This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FTW45ibWHH6GzU4d0ATYJeGB0-Y.roa File: FTW45ibWHH6GzU4d0ATYJeGB0-Y.roa (raw, json) Hash identifier: pZXUrK6ieofCrcuvUt3R4Xhyh+0lryyUOSoofJmjpBM= Subject key identifier: 15:35:B8:E6:26:D6:1C:7E:86:CD:4E:1D:D0:04:D8:25:E1:81:D3:E6 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D62CB094845BBBDC766504B28211A Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FTW45ibWHH6GzU4d0ATYJeGB0-Y.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393894 IP address blocks: 45.80.100.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:62:cb:09:48:45:bb:bd:c7:66:50:4b:28:21:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1535b8e626d61c7e86cd4e1dd004d825e181d3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:34:05:14:d2:bc:d8:3b:fb:a5:b3:46:41:c4: d0:c9:29:54:73:c6:f1:c1:66:43:e6:ca:4a:98:38: 26:62:a7:03:2c:05:53:0f:ac:a3:ff:ec:16:9f:5b: 59:f5:08:73:01:00:25:9b:c8:07:1b:e0:55:d3:6d: 52:f1:13:68:af:82:a9:df:2a:1c:bd:01:5a:cd:f2: 26:84:db:1a:3a:4f:c4:69:40:2c:16:1f:ff:97:3d: 3d:a5:ed:e7:2b:b7:2a:ba:1d:66:52:68:c2:90:f5: 76:15:35:68:2b:68:32:77:f4:91:46:93:db:8d:4f: 9d:f2:3f:4d:50:a1:91:b2:ec:21:d8:39:fc:40:2a: 83:86:47:aa:4e:60:0a:3d:2d:4b:b2:e4:42:5b:2e: 9e:45:b2:64:97:a2:f4:d0:72:70:4a:e6:3a:d1:8d: fa:f7:e0:3c:da:35:cd:94:8d:97:5d:13:2f:53:c0: 85:52:2e:f8:97:0c:54:40:bf:ee:df:78:f8:eb:89: 06:31:4c:36:d9:0e:4e:4a:f6:42:5b:e0:72:2b:db: 04:44:24:4f:bf:7a:93:d1:89:47:03:fa:b2:4e:51: 44:d1:45:1c:4a:0e:88:02:df:49:4e:f4:62:3b:82: 8a:75:ab:79:73:32:68:23:cb:e9:53:64:8b:58:13: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:35:B8:E6:26:D6:1C:7E:86:CD:4E:1D:D0:04:D8:25:E1:81:D3:E6 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FTW45ibWHH6GzU4d0ATYJeGB0-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.80.100.0/22 Signature Algorithm: sha256WithRSAEncryption 91:37:7b:22:b2:81:47:e4:98:71:1a:50:1b:b8:3d:6b:1c:8d: d2:45:37:95:75:7f:f5:32:70:51:65:2e:d2:28:81:a6:77:de: 5c:10:18:9a:c8:29:a8:5d:37:0b:92:82:fb:fc:8f:9c:e8:3a: 9b:21:2c:8f:6b:9e:6c:8b:a1:1e:5e:c4:fe:6d:33:c1:85:30: 98:08:dd:97:d4:2b:f0:b8:af:73:2f:86:de:d9:e4:fa:49:4d: c6:85:04:34:a1:10:a9:da:38:f4:10:e4:1f:69:a3:4c:3f:63: fe:5a:2a:f3:4d:27:90:83:71:2f:65:3d:ff:b9:b0:57:1d:48: 01:eb:f8:6e:9b:bc:c8:32:2e:ac:55:3d:5f:ab:78:9a:5c:f8: 77:7b:28:4d:48:24:2f:89:ea:4d:3c:38:55:c5:9b:26:3d:cc: a2:8e:01:7d:b7:66:bf:16:2a:9f:f4:2c:e3:82:6e:7f:d1:95: 83:d7:68:2d:2f:d3:e7:6b:fa:71:aa:19:e8:55:ec:b9:8e:d4: 47:16:8f:a3:3d:fe:1c:0f:f0:1d:35:84:f6:03:68:c7:b4:bb: e7:9c:b7:e5:62:2c:1b:fe:74:a0:cf:3c:94:ee:fd:2b:7b:3c: ce:34:26:c4:aa:f0:06:1b:9a:81:46:92:a4:c2:43:d8:7b:8c: 1e:c6:e2:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XWLLCUhFu73HZlBLKCEaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTM1YjhlNjI2ZDYxYzdlODZjZDRlMWRkMDA0ZDgyNWUxODFkM2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzQFFNK82Dv7pbNGQcTQySlUc8bx wWZD5spKmDgmYqcDLAVTD6yj/+wWn1tZ9QhzAQAlm8gHG+BV021S8RNor4Kp3yoc vQFazfImhNsaOk/EaUAsFh//lz09pe3nK7cquh1mUmjCkPV2FTVoK2gyd/SRRpPb jU+d8j9NUKGRsuwh2Dn8QCqDhkeqTmAKPS1LsuRCWy6eRbJkl6L00HJwSuY60Y36 9+A82jXNlI2XXRMvU8CFUi74lwxUQL/u33j464kGMUw22Q5OSvZCW+ByK9sERCRP v3qT0YlHA/qyTlFE0UUcSg6IAt9JTvRiO4KKdat5czJoI8vpU2SLWBOnxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBU1uOYm1hx+hs1OHdAE2CXhgdPmMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvRlRXNDVpYldISDZHelU0ZDBBVFlKZUdCMC1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVBkMA0G CSqGSIb3DQEBCwUAA4IBAQCRN3sisoFH5JhxGlAbuD1rHI3SRTeVdX/1MnBRZS7S KIGmd95cEBiayCmoXTcLkoL7/I+c6DqbISyPa55si6EeXsT+bTPBhTCYCN2X1Cvw uK9zL4be2eT6SU3GhQQ0oRCp2jj0EOQfaaNMP2P+WirzTSeQg3EvZT3/ubBXHUgB 6/hum7zIMi6sVT1fq3iaXPh3eyhNSCQviepNPDhVxZsmPcyijgF9t2a/Fiqf9Czj gm5/0ZWD12gtL9Pna/pxqhnoVey5jtRHFo+jPf4cD/AdNYT2A2jHtLvnnLflYiwb /nSgzzyU7v0rezzONCbEqvAGG5qBRpKkwkPYe4wexuIF -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:16 2026 by rpki-client