This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/fttIzMxOwmjSozc_t0Orv1bMCR8.roa File: fttIzMxOwmjSozc_t0Orv1bMCR8.roa (raw, json) Hash identifier: 7qRC870+e9CdmGPm+1LaqV5Fck2e/MGelVXSHVaR9pg= Subject key identifier: 7E:DB:48:CC:CC:4E:C2:68:D2:A3:37:3F:B7:43:AB:BF:56:CC:09:1F Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 019AD91E3B19BF151889337ADB69F26910E2 Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/fttIzMxOwmjSozc_t0Orv1bMCR8.roa Signing time: Mon 01 Dec 2025 08:53:48 +0000 ROA not before: Mon 01 Dec 2025 08:53:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208185 IP address blocks: 91.149.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:1e:3b:19:bf:15:18:89:33:7a:db:69:f2:69:10:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Dec 1 08:53:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7edb48cccc4ec268d2a3373fb743abbf56cc091f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:3d:39:29:ce:9d:a4:84:d4:41:7d:cc:fa: f3:c8:d8:cc:d7:d9:fa:7a:16:1d:47:b3:d9:62:85: 66:18:f2:a9:8a:94:bb:8c:90:1e:5b:44:1e:fb:77: 8b:6f:9e:09:13:7c:9c:5f:05:c1:a1:fc:00:4e:e4: 32:a5:94:fd:df:58:52:6f:d2:0d:47:24:32:3b:0e: 58:0e:33:51:f6:a1:fc:1d:24:6e:d0:00:2c:65:1f: d5:49:5f:f5:b5:31:7a:b2:a8:0b:1b:25:cf:ca:a3: ba:60:a6:7e:d3:fe:1b:cf:0b:88:6c:2a:50:9c:d4: 6c:ce:4f:a5:c1:ba:e8:74:44:55:54:99:88:6b:b1: f4:57:35:5f:1c:a9:c7:cc:fb:6d:51:65:25:17:be: cf:ae:fb:2d:05:c2:4f:40:f5:6b:de:3a:2a:c8:a3: db:4d:31:de:d7:fc:9c:ee:20:99:82:f0:93:6d:1d: b2:f0:9d:c3:dd:fb:98:38:93:ec:13:f2:b2:a4:57: 12:30:72:19:0e:16:0f:1d:b4:2b:11:f2:2f:65:00: 39:3b:ee:62:a6:51:bf:b4:74:3a:b0:94:f0:48:27: 3d:a6:66:16:ae:01:64:80:e7:c9:aa:63:b9:0c:36: be:34:64:9d:1c:10:f9:45:79:ad:23:88:53:7c:2b: 51:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:DB:48:CC:CC:4E:C2:68:D2:A3:37:3F:B7:43:AB:BF:56:CC:09:1F X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/fttIzMxOwmjSozc_t0Orv1bMCR8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.149.231.0/24 Signature Algorithm: sha256WithRSAEncryption a1:32:84:56:91:1d:9f:3c:12:1d:e6:50:ad:02:c4:bb:8a:fe: 06:5e:04:75:93:d8:4f:17:ba:69:b3:fd:ed:be:cf:ed:f8:39: ae:cf:66:3a:49:08:41:ef:5f:16:d1:31:3a:60:39:67:68:af: e8:8c:4b:2e:f8:4b:b0:a5:0b:2f:7f:0f:e6:30:22:10:0e:06: 30:95:61:32:f4:9e:d2:15:89:bb:f2:5e:f5:fb:c8:c4:46:1d: 02:7d:48:88:57:be:3b:63:8d:12:95:84:95:9c:bb:9e:25:59: 2a:92:5d:a3:49:4b:dc:63:4c:13:ce:7d:6c:c3:ec:72:93:44: b7:a8:a3:29:c0:12:6e:18:b4:0b:e9:5d:ea:81:9f:0d:c3:12: 62:8e:46:7a:5e:76:09:0a:8f:02:7d:51:12:51:8b:5f:ee:4c: 21:85:0c:b0:57:f0:e3:d7:52:1b:13:ce:4b:1a:cb:93:e4:5f: 90:cf:a6:ac:78:4c:52:dc:70:21:e1:16:68:21:d7:22:ef:34: 4a:9d:3a:0a:18:4e:0e:7b:2f:d0:88:98:9a:fc:21:4c:07:1c: 51:c9:a3:7c:bc:8c:00:a2:46:c0:0f:0d:00:1c:cd:34:59:99: 94:46:49:9e:04:71:1e:b9:e8:16:12:a4:f6:a5:24:40:b3:d1: 5d:f0:1e:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZHjsZvxUYiTN622nyaRDiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjUxMjAxMDg1MzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWRiNDhjY2NjNGVjMjY4ZDJhMzM3M2ZiNzQzYWJiZjU2Y2MwOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySo9OSnOnaSE1EF9zPrzyNjM19n6 ehYdR7PZYoVmGPKpipS7jJAeW0Qe+3eLb54JE3ycXwXBofwATuQypZT931hSb9IN RyQyOw5YDjNR9qH8HSRu0AAsZR/VSV/1tTF6sqgLGyXPyqO6YKZ+0/4bzwuIbCpQ nNRszk+lwbrodERVVJmIa7H0VzVfHKnHzPttUWUlF77PrvstBcJPQPVr3joqyKPb TTHe1/yc7iCZgvCTbR2y8J3D3fuYOJPsE/KypFcSMHIZDhYPHbQrEfIvZQA5O+5i plG/tHQ6sJTwSCc9pmYWrgFkgOfJqmO5DDa+NGSdHBD5RXmtI4hTfCtRcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH7bSMzMTsJo0qM3P7dDq79WzAkfMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvZnR0SXpNeE93bWpTb3pjX3QwT3J2MWJNQ1I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW5XnMA0G CSqGSIb3DQEBCwUAA4IBAQChMoRWkR2fPBId5lCtAsS7iv4GXgR1k9hPF7pps/3t vs/t+Dmuz2Y6SQhB718W0TE6YDlnaK/ojEsu+EuwpQsvfw/mMCIQDgYwlWEy9J7S FYm78l71+8jERh0CfUiIV747Y40SlYSVnLueJVkqkl2jSUvcY0wTzn1sw+xyk0S3 qKMpwBJuGLQL6V3qgZ8NwxJijkZ6XnYJCo8CfVESUYtf7kwhhQywV/Dj11IbE85L GsuT5F+Qz6aseExS3HAh4RZoIdci7zRKnToKGE4Oey/QiJia/CFMBxxRyaN8vIwA okbADw0AHM00WZmURkmeBHEeuegWEqT2pSRAs9Fd8B6s -----END CERTIFICATE-----Generated at Sun Dec 7 03:45:41 2025 by rpki-client