This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/FtAH7Nm-Mz4RjQBZaiWT0xAaEAc.roa File: FtAH7Nm-Mz4RjQBZaiWT0xAaEAc.roa (raw, json) Hash identifier: PInGgvuIsGqqB1mQYMtujlsnjDmQI8gDdHkxsOyMUeU= Subject key identifier: 16:D0:07:EC:D9:BE:33:3E:11:8D:00:59:6A:25:93:D3:10:1A:10:07 Certificate issuer: /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5 Certificate serial: 019B7B3576565764348F4B824A23539CF95F Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/FtAH7Nm-Mz4RjQBZaiWT0xAaEAc.roa Signing time: Thu 01 Jan 2026 20:17:39 +0000 ROA not before: Thu 01 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208324 IP address blocks: 185.89.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:76:56:57:64:34:8f:4b:82:4a:23:53:9c:f9:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5 Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16d007ecd9be333e118d00596a2593d3101a1007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ba:6a:7e:35:c6:a1:5b:23:55:ca:2f:89:8d: d9:73:6b:ce:eb:82:41:7d:50:f6:b3:b4:e1:b2:b3: 39:86:75:7b:b1:24:75:87:05:ae:9b:77:63:60:20: df:b2:34:58:94:49:e0:3d:3a:23:a4:02:89:32:94: 30:59:e5:2e:84:e8:af:2b:ef:a6:54:86:4c:19:ad: 88:a0:fd:b2:a5:2b:d6:98:ab:b6:84:42:20:ba:0b: e7:f3:3a:94:d3:46:18:8f:06:01:0e:39:c9:f3:57: 0f:35:94:3c:60:61:78:ff:5f:87:4d:1a:bb:55:84: 52:3d:a7:02:8a:c9:a2:b6:95:75:6f:11:4f:7d:ab: 5a:c9:bf:4b:4b:b7:18:87:24:25:60:77:81:82:39: 4f:fb:09:f6:02:db:64:19:10:4d:01:36:0e:a6:29: 5b:87:26:2f:a6:15:26:f6:3c:dd:65:85:01:e9:1e: e4:55:eb:8c:8a:9f:51:e5:0a:85:e2:0f:e4:29:99: f9:34:d5:3a:31:69:3a:ca:fd:43:68:ad:b8:68:db: 38:8d:f3:ce:0e:d4:b2:97:e5:27:21:d6:a6:73:ed: e7:4d:e7:23:21:49:58:8a:0a:16:84:3b:a6:11:dd: 8f:3c:7d:0e:21:67:fc:82:4f:63:73:3c:b8:88:f7: d0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D0:07:EC:D9:BE:33:3E:11:8D:00:59:6A:25:93:D3:10:1A:10:07 X509v3 Authority Key Identifier: keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/FtAH7Nm-Mz4RjQBZaiWT0xAaEAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.98.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:2b:7b:18:74:79:05:8c:bb:87:99:ed:39:46:9e:30:78:f2: 77:f1:a3:1f:a6:b6:c5:4d:72:57:0d:24:88:77:e7:9f:f1:e7: 83:ae:bd:ab:ef:fa:99:ca:a3:13:9e:ad:e4:ed:c0:43:e3:82: 04:74:75:29:90:87:fe:07:fd:80:a9:03:e1:c8:d1:9f:75:97: 5c:96:e7:f3:60:94:c9:3b:46:72:a9:81:4a:56:fe:60:a3:fb: 64:67:35:ae:7e:11:7b:dc:fb:aa:dc:c6:69:5d:c4:26:f8:a2: be:cc:bc:c5:2e:79:a8:5b:c1:98:4e:2e:a9:0e:7f:58:90:59: 01:f3:e6:99:d4:5d:96:19:23:bd:00:76:1e:33:3e:63:20:64: 0b:9f:2e:a5:bc:f4:11:e6:28:04:3f:c9:bc:ee:84:d7:e1:22: e1:50:d3:f4:7a:7e:d4:2d:ce:aa:ce:d9:43:72:0b:3c:2f:74: 73:82:86:2a:a2:de:b1:fb:23:4d:f9:4f:65:c1:05:37:2b:96: b5:3c:fc:67:7b:93:cb:fd:3c:65:2d:97:ec:2c:34:89:67:a0: 77:03:f6:91:c0:18:d1:23:b2:a2:e8:ec:e6:da:97:cf:77:92: 3a:61:4c:65:ad:bd:ce:88:79:89:8c:2c:21:87:3e:88:36:b2: 7a:af:06:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXZWV2Q0j0uCSiNTnPlfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MjZiNjA0ZjZmOGMwM2ZlOWRmNmM5OGU2MWYzOWVhZWQ3 NTU1YTUwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmQwMDdlY2Q5YmUzMzNlMTE4ZDAwNTk2YTI1OTNkMzEwMWExMDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLpqfjXGoVsjVcoviY3Zc2vO64JB fVD2s7ThsrM5hnV7sSR1hwWum3djYCDfsjRYlEngPTojpAKJMpQwWeUuhOivK++m VIZMGa2IoP2ypSvWmKu2hEIgugvn8zqU00YYjwYBDjnJ81cPNZQ8YGF4/1+HTRq7 VYRSPacCismitpV1bxFPfatayb9LS7cYhyQlYHeBgjlP+wn2AttkGRBNATYOpilb hyYvphUm9jzdZYUB6R7kVeuMip9R5QqF4g/kKZn5NNU6MWk6yv1DaK24aNs4jfPO DtSyl+UnIdamc+3nTecjIUlYigoWhDumEd2PPH0OIWf8gk9jczy4iPfQcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBbQB+zZvjM+EY0AWWolk9MQGhAHMB8GA1UdIwQY MBaAFHgmtgT2+MA/6d9smOYfOertdVWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTct Y2EwNDc0YWRmMzczLzEvRnRBSDdObS1NejRSalFCWmFpV1QweEFhRUFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9jOTRjNjUtZWEwMi00MDVhLWJiYTctY2EwNDc0YWRmMzcz LzEvZUNhMkJQYjR3RF9wMzJ5WTVoODU2dTExVmFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVliMA0G CSqGSIb3DQEBCwUAA4IBAQCbK3sYdHkFjLuHme05Rp4wePJ38aMfprbFTXJXDSSI d+ef8eeDrr2r7/qZyqMTnq3k7cBD44IEdHUpkIf+B/2AqQPhyNGfdZdclufzYJTJ O0ZyqYFKVv5go/tkZzWufhF73Puq3MZpXcQm+KK+zLzFLnmoW8GYTi6pDn9YkFkB 8+aZ1F2WGSO9AHYeMz5jIGQLny6lvPQR5igEP8m87oTX4SLhUNP0en7ULc6qztlD cgs8L3RzgoYqot6x+yNN+U9lwQU3K5a1PPxne5PL/TxlLZfsLDSJZ6B3A/aRwBjR I7Ki6Ozm2pfPd5I6YUxlrb3OiHmJjCwhhz6INrJ6rwZU -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:37 2026 by rpki-client