This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/FT--4t0eY_HMytLIaG7T71X7cUo.roa File: FT--4t0eY_HMytLIaG7T71X7cUo.roa (raw, json) Hash identifier: 095emcTK3nDAck/cjTBbtBo2FJ9TXj6HZHetumiraec= Subject key identifier: 15:3F:BE:E2:DD:1E:63:F1:CC:CA:D2:C8:68:6E:D3:EF:55:FB:71:4A Certificate issuer: /CN=dcfa86863c55865700634e1135e617e4079af8b9 Certificate serial: 019B7C126E35FCD8D994398AEC165190BFB9 Authority key identifier: DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/FT--4t0eY_HMytLIaG7T71X7cUo.roa Signing time: Fri 02 Jan 2026 00:19:01 +0000 ROA not before: Fri 02 Jan 2026 00:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207280 IP address blocks: 83.136.223.0/24 maxlen: 32 2a10:f00::/48 maxlen: 128 2a10:f00:1::/48 maxlen: 128 2a10:f00:3::/48 maxlen: 48 2a10:f00:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.mft rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6e:35:fc:d8:d9:94:39:8a:ec:16:51:90:bf:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcfa86863c55865700634e1135e617e4079af8b9 Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=153fbee2dd1e63f1cccad2c8686ed3ef55fb714a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f5:4b:a3:5c:27:a8:3f:33:9c:da:10:18:07: f4:cd:2d:d8:4d:e7:fc:af:a2:3f:13:29:48:2f:85: c2:dd:54:1a:04:2c:d2:9c:9f:80:99:c7:af:04:94: 2a:6b:67:34:73:d6:bd:49:e7:4b:fc:14:6a:52:1a: 63:70:26:12:99:7b:d3:9b:f1:33:bd:9e:38:3e:d2: 9a:e9:a5:73:94:3c:55:75:01:e7:28:11:4a:ae:43: 7b:96:ea:8e:0c:ef:13:03:a3:b7:2f:68:13:d9:a8: e9:55:b7:ee:14:a2:3e:07:76:d5:91:b9:08:24:a5: 3a:93:84:6b:31:93:b8:45:2d:56:00:48:c7:51:de: fc:86:f9:d4:ae:1a:28:97:87:68:f0:eb:0b:8d:3f: 4c:77:86:66:be:77:44:5f:e6:f3:b3:50:13:69:b3: 99:5a:fa:87:28:5c:69:b3:d1:9e:34:5f:f9:e9:bd: 5a:c9:ce:55:64:f7:96:1d:fe:c6:83:a6:6a:5d:b2: fa:90:a2:de:0b:97:c0:4d:d1:99:3f:f1:59:e2:c9: 26:fb:a8:18:62:b6:ee:a6:8e:a1:c4:78:75:b4:b6: 37:3d:9a:d0:61:14:74:53:30:1b:47:3f:c4:11:65: 51:2b:ad:a6:3b:4d:3c:6f:21:f6:d2:5e:ed:06:9f: 3d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3F:BE:E2:DD:1E:63:F1:CC:CA:D2:C8:68:6E:D3:EF:55:FB:71:4A X509v3 Authority Key Identifier: keyid:DC:FA:86:86:3C:55:86:57:00:63:4E:11:35:E6:17:E4:07:9A:F8:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3PqGhjxVhlcAY04RNeYX5Aea-Lk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/FT--4t0eY_HMytLIaG7T71X7cUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/7076a2-295f-45ec-b7c8-c5c9c689b745/1/3PqGhjxVhlcAY04RNeYX5Aea-Lk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.136.223.0/24 IPv6: 2a10:f00::/47 2a10:f00:3::-2a10:f00:4:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 8e:d7:90:24:e6:43:d4:66:da:2e:e4:cd:07:09:18:01:0b:f0: 9d:c7:67:4e:d2:85:93:c4:6c:dc:58:09:92:bf:da:27:d6:82: 79:95:5b:b9:96:d9:3a:b7:9d:74:b7:c0:17:d0:f3:b0:bb:c4: 96:cd:38:44:25:db:56:f2:42:2a:a4:9c:0f:c4:b6:86:68:15: ce:7e:10:0e:4d:8d:2a:76:2f:77:83:ff:63:c4:06:d8:12:59: 23:5b:42:ac:08:5b:26:9d:31:be:41:54:69:4f:ad:0d:5a:53: 2d:e1:46:cd:69:08:3f:94:04:e4:f1:6c:42:81:99:34:0e:da: bb:4b:79:55:f1:36:7a:0b:3b:b3:3c:04:7b:cf:0c:b7:f1:44: 95:17:7e:8d:8a:1f:53:45:4d:6f:0b:b7:36:19:3f:f3:f6:d6: 80:92:5f:7f:07:8e:70:57:55:48:56:cb:e5:96:2c:84:3d:05: 9d:98:24:30:5f:3d:19:0f:28:78:ea:cd:22:ce:75:94:80:d6: ec:73:24:a4:24:29:df:43:eb:8c:52:11:18:f4:2c:cd:d3:4d: bc:9e:e8:56:f8:ff:24:4e:93:68:07:eb:38:b4:9c:9d:b3:83: 15:47:6d:d3:8e:5d:fb:57:07:7b:08:ca:b7:76:5a:aa:d3:aa: 58:6e:79:53 -----BEGIN CERTIFICATE----- MIIFIjCCBAqgAwIBAgISAZt8Em41/NjZlDmK7BZRkL+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZmE4Njg2M2M1NTg2NTcwMDYzNGUxMTM1ZTYxN2U0MDc5 YWY4YjkwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTNmYmVlMmRkMWU2M2YxY2NjYWQyYzg2ODZlZDNlZjU1ZmI3MTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfVLo1wnqD8znNoQGAf0zS3YTef8 r6I/EylIL4XC3VQaBCzSnJ+AmcevBJQqa2c0c9a9SedL/BRqUhpjcCYSmXvTm/Ez vZ44PtKa6aVzlDxVdQHnKBFKrkN7luqODO8TA6O3L2gT2ajpVbfuFKI+B3bVkbkI JKU6k4RrMZO4RS1WAEjHUd78hvnUrhool4do8OsLjT9Md4ZmvndEX+bzs1ATabOZ WvqHKFxps9GeNF/56b1ayc5VZPeWHf7Gg6ZqXbL6kKLeC5fATdGZP/FZ4skm+6gY Yrbupo6hxHh1tLY3PZrQYRR0UzAbRz/EEWVRK62mO008byH20l7tBp89EQIDAQAB o4ICLjCCAiowHQYDVR0OBBYEFBU/vuLdHmPxzMrSyGhu0+9V+3FKMB8GA1UdIwQY MBaAFNz6hoY8VYZXAGNOETXmF+QHmvi5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3Yzgt YzVjOWM2ODliNzQ1LzEvRlQtLTR0MGVZX0hNeXRMSWFHN1Q3MVg3Y1VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni83MDc2YTItMjk1Zi00NWVjLWI3YzgtYzVjOWM2ODliNzQ1 LzEvM1BxR2hqeFZobGNBWTA0Uk5lWVg1QWVhLUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAMBAIAATAGAwQAU4jfMCME AgACMB0DBwEqEA8AAAAwEgMHACoQDwAAAwMHACoQDwAABDANBgkqhkiG9w0BAQsF AAOCAQEAjteQJOZD1GbaLuTNBwkYAQvwncdnTtKFk8Rs3FgJkr/aJ9aCeZVbuZbZ OreddLfAF9DzsLvEls04RCXbVvJCKqScD8S2hmgVzn4QDk2NKnYvd4P/Y8QG2BJZ I1tCrAhbJp0xvkFUaU+tDVpTLeFGzWkIP5QE5PFsQoGZNA7au0t5VfE2egs7szwE e88Mt/FElRd+jYofU0VNbwu3Nhk/8/bWgJJffweOcFdVSFbL5ZYshD0FnZgkMF89 GQ8oeOrNIs51lIDW7HMkpCQp30PrjFIRGPQszdNNvJ7oVvj/JE6TaAfrOLScnbOD FUdt045d+1cHewjKt3ZaqtOqWG55Uw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:25 2026 by rpki-client