This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ftUP8AhWyKSCfDygp2EvHTO8Boo.roa File: ftUP8AhWyKSCfDygp2EvHTO8Boo.roa (raw, json) Hash identifier: ewSYxaolal/Z6l87pd6PUdDa+voxm7gfdPqRbZdlcCk= Subject key identifier: 7E:D5:0F:F0:08:56:C8:A4:82:7C:3C:A0:A7:61:2F:1D:33:BC:06:8A Certificate issuer: /CN=64395d6a1a2888d9c356eed32789e627d23d516e Certificate serial: 019B7E39120B1051B411161C30D3CE34386A Authority key identifier: 64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ftUP8AhWyKSCfDygp2EvHTO8Boo.roa Signing time: Fri 02 Jan 2026 10:20:27 +0000 ROA not before: Fri 02 Jan 2026 10:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9051 IP address blocks: 93.185.80.0/20 maxlen: 24 185.125.148.0/22 maxlen: 24 2a06:b8c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:12:0b:10:51:b4:11:16:1c:30:d3:ce:34:38:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64395d6a1a2888d9c356eed32789e627d23d516e Validity Not Before: Jan 2 10:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7ed50ff00856c8a4827c3ca0a7612f1d33bc068a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:61:da:18:b7:da:03:28:fd:b5:1c:1e:9f:f3: 83:17:4a:4e:0e:93:f5:57:df:35:f9:ab:19:3b:f4: 0a:d5:30:4e:13:0a:fb:ac:e9:f1:e3:5b:39:7a:0b: 5a:4a:e9:59:ed:97:50:a7:ac:b5:58:da:c3:ce:f1: 19:85:09:70:67:d3:a9:d0:b0:c4:8a:0e:74:bb:6d: a0:b5:a4:7d:db:17:cb:d7:04:8b:08:32:a1:12:b9: 80:35:67:f6:d0:2d:8a:3a:76:24:f2:fb:89:61:e9: 68:6e:f2:5b:93:eb:33:66:56:b5:08:92:b0:90:ad: a8:9f:ca:a8:12:2c:89:9e:5a:da:e1:a2:83:f3:e0: e3:05:92:82:8f:2d:c2:fd:bd:64:5a:3b:45:25:d0: fa:01:69:df:22:d4:c1:a0:2e:51:8b:b0:9f:e5:ca: db:27:de:e9:a7:f9:e8:c3:ea:bd:81:e6:8f:4c:5f: 76:6f:3d:2c:de:a5:e0:3a:49:51:12:d8:26:4c:5f: 0d:ac:15:39:dc:9f:5f:00:80:82:a3:6f:27:0f:6f: 81:70:5a:b5:ab:a9:e7:5a:29:4b:eb:82:99:77:27: 9f:61:56:02:39:f6:01:e0:14:5a:91:73:70:47:21: 3e:19:88:89:4e:db:d6:87:fc:17:8a:ee:70:77:59: ef:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D5:0F:F0:08:56:C8:A4:82:7C:3C:A0:A7:61:2F:1D:33:BC:06:8A X509v3 Authority Key Identifier: keyid:64:39:5D:6A:1A:28:88:D9:C3:56:EE:D3:27:89:E6:27:D2:3D:51:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZDldahooiNnDVu7TJ4nmJ9I9UW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ftUP8AhWyKSCfDygp2EvHTO8Boo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/958943-73e6-40b5-ba06-8d835948e879/1/ZDldahooiNnDVu7TJ4nmJ9I9UW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.185.80.0/20 185.125.148.0/22 IPv6: 2a06:b8c0::/29 Signature Algorithm: sha256WithRSAEncryption 1c:0c:4c:ba:be:dd:a5:36:45:9a:95:4e:d3:b9:c3:0f:4c:4a: 27:90:27:33:ea:b1:43:d8:0d:72:b9:e1:a3:c1:40:a8:f9:71: 36:d3:4b:61:bb:f3:ec:82:8f:94:84:72:9d:c1:78:b5:5c:c8: 79:44:81:63:f4:38:a4:8f:92:62:ad:6e:f6:50:d5:dd:69:7a: 0f:04:5d:67:40:ef:1a:c6:25:ee:8f:bc:f1:fa:81:1e:b5:12: 35:0b:bd:34:14:74:8d:22:5f:b3:56:17:07:76:15:33:42:2a: f0:b3:b8:21:41:2a:69:11:25:c0:74:b2:01:7e:0b:1d:40:91: 0a:aa:3c:6d:cb:cf:58:04:5e:01:50:ea:d7:af:83:d1:be:0f: 78:56:91:42:59:df:70:3f:27:b2:3b:b2:58:99:c3:9a:e8:22: fb:b2:66:75:ed:6c:fb:c1:50:93:f5:02:d2:cb:2b:eb:4e:0c: aa:8f:aa:e5:d7:5d:63:0d:cf:a3:be:e3:c5:d5:79:09:bd:90: ba:05:fa:29:6a:9e:3b:d6:df:77:81:1b:02:27:60:4b:1c:ef: d3:07:cb:38:15:dd:1b:55:63:37:62:2f:84:c4:e8:00:99:81: bd:52:79:24:3a:b7:a0:5a:fd:03:c4:b9:08:d1:b7:42:dd:34: a0:ce:7d:bb -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+ORILEFG0ERYcMNPONDhqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0Mzk1ZDZhMWEyODg4ZDljMzU2ZWVkMzI3ODllNjI3ZDIz ZDUxNmUwHhcNMjYwMTAyMTAyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWQ1MGZmMDA4NTZjOGE0ODI3YzNjYTBhNzYxMmYxZDMzYmMwNjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGHaGLfaAyj9tRwen/ODF0pODpP1 V981+asZO/QK1TBOEwr7rOnx41s5egtaSulZ7ZdQp6y1WNrDzvEZhQlwZ9Op0LDE ig50u22gtaR92xfL1wSLCDKhErmANWf20C2KOnYk8vuJYelobvJbk+szZla1CJKw kK2on8qoEiyJnlra4aKD8+DjBZKCjy3C/b1kWjtFJdD6AWnfItTBoC5Ri7Cf5crb J97pp/now+q9geaPTF92bz0s3qXgOklREtgmTF8NrBU53J9fAICCo28nD2+BcFq1 q6nnWilL64KZdyefYVYCOfYB4BRakXNwRyE+GYiJTtvWh/wXiu5wd1nvpwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFH7VD/AIVsikgnw8oKdhLx0zvAaKMB8GA1UdIwQY MBaAFGQ5XWoaKIjZw1bu0yeJ5ifSPVFuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYt OGQ4MzU5NDhlODc5LzEvZnRVUDhBaFd5S1NDZkR5Z3AyRXZIVE84Qm9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy85NTg5NDMtNzNlNi00MGI1LWJhMDYtOGQ4MzU5NDhlODc5 LzEvWkRsZGFob29pTm5EVnU3VEo0bm1KOUk5VVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEXblQAwQC uX2UMA0EAgACMAcDBQMqBrjAMA0GCSqGSIb3DQEBCwUAA4IBAQAcDEy6vt2lNkWa lU7TucMPTEonkCcz6rFD2A1yueGjwUCo+XE200thu/Psgo+UhHKdwXi1XMh5RIFj 9Dikj5JirW72UNXdaXoPBF1nQO8axiXuj7zx+oEetRI1C700FHSNIl+zVhcHdhUz Qirws7ghQSppESXAdLIBfgsdQJEKqjxty89YBF4BUOrXr4PRvg94VpFCWd9wPyey O7JYmcOa6CL7smZ17Wz7wVCT9QLSyyvrTgyqj6rl111jDc+jvuPF1XkJvZC6Bfop ap471t93gRsCJ2BLHO/TB8s4Fd0bVWM3Yi+ExOgAmYG9UnkkOregWv0DxLkI0bdC 3TSgzn27 -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:48 2026 by rpki-client