This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/FItufD4g6Rpcfi-qLOSG6QP5iyk.roa File: FItufD4g6Rpcfi-qLOSG6QP5iyk.roa (raw, json) Hash identifier: cSv77SjU93dXwHwYySLduzYXIphHn8RI61zSwh009sw= Subject key identifier: 14:8B:6E:7C:3E:20:E9:1A:5C:7E:2F:AA:2C:E4:86:E9:03:F9:8B:29 Certificate issuer: /CN=eaab976ee39968b70271276f6d22e5b91c8e16e3 Certificate serial: 019B7E37CB484D2FB233C4B0D2350C715E02 Authority key identifier: EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/FItufD4g6Rpcfi-qLOSG6QP5iyk.roa Signing time: Fri 02 Jan 2026 10:19:04 +0000 ROA not before: Fri 02 Jan 2026 10:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43614 IP address blocks: 46.255.224.0/21 maxlen: 21 185.3.8.0/22 maxlen: 22 2a00:da80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.mft rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:cb:48:4d:2f:b2:33:c4:b0:d2:35:0c:71:5e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaab976ee39968b70271276f6d22e5b91c8e16e3 Validity Not Before: Jan 2 10:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=148b6e7c3e20e91a5c7e2faa2ce486e903f98b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:83:28:4f:23:65:61:16:9b:a5:53:d8:7a:1e: 52:08:5c:94:6a:90:e1:3e:dc:25:d2:9f:c7:5a:5e: 12:dd:b6:14:04:a6:4e:e2:2a:86:1c:1a:bd:34:dd: f9:82:60:18:3f:47:74:2c:c9:b9:64:30:93:43:73: 93:54:1e:70:5a:52:69:31:ac:90:bc:94:0d:b3:02: 3d:19:ba:07:68:ff:bb:53:c4:85:ce:2b:76:d9:03: e8:08:52:91:b9:a6:66:3d:75:a7:fd:8c:71:c5:b9: 8e:4c:aa:2d:cf:b9:c1:22:4a:16:f7:dd:aa:fd:d2: 43:54:63:0c:38:bc:bf:7e:41:a9:b1:c4:71:64:d9: fb:80:f6:0f:4b:bb:f2:90:20:12:77:56:80:f5:35: 4e:fc:b1:18:a7:51:8a:f1:12:bd:bd:42:ee:07:9a: 2e:ae:9c:08:db:9d:e4:05:db:61:ab:b2:76:61:8f: 2c:ff:46:d5:6d:c3:79:ec:0b:52:ff:04:29:ff:c1: 2f:21:59:63:cd:ed:4b:45:e5:5b:eb:a5:bb:35:1c: fa:97:ef:e6:55:c1:6d:22:8d:7f:9a:ef:66:61:32: 05:5c:73:6f:c7:1d:37:82:42:2a:4d:6a:05:ff:8a: 7f:9e:de:fd:5e:02:2a:f3:40:21:5f:67:72:90:d3: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:6E:7C:3E:20:E9:1A:5C:7E:2F:AA:2C:E4:86:E9:03:F9:8B:29 X509v3 Authority Key Identifier: keyid:EA:AB:97:6E:E3:99:68:B7:02:71:27:6F:6D:22:E5:B9:1C:8E:16:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6quXbuOZaLcCcSdvbSLluRyOFuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/FItufD4g6Rpcfi-qLOSG6QP5iyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e03bd4-fae6-4d9d-9ab3-0231ab9ee7c2/1/6quXbuOZaLcCcSdvbSLluRyOFuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.224.0/21 185.3.8.0/22 IPv6: 2a00:da80::/32 Signature Algorithm: sha256WithRSAEncryption 11:8c:83:16:54:49:d6:55:76:92:fd:6e:c6:5f:51:f9:bb:99: 6c:c3:c5:55:3b:f3:a1:f9:ae:08:49:a7:83:f6:b6:3a:54:1f: 13:f7:ca:90:96:7d:4a:fe:e0:92:0a:13:91:c0:8d:8e:98:c0: 08:29:ad:93:fb:ce:da:51:36:cc:a5:10:ea:a5:80:f5:78:b0: 9e:a3:b1:c4:74:be:6f:d0:b0:f9:19:d7:ad:45:62:4c:9b:0d: 3f:45:9e:58:65:29:47:4e:fe:be:f8:7f:80:0e:c3:2e:dd:a4: 4f:f4:68:a7:cb:46:19:b9:9b:49:21:d7:81:64:f2:02:d2:78: c0:8c:71:eb:df:be:8e:9b:d6:29:8a:49:24:a7:47:08:7b:c4: d3:4b:d2:48:1e:8b:f4:0e:84:7a:09:bb:c7:f5:9e:82:0e:2d: 02:5d:00:5d:87:75:e8:ee:a2:9c:11:42:74:63:db:a8:e0:3d: 55:f9:cc:4f:4d:67:f7:ce:42:b6:70:e6:a0:85:ff:c4:28:67: 96:8e:a9:69:8c:1b:e8:fa:50:66:2a:bd:bb:e8:ca:da:43:9f: 25:b0:ef:c9:ce:6b:b7:67:00:47:da:ea:bd:7f:95:57:2a:f6: 84:03:6e:2c:7d:3d:6b:63:e0:b0:5e:68:03:d8:9f:c9:5d:cd: fc:17:d5:94 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+N8tITS+yM8Sw0jUMcV4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWI5NzZlZTM5OTY4YjcwMjcxMjc2ZjZkMjJlNWI5MWM4 ZTE2ZTMwHhcNMjYwMTAyMTAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDhiNmU3YzNlMjBlOTFhNWM3ZTJmYWEyY2U0ODZlOTAzZjk4YjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoMoTyNlYRabpVPYeh5SCFyUapDh Ptwl0p/HWl4S3bYUBKZO4iqGHBq9NN35gmAYP0d0LMm5ZDCTQ3OTVB5wWlJpMayQ vJQNswI9GboHaP+7U8SFzit22QPoCFKRuaZmPXWn/YxxxbmOTKotz7nBIkoW992q /dJDVGMMOLy/fkGpscRxZNn7gPYPS7vykCASd1aA9TVO/LEYp1GK8RK9vULuB5ou rpwI253kBdthq7J2YY8s/0bVbcN57AtS/wQp/8EvIVljze1LReVb66W7NRz6l+/m VcFtIo1/mu9mYTIFXHNvxx03gkIqTWoF/4p/nt79XgIq80AhX2dykNOvmQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFBSLbnw+IOkaXH4vqizkhukD+YspMB8GA1UdIwQY MBaAFOqrl27jmWi3AnEnb20i5bkcjhbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnF1WGJ1T1phTGNDY1NkdmJTTGx1UnlPRnVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lMDNiZDQtZmFlNi00ZDlkLTlhYjMt MDIzMWFiOWVlN2MyLzEvRkl0dWZENGc2UnBjZmktcUxPU0c2UVA1aXlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lMDNiZDQtZmFlNi00ZDlkLTlhYjMtMDIzMWFiOWVlN2My LzEvNnF1WGJ1T1phTGNDY1NkdmJTTGx1UnlPRnVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLv/gAwQC uQMIMA0EAgACMAcDBQAqANqAMA0GCSqGSIb3DQEBCwUAA4IBAQARjIMWVEnWVXaS /W7GX1H5u5lsw8VVO/Oh+a4ISaeD9rY6VB8T98qQln1K/uCSChORwI2OmMAIKa2T +87aUTbMpRDqpYD1eLCeo7HEdL5v0LD5GdetRWJMmw0/RZ5YZSlHTv6++H+ADsMu 3aRP9Giny0YZuZtJIdeBZPIC0njAjHHr376Om9Ypikkkp0cIe8TTS9JIHov0DoR6 CbvH9Z6CDi0CXQBdh3Xo7qKcEUJ0Y9uo4D1V+cxPTWf3zkK2cOaghf/EKGeWjqlp jBvo+lBmKr276MraQ58lsO/Jzmu3ZwBH2uq9f5VXKvaEA24sfT1rY+CwXmgD2J/J Xc38F9WU -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:26 2026 by rpki-client