This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/FTU-IVO2NNBlXW4Q2EwJJORm_is.roa File: FTU-IVO2NNBlXW4Q2EwJJORm_is.roa (raw, json) Hash identifier: yMyznpEegGljCcs/jnznmQ+oneu3veLngWC/HBD66uk= Subject key identifier: 15:35:3E:21:53:B6:34:D0:65:5D:6E:10:D8:4C:09:24:E4:66:FE:2B Certificate issuer: /CN=38180c074fbe598824c7003195b30aa4a366152c Certificate serial: 019B7C127BC892C8463BEC615D2C11E1B42D Authority key identifier: 38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/FTU-IVO2NNBlXW4Q2EwJJORm_is.roa Signing time: Fri 02 Jan 2026 00:19:04 +0000 ROA not before: Fri 02 Jan 2026 00:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20682 IP address blocks: 91.235.248.0/24 maxlen: 24 91.235.249.0/24 maxlen: 24 91.235.250.0/24 maxlen: 24 91.235.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.mft rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:7b:c8:92:c8:46:3b:ec:61:5d:2c:11:e1:b4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38180c074fbe598824c7003195b30aa4a366152c Validity Not Before: Jan 2 00:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15353e2153b634d0655d6e10d84c0924e466fe2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:7e:0f:9f:44:f7:04:b8:b3:69:78:d7:49:b1: f9:ff:43:1c:b8:6e:8a:41:59:38:09:6a:b0:84:49: 6a:00:68:80:e8:7a:2d:d8:51:98:c1:1d:d7:db:e2: 36:bb:44:e9:be:d5:0e:0e:d5:83:1a:e4:f7:c4:d2: 2f:e9:b3:21:a5:ee:77:e6:96:4f:0a:01:59:b6:c8: ce:3d:b6:76:03:8b:53:34:3b:e1:38:93:87:05:1d: 49:89:09:cd:f1:b2:20:bd:ed:2d:b2:7e:66:06:63: dd:48:fa:4a:0b:ea:b7:16:78:21:96:c0:41:3e:4c: 84:10:af:96:50:d7:ed:41:6c:9e:bc:a3:5f:09:65: 5f:6e:15:fe:49:4c:90:21:89:c3:e1:50:96:e6:35: 64:11:75:41:47:c3:af:3f:c9:01:07:65:a7:c7:a0: dc:97:c3:0c:d9:cc:e1:0c:81:22:1b:97:32:bc:b7: dd:a5:6c:ed:15:d2:a3:63:c2:c7:41:7a:c1:7d:39: 83:78:f5:a0:f2:cd:45:ad:30:d8:4a:c8:30:0e:99: d6:02:5b:71:3c:97:c5:b0:68:30:14:b8:f6:e2:bd: 4b:fa:c6:6b:ad:2c:de:ef:3b:4c:d0:30:24:aa:61: 53:35:d5:ea:e9:08:56:0a:41:48:53:ff:ce:4f:d2: f7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:35:3E:21:53:B6:34:D0:65:5D:6E:10:D8:4C:09:24:E4:66:FE:2B X509v3 Authority Key Identifier: keyid:38:18:0C:07:4F:BE:59:88:24:C7:00:31:95:B3:0A:A4:A3:66:15:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OBgMB0--WYgkxwAxlbMKpKNmFSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/FTU-IVO2NNBlXW4Q2EwJJORm_is.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/239ec7-7d2c-42e5-b49a-2f9e93a65c08/1/OBgMB0--WYgkxwAxlbMKpKNmFSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.235.248.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:9a:91:35:78:74:8d:0c:59:96:28:ad:52:dc:80:03:ed:27: d4:b3:d1:ea:e8:f4:4f:e5:4a:5b:16:97:13:5b:13:3c:d2:95: 11:9f:74:a0:b8:30:10:28:ef:23:71:ae:6e:97:8c:ea:dd:2d: 60:75:18:ca:3b:b6:2a:13:ca:ef:1d:62:f0:17:49:36:30:8c: 2e:bd:9a:a0:8c:19:83:2b:b5:82:ee:f4:b4:61:01:f8:f4:ec: 1e:d9:bf:ff:4f:15:35:43:48:d1:e6:2e:05:c2:b5:e6:0d:a8: 4c:45:27:92:d3:17:d5:c8:81:28:2c:8c:2b:38:c1:21:8b:e7: d5:aa:0e:ab:51:09:be:b2:23:44:a9:ca:d0:1a:34:22:28:42: 92:f8:8b:07:87:46:32:9d:e2:25:00:0d:48:20:cb:88:44:9a: b3:6c:e7:38:43:74:cc:b6:6b:4f:3f:54:ad:4b:c9:c3:7a:43: fd:dd:5b:d2:4c:ac:d1:29:7c:90:32:ae:76:ac:ef:7a:c7:f1: 62:5b:1b:cb:72:04:31:8d:66:19:1b:be:62:35:a1:e1:d4:3b: 45:aa:6f:7e:5a:3c:48:9c:c3:d7:7a:47:f2:1b:82:df:40:10: bf:63:92:fc:86:cc:a1:f8:0e:c6:8c:ea:f5:48:f2:71:f3:ad: cc:fc:69:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EnvIkshGO+xhXSwR4bQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MTgwYzA3NGZiZTU5ODgyNGM3MDAzMTk1YjMwYWE0YTM2 NjE1MmMwHhcNMjYwMTAyMDAxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTM1M2UyMTUzYjYzNGQwNjU1ZDZlMTBkODRjMDkyNGU0NjZmZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA534Pn0T3BLizaXjXSbH5/0McuG6K QVk4CWqwhElqAGiA6Hot2FGYwR3X2+I2u0TpvtUODtWDGuT3xNIv6bMhpe535pZP CgFZtsjOPbZ2A4tTNDvhOJOHBR1JiQnN8bIgve0tsn5mBmPdSPpKC+q3FnghlsBB PkyEEK+WUNftQWyevKNfCWVfbhX+SUyQIYnD4VCW5jVkEXVBR8OvP8kBB2Wnx6Dc l8MM2czhDIEiG5cyvLfdpWztFdKjY8LHQXrBfTmDePWg8s1FrTDYSsgwDpnWAltx PJfFsGgwFLj24r1L+sZrrSze7ztM0DAkqmFTNdXq6QhWCkFIU//OT9L3VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBU1PiFTtjTQZV1uENhMCSTkZv4rMB8GA1UdIwQY MBaAFDgYDAdPvlmIJMcAMZWzCqSjZhUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yMzllYzctN2QyYy00MmU1LWI0OWEt MmY5ZTkzYTY1YzA4LzEvRlRVLUlWTzJOTkJsWFc0UTJFd0pKT1JtX2lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yMzllYzctN2QyYy00MmU1LWI0OWEtMmY5ZTkzYTY1YzA4 LzEvT0JnTUIwLS1XWWdreHdBeGxiTUtwS05tRlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+v4MA0G CSqGSIb3DQEBCwUAA4IBAQAumpE1eHSNDFmWKK1S3IAD7SfUs9Hq6PRP5UpbFpcT WxM80pURn3SguDAQKO8jca5ul4zq3S1gdRjKO7YqE8rvHWLwF0k2MIwuvZqgjBmD K7WC7vS0YQH49Owe2b//TxU1Q0jR5i4FwrXmDahMRSeS0xfVyIEoLIwrOMEhi+fV qg6rUQm+siNEqcrQGjQiKEKS+IsHh0YyneIlAA1IIMuIRJqzbOc4Q3TMtmtPP1St S8nDekP93VvSTKzRKXyQMq52rO96x/FiWxvLcgQxjWYZG75iNaHh1DtFqm9+WjxI nMPXekfyG4LfQBC/Y5L8hsyh+A7GjOr1SPJx863M/Gmh -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:59 2026 by rpki-client