This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/ftkfWipy78y4_kmno7oe-ID9c5g.roa File: ftkfWipy78y4_kmno7oe-ID9c5g.roa (raw, json) Hash identifier: CEQxOXiejlpdZRIvH4NiDfBaa17XAvJX8loEwDVqoDU= Subject key identifier: 7E:D9:1F:5A:2A:72:EF:CC:B8:FE:49:A7:A3:BA:1E:F8:80:FD:73:98 Certificate issuer: /CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Certificate serial: 019B77C68C0C7D012A5919439C550706EC12 Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/ftkfWipy78y4_kmno7oe-ID9c5g.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49408 IP address blocks: 193.164.84.0/24 maxlen: 24 193.164.85.0/24 maxlen: 24 193.164.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8c:0c:7d:01:2a:59:19:43:9c:55:07:06:ec:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ed91f5a2a72efccb8fe49a7a3ba1ef880fd7398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f3:8e:26:39:22:b6:13:b8:b2:5e:77:71:b1: c2:ca:2f:6c:cf:94:a6:39:5f:2b:82:0e:e6:f4:4e: 79:1f:a0:67:38:c1:47:cd:db:1c:67:e3:e7:74:0a: ca:06:ff:56:ab:da:83:6b:33:89:ca:7f:73:f6:0a: de:ca:d2:a6:1c:09:0e:9a:3a:1a:71:c2:67:63:03: 9f:1f:2f:60:f1:20:08:52:6b:73:49:93:a4:cb:8b: 24:b2:ec:c9:1f:aa:cb:e5:a1:ea:7b:85:ec:73:24: 53:f0:0b:7c:c7:c9:33:0c:8c:14:b5:60:60:93:1a: b7:52:ac:d0:9d:a7:58:fd:41:bc:30:f0:a3:ee:20: 7e:77:bc:6e:fe:32:d2:0f:36:e2:46:b6:56:c2:cc: eb:df:0b:96:50:98:82:88:30:29:fe:72:24:fa:14: b5:18:05:fd:6c:7d:a0:06:ab:f6:df:18:cf:b1:3d: 70:d5:45:12:34:c4:47:13:81:7c:1e:26:3e:06:09: 61:be:14:2e:23:83:74:0e:84:8f:37:55:9d:96:f2: cf:db:6c:1f:34:09:58:ed:a7:3e:65:25:4c:77:5b: 7b:71:11:ce:de:e8:0b:85:d4:79:ba:be:06:12:70: 78:ae:46:fc:36:c4:d4:21:ca:c6:4d:cd:e3:12:84: 38:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D9:1F:5A:2A:72:EF:CC:B8:FE:49:A7:A3:BA:1E:F8:80:FD:73:98 X509v3 Authority Key Identifier: keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/ftkfWipy78y4_kmno7oe-ID9c5g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.164.84.0/23 193.164.88.0/24 Signature Algorithm: sha256WithRSAEncryption 01:35:ae:e4:68:7a:03:d5:30:fe:80:4e:98:d2:98:8c:25:94: 35:04:1b:ff:bc:92:16:4e:be:e5:aa:83:aa:b7:93:10:9a:55: ab:af:ed:31:0c:b7:59:1e:64:94:02:9a:48:a9:aa:13:46:5a: a7:31:1c:de:ce:f6:5e:33:9e:e3:8d:cc:0a:ab:89:c0:a5:91: 90:f4:8a:8f:7c:c6:c2:5b:da:a9:98:8e:2d:2e:9f:8d:69:5f: 27:d3:08:37:63:27:25:3f:94:f9:c6:a3:5c:81:0d:7d:e0:93: e0:c5:3a:35:6a:f1:1b:74:7e:bc:42:ae:fe:16:04:da:79:65: c1:8f:5d:36:63:8a:65:eb:a0:70:f0:21:ea:a9:e1:07:c7:45: a9:e1:31:48:a9:87:42:70:c1:c5:bb:3a:73:84:57:8e:30:73: 45:ff:e4:1d:1b:31:e8:3d:6a:9a:46:f9:94:cc:a7:92:ea:8e: 01:c4:fa:a3:28:87:5d:cc:05:0a:76:34:1e:77:c4:64:3a:fa: f7:e4:30:0f:03:23:31:17:c1:03:2f:05:51:5d:22:5a:cd:56: e4:fe:31:de:fb:03:54:e1:d1:c8:7d:1f:a5:ae:f8:14:e2:56: 77:b8:88:2c:a7:ac:1f:f5:3f:00:bb:51:de:92:e8:1a:ba:6a: 55:36:dd:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xowMfQEqWRlDnFUHBuwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxNjk4YzFjZGM2NmRjMjg1ZDBmODA3NjI5YzQ2MjYxYTg4 YjJkZTcwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWQ5MWY1YTJhNzJlZmNjYjhmZTQ5YTdhM2JhMWVmODgwZmQ3Mzk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/OOJjkithO4sl53cbHCyi9sz5Sm OV8rgg7m9E55H6BnOMFHzdscZ+PndArKBv9Wq9qDazOJyn9z9greytKmHAkOmjoa ccJnYwOfHy9g8SAIUmtzSZOky4sksuzJH6rL5aHqe4XscyRT8At8x8kzDIwUtWBg kxq3UqzQnadY/UG8MPCj7iB+d7xu/jLSDzbiRrZWwszr3wuWUJiCiDAp/nIk+hS1 GAX9bH2gBqv23xjPsT1w1UUSNMRHE4F8HiY+BglhvhQuI4N0DoSPN1WdlvLP22wf NAlY7ac+ZSVMd1t7cRHO3ugLhdR5ur4GEnB4rkb8NsTUIcrGTc3jEoQ4SQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH7ZH1oqcu/MuP5Jp6O6HviA/XOYMB8GA1UdIwQY MBaAFCFpjBzcZtwoXQ+AdinEYmGoiy3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWIt NGQ3MzczMGY3ZDMyLzEvZnRrZldpcHk3OHk0X2ttbm83b2UtSUQ5YzVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8xMWRjNzEtODE3MC00NWI1LThjNWItNGQ3MzczMGY3ZDMy LzEvSVdtTUhOeG0zQ2hkRDRCMktjUmlZYWlMTGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwaRUAwQA waRYMA0GCSqGSIb3DQEBCwUAA4IBAQABNa7kaHoD1TD+gE6Y0piMJZQ1BBv/vJIW Tr7lqoOqt5MQmlWrr+0xDLdZHmSUAppIqaoTRlqnMRzezvZeM57jjcwKq4nApZGQ 9IqPfMbCW9qpmI4tLp+NaV8n0wg3YyclP5T5xqNcgQ194JPgxTo1avEbdH68Qq7+ FgTaeWXBj102Y4pl66Bw8CHqqeEHx0Wp4TFIqYdCcMHFuzpzhFeOMHNF/+QdGzHo PWqaRvmUzKeS6o4BxPqjKIddzAUKdjQed8RkOvr35DAPAyMxF8EDLwVRXSJazVbk /jHe+wNU4dHIfR+lrvgU4lZ3uIgsp6wf9T8Au1HekugaumpVNt3d -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:52 2026 by rpki-client