This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FDjfPJ1b2un54RcsxFzXrmIh9vw.roa File: FDjfPJ1b2un54RcsxFzXrmIh9vw.roa (raw, json) Hash identifier: Ccv8c7H4XZKfbC/jZrSX0si2V/3E8zoZJ2jD84UglfQ= Subject key identifier: 14:38:DF:3C:9D:5B:DA:E9:F9:E1:17:2C:C4:5C:D7:AE:62:21:F6:FC Certificate issuer: /CN=14bf39139b710c4f7237edfd88518655af39c323 Certificate serial: 019B76EAD7B3BC213C4CD065ED74E6B7CBAA Authority key identifier: 14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FDjfPJ1b2un54RcsxFzXrmIh9vw.roa Signing time: Thu 01 Jan 2026 00:17:40 +0000 ROA not before: Thu 01 Jan 2026 00:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 94.199.4.0/24 maxlen: 24 2a13:3d80::/29 maxlen: 29 2a13:3d80::/48 maxlen: 48 2a13:3d80:8000::/33 maxlen: 33 2a13:3d82::/32 maxlen: 32 2a13:3d83::/32 maxlen: 32 2a13:3d84::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.mft rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 18:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:d7:b3:bc:21:3c:4c:d0:65:ed:74:e6:b7:cb:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bf39139b710c4f7237edfd88518655af39c323 Validity Not Before: Jan 1 00:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1438df3c9d5bdae9f9e1172cc45cd7ae6221f6fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a1:a7:48:2b:27:92:02:d3:9b:10:39:25:d4: d0:b2:6d:ed:13:dd:65:1a:9b:ff:c9:27:90:0a:7a: ac:5e:fd:0c:38:65:0a:00:18:38:37:81:55:e0:1e: e1:9b:b7:37:9f:7e:16:cd:71:85:4f:64:80:e4:5d: 6e:38:f7:ec:b7:36:72:ec:79:42:e3:3f:8f:53:65: 72:c7:16:ac:36:df:cb:89:44:21:54:3f:74:60:b7: 81:d1:b5:a9:23:c1:52:df:f4:d6:a0:74:67:64:60: 28:ea:49:6e:e4:f9:9c:3e:91:fc:87:af:9c:38:13: ea:64:cc:72:69:13:ff:4b:28:d2:41:fd:2d:93:12: 86:1f:10:c3:75:d8:96:3c:c7:ad:35:87:03:9c:3e: d6:11:e9:a4:7e:f1:87:75:8a:b3:5c:04:ef:bb:b3: 24:d0:c8:35:d9:3c:af:26:ed:37:08:95:a9:62:95: 65:e2:65:85:94:ab:70:b0:fb:52:44:0f:4f:82:dd: fb:e2:37:8b:ab:10:ad:62:33:58:ce:8e:96:79:46: 13:4c:34:af:ac:28:3a:0b:ae:d4:2e:d7:23:fb:36: cc:79:95:01:52:f8:67:cc:7e:37:3e:7f:e0:d0:af: 09:95:32:e8:53:9d:e9:27:8e:8c:6a:c5:9d:df:1e: bf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:38:DF:3C:9D:5B:DA:E9:F9:E1:17:2C:C4:5C:D7:AE:62:21:F6:FC X509v3 Authority Key Identifier: keyid:14:BF:39:13:9B:71:0C:4F:72:37:ED:FD:88:51:86:55:AF:39:C3:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL85E5txDE9yN-39iFGGVa85wyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FDjfPJ1b2un54RcsxFzXrmIh9vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b96259-33b8-454a-8c5f-a862b88593a0/1/FL85E5txDE9yN-39iFGGVa85wyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.199.4.0/24 IPv6: 2a13:3d80::/29 Signature Algorithm: sha256WithRSAEncryption 54:cb:23:b4:24:2b:c3:3a:c3:96:50:1b:39:54:0a:62:47:cf: 39:a3:4b:bf:bb:e7:50:44:5f:a3:b7:d9:9c:15:8d:6a:44:79: 56:e2:f4:02:1f:d9:d3:13:b0:9f:ad:20:05:1d:57:84:a6:bf: f9:df:a8:ba:58:63:61:1b:c5:81:eb:9d:b7:5d:df:bf:c5:38: 3d:71:1f:6f:6d:df:bf:05:a4:98:8d:09:ff:84:d9:36:fe:10: 72:be:f4:c6:b1:32:8e:ec:8c:80:21:09:62:59:24:dd:00:3c: 83:c5:8e:9e:c5:89:70:7b:d9:d4:e4:b2:45:a5:f4:04:97:eb: 2f:2c:b5:88:23:09:36:6b:08:89:87:c2:9f:15:10:4c:fe:8f: aa:e9:20:ae:55:26:78:9e:fa:ac:52:5e:2f:79:0d:ec:1e:d2: 37:b6:6e:55:78:42:12:fe:67:d6:87:58:2f:a2:c4:82:6b:e1: 7c:52:86:64:f7:23:53:35:12:e3:ab:33:21:87:9a:98:17:5e: 7e:55:cb:da:a8:31:8d:cb:8f:70:16:29:5e:c1:08:73:1d:f0: 4c:ef:35:76:f0:70:70:34:70:62:29:a6:44:79:a6:e9:72:76: f6:44:5e:1b:f2:0a:48:94:f5:f2:b3:86:55:ac:01:9d:fe:b6: 56:6b:f0:b0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26tezvCE8TNBl7XTmt8uqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmYzOTEzOWI3MTBjNGY3MjM3ZWRmZDg4NTE4NjU1YWYz OWMzMjMwHhcNMjYwMTAxMDAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDM4ZGYzYzlkNWJkYWU5ZjllMTE3MmNjNDVjZDdhZTYyMjFmNmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqGnSCsnkgLTmxA5JdTQsm3tE91l Gpv/ySeQCnqsXv0MOGUKABg4N4FV4B7hm7c3n34WzXGFT2SA5F1uOPfstzZy7HlC 4z+PU2VyxxasNt/LiUQhVD90YLeB0bWpI8FS3/TWoHRnZGAo6klu5PmcPpH8h6+c OBPqZMxyaRP/SyjSQf0tkxKGHxDDddiWPMetNYcDnD7WEemkfvGHdYqzXATvu7Mk 0Mg12TyvJu03CJWpYpVl4mWFlKtwsPtSRA9Pgt374jeLqxCtYjNYzo6WeUYTTDSv rCg6C67ULtcj+zbMeZUBUvhnzH43Pn/g0K8JlTLoU53pJ46MasWd3x6/DwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBQ43zydW9rp+eEXLMRc165iIfb8MB8GA1UdIwQY MBaAFBS/ORObcQxPcjft/YhRhlWvOcMjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iOTYyNTktMzNiOC00NTRhLThjNWYt YTg2MmI4ODU5M2EwLzEvRkRqZlBKMWIydW41NFJjc3hGelhybUloOXZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iOTYyNTktMzNiOC00NTRhLThjNWYtYTg2MmI4ODU5M2Ew LzEvRkw4NUU1dHhERTl5Ti0zOWlGR0dWYTg1d3lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXscEMA0E AgACMAcDBQMqEz2AMA0GCSqGSIb3DQEBCwUAA4IBAQBUyyO0JCvDOsOWUBs5VApi R885o0u/u+dQRF+jt9mcFY1qRHlW4vQCH9nTE7CfrSAFHVeEpr/536i6WGNhG8WB 6523Xd+/xTg9cR9vbd+/BaSYjQn/hNk2/hByvvTGsTKO7IyAIQliWSTdADyDxY6e xYlwe9nU5LJFpfQEl+svLLWIIwk2awiJh8KfFRBM/o+q6SCuVSZ4nvqsUl4veQ3s HtI3tm5VeEIS/mfWh1gvosSCa+F8UoZk9yNTNRLjqzMhh5qYF15+VcvaqDGNy49w FilewQhzHfBM7zV28HBwNHBiKaZEeabpcnb2RF4b8gpIlPXys4ZVrAGd/rZWa/Cw -----END CERTIFICATE-----Generated at Thu Jan 1 21:24:01 2026 by rpki-client