This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/FtvcAFkah5MC2Z1_PcfWmzKSll8.roa File: FtvcAFkah5MC2Z1_PcfWmzKSll8.roa (raw, json) Hash identifier: lAzH9ctEUVZ0nWk96qJfvTNhA1rNNyQ5u0vfPKjJ5TI= Subject key identifier: 16:DB:DC:00:59:1A:87:93:02:D9:9D:7F:3D:C7:D6:9B:32:92:96:5F Certificate issuer: /CN=407d2dc10c02f5ec24f690f9f660555486562e59 Certificate serial: 019B7AC8F05FBCACDB37F0C6F121C670220F Authority key identifier: 40:7D:2D:C1:0C:02:F5:EC:24:F6:90:F9:F6:60:55:54:86:56:2E:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH0twQwC9ewk9pD59mBVVIZWLlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/FtvcAFkah5MC2Z1_PcfWmzKSll8.roa Signing time: Thu 01 Jan 2026 18:19:07 +0000 ROA not before: Thu 01 Jan 2026 18:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29436 IP address blocks: 192.162.80.0/22 maxlen: 22 192.166.112.0/23 maxlen: 23 193.238.36.0/22 maxlen: 22 195.149.108.0/24 maxlen: 24 2001:67c:2d9c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/QH0twQwC9ewk9pD59mBVVIZWLlk.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/QH0twQwC9ewk9pD59mBVVIZWLlk.mft rsync://rpki.ripe.net/repository/DEFAULT/QH0twQwC9ewk9pD59mBVVIZWLlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f0:5f:bc:ac:db:37:f0:c6:f1:21:c6:70:22:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407d2dc10c02f5ec24f690f9f660555486562e59 Validity Not Before: Jan 1 18:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=16dbdc00591a879302d99d7f3dc7d69b3292965f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6a:0c:92:e7:e8:8f:11:68:8f:b6:11:b1:db: a7:74:eb:95:25:18:72:0b:9a:1c:5f:c3:e8:1a:6a: f5:11:f1:85:38:68:e5:e4:38:1a:4e:01:b7:fe:50: a8:f1:53:5d:ac:85:89:3c:f4:8c:98:b7:67:82:6d: e8:6e:f0:46:76:47:58:b1:3b:ab:17:27:61:54:b7: 1e:02:f8:7f:d2:6f:ad:dd:1b:e7:df:0f:8e:3c:80: fa:0c:bd:5d:57:5f:0a:f3:43:e7:25:73:68:a9:0a: db:3a:7a:bb:f9:01:4b:c8:54:5d:10:c0:18:16:ad: b3:47:8b:ab:e9:67:fe:78:0d:b2:55:81:69:6c:0b: fd:77:cd:2b:80:da:ab:3c:9c:04:ab:8b:4c:cd:dd: 79:b8:69:9a:a3:c6:c6:31:9c:53:49:af:75:dd:2f: cd:9a:c7:b4:e2:4f:c1:54:d9:3c:e9:ab:fe:53:37: 75:5b:79:46:7a:c6:b8:dd:02:89:e0:e1:70:b0:72: 63:36:64:00:d1:28:9c:db:bf:34:0b:ac:fa:b9:e7: df:b9:bc:e3:5f:ee:72:a1:5c:c9:5b:31:05:84:fc: e0:c2:07:d1:3d:e1:4c:b1:3f:2c:17:00:72:66:e1: 76:fe:4c:d8:09:4a:8e:19:3a:fd:cf:49:d3:c5:f6: 6b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:DB:DC:00:59:1A:87:93:02:D9:9D:7F:3D:C7:D6:9B:32:92:96:5F X509v3 Authority Key Identifier: keyid:40:7D:2D:C1:0C:02:F5:EC:24:F6:90:F9:F6:60:55:54:86:56:2E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH0twQwC9ewk9pD59mBVVIZWLlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/FtvcAFkah5MC2Z1_PcfWmzKSll8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a6fcc9-d251-42dc-ad02-967c2285ea62/1/QH0twQwC9ewk9pD59mBVVIZWLlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.162.80.0/22 192.166.112.0/23 193.238.36.0/22 195.149.108.0/24 IPv6: 2001:67c:2d9c::/48 Signature Algorithm: sha256WithRSAEncryption 7b:ec:02:38:ac:8d:2b:52:c0:f4:d3:dc:40:bb:de:f1:db:1d: 58:f0:24:15:8c:67:67:27:ac:cc:d5:58:9a:42:57:41:f4:3e: 15:cc:d6:96:8a:de:ff:b4:40:e7:72:99:5d:29:a7:c9:43:a3: 84:75:f0:06:bb:cf:07:17:5d:a8:fd:fa:c9:2b:2c:b2:b5:c5: b9:2d:15:66:58:eb:46:1a:e5:e8:e4:64:d0:cb:fd:4f:27:7f: cb:5e:20:aa:bc:96:61:f5:64:13:3d:b5:98:90:5a:74:14:fb: 0f:a1:5d:0c:b6:5c:fa:1c:4e:33:9e:01:bd:1b:2c:09:c6:79: be:d9:4b:a5:3e:20:20:e1:c2:64:0e:53:c7:7d:40:0c:54:42: 41:00:27:8b:e6:6e:e7:5c:65:9b:72:ba:97:12:ab:c8:4f:ab: a5:42:37:86:8c:f1:4e:65:5d:2a:26:f8:8c:fc:ab:8f:7d:aa: 04:22:14:77:b0:37:ac:61:db:5f:37:11:db:ed:27:aa:b2:c6: 2a:d0:df:d1:5a:8f:68:72:e0:e7:61:57:67:23:e8:bd:1d:0b: 0d:50:45:5e:36:bc:43:e9:b9:e9:a1:c3:a6:e8:ad:78:84:3b: e4:49:b1:f2:e8:de:6b:b0:af:1e:a6:10:24:e3:43:75:c7:d9: ea:cc:7b:2f -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt6yPBfvKzbN/DG8SHGcCIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwN2QyZGMxMGMwMmY1ZWMyNGY2OTBmOWY2NjA1NTU0ODY1 NjJlNTkwHhcNMjYwMTAxMTgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNmRiZGMwMDU5MWE4NzkzMDJkOTlkN2YzZGM3ZDY5YjMyOTI5NjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GoMkufojxFoj7YRsdundOuVJRhy C5ocX8PoGmr1EfGFOGjl5DgaTgG3/lCo8VNdrIWJPPSMmLdngm3obvBGdkdYsTur FydhVLceAvh/0m+t3Rvn3w+OPID6DL1dV18K80PnJXNoqQrbOnq7+QFLyFRdEMAY Fq2zR4ur6Wf+eA2yVYFpbAv9d80rgNqrPJwEq4tMzd15uGmao8bGMZxTSa913S/N mse04k/BVNk86av+Uzd1W3lGesa43QKJ4OFwsHJjNmQA0Sic2780C6z6ueffubzj X+5yoVzJWzEFhPzgwgfRPeFMsT8sFwByZuF2/kzYCUqOGTr9z0nTxfZrZwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFBbb3ABZGoeTAtmdfz3H1psykpZfMB8GA1UdIwQY MBaAFEB9LcEMAvXsJPaQ+fZgVVSGVi5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUgwdHdRd0M5ZXdrOXBENTltQlZWSVpXTGxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hNmZjYzktZDI1MS00MmRjLWFkMDIt OTY3YzIyODVlYTYyLzEvRnR2Y0FGa2FoNU1DMloxX1BjZldtektTbGw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9hNmZjYzktZDI1MS00MmRjLWFkMDItOTY3YzIyODVlYTYy LzEvUUgwdHdRd0M5ZXdrOXBENTltQlZWSVpXTGxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQCwKJQAwQB wKZwAwQCwe4kAwQAw5VsMA8EAgACMAkDBwAgAQZ8LZwwDQYJKoZIhvcNAQELBQAD ggEBAHvsAjisjStSwPTT3EC73vHbHVjwJBWMZ2cnrMzVWJpCV0H0PhXM1paK3v+0 QOdymV0pp8lDo4R18Aa7zwcXXaj9+skrLLK1xbktFWZY60Ya5ejkZNDL/U8nf8te IKq8lmH1ZBM9tZiQWnQU+w+hXQy2XPocTjOeAb0bLAnGeb7ZS6U+ICDhwmQOU8d9 QAxUQkEAJ4vmbudcZZtyupcSq8hPq6VCN4aM8U5lXSom+Iz8q499qgQiFHewN6xh 2183EdvtJ6qyxirQ39Faj2hy4OdhV2cj6L0dCw1QRV42vEPpuemhw6borXiEO+RJ sfLo3muwrx6mECTjQ3XH2erMey8= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:35 2026 by rpki-client