This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FkFTBUx0XpZNzcCTMnd9XaUvGe4.roa File: FkFTBUx0XpZNzcCTMnd9XaUvGe4.roa (raw, json) Hash identifier: 1kuY2RSAYpjTAcEhwqIvgbWDSUYQsFKQweviVN9M/vk= Subject key identifier: 16:41:53:05:4C:74:5E:96:4D:CD:C0:93:32:77:7D:5D:A5:2F:19:EE Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14428BF9EA4C4379DA983C011D1DC4 Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FkFTBUx0XpZNzcCTMnd9XaUvGe4.roa Signing time: Fri 02 Jan 2026 14:19:52 +0000 ROA not before: Fri 02 Jan 2026 14:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8342 IP address blocks: 147.45.38.0/24 maxlen: 24 147.45.39.0/24 maxlen: 24 147.45.61.0/24 maxlen: 24 147.45.62.0/24 maxlen: 24 147.45.63.0/24 maxlen: 24 147.45.88.0/21 maxlen: 21 147.45.120.0/22 maxlen: 22 147.45.127.0/24 maxlen: 24 147.45.205.0/24 maxlen: 24 193.233.60.0/24 maxlen: 24 193.233.62.0/24 maxlen: 24 193.233.124.0/22 maxlen: 24 193.233.170.0/24 maxlen: 24 193.233.236.0/24 maxlen: 24 193.233.237.0/24 maxlen: 24 193.233.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:42:8b:f9:ea:4c:43:79:da:98:3c:01:1d:1d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=164153054c745e964dcdc09332777d5da52f19ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:e9:dd:77:e8:43:b3:0f:03:a5:d0:08:a8: 74:b5:5d:a5:8d:9d:a4:e0:9f:27:14:44:85:65:52: d5:20:f8:32:26:a4:a9:e2:d1:14:b3:bc:c7:11:c2: f5:40:7e:70:12:39:55:d0:b1:15:9d:2e:0a:9a:b8: d8:ef:00:a2:68:e3:08:c2:fb:d8:45:1d:09:cc:a4: 63:61:c2:87:20:eb:3d:18:7b:ab:4e:0d:f1:61:74: 77:85:c9:6e:5f:97:ca:dd:10:6c:c8:68:bc:9a:85: 3f:a1:b0:6e:5f:83:45:21:94:22:d5:3d:6b:87:6b: f0:79:06:e5:37:80:34:f1:35:18:0f:46:f8:03:d5: 65:be:17:56:04:66:44:22:29:07:1a:6b:b9:7f:c7: 76:40:36:8e:c6:24:20:9e:24:1a:32:b5:6c:d1:fc: c4:56:38:5e:34:2d:83:dd:18:d3:4a:0d:f9:17:b9: 75:64:17:8c:f8:35:5f:33:a4:7c:df:05:a7:39:ce: f4:bb:36:a3:51:bb:a1:2c:1f:98:f8:b8:ab:c8:e5: 79:f0:7f:eb:b4:b8:0a:3b:78:b0:f9:b6:a6:29:19: 0d:60:19:49:95:45:ae:9e:91:17:33:9e:bc:b1:29: 85:6a:be:8c:5f:eb:77:de:97:bd:fb:28:bf:b6:16: 87:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:41:53:05:4C:74:5E:96:4D:CD:C0:93:32:77:7D:5D:A5:2F:19:EE X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/FkFTBUx0XpZNzcCTMnd9XaUvGe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.45.38.0/23 147.45.61.0-147.45.63.255 147.45.88.0/21 147.45.120.0/22 147.45.127.0/24 147.45.205.0/24 193.233.60.0/24 193.233.62.0/24 193.233.124.0/22 193.233.170.0/24 193.233.236.0/23 193.233.239.0/24 Signature Algorithm: sha256WithRSAEncryption 63:c6:79:13:db:c6:99:fa:3f:5e:bd:85:c3:b1:73:3c:60:8a: f2:c3:a5:f4:88:8b:f5:e7:c8:a9:b0:1c:5a:03:3b:09:07:77: 20:37:57:6a:fb:ab:94:40:51:91:a8:69:ca:ce:54:8e:b9:28: 09:05:3e:34:42:41:0f:85:ae:90:c4:ed:56:59:df:72:76:49: bd:61:01:14:1d:49:31:a8:53:f3:04:06:3e:a1:d4:84:57:83: 67:07:37:ed:54:2b:cf:b8:43:e5:c7:0b:a0:38:9b:3d:11:dd: aa:18:c1:1f:0a:29:27:e3:5a:63:3e:4d:e9:f2:98:2e:6c:e2: 4c:38:d0:e7:54:d7:d6:cb:e1:81:b8:69:7f:2d:86:29:4f:90: 4d:4e:ee:36:75:13:c8:53:ee:4d:f7:ff:07:a9:17:08:74:05: 4f:0e:e3:d5:de:e1:5c:55:d1:23:66:5e:17:a4:ee:2d:69:97: 75:a0:1f:c9:9b:1d:23:29:2a:7c:d9:54:6e:64:bf:3c:55:e6: 23:51:11:37:05:49:27:13:f8:85:76:0c:0a:88:b4:20:fc:0e: c3:47:a5:b1:7c:6a:44:1b:8c:19:10:0e:64:d2:30:ad:b0:f6: ac:e1:93:9e:68:d4:43:2b:dc:cb:df:27:ef:0d:ba:1b:5a:26: 0c:21:bb:6d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt/FEKL+epMQ3namDwBHR3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjQxNTMwNTRjNzQ1ZTk2NGRjZGMwOTMzMjc3N2Q1ZGE1MmYxOWVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOXp3XfoQ7MPA6XQCKh0tV2ljZ2k 4J8nFESFZVLVIPgyJqSp4tEUs7zHEcL1QH5wEjlV0LEVnS4KmrjY7wCiaOMIwvvY RR0JzKRjYcKHIOs9GHurTg3xYXR3hcluX5fK3RBsyGi8moU/obBuX4NFIZQi1T1r h2vweQblN4A08TUYD0b4A9VlvhdWBGZEIikHGmu5f8d2QDaOxiQgniQaMrVs0fzE VjheNC2D3RjTSg35F7l1ZBeM+DVfM6R83wWnOc70uzajUbuhLB+Y+LiryOV58H/r tLgKO3iw+bamKRkNYBlJlUWunpEXM568sSmFar6MX+t33pe9+yi/thaHJwIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFBZBUwVMdF6WTc3AkzJ3fV2lLxnuMB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvRmtGVEJVeDBYcFpOemNDVE1uZDlYYVV2R2U0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQAwQBky0mMAwD BACTLT0DBAaTLQADBAOTLVgDBAKTLXgDBACTLX8DBACTLc0DBADB6TwDBADB6T4D BALB6XwDBADB6aoDBAHB6ewDBADB6e8wDQYJKoZIhvcNAQELBQADggEBAGPGeRPb xpn6P169hcOxczxgivLDpfSIi/XnyKmwHFoDOwkHdyA3V2r7q5RAUZGoacrOVI65 KAkFPjRCQQ+FrpDE7VZZ33J2Sb1hARQdSTGoU/MEBj6h1IRXg2cHN+1UK8+4Q+XH C6A4mz0R3aoYwR8KKSfjWmM+TenymC5s4kw40OdU19bL4YG4aX8thilPkE1O7jZ1 E8hT7k33/wepFwh0BU8O49Xe4VxV0SNmXhek7i1pl3WgH8mbHSMpKnzZVG5kvzxV 5iNRETcFSScT+IV2DAqItCD8DsNHpbF8akQbjBkQDmTSMK2w9qzhk55o1EMr3Mvf J+8NuhtaJgwhu20= -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:51 2026 by rpki-client