This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/fTRzb2cZPSIq__glS6tFSc9lGdI.roa File: fTRzb2cZPSIq__glS6tFSc9lGdI.roa (raw, json) Hash identifier: /O7Vv8jDvx8wOvP3bnJZXgbV+VYFXbf+4qH/zIndzEA= Subject key identifier: 7D:34:73:6F:67:19:3D:22:2A:FF:F8:25:4B:AB:45:49:CF:65:19:D2 Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C8098880ADE6F0E5D3D005FBBE7A202 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/fTRzb2cZPSIq__glS6tFSc9lGdI.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41028 IP address blocks: 89.44.225.0/24 maxlen: 24 89.44.226.0/24 maxlen: 24 89.44.227.0/24 maxlen: 24 2a05:b680:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:98:88:0a:de:6f:0e:5d:3d:00:5f:bb:e7:a2:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d34736f67193d222afff8254bab4549cf6519d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:82:3d:a4:99:13:9b:8d:be:fd:ea:5d:6f: 1c:df:5a:9d:8e:5e:f8:c8:ac:27:1d:8d:8b:fd:47: 2d:ec:ab:3a:70:d1:a3:8b:f9:95:d5:bd:65:d2:fb: f7:c7:ab:fe:d7:ee:c6:3f:66:e7:d4:d5:36:ad:60: f6:3b:a0:78:18:33:db:72:a2:76:37:24:28:de:13: f6:4d:42:67:2d:31:5c:92:d5:c3:3e:f1:00:de:d3: 7f:c9:19:9b:11:da:03:1d:fa:8e:1e:b5:ee:7b:e7: 28:0e:63:ff:cb:55:64:b4:11:ed:1f:40:b2:24:85: 26:09:d3:21:97:7f:f8:d2:d6:d5:a6:f8:dd:5e:5b: db:44:b6:2f:98:47:37:05:d6:34:a0:58:11:6b:b3: 5d:02:d0:1c:4c:f8:87:91:a3:10:0b:5c:41:59:a6: 51:b6:4e:c5:36:58:39:00:df:86:e6:85:da:4e:b8: 83:d7:cf:6b:97:b2:12:d8:dd:4b:22:c5:d0:a8:e3: bd:05:55:3f:1a:0c:56:1b:80:32:bf:c3:be:6a:51: 82:be:f6:24:f8:0a:69:59:0d:33:35:ab:47:fb:18: 0b:ca:2a:83:e2:28:d2:5e:3f:58:65:9c:71:e8:4d: 4e:35:79:b6:37:eb:a6:6f:22:eb:f6:47:8e:d2:fe: 35:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:34:73:6F:67:19:3D:22:2A:FF:F8:25:4B:AB:45:49:CF:65:19:D2 X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/fTRzb2cZPSIq__glS6tFSc9lGdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.44.225.0-89.44.227.255 IPv6: 2a05:b680:7::/48 Signature Algorithm: sha256WithRSAEncryption bc:df:f9:17:a4:4c:d6:33:4b:34:42:29:c2:74:2e:cd:42:d7: 00:e2:eb:79:78:02:10:f4:4c:e4:cf:2a:0c:ed:2e:06:d2:d3: 23:33:9d:1d:5b:f7:16:a2:7e:d3:93:96:35:fb:80:38:6b:6b: 66:37:24:30:e8:42:cc:f6:c7:45:8f:74:d4:b7:6b:76:bc:f3: 76:b3:1b:b9:91:f6:b5:56:db:fb:79:bd:52:7a:82:43:d0:e7: 1d:f0:08:e2:59:ce:8c:27:df:49:b9:f5:33:c7:4c:45:f8:9e: 2f:a9:f1:2f:e0:fb:27:55:75:fc:98:ab:e5:c6:60:0f:ac:70: fc:f4:0e:15:04:ad:c0:90:b7:7b:6e:1e:aa:50:ae:4b:07:39: 1d:7f:f8:81:9c:84:bc:e3:66:c0:03:fd:23:d6:ab:05:ce:fd: 66:f4:4e:52:78:7d:09:af:2c:54:15:05:bd:a4:ed:ff:fe:c2: ce:7d:67:89:df:cf:d5:6a:0d:b6:d7:eb:67:cf:59:7b:e4:97: 0d:44:e2:94:9b:1a:b3:d9:d4:ca:59:ce:a3:65:21:6d:38:23: f4:b3:b0:0a:1f:22:d9:0a:ae:00:cb:3b:a0:e2:02:8a:f4:6e: d1:46:1d:96:e0:d9:23:c3:13:a0:46:6f:31:6e:5f:20:26:b7: 4d:ca:f8:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt8gJiICt5vDl09AF+756ICMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDM0NzM2ZjY3MTkzZDIyMmFmZmY4MjU0YmFiNDU0OWNmNjUxOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArICCPaSZE5uNvv3qXW8c31qdjl74 yKwnHY2L/Uct7Ks6cNGji/mV1b1l0vv3x6v+1+7GP2bn1NU2rWD2O6B4GDPbcqJ2 NyQo3hP2TUJnLTFcktXDPvEA3tN/yRmbEdoDHfqOHrXue+coDmP/y1VktBHtH0Cy JIUmCdMhl3/40tbVpvjdXlvbRLYvmEc3BdY0oFgRa7NdAtAcTPiHkaMQC1xBWaZR tk7FNlg5AN+G5oXaTriD189rl7IS2N1LIsXQqOO9BVU/GgxWG4Ayv8O+alGCvvYk +AppWQ0zNatH+xgLyiqD4ijSXj9YZZxx6E1ONXm2N+umbyLr9keO0v41QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH00c29nGT0iKv/4JUurRUnPZRnSMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvZlRSemIyY1pQU0lxX19nbFM2dEZTYzlsR2RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBABZLOED BAJZLOAwDwQCAAIwCQMHACoFtoAABzANBgkqhkiG9w0BAQsFAAOCAQEAvN/5F6RM 1jNLNEIpwnQuzULXAOLreXgCEPRM5M8qDO0uBtLTIzOdHVv3FqJ+05OWNfuAOGtr ZjckMOhCzPbHRY901LdrdrzzdrMbuZH2tVbb+3m9UnqCQ9DnHfAI4lnOjCffSbn1 M8dMRfieL6nxL+D7J1V1/Jir5cZgD6xw/PQOFQStwJC3e24eqlCuSwc5HX/4gZyE vONmwAP9I9arBc79ZvROUnh9Ca8sVBUFvaTt//7Czn1nid/P1WoNttfrZ89Ze+SX DUTilJsas9nUylnOo2UhbTgj9LOwCh8i2QquAMs7oOICivRu0UYdluDZI8MToEZv MW5fICa3Tcr4oQ== -----END CERTIFICATE-----Generated at Wed Jan 21 10:46:57 2026 by rpki-client