This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/f1PabdMHfQkwb_rJD0euNEdLPNo.roa File: f1PabdMHfQkwb_rJD0euNEdLPNo.roa (raw, json) Hash identifier: pwXbv15hGfv92Q6PjftZnhn3njIK1HoRY7eN6+dGkew= Subject key identifier: 7F:53:DA:6D:D3:07:7D:09:30:6F:FA:C9:0F:47:AE:34:47:4B:3C:DA Certificate issuer: /CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54 Certificate serial: 019B76EB3B43FF1B77855906DED3FE4375AF Authority key identifier: 1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/f1PabdMHfQkwb_rJD0euNEdLPNo.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15493 IP address blocks: 77.242.96.0/20 maxlen: 20 77.242.96.0/24 maxlen: 24 77.242.111.0/24 maxlen: 24 80.91.16.0/20 maxlen: 20 178.236.208.0/20 maxlen: 20 178.236.211.0/24 maxlen: 24 178.236.212.0/24 maxlen: 24 178.236.214.0/24 maxlen: 24 178.236.215.0/24 maxlen: 24 178.236.221.0/24 maxlen: 24 178.236.222.0/24 maxlen: 24 185.11.4.0/23 maxlen: 23 185.11.6.0/23 maxlen: 23 217.116.48.0/20 maxlen: 20 217.116.51.0/24 maxlen: 24 217.116.52.0/24 maxlen: 24 217.116.55.0/24 maxlen: 24 217.116.57.0/24 maxlen: 24 217.116.59.0/24 maxlen: 24 2a02:dc00:1::/48 maxlen: 48 2a02:dc00:2::/48 maxlen: 48 2a02:dc00:100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.mft rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3b:43:ff:1b:77:85:59:06:de:d3:fe:43:75:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e1c2357e70b97d03ed70c3d688ce507c6758d54 Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f53da6dd3077d09306ffac90f47ae34474b3cda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3a:f2:8a:35:60:88:37:5a:a7:17:2c:6c:2a: b3:8f:5c:2e:32:12:5a:ea:28:bf:da:1f:77:82:2a: 0d:d8:eb:1b:ff:85:0b:35:51:5d:8b:68:e2:aa:66: 87:12:d3:28:ff:0a:ad:a1:34:3f:5e:2b:e8:f9:be: b8:92:6c:20:ba:6e:cf:3d:32:0d:f6:21:79:a9:8d: 01:85:c7:ee:31:f4:df:f6:d4:86:ca:e6:0f:06:94: 2f:a6:a9:8e:50:fe:03:17:58:59:76:7b:3a:c4:ce: be:80:d6:04:85:0b:79:93:c1:0f:fe:b1:b0:74:21: 02:63:c7:cb:55:83:03:c9:2a:44:50:45:6c:09:1d: e6:ca:25:35:6c:d7:7e:b7:c7:83:21:c9:46:1b:0d: cd:57:d7:04:1f:4c:b3:48:be:4a:27:09:2b:87:9d: 31:11:a6:60:16:2b:ad:69:e1:dc:ac:78:ca:c0:2e: 1e:57:dd:a6:72:8e:12:e8:3c:0c:e3:5a:75:52:99: ba:a3:35:ee:aa:0e:6d:7f:a9:05:f8:96:c7:7a:ce: 9f:ee:c2:60:e8:d2:c0:07:2e:56:eb:4a:5b:e3:df: 4d:06:d7:08:9f:24:4d:df:10:9a:95:39:62:97:39: f6:94:d9:a1:ae:58:4a:5a:5c:56:d1:91:c1:f1:44: 04:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:53:DA:6D:D3:07:7D:09:30:6F:FA:C9:0F:47:AE:34:47:4B:3C:DA X509v3 Authority Key Identifier: keyid:1E:1C:23:57:E7:0B:97:D0:3E:D7:0C:3D:68:8C:E5:07:C6:75:8D:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/f1PabdMHfQkwb_rJD0euNEdLPNo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/054867-14d4-4922-bf5f-6ddcfac970f7/1/HhwjV-cLl9A-1ww9aIzlB8Z1jVQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.242.96.0/20 80.91.16.0/20 178.236.208.0/20 185.11.4.0/22 217.116.48.0/20 IPv6: 2a02:dc00:1::-2a02:dc00:2:ffff:ffff:ffff:ffff:ffff 2a02:dc00:100::/48 Signature Algorithm: sha256WithRSAEncryption 6b:02:6e:1c:2b:eb:36:64:d8:0a:2a:95:c1:ba:35:02:50:7d: f8:fa:c0:9a:d2:2e:ef:96:ed:88:27:6d:ec:75:40:f9:7e:42: 4d:ac:f0:5c:03:f3:46:b4:9b:e9:5d:1d:45:ec:39:79:35:89: 6a:3c:a8:b1:27:61:88:8b:3e:73:68:06:b8:e5:eb:0b:cc:10: dd:3a:78:9d:bf:da:01:fa:ee:94:26:82:46:cc:34:87:43:46: dc:df:f2:ff:dd:6d:90:48:26:9c:ce:63:85:6e:1d:01:86:36: 48:93:a8:7f:d8:45:a6:5a:de:67:42:7a:c9:ec:a4:8a:ba:7c: c5:87:3c:86:2f:4c:0d:29:71:6a:ae:11:62:b1:f8:6e:37:3d: ad:21:f3:34:50:50:e3:3a:e6:fd:34:1d:db:0b:1e:db:63:dd: 28:b7:76:e4:5c:85:37:8e:81:c0:48:8b:52:e5:7d:7a:c2:c6: a2:bd:28:05:65:12:04:1e:45:fe:c4:ee:e9:b6:9f:1d:9e:c6: b3:53:2e:f1:86:cb:10:a6:4e:fd:d2:96:43:fc:53:06:8b:22: 51:02:37:ae:f2:13:bb:97:a4:19:0d:63:76:d4:d5:86:26:1b: 37:1d:96:39:78:c3:15:b9:e3:0f:4a:c5:fc:47:c9:d2:23:6d: 76:67:af:4a -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZt26ztD/xt3hVkG3tP+Q3WvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMWMyMzU3ZTcwYjk3ZDAzZWQ3MGMzZDY4OGNlNTA3YzY3 NThkNTQwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjUzZGE2ZGQzMDc3ZDA5MzA2ZmZhYzkwZjQ3YWUzNDQ3NGIzY2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDryijVgiDdapxcsbCqzj1wuMhJa 6ii/2h93gioN2Osb/4ULNVFdi2jiqmaHEtMo/wqtoTQ/Xivo+b64kmwgum7PPTIN 9iF5qY0BhcfuMfTf9tSGyuYPBpQvpqmOUP4DF1hZdns6xM6+gNYEhQt5k8EP/rGw dCECY8fLVYMDySpEUEVsCR3myiU1bNd+t8eDIclGGw3NV9cEH0yzSL5KJwkrh50x EaZgFiutaeHcrHjKwC4eV92mco4S6DwM41p1Upm6ozXuqg5tf6kF+JbHes6f7sJg 6NLABy5W60pb499NBtcInyRN3xCalTlilzn2lNmhrlhKWlxW0ZHB8UQEGwIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFH9T2m3TB30JMG/6yQ9HrjRHSzzaMB8GA1UdIwQY MBaAFB4cI1fnC5fQPtcMPWiM5QfGdY1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8wNTQ4NjctMTRkNC00OTIyLWJmNWYt NmRkY2ZhYzk3MGY3LzEvZjFQYWJkTUhmUWt3Yl9ySkQwZXVORWRMUE5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8wNTQ4NjctMTRkNC00OTIyLWJmNWYtNmRkY2ZhYzk3MGY3 LzEvSGh3alYtY0xsOUEtMXd3OWFJemxCOFoxalZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzAkBAIAATAeAwQETfJgAwQE UFsQAwQEsuzQAwQCuQsEAwQE2XQwMCMEAgACMB0wEgMHACoC3AAAAQMHACoC3AAA AgMHACoC3AABADANBgkqhkiG9w0BAQsFAAOCAQEAawJuHCvrNmTYCiqVwbo1AlB9 +PrAmtIu75btiCdt7HVA+X5CTazwXAPzRrSb6V0dRew5eTWJajyosSdhiIs+c2gG uOXrC8wQ3Tp4nb/aAfrulCaCRsw0h0NG3N/y/91tkEgmnM5jhW4dAYY2SJOof9hF plreZ0J6yeykirp8xYc8hi9MDSlxaq4RYrH4bjc9rSHzNFBQ4zrm/TQd2wse22Pd KLd25FyFN46BwEiLUuV9esLGor0oBWUSBB5F/sTu6bafHZ7Gs1Mu8YbLEKZO/dKW Q/xTBosiUQI3rvITu5ekGQ1jdtTVhiYbNx2WOXjDFbnjD0rF/EfJ0iNtdmevSg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:30 2026 by rpki-client