This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/FtjOuaGj6XuKQSprHYyjG7mq5BY.roa File: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (raw, json) Hash identifier: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4= Subject key identifier: 16:D8:CE:B9:A1:A3:E9:7B:8A:41:2A:6B:1D:8C:A3:1B:B9:AA:E4:16 Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Certificate serial: 019B77C71327015E6A0256D8BFE4A427A1B8 Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/FtjOuaGj6XuKQSprHYyjG7mq5BY.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57986 IP address blocks: 85.133.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:13:27:01:5e:6a:02:56:d8:bf:e4:a4:27:a1:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16d8ceb9a1a3e97b8a412a6b1d8ca31bb9aae416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:58:9d:d6:4c:55:19:f7:c1:b7:57:1d:cd: 86:87:c6:10:a1:5f:3f:6d:86:01:c8:db:4a:f9:45: 02:53:64:d4:4b:e0:0e:68:64:26:5f:df:47:5f:93: b9:2e:ff:07:99:50:c4:35:bf:03:5c:c9:b8:af:c0: 7a:3c:08:c0:75:d4:d4:6e:ad:4e:91:94:af:df:da: 33:6f:23:f7:f9:6f:50:1d:85:67:13:06:4c:3a:29: fb:a4:01:69:34:7a:73:8b:cc:7e:25:02:9c:50:50: 41:f8:4c:bf:bc:01:aa:f4:6e:44:39:5e:a1:8a:5c: de:cf:b1:0e:d5:3e:79:7d:92:99:c2:34:12:e1:82: 8c:42:06:3e:6c:b3:8e:3f:a1:0a:0a:6e:9b:9e:a2: f2:c0:be:2e:7f:e0:74:be:cb:e7:53:8b:8d:7d:66: b8:92:92:44:46:95:02:03:08:e6:c5:de:1c:f0:65: 08:2a:0a:12:0e:7a:97:bb:01:df:36:36:6f:73:d9: fb:02:94:34:38:11:e6:63:08:7a:95:53:30:8c:ac: 25:48:b5:a4:66:51:5e:84:88:6a:9c:d5:e8:38:8a: d3:34:23:57:96:f0:04:77:13:65:28:3d:a6:6c:83: c3:f7:2d:8b:ad:72:a1:88:4a:81:6c:f4:79:bf:35: 3b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D8:CE:B9:A1:A3:E9:7B:8A:41:2A:6B:1D:8C:A3:1B:B9:AA:E4:16 X509v3 Authority Key Identifier: keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/FtjOuaGj6XuKQSprHYyjG7mq5BY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.133.198.0/24 Signature Algorithm: sha256WithRSAEncryption 43:b5:23:6b:eb:42:3e:59:96:bc:de:96:b2:de:94:32:5d:9a: b6:a2:72:02:a5:d7:4e:01:20:33:12:8f:20:67:19:a9:43:79: ad:42:4c:b2:37:b5:64:45:b3:a1:fb:96:f8:35:7f:6f:e1:74: ba:4b:67:1f:b6:fd:0b:9a:18:8d:4e:8c:ad:43:06:be:13:b4: cc:c9:15:6d:3d:de:d6:59:75:1d:14:50:e1:a0:e6:32:51:a1: 2a:a4:1f:3f:c5:e2:19:fc:31:9d:17:53:a0:11:08:6a:e9:5d: 80:fa:45:3c:72:ff:56:40:e1:6c:18:f1:2a:93:07:35:d7:1d: b7:55:1b:33:fc:bf:56:66:4e:3e:31:6f:22:29:ba:7a:a9:b9: 94:6e:60:06:12:b5:56:10:47:58:4f:76:5b:76:93:28:f5:11: 87:0b:7e:15:61:85:c3:78:1c:d9:d3:fc:7c:30:74:a7:8d:31: fa:3e:03:06:68:e0:c2:1a:d1:02:8d:e8:45:f0:bc:1e:8b:59: e3:fa:d1:a6:0e:d5:e5:67:e3:5c:4f:1c:60:7a:70:de:60:6e: 9c:56:b3:9d:c4:36:98:7e:ac:50:42:82:ee:6f:0b:6d:08:9c: cc:ee:a4:9d:54:e6:da:d0:05:5c:43:e3:0f:66:47:af:08:1b: 04:60:48:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxMnAV5qAlbYv+SkJ6G4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNWUzOTY1OGEzZWY2ZjEzY2EyMWNjMTFhNGUzM2ViY2Q5 NDY3MDIwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmQ4Y2ViOWExYTNlOTdiOGE0MTJhNmIxZDhjYTMxYmI5YWFlNDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj9YndZMVRn3wbdXHc2Gh8YQoV8/ bYYByNtK+UUCU2TUS+AOaGQmX99HX5O5Lv8HmVDENb8DXMm4r8B6PAjAddTUbq1O kZSv39ozbyP3+W9QHYVnEwZMOin7pAFpNHpzi8x+JQKcUFBB+Ey/vAGq9G5EOV6h ilzez7EO1T55fZKZwjQS4YKMQgY+bLOOP6EKCm6bnqLywL4uf+B0vsvnU4uNfWa4 kpJERpUCAwjmxd4c8GUIKgoSDnqXuwHfNjZvc9n7ApQ0OBHmYwh6lVMwjKwlSLWk ZlFehIhqnNXoOIrTNCNXlvAEdxNlKD2mbIPD9y2LrXKhiEqBbPR5vzU7LwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBbYzrmho+l7ikEqax2Moxu5quQWMB8GA1UdIwQY MBaAFM1eOWWKPvbxPKIcwRpOM+vNlGcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUt NWQxZmE2NmMzNjNiLzEvRnRqT3VhR2o2WHVLUVNwckhZeWpHN21xNUJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9lZjUzNmMtMDNkMy00YWM1LWIxMjUtNWQxZmE2NmMzNjNi LzEvelY0NVpZby05dkU4b2h6QkdrNHo2ODJVWndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVYXGMA0G CSqGSIb3DQEBCwUAA4IBAQBDtSNr60I+WZa83pay3pQyXZq2onICpddOASAzEo8g ZxmpQ3mtQkyyN7VkRbOh+5b4NX9v4XS6S2cftv0LmhiNToytQwa+E7TMyRVtPd7W WXUdFFDhoOYyUaEqpB8/xeIZ/DGdF1OgEQhq6V2A+kU8cv9WQOFsGPEqkwc11x23 VRsz/L9WZk4+MW8iKbp6qbmUbmAGErVWEEdYT3ZbdpMo9RGHC34VYYXDeBzZ0/x8 MHSnjTH6PgMGaODCGtECjehF8Lwei1nj+tGmDtXlZ+NcTxxgenDeYG6cVrOdxDaY fqxQQoLubwttCJzM7qSdVOba0AVcQ+MPZkevCBsEYEhy -----END CERTIFICATE-----Generated at Sun Jan 25 19:20:28 2026 by rpki-client