This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/FOYnhTGUuSkciGooVBWl3L4Sajs.roa File: FOYnhTGUuSkciGooVBWl3L4Sajs.roa (raw, json) Hash identifier: 9fnUXbhjWQSm3liWzGJjb74HigAVFNZ5fDa+TjWD8lw= Subject key identifier: 14:E6:27:85:31:94:B9:29:1C:88:6A:28:54:15:A5:DC:BE:12:6A:3B Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06 Certificate serial: 019C037F2604CC9CFB95BA5238AC514990B9 Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/FOYnhTGUuSkciGooVBWl3L4Sajs.roa Signing time: Wed 28 Jan 2026 07:26:30 +0000 ROA not before: Wed 28 Jan 2026 07:26:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 378 IP address blocks: 128.139.0.0/16 maxlen: 24 128.139.0.0/17 maxlen: 17 128.139.4.0/24 maxlen: 24 128.139.6.0/24 maxlen: 24 128.139.7.0/24 maxlen: 24 128.139.128.0/17 maxlen: 17 128.139.199.0/24 maxlen: 24 128.139.200.0/24 maxlen: 24 132.78.0.0/16 maxlen: 16 185.115.212.0/22 maxlen: 22 192.114.0.0/21 maxlen: 21 192.114.16.0/21 maxlen: 21 192.114.48.0/21 maxlen: 21 192.114.56.0/22 maxlen: 22 192.114.60.0/23 maxlen: 23 192.114.92.0/22 maxlen: 22 192.114.96.0/20 maxlen: 20 192.114.100.0/24 maxlen: 24 192.114.101.0/24 maxlen: 24 192.114.102.0/24 maxlen: 24 192.114.124.0/22 maxlen: 22 192.114.128.0/20 maxlen: 20 192.114.192.0/18 maxlen: 18 192.115.32.0/20 maxlen: 20 192.115.46.0/24 maxlen: 24 192.115.64.0/22 maxlen: 22 192.115.164.0/22 maxlen: 22 192.115.168.0/21 maxlen: 21 192.115.192.0/21 maxlen: 21 192.117.80.0/20 maxlen: 20 2001:bf8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:7f:26:04:cc:9c:fb:95:ba:52:38:ac:51:49:90:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06 Validity Not Before: Jan 28 07:26:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=14e627853194b9291c886a285415a5dcbe126a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:13:87:94:e8:a2:6c:69:e8:63:5f:98:9b:71: fa:2d:94:65:ec:c0:da:3b:b3:e3:9e:92:3e:bf:98: dc:0f:72:b0:26:cb:8c:31:a3:cb:24:67:04:c1:73: 6e:19:b2:22:57:71:28:f8:2e:1f:93:7f:34:5b:5f: d0:db:ab:96:a3:e2:f2:eb:67:a3:60:7a:9c:9b:a3: 18:a1:03:a2:6f:fb:61:b8:bd:20:8f:85:bf:5f:b3: ec:06:7d:46:4f:3f:53:a8:7c:4c:2c:b0:41:23:01: 07:fd:36:59:50:10:bd:84:b2:f5:15:ad:5e:b5:06: 1a:40:80:92:e3:1c:24:a6:d8:d7:d5:04:7f:b1:4f: dc:59:f0:6f:30:b5:ba:bd:eb:3a:9e:6c:d2:66:63: 07:9a:95:5b:0a:c8:fe:93:cc:b5:93:86:7d:40:ee: 3e:8d:a7:a3:2a:9f:a8:94:fd:4a:fa:2a:bb:3c:e3: a1:07:d5:01:2f:74:03:b3:c1:80:97:37:5e:8b:b8: a3:5e:79:d9:99:29:40:6d:19:b4:5e:84:9a:fb:cb: 27:be:8a:e1:4d:5a:cc:4d:8f:5c:90:4f:ac:67:90: 37:b7:98:35:73:64:01:9b:93:6f:40:2f:62:bc:ff: 1f:bc:2b:ae:f8:2b:72:bc:86:d4:02:28:c6:c5:9e: 38:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E6:27:85:31:94:B9:29:1C:88:6A:28:54:15:A5:DC:BE:12:6A:3B X509v3 Authority Key Identifier: keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/FOYnhTGUuSkciGooVBWl3L4Sajs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.139.0.0/16 132.78.0.0/16 185.115.212.0/22 192.114.0.0/21 192.114.16.0/21 192.114.48.0-192.114.61.255 192.114.92.0-192.114.111.255 192.114.124.0-192.114.143.255 192.114.192.0/18 192.115.32.0/20 192.115.64.0/22 192.115.164.0-192.115.175.255 192.115.192.0/21 192.117.80.0/20 IPv6: 2001:bf8::/32 Signature Algorithm: sha256WithRSAEncryption 87:6f:85:03:41:9b:ed:fc:c6:36:75:0f:76:f8:2b:0a:49:40: e9:79:32:64:0d:4a:30:bd:b9:b2:d5:86:9d:6a:6b:81:9e:2c: 5a:2f:a0:66:ab:5e:fd:64:de:9e:e2:91:9c:c8:2b:ed:f7:59: 1a:c3:fd:a0:60:c2:12:cd:54:3d:69:ca:43:8f:58:60:b6:b8: 38:27:94:15:f7:82:04:5d:5d:95:f7:79:b5:f9:e7:d3:c5:69: 8a:75:6e:9d:f0:4c:b2:a8:85:2d:9f:5e:b7:fc:02:f9:5d:de: 92:89:d8:6a:41:99:a0:33:a5:57:8e:8c:02:1f:0b:1d:8e:c7: 9a:70:a4:4a:10:1d:28:1c:c8:a2:12:66:88:dc:f1:5f:63:4d: 92:10:35:85:8e:2f:f9:28:7e:53:4d:d5:60:08:df:ee:9f:f6: 91:28:e6:6b:f0:21:05:73:e8:07:4e:b2:36:3e:80:56:67:aa: d3:1b:7f:39:4e:e5:79:3b:9d:25:44:6b:4a:5d:43:d3:b3:fe: 6f:f2:3a:ba:61:79:7f:b4:42:eb:2e:04:0f:cd:63:55:c0:c5: 20:3d:2f:46:eb:b9:8e:ee:37:c7:54:23:28:13:56:ee:23:23: 0e:b6:78:21:92:6a:33:ce:25:cb:31:47:52:0d:25:9f:cb:b8: 86:c3:d8:29 -----BEGIN CERTIFICATE----- MIIFezCCBGOgAwIBAgISAZwDfyYEzJz7lbpSOKxRSZC5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz OGJhMDYwHhcNMjYwMTI4MDcyNjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNGU2Mjc4NTMxOTRiOTI5MWM4ODZhMjg1NDE1YTVkY2JlMTI2YTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ROHlOiibGnoY1+Ym3H6LZRl7MDa O7PjnpI+v5jcD3KwJsuMMaPLJGcEwXNuGbIiV3Eo+C4fk380W1/Q26uWo+Ly62ej YHqcm6MYoQOib/thuL0gj4W/X7PsBn1GTz9TqHxMLLBBIwEH/TZZUBC9hLL1Fa1e tQYaQICS4xwkptjX1QR/sU/cWfBvMLW6ves6nmzSZmMHmpVbCsj+k8y1k4Z9QO4+ jaejKp+olP1K+iq7POOhB9UBL3QDs8GAlzdei7ijXnnZmSlAbRm0XoSa+8snvorh TVrMTY9ckE+sZ5A3t5g1c2QBm5NvQC9ivP8fvCuu+CtyvIbUAijGxZ449wIDAQAB o4IChzCCAoMwHQYDVR0OBBYEFBTmJ4UxlLkpHIhqKFQVpdy+Emo7MB8GA1UdIwQY MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt OWQwYzYyMDczNWYxLzEvRk9ZbmhUR1V1U2tjaUdvb1ZCV2wzTDRTYWpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGcBggrBgEFBQcBBwEB/wSBjDCBiTB4BAIAATByAwMAgIsD AwCETgMEArlz1AMEA8ByAAMEA8ByEDAMAwQEwHIwAwQBwHI8MAwDBALAclwDBATA cmAwDAMEAsByfAMEBMBygAMEBsBywAMEBMBzIAMEAsBzQDAMAwQCwHOkAwQEwHOg AwQDwHPAAwQEwHVQMA0EAgACMAcDBQAgAQv4MA0GCSqGSIb3DQEBCwUAA4IBAQCH b4UDQZvt/MY2dQ92+CsKSUDpeTJkDUowvbmy1YadamuBnixaL6Bmq179ZN6e4pGc yCvt91kaw/2gYMISzVQ9acpDj1hgtrg4J5QV94IEXV2V93m1+efTxWmKdW6d8Eyy qIUtn163/AL5Xd6SidhqQZmgM6VXjowCHwsdjseacKRKEB0oHMiiEmaI3PFfY02S EDWFji/5KH5TTdVgCN/un/aRKOZr8CEFc+gHTrI2PoBWZ6rTG385TuV5O50lRGtK XUPTs/5v8jq6YXl/tELrLgQPzWNVwMUgPS9G67mO7jfHVCMoE1buIyMOtnghkmoz ziXLMUdSDSWfy7iGw9gp -----END CERTIFICATE-----Generated at Sat Feb 7 17:36:52 2026 by rpki-client