This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FTF4grUvNW0v4ceHwt6pAnfA4ss.roa File: FTF4grUvNW0v4ceHwt6pAnfA4ss.roa (raw, json) Hash identifier: Btadw0sziR1ihES36UEsPxBc8P7OKOP0YquDooCInvA= Subject key identifier: 15:31:78:82:B5:2F:35:6D:2F:E1:C7:87:C2:DE:A9:02:77:C0:E2:CB Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EAD3A3A99ED9DB444286E82DDE13F Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FTF4grUvNW0v4ceHwt6pAnfA4ss.roa Signing time: Thu 01 Jan 2026 12:18:23 +0000 ROA not before: Thu 01 Jan 2026 12:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203 IP address blocks: 87.227.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ad:3a:3a:99:ed:9d:b4:44:28:6e:82:dd:e1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15317882b52f356d2fe1c787c2dea90277c0e2cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a5:69:35:54:41:7a:b7:d9:64:6e:6d:bb:85: 6f:47:5c:7d:fe:7f:9f:83:16:75:5e:75:1a:83:ba: d0:bc:9a:64:b9:3c:98:b1:86:b1:ef:a0:6c:94:7f: 57:77:44:6a:2a:f6:83:c2:e3:fa:7c:d5:23:d8:6e: 2a:40:88:0b:e7:31:3e:5b:7c:3c:ce:52:a9:81:e4: d2:80:14:df:35:9a:3b:05:b1:96:cd:82:68:57:61: c8:36:86:ac:0d:9c:a6:18:30:52:c6:31:9d:5e:93: b8:f2:59:9e:98:03:69:1c:0a:80:be:f8:a7:42:c9: ad:82:0b:a7:8d:a5:52:e4:2a:d4:85:ba:46:c1:08: dc:76:31:10:50:06:79:51:a2:0d:5f:14:6c:25:25: 9d:3d:f8:f1:66:af:45:b5:a3:ae:63:47:8e:17:b4: 52:5b:2b:df:4f:f0:d2:1e:83:d8:0e:2e:c9:5d:87: ce:bd:c4:7b:f8:6e:11:e8:d8:2e:02:a7:a0:0f:48: 53:20:e9:b1:9b:78:63:fe:f2:d6:cd:4a:60:7b:34: df:75:fc:7b:ed:28:da:ff:01:5e:df:2f:27:7f:4a: 39:b0:e6:4c:3c:a8:7c:b0:01:a3:1b:d5:bd:76:1c: 3e:41:09:8a:5b:41:07:cc:6d:9b:1c:8b:06:28:6e: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:31:78:82:B5:2F:35:6D:2F:E1:C7:87:C2:DE:A9:02:77:C0:E2:CB X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/FTF4grUvNW0v4ceHwt6pAnfA4ss.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.227.206.0/24 Signature Algorithm: sha256WithRSAEncryption 82:be:05:ca:fb:ab:02:54:2f:f0:b0:ea:98:5b:c6:39:e3:4f: d7:50:28:09:2e:c8:9a:2a:07:96:24:5c:79:12:c4:27:75:73: f0:31:9e:ff:7f:51:18:ae:10:30:3a:4d:db:84:2d:0d:92:71: ef:56:d6:40:cd:69:c0:75:8b:55:b7:51:39:32:19:eb:c4:fd: 02:82:39:7e:93:d8:a0:e7:7e:f6:83:e9:cc:44:69:e9:c2:65: 83:a7:08:31:d8:cf:9b:7c:f4:f3:e8:87:38:a1:52:86:f8:f5: 37:e5:25:01:35:67:a6:78:76:fb:b8:2e:5b:a5:80:2a:61:c5: 0d:1e:f2:d7:c1:18:32:c8:a8:bb:37:3c:ba:92:66:70:a0:98: 98:3f:4b:e9:48:66:d3:50:c9:c5:bf:43:c0:73:9a:92:2d:e4: 1b:e8:ef:17:76:e1:d6:b4:dc:14:c0:20:e4:25:66:f2:01:1c: 46:c4:81:95:9a:77:75:37:62:30:45:ea:1a:91:46:62:d2:ab: fd:37:19:30:7c:99:bc:75:70:75:71:03:b6:7c:cd:2e:eb:a0: 61:fb:ff:bf:ff:55:e0:f9:28:2a:87:99:fb:ab:80:bc:2d:90: 87:7d:e5:7f:3f:89:34:89:20:fe:e8:c4:7e:06:7c:28:f4:e6: 77:ce:cd:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fq06OpntnbREKG6C3eE/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTMxNzg4MmI1MmYzNTZkMmZlMWM3ODdjMmRlYTkwMjc3YzBlMmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaVpNVRBerfZZG5tu4VvR1x9/n+f gxZ1XnUag7rQvJpkuTyYsYax76BslH9Xd0RqKvaDwuP6fNUj2G4qQIgL5zE+W3w8 zlKpgeTSgBTfNZo7BbGWzYJoV2HINoasDZymGDBSxjGdXpO48lmemANpHAqAvvin QsmtggunjaVS5CrUhbpGwQjcdjEQUAZ5UaINXxRsJSWdPfjxZq9FtaOuY0eOF7RS WyvfT/DSHoPYDi7JXYfOvcR7+G4R6NguAqegD0hTIOmxm3hj/vLWzUpgezTfdfx7 7Sja/wFe3y8nf0o5sOZMPKh8sAGjG9W9dhw+QQmKW0EHzG2bHIsGKG4vAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUxeIK1LzVtL+HHh8LeqQJ3wOLLMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvRlRGNGdyVXZOVzB2NGNlSHd0NnBBbmZBNHNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+POMA0G CSqGSIb3DQEBCwUAA4IBAQCCvgXK+6sCVC/wsOqYW8Y540/XUCgJLsiaKgeWJFx5 EsQndXPwMZ7/f1EYrhAwOk3bhC0NknHvVtZAzWnAdYtVt1E5MhnrxP0Cgjl+k9ig 5372g+nMRGnpwmWDpwgx2M+bfPTz6Ic4oVKG+PU35SUBNWemeHb7uC5bpYAqYcUN HvLXwRgyyKi7Nzy6kmZwoJiYP0vpSGbTUMnFv0PAc5qSLeQb6O8XduHWtNwUwCDk JWbyARxGxIGVmnd1N2IwReoakUZi0qv9NxkwfJm8dXB1cQO2fM0u66Bh+/+//1Xg +Sgqh5n7q4C8LZCHfeV/P4k0iSD+6MR+Bnwo9OZ3zs2W -----END CERTIFICATE-----Generated at Thu Jan 22 09:48:35 2026 by rpki-client