This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FTuJfHkRhlVRVYpKnHw7U2fihbo.roa File: FTuJfHkRhlVRVYpKnHw7U2fihbo.roa (raw, json) Hash identifier: HbqbCAoqsPLidkY1rPCJMa+sEJKw/u79653qeSXkCd8= Subject key identifier: 15:3B:89:7C:79:11:86:55:51:55:8A:4A:9C:7C:3B:53:67:E2:85:BA Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Certificate serial: 019B7E37F4904F0093346C416C30198DF541 Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FTuJfHkRhlVRVYpKnHw7U2fihbo.roa Signing time: Fri 02 Jan 2026 10:19:14 +0000 ROA not before: Fri 02 Jan 2026 10:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216344 IP address blocks: 37.32.46.0/24 maxlen: 24 185.212.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f4:90:4f:00:93:34:6c:41:6c:30:19:8d:f5:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464 Validity Not Before: Jan 2 10:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=153b897c7911865551558a4a9c7c3b5367e285ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6b:1d:7b:13:54:bc:22:4a:ac:f9:85:ad:b7: d5:c3:76:2d:97:93:16:d4:5b:5f:fc:a7:65:a3:a4: 0d:4e:f5:68:d9:53:23:8a:1f:ba:1c:27:45:34:37: be:d3:12:eb:9b:a0:6d:1e:5d:2d:8b:6e:f7:83:ce: 49:78:c1:6c:f3:34:4b:42:91:d5:cf:f1:c1:cc:22: 73:d8:3c:da:52:80:f2:6b:39:ed:ea:6c:f0:88:73: eb:2a:fa:62:8b:8a:2e:27:38:ee:cb:d7:01:d9:f8: d7:f1:ff:0a:9b:af:60:49:66:7d:b6:78:88:ec:1b: 3b:7d:25:04:00:ef:62:3b:44:d8:43:9a:52:47:8a: 85:f9:7e:5e:e9:09:0a:c5:84:0e:fe:30:f1:1c:2e: 71:11:91:f5:0b:88:99:0f:28:dd:c4:c3:b9:77:f7: 6d:81:21:49:d9:96:bd:b1:44:9b:cf:94:4f:95:ad: bd:02:6b:9b:cd:4d:bc:28:96:7d:1b:c7:85:40:48: 63:47:00:25:95:f7:ec:a1:22:88:ce:ff:c4:6c:ec: 2d:00:6f:91:ae:ea:d2:e7:8a:41:2a:9d:11:1a:63: 76:61:ef:15:10:04:14:aa:45:0e:42:8d:21:15:5d: 31:0e:ca:76:dc:be:19:08:a9:40:b6:b8:d7:ee:e1: 9e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3B:89:7C:79:11:86:55:51:55:8A:4A:9C:7C:3B:53:67:E2:85:BA X509v3 Authority Key Identifier: keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/FTuJfHkRhlVRVYpKnHw7U2fihbo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.32.46.0/24 185.212.51.0/24 Signature Algorithm: sha256WithRSAEncryption a5:ae:68:60:fb:73:40:c8:4d:ec:c8:ac:3c:99:70:79:2d:58: fd:04:5c:af:e0:2b:95:be:78:ef:87:ce:23:f3:94:9f:c6:d6: 0e:77:ac:47:ed:2a:bb:90:51:b0:f2:b5:95:b5:43:40:99:92: 44:c8:6e:7e:eb:11:68:d5:bc:a7:9c:73:07:87:82:51:4b:a0: e6:3c:76:92:72:41:a8:27:21:55:d7:b4:80:8a:2a:fe:42:1a: 16:06:d6:a3:5f:af:bc:37:42:0b:70:da:72:a5:44:10:dc:58: 85:7f:87:3b:97:2c:90:e6:d9:c2:06:db:17:fb:f6:88:ba:c3: a5:e0:4e:5e:5d:c3:63:e7:23:35:23:a5:1d:91:f0:f0:fc:18: 8b:83:55:7e:28:12:2c:9b:b8:e8:33:66:57:a8:a5:b0:1d:c1: 75:14:f8:5e:77:0d:2e:26:e4:6d:4e:46:d6:1e:61:6f:2c:db: dd:a5:b3:41:1e:86:0d:fe:36:df:7d:03:90:b9:cc:ba:32:d6: 18:47:e4:d7:d9:e5:a8:ea:21:5b:56:3f:04:9c:43:5d:9d:66: 5f:1c:53:42:d6:94:a2:70:11:ab:f2:dd:4a:cf:52:35:5c:48: 1c:97:fa:cc:20:b8:be:af:4a:3f:f8:6a:d5:c2:31:76:a8:d3: b4:d3:fe:49 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N/SQTwCTNGxBbDAZjfVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxMzUzMzM5OWY1NWViNTJlNmIyMjAwYzdjYWU0MjcyYjc0 ZDY0NjQwHhcNMjYwMTAyMTAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTNiODk3Yzc5MTE4NjU1NTE1NThhNGE5YzdjM2I1MzY3ZTI4NWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0msdexNUvCJKrPmFrbfVw3Ytl5MW 1Ftf/Kdlo6QNTvVo2VMjih+6HCdFNDe+0xLrm6BtHl0ti273g85JeMFs8zRLQpHV z/HBzCJz2DzaUoDyaznt6mzwiHPrKvpii4ouJzjuy9cB2fjX8f8Km69gSWZ9tniI 7Bs7fSUEAO9iO0TYQ5pSR4qF+X5e6QkKxYQO/jDxHC5xEZH1C4iZDyjdxMO5d/dt gSFJ2Za9sUSbz5RPla29AmubzU28KJZ9G8eFQEhjRwAllffsoSKIzv/EbOwtAG+R rurS54pBKp0RGmN2Ye8VEAQUqkUOQo0hFV0xDsp23L4ZCKlAtrjX7uGegwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBU7iXx5EYZVUVWKSpx8O1Nn4oW6MB8GA1UdIwQY MBaAFPE1MzmfVetS5rIgDHyuQnK3TWRkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEt OTg5MTY2ODgxOTY5LzEvRlR1SmZIa1JobFZSVllwS25IdzdVMmZpaGJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDRlZWItY2RmMS00N2YxLWJjZmEtOTg5MTY2ODgxOTY5 LzEvOFRVek9aOVY2MUxtc2lBTWZLNUNjcmROWkdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJSAuAwQA udQzMA0GCSqGSIb3DQEBCwUAA4IBAQClrmhg+3NAyE3syKw8mXB5LVj9BFyv4CuV vnjvh84j85SfxtYOd6xH7Sq7kFGw8rWVtUNAmZJEyG5+6xFo1bynnHMHh4JRS6Dm PHaSckGoJyFV17SAiir+QhoWBtajX6+8N0ILcNpypUQQ3FiFf4c7lyyQ5tnCBtsX +/aIusOl4E5eXcNj5yM1I6UdkfDw/BiLg1V+KBIsm7joM2ZXqKWwHcF1FPhedw0u JuRtTkbWHmFvLNvdpbNBHoYN/jbffQOQucy6MtYYR+TX2eWo6iFbVj8EnENdnWZf HFNC1pSicBGr8t1Kz1I1XEgcl/rMILi+r0o/+GrVwjF2qNO00/5J -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:53 2026 by rpki-client