This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/FutR1Anwjf0YPYgj24VkOnnpOKo.roa File: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (raw, json) Hash identifier: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y= Subject key identifier: 16:EB:51:D4:09:F0:8D:FD:18:3D:88:23:DB:85:64:3A:79:E9:38:AA Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 019B7DCA441535DCE11649CB3BB9FB71E673 Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/FutR1Anwjf0YPYgj24VkOnnpOKo.roa Signing time: Fri 02 Jan 2026 08:19:26 +0000 ROA not before: Fri 02 Jan 2026 08:19:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52223 IP address blocks: 91.245.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:44:15:35:dc:e1:16:49:cb:3b:b9:fb:71:e6:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Jan 2 08:19:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16eb51d409f08dfd183d8823db85643a79e938aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a4:4b:e4:79:49:dd:81:5a:61:b5:cb:65:49: c7:02:74:e6:65:1d:7d:a3:51:87:a8:1e:ab:7b:88: 85:cf:47:48:2a:7b:53:2a:d7:e6:4f:d0:39:30:6c: 84:47:64:23:c4:56:df:71:b8:df:9e:d1:3a:94:86: d9:16:59:3e:1f:31:d4:99:20:28:d5:ee:75:5d:e0: 85:54:f5:c5:e6:7e:fd:c4:cd:bb:45:30:6c:30:66: c8:82:b2:bb:67:6e:78:4c:c5:31:a5:c7:26:b1:24: 25:d1:97:f5:96:1f:32:46:94:01:0c:3f:52:d4:3e: a6:1b:93:a6:e5:d7:f1:71:67:e4:ba:49:c4:1c:28: 52:b8:28:b0:3f:14:c7:01:f9:38:55:6b:93:bb:a6: d3:27:2a:5a:d5:29:e3:61:b5:e7:67:35:42:e0:4f: d5:f7:02:78:d4:68:fa:a0:dd:07:42:8d:c5:63:d7: 96:6e:b0:9d:9e:85:02:0f:19:de:42:67:f8:5e:5e: e6:d8:7c:c2:c9:9f:10:5e:1c:fb:ee:78:67:a5:8b: c3:4e:30:e3:f0:b4:7a:f2:e6:e5:b5:11:a0:f2:77: 73:46:4c:71:1d:88:cf:f6:3f:20:d5:01:21:41:d3: 81:5d:52:e4:47:c2:32:d1:7a:15:6d:ed:5d:84:de: bc:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EB:51:D4:09:F0:8D:FD:18:3D:88:23:DB:85:64:3A:79:E9:38:AA X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/FutR1Anwjf0YPYgj24VkOnnpOKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.245.233.0/24 Signature Algorithm: sha256WithRSAEncryption 97:b3:d8:5e:71:df:8f:0f:34:d8:f7:62:23:73:d3:df:e3:52: d5:12:9b:75:e2:c1:3e:9b:40:66:2b:7d:1c:1e:50:06:49:9e: 0a:bb:55:ed:b8:67:0c:d8:b7:36:a4:c2:c1:1b:cb:59:eb:4f: 06:bb:e3:07:71:fa:3a:5a:c0:10:b4:38:45:d6:b9:a8:7b:d6: 59:f9:99:c3:e3:d9:36:37:74:27:62:bb:bb:bf:cd:6d:54:63: 66:8f:02:1a:90:28:b8:a5:a7:2e:e1:c7:67:59:44:67:96:72: 17:00:70:01:91:61:59:f9:ae:e4:dd:68:4f:b7:ff:d0:c6:b8: ee:76:bc:21:45:b6:33:49:75:70:b4:34:cb:74:1b:4c:2f:cc: d6:fe:bc:3f:5c:23:c7:ff:3e:15:c4:29:3d:5f:67:37:d8:80: 93:a0:f2:a0:81:ef:8b:da:b9:08:93:67:ac:3b:69:07:87:71: a0:e7:ce:49:d1:a0:0d:de:0b:57:45:6c:82:62:98:55:fd:74: cb:b4:5b:5f:eb:71:cb:6f:66:93:a9:c9:22:16:d8:d3:f3:7c: 08:fa:35:fd:f6:84:e9:a7:4c:cd:e0:b7:ce:5f:99:a2:ab:cc: 78:58:f4:7c:48:d6:a7:b2:0d:cb:50:e1:54:cf:7e:4f:2b:1c: 5c:2b:57:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ykQVNdzhFknLO7n7ceZzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwMTAyMDgxOTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmViNTFkNDA5ZjA4ZGZkMTgzZDg4MjNkYjg1NjQzYTc5ZTkzOGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6RL5HlJ3YFaYbXLZUnHAnTmZR19 o1GHqB6re4iFz0dIKntTKtfmT9A5MGyER2QjxFbfcbjfntE6lIbZFlk+HzHUmSAo 1e51XeCFVPXF5n79xM27RTBsMGbIgrK7Z254TMUxpccmsSQl0Zf1lh8yRpQBDD9S 1D6mG5Om5dfxcWfkuknEHChSuCiwPxTHAfk4VWuTu6bTJypa1SnjYbXnZzVC4E/V 9wJ41Gj6oN0HQo3FY9eWbrCdnoUCDxneQmf4Xl7m2HzCyZ8QXhz77nhnpYvDTjDj 8LR68ubltRGg8ndzRkxxHYjP9j8g1QEhQdOBXVLkR8Iy0XoVbe1dhN68zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBbrUdQJ8I39GD2II9uFZDp56TiqMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvRnV0UjFBbndqZjBZUFlnajI0VmtPbm5wT0tvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/XpMA0G CSqGSIb3DQEBCwUAA4IBAQCXs9hecd+PDzTY92Ijc9Pf41LVEpt14sE+m0BmK30c HlAGSZ4Ku1XtuGcM2Lc2pMLBG8tZ608Gu+MHcfo6WsAQtDhF1rmoe9ZZ+ZnD49k2 N3QnYru7v81tVGNmjwIakCi4pacu4cdnWURnlnIXAHABkWFZ+a7k3WhPt//Qxrju drwhRbYzSXVwtDTLdBtML8zW/rw/XCPH/z4VxCk9X2c32ICToPKgge+L2rkIk2es O2kHh3Gg585J0aAN3gtXRWyCYphV/XTLtFtf63HLb2aTqckiFtjT83wI+jX99oTp p0zN4LfOX5miq8x4WPR8SNansg3LUOFUz35PKxxcK1ef -----END CERTIFICATE-----Generated at Mon Jan 26 14:11:54 2026 by rpki-client