This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/FVTkjzWbmN1CXQ1gquYHPct9ixg.roa File: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (raw, json) Hash identifier: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y= Subject key identifier: 15:54:E4:8F:35:9B:98:DD:42:5D:0D:60:AA:E6:07:3D:CB:7D:8B:18 Certificate issuer: /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Certificate serial: 019B775965092B1A40030324AA8E2459D4D5 Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/FVTkjzWbmN1CXQ1gquYHPct9ixg.roa Signing time: Thu 01 Jan 2026 02:18:25 +0000 ROA not before: Thu 01 Jan 2026 02:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208886 IP address blocks: 2a09:b280:beef::/48 maxlen: 48 2a09:b280:cccf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 02:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:65:09:2b:1a:40:03:03:24:aa:8e:24:59:d4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42 Validity Not Before: Jan 1 02:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1554e48f359b98dd425d0d60aae6073dcb7d8b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c6:4d:fa:64:05:cd:49:8e:5a:10:79:e3:46: a8:3b:77:b6:9b:14:4d:a5:11:29:e7:e8:90:42:43: d3:71:8b:e9:c8:4b:cc:52:cd:54:2c:2a:ec:31:6d: e0:cf:c3:d6:14:cf:ea:67:2a:38:b1:14:5e:db:dc: 8c:09:70:a1:14:34:52:22:d0:dc:86:45:2d:30:5e: 6b:79:6d:a0:ca:f6:e7:76:12:ca:33:3d:f4:c1:8c: b6:1a:0f:71:cf:94:f7:bd:da:31:68:ef:f3:2f:8b: 39:a2:1f:2e:23:56:a9:a6:52:41:13:64:17:a9:8e: 66:64:4c:73:cb:5f:2b:c5:9e:5f:c9:97:fe:97:f5: aa:99:f3:bc:d9:96:8c:db:b9:4b:fa:2e:7a:41:0a: ed:c0:a5:7e:59:63:ab:c6:1f:72:c3:da:5e:41:a6: 29:4f:0d:73:b3:a4:27:2a:39:f6:88:d7:7a:c8:19: 93:86:97:bb:66:d2:4c:8b:c4:6b:a6:46:4e:c2:e1: 5e:f3:89:31:05:16:83:6f:7b:41:79:0d:e8:1a:da: 76:44:05:ff:96:13:8d:d6:f9:ac:53:61:10:35:c9: bf:0d:13:b4:dc:2a:f1:7f:9f:ec:d5:8f:19:dd:12: af:88:d7:20:da:e5:ae:e5:ee:fb:b1:f0:82:cb:2b: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:54:E4:8F:35:9B:98:DD:42:5D:0D:60:AA:E6:07:3D:CB:7D:8B:18 X509v3 Authority Key Identifier: keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/FVTkjzWbmN1CXQ1gquYHPct9ixg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a09:b280:beef::/48 2a09:b280:cccf::/48 Signature Algorithm: sha256WithRSAEncryption 69:be:ae:5c:35:ef:61:73:6f:a3:3f:e6:58:a5:31:f3:df:90: ef:76:90:6f:21:eb:37:67:03:49:18:c4:77:eb:3b:c1:38:4c: b0:5f:00:78:6a:04:dc:03:ea:32:37:b9:37:8e:3c:71:e7:cc: 33:27:eb:7b:ee:35:51:d2:66:d0:80:4c:5d:f5:d0:16:0e:74: 9f:4e:2b:e4:11:f6:6e:a0:35:45:c9:1d:a9:19:3d:8b:04:5a: 95:d1:f9:b2:96:98:5a:d4:da:85:3f:89:10:65:5d:ba:a4:8a: 17:dd:a7:9f:f1:98:a3:78:01:f3:e9:5f:1a:bf:bf:5d:7a:40: e8:6b:57:05:54:d6:50:5d:7a:3c:93:bb:40:61:72:d2:51:65: 6c:0d:c1:cc:62:62:f5:e3:a3:73:4f:ce:f1:81:c8:bb:3a:1a: 36:91:d3:5b:05:47:df:da:c4:f4:b4:6e:97:05:90:36:cc:0d: ee:65:76:6e:1f:0c:5e:a7:65:76:9d:69:ed:8f:50:10:41:05: f8:3b:b2:ba:4a:17:e4:af:cb:70:a5:cb:ab:4b:d2:90:ea:2d: 46:d7:ce:3e:b0:e2:cb:f3:59:39:f6:4c:31:51:e7:a0:07:36: be:3e:7f:53:b8:b2:19:7e:57:c7:79:1e:20:a6:6c:fa:8b:2c: f9:18:73:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WWUJKxpAAwMkqo4kWdTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2 YjJiNDIwHhcNMjYwMTAxMDIxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTU0ZTQ4ZjM1OWI5OGRkNDI1ZDBkNjBhYWU2MDczZGNiN2Q4YjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6MZN+mQFzUmOWhB540aoO3e2mxRN pREp5+iQQkPTcYvpyEvMUs1ULCrsMW3gz8PWFM/qZyo4sRRe29yMCXChFDRSItDc hkUtMF5reW2gyvbndhLKMz30wYy2Gg9xz5T3vdoxaO/zL4s5oh8uI1applJBE2QX qY5mZExzy18rxZ5fyZf+l/WqmfO82ZaM27lL+i56QQrtwKV+WWOrxh9yw9peQaYp Tw1zs6QnKjn2iNd6yBmThpe7ZtJMi8RrpkZOwuFe84kxBRaDb3tBeQ3oGtp2RAX/ lhON1vmsU2EQNcm/DRO03Crxf5/s1Y8Z3RKviNcg2uWu5e77sfCCyyt4BwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBVU5I81m5jdQl0NYKrmBz3LfYsYMB8GA1UdIwQY MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt YzEyMjE4NzY1MTU0LzEvRlZUa2p6V2JtTjFDWFExZ3F1WUhQY3Q5aXhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0 LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcAKgmygL7v AwcAKgmygMzPMA0GCSqGSIb3DQEBCwUAA4IBAQBpvq5cNe9hc2+jP+ZYpTHz35Dv dpBvIes3ZwNJGMR36zvBOEywXwB4agTcA+oyN7k3jjxx58wzJ+t77jVR0mbQgExd 9dAWDnSfTivkEfZuoDVFyR2pGT2LBFqV0fmylpha1NqFP4kQZV26pIoX3aef8Zij eAHz6V8av79dekDoa1cFVNZQXXo8k7tAYXLSUWVsDcHMYmL146NzT87xgci7Oho2 kdNbBUff2sT0tG6XBZA2zA3uZXZuHwxep2V2nWntj1AQQQX4O7K6Shfkr8twpcur S9KQ6i1G184+sOLL81k59kwxUeegBza+Pn9TuLIZflfHeR4gpmz6iyz5GHOQ -----END CERTIFICATE-----Generated at Tue Jan 13 13:00:30 2026 by rpki-client