This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/Ff-FE_841YKkM3pTxc9IBAIW24Y.roa File: Ff-FE_841YKkM3pTxc9IBAIW24Y.roa (raw, json) Hash identifier: DJoJ2bsSXRYjcv8lRsV6GjC25VZGryCw4Oz9ykQkgwc= Subject key identifier: 15:FF:85:13:FF:38:D5:82:A4:33:7A:53:C5:CF:48:04:02:16:DB:86 Certificate issuer: /CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Certificate serial: 019B7D5ACF0F4DCDA7EF6EABBC467FEB5BBE Authority key identifier: A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/Ff-FE_841YKkM3pTxc9IBAIW24Y.roa Signing time: Fri 02 Jan 2026 06:17:41 +0000 ROA not before: Fri 02 Jan 2026 06:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61025 IP address blocks: 185.17.236.0/23 maxlen: 24 2a03:dd40::/32 maxlen: 32 2a03:dd42::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.mft rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:cf:0f:4d:cd:a7:ef:6e:ab:bc:46:7f:eb:5b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a749aca85dc66c83ce55ecdc045c96075ca7debc Validity Not Before: Jan 2 06:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15ff8513ff38d582a4337a53c5cf48040216db86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:94:4c:9c:cc:de:22:73:56:68:35:b3:54: 6b:6e:8f:ab:42:3f:54:e9:10:47:fd:eb:fd:88:37: 2a:5e:07:8f:7b:19:e6:55:83:2c:a8:bb:26:3b:62: b3:09:20:2d:0e:b6:68:d7:02:d3:aa:a1:e2:cb:13: f7:ec:1b:c0:dc:3e:9a:64:c2:ab:52:ef:46:0b:a9: 13:f2:83:5b:a7:ea:01:95:87:f3:90:b7:cf:92:24: 9a:91:42:d2:9f:3b:fc:8a:64:0b:9e:24:a3:fb:07: 92:3c:be:22:ea:4d:ac:bf:47:50:a4:7b:2d:e6:32: 05:fe:33:4f:3a:3b:0d:6d:5e:c2:d0:52:65:c9:14: 32:74:48:42:59:9e:74:ce:53:e5:db:63:e3:17:62: 7d:3b:08:3f:54:c8:34:3a:62:b9:68:05:5e:62:1a: d0:eb:5a:ba:fd:e6:95:24:f5:d3:f4:eb:a7:28:eb: 6c:4f:29:62:8b:7a:56:40:b1:20:55:ab:e0:61:4e: bf:05:b6:15:cc:7e:cf:71:e2:15:c8:05:f8:ec:31: e4:b6:16:0f:4c:2d:7f:09:87:29:94:00:9c:c8:52: 6c:fc:76:a1:7f:2d:81:14:b9:2a:c8:8e:4d:6b:3c: ed:b9:79:35:cb:11:14:8d:63:99:c0:53:89:56:fe: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FF:85:13:FF:38:D5:82:A4:33:7A:53:C5:CF:48:04:02:16:DB:86 X509v3 Authority Key Identifier: keyid:A7:49:AC:A8:5D:C6:6C:83:CE:55:EC:DC:04:5C:96:07:5C:A7:DE:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0msqF3GbIPOVezcBFyWB1yn3rw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/Ff-FE_841YKkM3pTxc9IBAIW24Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/33e508-127d-4946-b3cc-4c9f43f878ab/1/p0msqF3GbIPOVezcBFyWB1yn3rw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.17.236.0/23 IPv6: 2a03:dd40::/32 2a03:dd42::/32 Signature Algorithm: sha256WithRSAEncryption 64:04:95:92:3e:57:b3:e9:a4:ac:f7:3c:47:b0:46:0f:47:26: be:c0:c4:e6:ac:20:83:f2:f7:b4:82:7b:b1:80:d9:1b:e5:0b: cc:bd:b2:a6:49:af:74:82:df:c2:fc:7c:8a:bf:d3:83:4e:d5: 9e:a9:28:ed:b7:f6:43:65:6e:c6:53:d6:63:d2:69:a1:19:5e: 1d:9e:96:c3:29:41:31:93:1f:7c:c8:3a:4b:f0:e8:74:8d:8d: a4:a3:67:38:6f:a1:c6:78:88:29:2f:7a:1b:22:1c:90:b7:39: ef:14:4e:ed:e4:0c:1d:a9:fc:22:5f:2e:74:c7:97:26:ba:06: 01:ce:96:95:f7:b5:40:8e:bc:02:cd:27:c3:4e:9a:41:f6:76: c4:f3:a5:3d:b3:7f:d7:0f:9b:45:dc:2e:92:78:45:5c:a5:40: 26:ff:65:59:0e:42:b7:25:4b:53:2d:3a:1d:b4:e6:4e:79:18: 17:e9:1a:3b:8c:4e:46:d2:7b:c6:27:42:c3:a3:74:24:87:46: ab:d8:34:1b:36:82:43:ae:a3:54:c3:58:e3:27:2d:1e:a5:58: 24:16:68:cc:a5:4a:1b:0e:e3:7f:41:6a:5a:07:eb:79:1a:65: 2f:7c:3a:70:e5:ad:1f:83:ed:19:5b:c8:d1:eb:58:ee:68:ad: 9b:a7:a3:ec -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9Ws8PTc2n726rvEZ/61u+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NDlhY2E4NWRjNjZjODNjZTU1ZWNkYzA0NWM5NjA3NWNh N2RlYmMwHhcNMjYwMTAyMDYxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWZmODUxM2ZmMzhkNTgyYTQzMzdhNTNjNWNmNDgwNDAyMTZkYjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrOUTJzM3iJzVmg1s1Rrbo+rQj9U 6RBH/ev9iDcqXgePexnmVYMsqLsmO2KzCSAtDrZo1wLTqqHiyxP37BvA3D6aZMKr Uu9GC6kT8oNbp+oBlYfzkLfPkiSakULSnzv8imQLniSj+weSPL4i6k2sv0dQpHst 5jIF/jNPOjsNbV7C0FJlyRQydEhCWZ50zlPl22PjF2J9Owg/VMg0OmK5aAVeYhrQ 61q6/eaVJPXT9OunKOtsTylii3pWQLEgVavgYU6/BbYVzH7PceIVyAX47DHkthYP TC1/CYcplACcyFJs/Hahfy2BFLkqyI5NazztuXk1yxEUjWOZwFOJVv4ttQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFBX/hRP/ONWCpDN6U8XPSAQCFtuGMB8GA1UdIwQY MBaAFKdJrKhdxmyDzlXs3ARclgdcp968MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2Mt NGM5ZjQzZjg3OGFiLzEvRmYtRkVfODQxWUtrTTNwVHhjOUlCQUlXMjRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy8zM2U1MDgtMTI3ZC00OTQ2LWIzY2MtNGM5ZjQzZjg3OGFi LzEvcDBtc3FGM0diSVBPVmV6Y0JGeVdCMXluM3J3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQBuRHsMBQE AgACMA4DBQAqA91AAwUAKgPdQjANBgkqhkiG9w0BAQsFAAOCAQEAZASVkj5Xs+mk rPc8R7BGD0cmvsDE5qwgg/L3tIJ7sYDZG+ULzL2ypkmvdILfwvx8ir/Tg07Vnqko 7bf2Q2VuxlPWY9JpoRleHZ6WwylBMZMffMg6S/DodI2NpKNnOG+hxniIKS96GyIc kLc57xRO7eQMHan8Il8udMeXJroGAc6Wlfe1QI68As0nw06aQfZ2xPOlPbN/1w+b RdwuknhFXKVAJv9lWQ5CtyVLUy06HbTmTnkYF+kaO4xORtJ7xidCw6N0JIdGq9g0 GzaCQ66jVMNY4yctHqVYJBZozKVKGw7jf0FqWgfreRplL3w6cOWtH4PtGVvI0etY 7mitm6ej7A== -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:24 2026 by rpki-client