This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/FTCjfI5Cj9AtlX0knIQ2fZ6L6EI.roa File: FTCjfI5Cj9AtlX0knIQ2fZ6L6EI.roa (raw, json) Hash identifier: 680zzmDDDI1Q0DSkM3fU2PAud4Y94x24IrjQtODMhj0= Subject key identifier: 15:30:A3:7C:8E:42:8F:D0:2D:95:7D:24:9C:84:36:7D:9E:8B:E8:42 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE7262BF899F1FE375AC65F00D0926 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/FTCjfI5Cj9AtlX0knIQ2fZ6L6EI.roa Signing time: Fri 02 Jan 2026 04:19:20 +0000 ROA not before: Fri 02 Jan 2026 04:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399073 IP address blocks: 87.229.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:72:62:bf:89:9f:1f:e3:75:ac:65:f0:0d:09:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1530a37c8e428fd02d957d249c84367d9e8be842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:b3:a3:d2:c5:13:e8:30:d3:71:48:52:84: 6d:44:aa:08:b5:4d:48:78:1a:ff:65:ff:ad:00:9d: 22:80:c5:7f:82:75:24:f7:6d:83:4a:a1:d2:ce:86: 53:e1:9a:bb:d9:ee:65:b9:7b:2a:97:02:84:7d:a1: 26:de:bc:d8:36:a8:46:95:7b:19:72:db:f5:fa:09: 61:fa:e5:c7:28:db:3a:10:b4:d7:69:79:71:1d:1c: 25:80:31:09:4d:41:4b:0b:c8:27:97:63:d7:ed:17: c6:68:7c:95:84:a5:ae:48:bd:d6:fd:73:00:4e:32: 76:ba:92:fc:cf:98:e3:66:4c:02:77:a7:05:2f:37: e1:a4:60:68:6f:cf:c3:75:ce:2b:af:53:81:a4:e7: 15:ee:46:43:59:9c:8c:94:53:33:b4:56:49:83:59: b8:35:de:35:c8:d1:73:5c:dd:1a:d5:dc:59:d6:b8: 74:7b:d1:0a:f2:f4:fd:5f:80:9e:7f:23:a0:ca:29: 10:70:ca:ef:b7:f1:3b:b0:74:c8:8c:2c:3b:4c:8a: ac:6e:23:51:d2:c8:91:17:80:f7:ff:ee:33:97:39: 4d:76:bf:9f:50:ee:93:65:a8:22:b8:95:88:48:28: e2:55:9e:27:85:e1:8e:c4:84:f7:36:e6:73:b3:76: 31:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:30:A3:7C:8E:42:8F:D0:2D:95:7D:24:9C:84:36:7D:9E:8B:E8:42 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/FTCjfI5Cj9AtlX0knIQ2fZ6L6EI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.9.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:ea:cd:35:04:8c:70:c4:79:de:af:34:9c:8d:cd:c4:71:6d: 1f:30:30:e4:27:42:51:2c:b9:5a:b4:47:6c:aa:b2:4c:72:1d: 46:1f:5c:02:ab:41:28:34:32:56:f3:92:6c:6d:16:6e:15:d9: 74:a2:e0:a3:44:83:22:ca:6f:be:e3:a6:5a:72:50:df:3d:0c: 06:af:2a:c8:44:cb:7e:18:ae:a0:c7:44:0a:5e:1e:e6:df:6e: c2:19:ff:bb:5f:6a:64:9d:33:46:d6:48:79:fa:f3:9b:ff:d4: 04:08:98:92:7d:43:74:25:9a:4d:90:7c:bf:10:41:10:e5:a3: 21:b3:ad:82:5a:77:3f:a0:6c:0c:30:0e:7e:a4:92:77:b3:fa: 95:d3:59:8f:cd:b6:14:18:e8:2d:99:b4:b3:3c:96:a5:f3:7b: c5:8c:06:05:13:a0:43:f4:9f:6c:7c:8a:1b:96:c5:8b:9d:e6: 46:d6:b5:9e:63:ac:56:58:2e:81:0b:23:8d:76:86:19:0b:c1: 61:2b:42:fd:c0:f7:e6:55:71:1c:39:a2:93:58:c5:93:37:d1: 6a:94:5d:11:88:38:68:b7:fa:ad:0d:c8:d1:72:42:f1:4b:af: 43:25:db:8a:b1:57:89:1a:1c:a5:6c:04:d7:37:c4:36:4b:6b: 63:0a:e9:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87nJiv4mfH+N1rGXwDQkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTMwYTM3YzhlNDI4ZmQwMmQ5NTdkMjQ5Yzg0MzY3ZDllOGJlODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq++zo9LFE+gw03FIUoRtRKoItU1I eBr/Zf+tAJ0igMV/gnUk922DSqHSzoZT4Zq72e5luXsqlwKEfaEm3rzYNqhGlXsZ ctv1+glh+uXHKNs6ELTXaXlxHRwlgDEJTUFLC8gnl2PX7RfGaHyVhKWuSL3W/XMA TjJ2upL8z5jjZkwCd6cFLzfhpGBob8/Ddc4rr1OBpOcV7kZDWZyMlFMztFZJg1m4 Nd41yNFzXN0a1dxZ1rh0e9EK8vT9X4CefyOgyikQcMrvt/E7sHTIjCw7TIqsbiNR 0siRF4D3/+4zlzlNdr+fUO6TZagiuJWISCjiVZ4nheGOxIT3NuZzs3Yx2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBUwo3yOQo/QLZV9JJyENn2ei+hCMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvRlRDamZJNUNqOUF0bFgwa25JUTJmWjZMNkVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UJMA0G CSqGSIb3DQEBCwUAA4IBAQCd6s01BIxwxHnerzScjc3EcW0fMDDkJ0JRLLlatEds qrJMch1GH1wCq0EoNDJW85JsbRZuFdl0ouCjRIMiym++46ZaclDfPQwGryrIRMt+ GK6gx0QKXh7m327CGf+7X2pknTNG1kh5+vOb/9QECJiSfUN0JZpNkHy/EEEQ5aMh s62CWnc/oGwMMA5+pJJ3s/qV01mPzbYUGOgtmbSzPJal83vFjAYFE6BD9J9sfIob lsWLneZG1rWeY6xWWC6BCyONdoYZC8FhK0L9wPfmVXEcOaKTWMWTN9FqlF0RiDho t/qtDcjRckLxS69DJduKsVeJGhylbATXN8Q2S2tjCumu -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:02 2026 by rpki-client