This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/FT4kAT6lWQN00FHh3OTXw40E65E.roa File: FT4kAT6lWQN00FHh3OTXw40E65E.roa (raw, json) Hash identifier: GFS78DgVCOqhb0Wz+qsE+LrfZ/kjwcDR1Tvaz5iQcCc= Subject key identifier: 15:3E:24:01:3E:A5:59:03:74:D0:51:E1:DC:E4:D7:C3:8D:04:EB:91 Certificate issuer: /CN=34fc1821905516e618320e9e471a13b2aaac96ff Certificate serial: 019B7EA4615DBFCBCA3319415B5F467834B9 Authority key identifier: 34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/FT4kAT6lWQN00FHh3OTXw40E65E.roa Signing time: Fri 02 Jan 2026 12:17:40 +0000 ROA not before: Fri 02 Jan 2026 12:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35568 IP address blocks: 87.236.136.0/21 maxlen: 21 87.236.136.0/24 maxlen: 24 87.236.137.0/24 maxlen: 24 87.236.138.0/24 maxlen: 24 87.236.139.0/24 maxlen: 24 87.236.140.0/24 maxlen: 24 87.236.141.0/24 maxlen: 24 87.236.142.0/24 maxlen: 24 87.236.143.0/24 maxlen: 24 185.236.132.0/22 maxlen: 24 185.236.132.0/24 maxlen: 24 185.236.133.0/24 maxlen: 24 185.236.134.0/24 maxlen: 24 185.236.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.mft rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:61:5d:bf:cb:ca:33:19:41:5b:5f:46:78:34:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34fc1821905516e618320e9e471a13b2aaac96ff Validity Not Before: Jan 2 12:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=153e24013ea5590374d051e1dce4d7c38d04eb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:04:ba:b2:57:3e:51:72:da:6f:70:7c:04: 65:e1:3e:d2:da:bc:43:b7:4e:80:a4:46:96:c2:ee: b1:75:59:a8:96:27:13:21:33:1b:c2:2a:50:c9:ac: 78:f5:dd:80:66:dd:70:8e:4a:73:12:7c:7a:64:25: 64:ed:aa:d9:f2:f7:57:f8:23:19:c1:15:93:ce:29: db:a5:ea:f8:1f:7a:73:f0:14:48:36:82:88:8f:7d: b8:82:9d:73:9b:1d:64:ec:b0:d8:03:22:8d:bf:95: 5a:d2:85:fd:0b:85:29:7c:87:2c:43:24:5e:36:e9: f9:aa:f9:ee:be:bc:7b:8e:ee:ac:30:fc:bd:8f:4f: b8:03:f9:8f:0d:96:6e:28:41:17:e7:6e:8b:fb:68: 15:a9:6a:c8:e5:ed:d9:1f:09:27:51:c1:52:3e:25: d0:eb:87:f1:fb:b6:f7:d5:31:89:b9:d8:2f:d8:7c: 1d:e1:9d:9c:a8:32:9d:4d:9e:77:18:1b:1a:df:e8: 58:be:32:76:2e:a6:af:a0:45:67:a7:97:84:5d:88: dd:b9:0b:03:a3:a3:7e:a2:34:10:05:b9:74:c4:60: e7:e6:e6:9b:fc:3f:2d:f1:43:0d:72:1c:33:d3:e8: d0:7e:c9:58:47:31:68:7e:d3:42:53:5f:b0:7a:4a: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:3E:24:01:3E:A5:59:03:74:D0:51:E1:DC:E4:D7:C3:8D:04:EB:91 X509v3 Authority Key Identifier: keyid:34:FC:18:21:90:55:16:E6:18:32:0E:9E:47:1A:13:B2:AA:AC:96:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NPwYIZBVFuYYMg6eRxoTsqqslv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/FT4kAT6lWQN00FHh3OTXw40E65E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/84b575-5563-4f1b-865a-815eea33b35b/1/NPwYIZBVFuYYMg6eRxoTsqqslv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.136.0/21 185.236.132.0/22 Signature Algorithm: sha256WithRSAEncryption 6e:0f:ff:96:81:d1:87:37:42:a3:b1:fe:b8:d9:5e:69:85:f9: 72:aa:94:24:83:42:45:4e:3a:86:49:cd:14:80:39:03:a9:54: 8e:10:43:0e:52:d8:8c:8e:6d:08:c7:9c:4b:60:33:a8:7f:ee: f7:5c:89:24:00:ab:4f:30:bd:f6:40:1d:f1:db:db:8e:a0:a9: 00:8a:bd:14:70:38:68:60:3c:4c:71:a6:13:c1:a1:ab:70:40: 2f:55:f5:42:81:75:ec:34:cc:ad:77:9b:16:d6:fa:0c:39:4e: 5e:8e:78:71:67:4b:50:b9:07:0c:b6:6c:92:60:fb:a9:f3:24: 35:f3:59:4d:09:f3:1d:79:9e:67:c3:79:b3:c3:91:88:ae:e5: 03:c9:6b:47:4e:63:93:4f:b5:6e:f9:c0:de:7a:03:a3:dc:ad: c6:b6:08:b2:7b:b7:9a:82:2b:d9:f0:95:42:49:4d:47:6f:7d: 47:df:e1:76:ec:0f:61:d8:3e:04:f1:1b:4a:44:e8:d9:9d:e0: c2:dc:a2:06:8a:5e:bb:37:d5:d9:92:6f:3e:c6:60:9c:03:4c: 9b:d0:b7:5a:0d:df:ea:62:d7:29:54:90:65:9c:64:24:65:0d: ce:af:e0:36:9e:85:8c:a7:2e:8b:88:21:07:c2:25:15:28:d3: 8c:35:01:fb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pGFdv8vKMxlBW19GeDS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZmMxODIxOTA1NTE2ZTYxODMyMGU5ZTQ3MWExM2IyYWFh Yzk2ZmYwHhcNMjYwMTAyMTIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTNlMjQwMTNlYTU1OTAzNzRkMDUxZTFkY2U0ZDdjMzhkMDRlYjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQIEurJXPlFy2m9wfARl4T7S2rxD t06ApEaWwu6xdVmolicTITMbwipQyax49d2AZt1wjkpzEnx6ZCVk7arZ8vdX+CMZ wRWTzinbper4H3pz8BRINoKIj324gp1zmx1k7LDYAyKNv5Va0oX9C4UpfIcsQyRe Nun5qvnuvrx7ju6sMPy9j0+4A/mPDZZuKEEX526L+2gVqWrI5e3ZHwknUcFSPiXQ 64fx+7b31TGJudgv2Hwd4Z2cqDKdTZ53GBsa3+hYvjJ2LqavoEVnp5eEXYjduQsD o6N+ojQQBbl0xGDn5uab/D8t8UMNchwz0+jQfslYRzFoftNCU1+wekrDJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBU+JAE+pVkDdNBR4dzk18ONBOuRMB8GA1UdIwQY MBaAFDT8GCGQVRbmGDIOnkcaE7KqrJb/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84NGI1NzUtNTU2My00ZjFiLTg2NWEt ODE1ZWVhMzNiMzViLzEvRlQ0a0FUNmxXUU4wMEZIaDNPVFh3NDBFNjVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84NGI1NzUtNTU2My00ZjFiLTg2NWEtODE1ZWVhMzNiMzVi LzEvTlB3WUlaQlZGdVlZTWc2ZVJ4b1RzcXFzbHY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDV+yIAwQC ueyEMA0GCSqGSIb3DQEBCwUAA4IBAQBuD/+WgdGHN0Kjsf642V5phflyqpQkg0JF TjqGSc0UgDkDqVSOEEMOUtiMjm0Ix5xLYDOof+73XIkkAKtPML32QB3x29uOoKkA ir0UcDhoYDxMcaYTwaGrcEAvVfVCgXXsNMytd5sW1voMOU5ejnhxZ0tQuQcMtmyS YPup8yQ181lNCfMdeZ5nw3mzw5GIruUDyWtHTmOTT7Vu+cDeegOj3K3Gtgiye7ea givZ8JVCSU1Hb31H3+F27A9h2D4E8RtKROjZneDC3KIGil67N9XZkm8+xmCcA0yb 0LdaDd/qYtcpVJBlnGQkZQ3Or+A2noWMpy6LiCEHwiUVKNOMNQH7 -----END CERTIFICATE-----Generated at Mon Feb 9 19:39:22 2026 by rpki-client