This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/FtTJzPkf-_88xIHu--X3c9IY9io.roa File: FtTJzPkf-_88xIHu--X3c9IY9io.roa (raw, json) Hash identifier: +RLOecQj9Ebpgf8gHXNoECBgbn6HhMEJfLnzjcBP8tQ= Subject key identifier: 16:D4:C9:CC:F9:1F:FB:FF:3C:C4:81:EE:FB:E5:F7:73:D2:18:F6:2A Certificate issuer: /CN=916f80c35f202eb02766419bfb7d282125ffe158 Certificate serial: 019B7C7F8921D9869E1E9C12AB20698DC498 Authority key identifier: 91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/FtTJzPkf-_88xIHu--X3c9IY9io.roa Signing time: Fri 02 Jan 2026 02:18:11 +0000 ROA not before: Fri 02 Jan 2026 02:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58273 IP address blocks: 5.83.8.0/21 maxlen: 24 148.252.16.0/20 maxlen: 24 185.89.32.0/22 maxlen: 24 185.159.91.0/24 maxlen: 24 185.201.32.0/22 maxlen: 24 194.113.44.0/22 maxlen: 24 2a01:6240::/29 maxlen: 48 2a10:cb80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.mft rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:89:21:d9:86:9e:1e:9c:12:ab:20:69:8d:c4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=916f80c35f202eb02766419bfb7d282125ffe158 Validity Not Before: Jan 2 02:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16d4c9ccf91ffbff3cc481eefbe5f773d218f62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:6b:5d:e0:25:04:5e:9d:e8:e4:6f:59:43: 7b:05:b6:8e:85:1b:fb:ec:e2:35:1f:6d:95:d8:3e: 4d:9e:c8:5d:4f:30:1e:dd:88:64:fb:83:14:29:97: 5f:17:7b:49:fa:e2:e9:75:5f:b8:de:91:c3:0a:60: 18:3d:cc:d7:66:a2:c2:1d:8b:d1:75:8c:51:00:ae: 40:a1:80:42:88:6d:33:7b:c8:0a:b1:fc:4c:a8:8a: 3c:e8:35:8d:16:c1:5b:fb:f6:ce:cf:ce:c7:4f:c2: 1a:d3:91:9a:4c:2d:bc:1b:85:95:54:54:74:7b:f6: 5b:1e:cc:25:d4:ff:ea:ee:b9:2b:8f:fe:52:a7:e4: 90:0d:7b:cf:73:a0:ba:58:5d:5c:05:3f:66:06:64: 30:15:6b:61:11:4e:f4:f2:d0:ad:b6:14:8e:3c:ed: 80:4a:96:ed:4a:fc:93:3d:80:89:c4:4a:41:12:44: cb:07:54:e6:a7:a5:00:c5:4d:dc:5b:ea:ba:63:de: 7c:ba:f3:07:d0:0e:4b:6b:29:dd:60:d3:80:8e:19: 7a:f5:d3:27:d7:d1:05:92:e6:e4:b6:d6:9f:61:20: 42:ec:4c:25:0f:b4:17:85:9e:ca:c3:67:1f:53:ec: f2:a9:eb:1d:9b:0e:d1:57:8a:a9:00:8b:f0:d2:89: 8f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:D4:C9:CC:F9:1F:FB:FF:3C:C4:81:EE:FB:E5:F7:73:D2:18:F6:2A X509v3 Authority Key Identifier: keyid:91:6F:80:C3:5F:20:2E:B0:27:66:41:9B:FB:7D:28:21:25:FF:E1:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kW-Aw18gLrAnZkGb-30oISX_4Vg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/FtTJzPkf-_88xIHu--X3c9IY9io.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/8d9ac1-d35d-4e32-b83f-c10cc953bd1b/1/kW-Aw18gLrAnZkGb-30oISX_4Vg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.8.0/21 148.252.16.0/20 185.89.32.0/22 185.159.91.0/24 185.201.32.0/22 194.113.44.0/22 IPv6: 2a01:6240::/29 2a10:cb80::/29 Signature Algorithm: sha256WithRSAEncryption 5f:78:d3:0e:48:e8:9f:b1:ff:84:94:12:77:3f:87:90:ec:14: 74:f0:a9:a1:98:cd:5f:8c:43:68:38:11:82:57:6a:3a:79:47: 64:df:6c:31:f6:5f:e2:a1:8c:4a:a7:0a:fe:5d:7f:9b:bb:3c: 4b:34:8f:b7:24:c2:55:15:07:46:05:7b:3c:0d:8c:52:19:96: 54:3e:a1:42:65:1b:8d:48:99:c5:78:ec:44:8e:d4:84:89:41: 9b:1c:b7:2f:26:cc:b7:3d:17:4e:e7:b8:32:a5:c9:fe:8f:ec: e4:9c:7e:e8:6e:24:09:75:8c:4b:f7:57:c9:06:af:94:61:46: 8e:6c:1f:a9:d6:46:34:12:df:06:f5:ee:c5:6f:22:0f:96:3c: 25:02:46:1f:0d:76:ea:d6:7c:5f:b5:8e:49:4c:53:cc:23:11: 17:50:2b:29:b3:e7:f5:e8:96:c6:b3:3a:84:c0:e9:66:a6:b1: 66:05:fa:81:88:42:50:d1:9a:c5:ca:ca:e2:2c:1a:44:fb:df: 1c:26:f0:17:0b:dc:dc:3c:7e:59:ad:3a:91:db:e5:22:8b:1e: e6:bc:19:88:e6:db:d8:de:6b:5a:ac:17:cf:99:08:b0:cd:5e: 8e:ac:92:55:63:31:ab:d4:fe:30:af:42:09:40:a1:56:33:2a: 56:91:27:1b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt8f4kh2YaeHpwSqyBpjcSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNmY4MGMzNWYyMDJlYjAyNzY2NDE5YmZiN2QyODIxMjVm ZmUxNTgwHhcNMjYwMTAyMDIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmQ0YzljY2Y5MWZmYmZmM2NjNDgxZWVmYmU1Zjc3M2QyMThmNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8trXeAlBF6d6ORvWUN7BbaOhRv7 7OI1H22V2D5NnshdTzAe3Yhk+4MUKZdfF3tJ+uLpdV+43pHDCmAYPczXZqLCHYvR dYxRAK5AoYBCiG0ze8gKsfxMqIo86DWNFsFb+/bOz87HT8Ia05GaTC28G4WVVFR0 e/ZbHswl1P/q7rkrj/5Sp+SQDXvPc6C6WF1cBT9mBmQwFWthEU708tCtthSOPO2A SpbtSvyTPYCJxEpBEkTLB1Tmp6UAxU3cW+q6Y958uvMH0A5LayndYNOAjhl69dMn 19EFkubkttafYSBC7EwlD7QXhZ7Kw2cfU+zyqesdmw7RV4qpAIvw0omPDwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFBbUycz5H/v/PMSB7vvl93PSGPYqMB8GA1UdIwQY MBaAFJFvgMNfIC6wJ2ZBm/t9KCEl/+FYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2Yt YzEwY2M5NTNiZDFiLzEvRnRUSnpQa2YtXzg4eElIdS0tWDNjOUlZOWlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi84ZDlhYzEtZDM1ZC00ZTMyLWI4M2YtYzEwY2M5NTNiZDFi LzEva1ctQXcxOGdMckFuWmtHYi0zMG9JU1hfNFZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQDBVMIAwQE lPwQAwQCuVkgAwQAuZ9bAwQCuckgAwQCwnEsMBQEAgACMA4DBQMqAWJAAwUDKhDL gDANBgkqhkiG9w0BAQsFAAOCAQEAX3jTDkjon7H/hJQSdz+HkOwUdPCpoZjNX4xD aDgRgldqOnlHZN9sMfZf4qGMSqcK/l1/m7s8SzSPtyTCVRUHRgV7PA2MUhmWVD6h QmUbjUiZxXjsRI7UhIlBmxy3LybMtz0XTue4MqXJ/o/s5Jx+6G4kCXWMS/dXyQav lGFGjmwfqdZGNBLfBvXuxW8iD5Y8JQJGHw126tZ8X7WOSUxTzCMRF1ArKbPn9eiW xrM6hMDpZqaxZgX6gYhCUNGaxcrK4iwaRPvfHCbwFwvc3Dx+Wa06kdvlIose5rwZ iObb2N5rWqwXz5kIsM1ejqySVWMxq9T+MK9CCUChVjMqVpEnGw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:06:57 2026 by rpki-client