This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/FT6hKDdOscZGglIPmnTSBT_NdEw.roa File: FT6hKDdOscZGglIPmnTSBT_NdEw.roa (raw, json) Hash identifier: XuMv35p4+01j1k8oQho1O4/aKo7qUhSStQREoa1ANMI= Subject key identifier: 15:3E:A1:28:37:4E:B1:C6:46:82:52:0F:9A:74:D2:05:3F:CD:74:4C Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219 Certificate serial: 019B7CED3BF714AD4679C07474E4EAA18D0A Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/FT6hKDdOscZGglIPmnTSBT_NdEw.roa Signing time: Fri 02 Jan 2026 04:18:00 +0000 ROA not before: Fri 02 Jan 2026 04:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 195.20.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:3b:f7:14:ad:46:79:c0:74:74:e4:ea:a1:8d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219 Validity Not Before: Jan 2 04:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=153ea128374eb1c64682520f9a74d2053fcd744c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:f3:b6:bd:d1:27:90:6b:95:e7:20:f6:bc: f3:59:49:ce:51:89:f9:9e:16:58:24:23:63:98:12: 03:be:da:49:34:3e:7c:cd:17:08:18:e5:04:02:b7: 5c:3f:25:db:7f:69:f1:a4:7a:4b:74:f6:2f:ee:1d: c6:8f:ac:19:c6:a9:c3:72:cc:34:02:b1:03:ff:af: 03:76:30:b6:31:3a:10:a7:62:ed:84:5a:b2:17:08: ed:b0:fa:9c:a6:fb:5e:7d:a3:98:02:cb:f9:ba:18: 7a:8d:ed:0d:54:58:6f:0a:68:0d:a2:05:bd:17:e3: 3d:48:09:89:0f:e4:f1:08:12:b5:3c:2d:1f:a8:d9: ea:ff:8e:f2:6f:1b:ad:bb:9d:a0:06:62:06:e7:a8: 5e:71:eb:ef:d0:3d:4a:8c:b9:a7:15:14:40:ba:c8: 62:7e:4b:df:57:e4:07:2f:ef:6c:cd:95:ab:2d:7d: 0c:10:27:48:5a:e6:5a:aa:0f:95:01:9d:05:31:bb: 97:ea:84:be:03:73:d6:4f:2d:53:8b:eb:08:52:46: 8f:7d:05:94:99:33:db:9b:ef:d2:48:94:25:82:73: d9:b9:00:9b:1a:a2:67:be:88:1f:97:16:b1:03:ff: 57:88:26:d4:6c:e4:2b:7f:6f:34:95:98:f4:ce:30: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3E:A1:28:37:4E:B1:C6:46:82:52:0F:9A:74:D2:05:3F:CD:74:4C X509v3 Authority Key Identifier: keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/FT6hKDdOscZGglIPmnTSBT_NdEw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.20.132.0/24 Signature Algorithm: sha256WithRSAEncryption be:60:ec:93:ef:84:f6:82:23:65:5e:1a:8a:21:dc:ee:e2:c5: 73:ad:33:ff:c6:18:22:c3:d3:45:98:b5:e7:db:e8:72:2d:6b: ed:a8:10:ff:77:27:6e:c0:05:5e:9b:b8:4f:9e:40:64:28:fc: a4:ad:d9:e0:30:24:46:67:38:d6:e6:68:64:6d:23:95:bb:56: 08:16:97:00:57:e2:7e:bf:e6:6f:2b:57:b0:99:07:db:66:e1: e0:68:21:3a:c8:0f:84:0c:ce:20:38:36:68:8e:42:e8:c7:4a: dc:98:9e:7d:47:68:a6:20:82:e6:1a:b6:6d:71:86:a1:b4:0c: bb:c0:76:9c:de:15:da:f9:48:41:bc:dc:f0:21:e5:d0:77:cf: a2:29:7c:33:45:6b:2e:19:c1:a7:b1:5e:b3:07:9c:ff:13:89: a5:33:61:e6:e0:90:e8:dc:68:1a:03:d1:0a:be:68:47:50:f2: 4a:ee:4a:d4:ff:a2:8e:a3:9f:08:d2:10:c8:01:9a:ee:c9:65: e2:61:f3:c8:bb:c4:c3:47:64:ee:3c:f0:d8:34:0f:3a:a9:e9: 7c:ff:da:fc:83:9b:b8:7e:19:48:cd:d5:ad:4e:5e:97:48:29: 56:6b:4e:95:f9:78:78:8a:91:9e:bb:2b:2d:85:45:39:c9:1c: 66:06:f9:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87Tv3FK1GecB0dOTqoY0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNGU3ZWFmZTJmZmFhOTBjYWU5NDc2ODAzMDM0ZGI2ZGE3 YzEyMTkwHhcNMjYwMTAyMDQxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTNlYTEyODM3NGViMWM2NDY4MjUyMGY5YTc0ZDIwNTNmY2Q3NDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5rztr3RJ5Brlecg9rzzWUnOUYn5 nhZYJCNjmBIDvtpJND58zRcIGOUEArdcPyXbf2nxpHpLdPYv7h3Gj6wZxqnDcsw0 ArED/68DdjC2MToQp2LthFqyFwjtsPqcpvtefaOYAsv5uhh6je0NVFhvCmgNogW9 F+M9SAmJD+TxCBK1PC0fqNnq/47ybxutu52gBmIG56hecevv0D1KjLmnFRRAushi fkvfV+QHL+9szZWrLX0MECdIWuZaqg+VAZ0FMbuX6oS+A3PWTy1Ti+sIUkaPfQWU mTPbm+/SSJQlgnPZuQCbGqJnvogflxaxA/9XiCbUbOQrf280lZj0zjDxbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBU+oSg3TrHGRoJSD5p00gU/zXRMMB8GA1UdIwQY MBaAFGxOfq/i/6qQyulHaAMDTbbafBIZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDkt YjIxZGQzZjY4YWJhLzEvRlQ2aEtEZE9zY1pHZ2xJUG1uVFNCVF9OZEV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8zZGVhZTQtNzIwZC00ZWFlLWIzZDktYjIxZGQzZjY4YWJh LzEvYkU1LXItTF9xcERLNlVkb0F3Tk50dHA4RWhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxSEMA0G CSqGSIb3DQEBCwUAA4IBAQC+YOyT74T2giNlXhqKIdzu4sVzrTP/xhgiw9NFmLXn 2+hyLWvtqBD/dyduwAVem7hPnkBkKPykrdngMCRGZzjW5mhkbSOVu1YIFpcAV+J+ v+ZvK1ewmQfbZuHgaCE6yA+EDM4gODZojkLox0rcmJ59R2imIILmGrZtcYahtAy7 wHac3hXa+UhBvNzwIeXQd8+iKXwzRWsuGcGnsV6zB5z/E4mlM2Hm4JDo3GgaA9EK vmhHUPJK7krU/6KOo58I0hDIAZruyWXiYfPIu8TDR2TuPPDYNA86qel8/9r8g5u4 fhlIzdWtTl6XSClWa06V+Xh4ipGeuysthUU5yRxmBvmH -----END CERTIFICATE-----Generated at Mon Jan 26 10:53:03 2026 by rpki-client