This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/ftokh3mUyVZGh6yXd6ouZ8YIGkQ.roa File: ftokh3mUyVZGh6yXd6ouZ8YIGkQ.roa (raw, json) Hash identifier: 4Ym0wTobeB1H+GWUNtcZZO3RjaiOd4ZAgsLU5dSiWcg= Subject key identifier: 7E:DA:24:87:79:94:C9:56:46:87:AC:97:77:AA:2E:67:C6:08:1A:44 Certificate issuer: /CN=42de27fa887905e0c9c1f53f67f23f296d045f0e Certificate serial: 019B77C7485822EB6C7C49DB2B524A990752 Authority key identifier: 42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/ftokh3mUyVZGh6yXd6ouZ8YIGkQ.roa Signing time: Thu 01 Jan 2026 04:18:27 +0000 ROA not before: Thu 01 Jan 2026 04:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49129 IP address blocks: 31.192.0.0/18 maxlen: 18 31.192.0.0/20 maxlen: 20 31.192.16.0/20 maxlen: 20 31.192.32.0/20 maxlen: 20 31.192.48.0/20 maxlen: 20 77.242.48.0/20 maxlen: 20 77.242.48.0/21 maxlen: 21 77.242.56.0/21 maxlen: 21 80.77.48.0/20 maxlen: 20 80.77.48.0/21 maxlen: 21 80.77.56.0/21 maxlen: 21 178.236.48.0/20 maxlen: 21 178.236.48.0/21 maxlen: 21 178.236.56.0/21 maxlen: 21 185.110.164.0/22 maxlen: 22 185.110.164.0/23 maxlen: 23 185.110.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.mft rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:48:58:22:eb:6c:7c:49:db:2b:52:4a:99:07:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42de27fa887905e0c9c1f53f67f23f296d045f0e Validity Not Before: Jan 1 04:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7eda24877994c9564687ac9777aa2e67c6081a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e6:82:b0:72:da:9f:98:db:0c:86:b7:38:af: 17:21:86:a8:0b:c8:77:f0:97:1a:36:2f:24:63:f1: 88:2a:60:73:c7:87:f4:37:f8:4f:c0:e2:d2:f0:63: 9b:54:29:ab:5b:01:54:d8:11:48:21:b8:36:e1:ea: 40:56:76:be:19:14:11:2c:71:8d:e4:54:f5:89:77: 31:a7:9a:9a:bd:06:0c:e4:da:c7:74:bd:11:aa:0e: d7:d9:0c:ce:1e:db:fc:99:54:3e:c7:7b:d1:1f:18: b8:00:fa:c6:e2:a0:a0:b3:ec:a3:87:a3:0f:83:01: d0:73:98:82:24:bb:e6:f2:b9:41:67:0a:2f:b2:d5: 6d:8e:1e:47:37:db:a1:6b:03:26:44:b5:51:c8:ae: df:c1:33:14:05:4e:f6:11:3a:11:ae:43:0c:c6:bf: 8e:96:be:ed:f8:75:ee:66:7a:66:a3:c7:9f:a4:fa: ac:07:c2:e7:e5:4f:f2:ca:db:dc:4e:44:19:30:85: ac:bc:7c:59:c8:9a:1c:b0:a4:4b:31:af:3e:88:33: bf:e5:24:fd:20:e6:e6:d9:ae:0b:2d:01:6f:66:97: d9:bc:5a:4e:87:63:ec:20:98:08:fb:82:cc:9f:c1: 28:1c:95:32:da:44:7f:53:ef:50:e2:52:b7:0e:df: 6b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DA:24:87:79:94:C9:56:46:87:AC:97:77:AA:2E:67:C6:08:1A:44 X509v3 Authority Key Identifier: keyid:42:DE:27:FA:88:79:05:E0:C9:C1:F5:3F:67:F2:3F:29:6D:04:5F:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/ftokh3mUyVZGh6yXd6ouZ8YIGkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/aa4cc4-5537-4aeb-9fed-d29b7d478631/1/Qt4n-oh5BeDJwfU_Z_I_KW0EXw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.192.0.0/18 77.242.48.0/20 80.77.48.0/20 178.236.48.0/20 185.110.164.0/22 Signature Algorithm: sha256WithRSAEncryption 51:7b:fb:ad:ac:13:9c:72:2e:cc:f9:cf:d4:ee:a4:97:cc:bf: 51:58:f0:63:4d:5c:d1:9e:03:0e:17:73:4c:39:5f:2b:40:b0: 32:8d:da:5a:c0:a9:7e:28:c3:60:f4:6d:07:75:7d:b4:20:d2: ec:2b:2f:6b:88:56:1c:6c:25:0e:d7:a7:32:f8:f9:92:c5:6f: e4:82:a4:46:ee:af:f1:95:e8:28:65:0b:75:5e:6d:50:93:0d: 0f:54:bd:4b:e8:cd:ce:c1:b5:02:fc:71:9a:c7:63:78:33:1a: c5:46:c2:dd:fe:40:d0:86:dd:c3:31:2e:eb:cd:5e:51:f1:17: 71:d1:d9:c8:01:4c:3d:2c:ec:d1:d4:fb:1c:1c:12:54:ac:19: 71:13:a7:ec:3c:2e:27:b0:06:af:2c:8b:4f:9b:0b:6c:eb:bf: 42:77:28:3b:7e:9e:c6:a6:aa:b4:9e:83:ff:38:32:8a:70:78: 26:3f:06:4e:bb:23:e1:3e:f8:0a:93:4b:27:9d:29:89:39:37: 06:f9:02:a2:c8:c1:5e:ce:49:45:c5:78:02:f2:23:fe:66:8e: 61:95:f0:40:54:a8:a1:4e:08:b9:de:1d:b6:6c:09:27:5a:98: 38:2f:af:cd:cb:79:74:77:1d:2e:39:39:30:f1:b8:fa:a2:c5: 76:2c:39:c8 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3x0hYIutsfEnbK1JKmQdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZGUyN2ZhODg3OTA1ZTBjOWMxZjUzZjY3ZjIzZjI5NmQw NDVmMGUwHhcNMjYwMTAxMDQxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWRhMjQ4Nzc5OTRjOTU2NDY4N2FjOTc3N2FhMmU2N2M2MDgxYTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uaCsHLan5jbDIa3OK8XIYaoC8h3 8JcaNi8kY/GIKmBzx4f0N/hPwOLS8GObVCmrWwFU2BFIIbg24epAVna+GRQRLHGN 5FT1iXcxp5qavQYM5NrHdL0Rqg7X2QzOHtv8mVQ+x3vRHxi4APrG4qCgs+yjh6MP gwHQc5iCJLvm8rlBZwovstVtjh5HN9uhawMmRLVRyK7fwTMUBU72EToRrkMMxr+O lr7t+HXuZnpmo8efpPqsB8Ln5U/yytvcTkQZMIWsvHxZyJocsKRLMa8+iDO/5ST9 IObm2a4LLQFvZpfZvFpOh2PsIJgI+4LMn8EoHJUy2kR/U+9Q4lK3Dt9rqQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFH7aJId5lMlWRoesl3eqLmfGCBpEMB8GA1UdIwQY MBaAFELeJ/qIeQXgycH1P2fyPyltBF8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQt ZDI5YjdkNDc4NjMxLzEvZnRva2gzbVV5VlpHaDZ5WGQ2b3VaOFlJR2tRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9hYTRjYzQtNTUzNy00YWViLTlmZWQtZDI5YjdkNDc4NjMx LzEvUXQ0bi1vaDVCZURKd2ZVX1pfSV9LVzBFWHc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQGH8AAAwQE TfIwAwQEUE0wAwQEsuwwAwQCuW6kMA0GCSqGSIb3DQEBCwUAA4IBAQBRe/utrBOc ci7M+c/U7qSXzL9RWPBjTVzRngMOF3NMOV8rQLAyjdpawKl+KMNg9G0HdX20INLs Ky9riFYcbCUO16cy+PmSxW/kgqRG7q/xlegoZQt1Xm1Qkw0PVL1L6M3OwbUC/HGa x2N4MxrFRsLd/kDQht3DMS7rzV5R8Rdx0dnIAUw9LOzR1PscHBJUrBlxE6fsPC4n sAavLItPmwts679Cdyg7fp7Gpqq0noP/ODKKcHgmPwZOuyPhPvgKk0snnSmJOTcG +QKiyMFezklFxXgC8iP+Zo5hlfBAVKihTgi53h22bAknWpg4L6/Ny3l0dx0uOTkw 8bj6osV2LDnI -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:57 2026 by rpki-client