIpIY9wEdsq/ /sG140hCbk9oTnLIsh4LeBXbD0A7MU3lTetof6dtTGmYZmIwPNEncp5Y5qU9Ivzl z8qowOBQrmjrpHaDhL3hiJjctZjWIlMhcIFTO89nRHImL7pKt7CDEI9+ZjqiQsWr 6b8Y3Q5WuEl/MtPmV4VYQ5+0a10vx1xMN/P/fgQvyF0Q -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:25 2026 by rpki-client