This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/FTIPS48Za-3OrX5WFeE1aDhy1I0.roa File: FTIPS48Za-3OrX5WFeE1aDhy1I0.roa (raw, json) Hash identifier: JfooxlcoS4oq09eFTznhIKolKx+OEbrJm7ESIobakUg= Subject key identifier: 15:32:0F:4B:8F:19:6B:ED:CE:AD:7E:56:15:E1:35:68:38:72:D4:8D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 019B7F1602398116DCF349411A9FE18E5708 Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/FTIPS48Za-3OrX5WFeE1aDhy1I0.roa Signing time: Fri 02 Jan 2026 14:21:47 +0000 ROA not before: Fri 02 Jan 2026 14:21:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25082 IP address blocks: 45.91.216.0/22 maxlen: 23 195.64.248.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:02:39:81:16:dc:f3:49:41:1a:9f:e1:8e:57:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Jan 2 14:21:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15320f4b8f196bedcead7e5615e135683872d48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:9a:39:d0:21:3b:f5:f5:65:b1:64:20:f0:96: ed:b4:db:f1:a3:82:82:60:f8:4b:d4:bb:35:c1:ab: 8c:23:6c:d0:fe:c2:62:ce:23:88:b4:b2:22:da:23: 85:fe:7c:93:08:9c:b5:67:07:67:ba:f8:e7:9d:09: fd:57:b1:f3:ec:15:ec:58:a9:35:d3:09:6e:3b:f1: 69:8e:01:d4:28:eb:03:5c:20:bc:20:1a:83:fc:86: 0a:c3:7b:5f:89:9c:12:73:a0:98:2c:6a:52:cc:35: e5:02:e2:d2:48:ea:a8:dc:f6:5d:ff:47:14:f6:28: 4d:39:98:e1:4e:c4:17:0a:c1:3f:28:bd:b1:de:cc: 12:10:36:15:76:a8:da:2a:e4:95:f0:ec:61:33:e1: 31:50:44:d7:ef:72:a2:9b:5b:e4:e3:8f:b9:af:59: a7:ec:79:32:8f:8f:93:17:f7:0c:2a:ff:36:51:a6: 87:65:12:4b:0d:90:db:81:74:95:17:84:89:eb:3b: 9e:1a:9a:39:b6:30:0f:83:25:65:35:fc:37:6e:55: 4e:94:ef:be:97:7b:5e:6f:e9:4c:aa:37:f1:78:58: 68:94:44:79:fc:fe:21:e9:38:c9:ae:6d:02:15:f5: fb:41:e6:8c:29:c8:89:21:ad:9e:4d:5e:d9:e8:e8: 8b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:32:0F:4B:8F:19:6B:ED:CE:AD:7E:56:15:E1:35:68:38:72:D4:8D X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/FTIPS48Za-3OrX5WFeE1aDhy1I0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.91.216.0/22 195.64.248.0/22 Signature Algorithm: sha256WithRSAEncryption 7f:8d:8f:71:8e:59:e1:28:a1:c9:62:f5:98:3b:7f:ba:c8:78: b5:35:d4:45:96:08:a0:b2:3b:2d:a9:d9:19:8a:45:7b:97:e2: 0c:0f:51:56:d2:79:fa:cc:84:4a:ec:29:b6:e8:80:39:90:e9: be:0b:e1:01:34:2c:d2:6d:c3:e7:71:01:c4:64:7c:d6:c2:a4: 89:03:f0:25:58:bb:00:42:e7:20:a7:72:b0:42:d6:ed:b3:2a: 30:d4:46:7e:f8:d3:25:16:f2:27:f2:da:b6:d0:ac:0b:23:67: 35:b2:ae:97:e2:43:dd:14:26:26:da:96:14:bb:7e:d6:c0:51: e5:91:8a:e0:7b:ff:07:fe:00:43:d5:74:90:a2:cd:3e:be:d2: f7:32:1e:74:bc:8a:f2:08:4d:af:e5:75:1c:e8:f0:1b:1a:19: 5d:d3:87:36:4a:fe:c3:7c:bf:a1:55:9f:7b:e4:72:7c:b0:96: 53:45:7c:99:c0:bf:e6:3a:2a:5c:25:a4:d2:59:e9:18:5c:17: e8:b5:1a:ed:eb:b5:72:94:fb:5c:a9:e3:1e:33:07:dc:7c:75: d1:8a:73:cf:e6:cf:18:a9:d1:20:fb:75:16:a1:b3:57:e4:e3: 2b:8a:f6:0d:b1:f2:55:df:c4:da:48:04:a0:7a:61:75:9e:99: d9:31:0f:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FgI5gRbc80lBGp/hjlcIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjYwMTAyMTQyMTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTMyMGY0YjhmMTk2YmVkY2VhZDdlNTYxNWUxMzU2ODM4NzJkNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3po50CE79fVlsWQg8JbttNvxo4KC YPhL1Ls1wauMI2zQ/sJiziOItLIi2iOF/nyTCJy1ZwdnuvjnnQn9V7Hz7BXsWKk1 0wluO/FpjgHUKOsDXCC8IBqD/IYKw3tfiZwSc6CYLGpSzDXlAuLSSOqo3PZd/0cU 9ihNOZjhTsQXCsE/KL2x3swSEDYVdqjaKuSV8OxhM+ExUETX73Kim1vk44+5r1mn 7Hkyj4+TF/cMKv82UaaHZRJLDZDbgXSVF4SJ6zueGpo5tjAPgyVlNfw3blVOlO++ l3teb+lMqjfxeFholER5/P4h6TjJrm0CFfX7QeaMKciJIa2eTV7Z6OiLTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBUyD0uPGWvtzq1+VhXhNWg4ctSNMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvRlRJUFM0OFphLTNPclg1V0ZlRTFhRGh5MUkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVvYAwQC w0D4MA0GCSqGSIb3DQEBCwUAA4IBAQB/jY9xjlnhKKHJYvWYO3+6yHi1NdRFlgig sjstqdkZikV7l+IMD1FW0nn6zIRK7Cm26IA5kOm+C+EBNCzSbcPncQHEZHzWwqSJ A/AlWLsAQucgp3KwQtbtsyow1EZ++NMlFvIn8tq20KwLI2c1sq6X4kPdFCYm2pYU u37WwFHlkYrge/8H/gBD1XSQos0+vtL3Mh50vIryCE2v5XUc6PAbGhld04c2Sv7D fL+hVZ975HJ8sJZTRXyZwL/mOipcJaTSWekYXBfotRrt67VylPtcqeMeMwfcfHXR inPP5s8YqdEg+3UWobNX5OMrivYNsfJV38TaSASgemF1npnZMQ+2 -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:11 2026 by rpki-client