This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/ftwoquu3DFj4eBFEtCkmR8T9CQA.roa File: ftwoquu3DFj4eBFEtCkmR8T9CQA.roa (raw, json) Hash identifier: 4rlrRLmH28vbIC123d5cUoLsBf7n1zeaVCkiEqiDVnA= Subject key identifier: 7E:DC:28:AA:EB:B7:0C:58:F8:78:11:44:B4:29:26:47:C4:FD:09:00 Certificate issuer: /CN=986ce5249635e4e2964d374493dcc37a875d0539 Certificate serial: 019B77C6A5ADA3F2747D2EC8254EF39E2D12 Authority key identifier: 98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/ftwoquu3DFj4eBFEtCkmR8T9CQA.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198024 IP address blocks: 185.124.92.0/22 maxlen: 22 193.142.176.0/21 maxlen: 21 193.142.184.0/22 maxlen: 22 2a06:b100::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.mft rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a5:ad:a3:f2:74:7d:2e:c8:25:4e:f3:9e:2d:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986ce5249635e4e2964d374493dcc37a875d0539 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7edc28aaebb70c58f8781144b4292647c4fd0900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a4:f6:7a:45:5d:02:dc:16:d2:9e:97:96:2f: ed:b7:3c:26:61:1d:8b:c3:93:92:d6:e9:82:ea:a7: 63:5a:eb:ed:a5:04:1b:b4:78:38:e6:e3:2c:bd:fb: c6:11:96:98:fd:93:22:83:a5:b3:92:b8:d4:48:df: cf:31:74:d4:cc:a3:9d:c9:d7:99:e5:81:6b:f2:07: a5:18:63:1a:36:22:ce:35:a8:8e:15:ad:67:71:d5: dd:c5:59:b6:20:78:48:c5:30:cc:4d:0d:dd:98:30: 88:fa:08:f0:cd:5e:af:55:9e:fd:5a:07:86:12:a3: aa:f3:3c:61:c1:2f:4d:74:8d:ec:83:d6:e7:4c:6f: 9d:72:3c:34:e9:df:27:45:2d:d3:01:1d:7e:bd:82: 26:c0:b1:13:17:3f:a3:4e:e9:75:bd:8b:49:86:66: fb:84:a6:65:8a:75:d7:73:82:6d:9f:2e:1e:e9:9e: 49:92:c0:20:03:ce:17:1e:a1:08:04:4f:69:6a:5c: 31:ab:30:b8:c9:cf:cf:bc:77:4f:a3:12:0c:37:6c: f9:94:ed:a9:5f:4d:d3:52:ff:19:34:fd:c2:79:13: 6d:32:23:f3:06:28:45:bb:62:7e:0b:01:82:30:58: b0:9b:30:d5:0e:4b:e7:98:01:14:41:fc:2d:d3:7f: 64:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DC:28:AA:EB:B7:0C:58:F8:78:11:44:B4:29:26:47:C4:FD:09:00 X509v3 Authority Key Identifier: keyid:98:6C:E5:24:96:35:E4:E2:96:4D:37:44:93:DC:C3:7A:87:5D:05:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGzlJJY15OKWTTdEk9zDeoddBTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/ftwoquu3DFj4eBFEtCkmR8T9CQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/fb42e6-cc51-4d2b-8637-a243cbfaaef3/1/mGzlJJY15OKWTTdEk9zDeoddBTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.124.92.0/22 193.142.176.0-193.142.187.255 IPv6: 2a06:b100::/29 Signature Algorithm: sha256WithRSAEncryption 20:a8:ce:a3:8a:75:9c:cb:2f:47:97:ea:66:ac:64:81:b2:8e: 42:21:a8:49:6d:52:f1:cd:53:4d:d6:63:d2:e1:9b:ca:7a:0d: 53:3c:08:cd:ae:b3:fd:8b:ab:5a:ab:54:d5:65:fb:a7:a2:ed: 78:d7:f3:5e:4d:e0:08:d1:01:87:15:ed:c7:40:84:86:05:88: ed:1d:10:5c:9e:60:0b:3e:28:88:37:e9:63:0a:15:92:72:74: 62:19:67:dd:cd:30:d4:8b:da:c6:53:45:aa:70:fe:10:16:f8: cc:b3:5c:33:ae:3a:09:5a:3f:67:c0:84:14:ef:a4:a4:1a:6f: 9c:4c:8e:ef:fb:8f:b0:58:69:be:d9:06:b8:5d:b0:e4:b9:9d: ae:02:39:f5:ea:fa:db:a8:9f:2d:a2:0d:e7:75:90:1b:4b:56: b1:c6:b0:04:1e:79:87:ee:34:65:6c:08:08:44:9f:6a:ff:65: 45:5d:a0:89:ae:82:17:db:8b:76:f8:57:ea:c9:2c:9d:f4:8f: ab:d7:9a:cf:42:f4:b6:9c:62:6e:e8:13:07:e4:e7:97:d8:e3: e7:e2:36:0b:be:6c:8a:c7:d5:ca:85:77:13:33:3d:33:d1:4a: b7:40:cc:b0:dd:4e:77:66:d0:2a:c9:5c:49:08:1b:da:11:b5: 17:18:5e:2e -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt3xqWto/J0fS7IJU7zni0SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NmNlNTI0OTYzNWU0ZTI5NjRkMzc0NDkzZGNjMzdhODc1 ZDA1MzkwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWRjMjhhYWViYjcwYzU4Zjg3ODExNDRiNDI5MjY0N2M0ZmQwOTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKT2ekVdAtwW0p6Xli/ttzwmYR2L w5OS1umC6qdjWuvtpQQbtHg45uMsvfvGEZaY/ZMig6WzkrjUSN/PMXTUzKOdydeZ 5YFr8gelGGMaNiLONaiOFa1ncdXdxVm2IHhIxTDMTQ3dmDCI+gjwzV6vVZ79WgeG EqOq8zxhwS9NdI3sg9bnTG+dcjw06d8nRS3TAR1+vYImwLETFz+jTul1vYtJhmb7 hKZlinXXc4Jtny4e6Z5JksAgA84XHqEIBE9palwxqzC4yc/PvHdPoxIMN2z5lO2p X03TUv8ZNP3CeRNtMiPzBihFu2J+CwGCMFiwmzDVDkvnmAEUQfwt039kCwIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFH7cKKrrtwxY+HgRRLQpJkfE/QkAMB8GA1UdIwQY MBaAFJhs5SSWNeTilk03RJPcw3qHXQU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2Mzct YTI0M2NiZmFhZWYzLzEvZnR3b3F1dTNERmo0ZUJGRXRDa21SOFQ5Q1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9mYjQyZTYtY2M1MS00ZDJiLTg2MzctYTI0M2NiZmFhZWYz LzEvbUd6bEpKWTE1T0tXVFRkRWs5ekRlb2RkQlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCuXxcMAwD BATBjrADBALBjrgwDQQCAAIwBwMFAyoGsQAwDQYJKoZIhvcNAQELBQADggEBACCo zqOKdZzLL0eX6masZIGyjkIhqEltUvHNU03WY9Lhm8p6DVM8CM2us/2Lq1qrVNVl +6ei7XjX815N4AjRAYcV7cdAhIYFiO0dEFyeYAs+KIg36WMKFZJydGIZZ93NMNSL 2sZTRapw/hAW+MyzXDOuOglaP2fAhBTvpKQab5xMju/7j7BYab7ZBrhdsOS5na4C OfXq+tuony2iDed1kBtLVrHGsAQeeYfuNGVsCAhEn2r/ZUVdoImughfbi3b4V+rJ LJ30j6vXms9C9LacYm7oEwfk55fY4+fiNgu+bIrH1cqFdxMzPTPRSrdAzLDdTndm 0CrJXEkIG9oRtRcYXi4= -----END CERTIFICATE-----Generated at Mon Jan 26 19:33:31 2026 by rpki-client