This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/FfL73uShzwqZVNoRtUTTUlqkYtA.roa File: FfL73uShzwqZVNoRtUTTUlqkYtA.roa (raw, json) Hash identifier: fZCZHAPoxQlmosPyGQ71gASDy0FXd3AMU+JCShnhFxI= Subject key identifier: 15:F2:FB:DE:E4:A1:CF:0A:99:54:DA:11:B5:44:D3:52:5A:A4:62:D0 Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df Certificate serial: 019B8DCB1E6AB0A1A81B9E9B06D739BA7E84 Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/FfL73uShzwqZVNoRtUTTUlqkYtA.roa Signing time: Mon 05 Jan 2026 10:54:17 +0000 ROA not before: Mon 05 Jan 2026 10:54:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60824 IP address blocks: 129.233.192.0/24 maxlen: 24 129.233.193.0/24 maxlen: 24 129.233.194.0/23 maxlen: 23 129.233.196.0/24 maxlen: 24 153.96.28.0/22 maxlen: 22 153.96.32.0/21 maxlen: 21 153.96.60.0/24 maxlen: 24 153.96.70.0/23 maxlen: 23 153.96.72.0/22 maxlen: 22 153.96.88.0/22 maxlen: 22 153.96.114.0/23 maxlen: 23 153.96.128.0/22 maxlen: 22 153.96.204.0/23 maxlen: 23 153.96.206.0/24 maxlen: 24 192.41.227.0/24 maxlen: 24 192.44.7.0/24 maxlen: 24 192.44.14.0/24 maxlen: 24 192.44.16.0/24 maxlen: 24 192.44.19.0/24 maxlen: 24 192.44.22.0/24 maxlen: 24 192.44.27.0/24 maxlen: 24 192.107.235.0/24 maxlen: 24 192.107.236.0/24 maxlen: 24 194.113.96.0/22 maxlen: 22 2a03:db80:4810::/48 maxlen: 48 2a03:db80:4814::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:cb:1e:6a:b0:a1:a8:1b:9e:9b:06:d7:39:ba:7e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df Validity Not Before: Jan 5 10:54:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15f2fbdee4a1cf0a9954da11b544d3525aa462d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0c:3f:20:35:2c:13:d6:fb:42:ae:80:34:07: 6b:cf:82:42:4f:44:e2:d1:63:d3:77:51:6e:8c:de: b2:52:d4:60:bc:a7:ea:1f:1d:29:ff:df:83:8d:19: 66:aa:47:fc:f6:c9:52:70:9f:f6:3f:20:c8:66:60: d8:94:64:da:96:13:a6:12:96:4e:a2:5a:07:32:22: 69:17:4d:12:75:2a:3d:5c:db:e1:ec:fd:bb:8f:9e: 4f:02:ae:d8:19:89:45:24:78:55:07:02:0d:01:59: 23:bc:d1:d5:ec:42:41:27:49:d9:15:37:6a:2c:ba: 49:66:a8:0b:15:3d:b3:c6:22:85:ef:64:04:18:29: 61:ed:7c:af:77:1e:d0:40:b7:c5:fd:41:76:df:c7: a9:01:aa:53:6a:94:41:67:43:6b:33:a4:4e:f4:a3: 20:f5:df:49:07:ed:95:70:b9:3b:dc:ed:26:7e:7a: 52:49:45:51:96:a4:19:99:7c:f1:8c:07:10:41:65: 7d:34:c7:3e:46:e5:76:73:58:eb:6a:6b:23:b8:d3: a1:65:8e:43:4e:85:24:08:10:e9:69:60:a1:db:2b: f1:a8:dd:ff:91:79:bc:48:59:c0:3c:4e:bb:fc:e6: f9:61:d6:01:93:75:da:34:93:50:6d:05:19:e8:ca: fb:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F2:FB:DE:E4:A1:CF:0A:99:54:DA:11:B5:44:D3:52:5A:A4:62:D0 X509v3 Authority Key Identifier: keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/FfL73uShzwqZVNoRtUTTUlqkYtA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 129.233.192.0-129.233.196.255 153.96.28.0-153.96.39.255 153.96.60.0/24 153.96.70.0-153.96.75.255 153.96.88.0/22 153.96.114.0/23 153.96.128.0/22 153.96.204.0-153.96.206.255 192.41.227.0/24 192.44.7.0/24 192.44.14.0/24 192.44.16.0/24 192.44.19.0/24 192.44.22.0/24 192.44.27.0/24 192.107.235.0-192.107.236.255 194.113.96.0/22 IPv6: 2a03:db80:4810::/48 2a03:db80:4814::/48 Signature Algorithm: sha256WithRSAEncryption 7a:0d:28:a9:7f:e1:15:4a:28:87:40:6f:71:0f:65:d9:3e:5d: ba:64:b6:63:b9:e4:a4:80:37:02:72:68:96:d4:01:be:0d:70: c3:1b:ea:24:36:43:b5:a3:56:7f:0a:e7:27:80:7a:66:ec:ce: 31:ca:fe:5f:45:8d:69:93:4b:cb:dc:03:37:2d:01:83:a7:44: 8f:53:d4:f8:39:dc:a7:47:09:22:c8:7b:e7:bf:f5:0f:a3:ea: 11:75:8e:bc:7d:27:58:34:a5:fb:5f:cf:06:cc:94:10:99:00: 9e:fc:a4:c0:3a:dd:a9:33:99:90:a0:e0:cc:b3:d3:a7:e3:21: 65:ea:28:1d:c5:e2:51:d7:92:91:67:16:ec:ca:35:8e:f7:a2: 86:ce:2c:b2:0d:10:c8:66:1c:76:90:75:80:30:2f:bf:70:73: d9:83:6d:57:92:a5:49:30:78:39:11:b3:33:cc:3a:10:b6:10: 33:e9:0f:5d:d0:d1:8c:cb:07:97:b4:f0:53:2a:79:96:24:17: 52:b7:4a:29:00:08:f9:9f:92:55:58:02:53:8c:ce:7d:53:49: f4:d2:d7:26:79:e0:03:a8:de:a5:ed:e5:6d:6a:c4:1c:a3:eb: 5e:c7:40:4b:fd:91:dd:c6:19:d4:3d:d4:3d:08:03:ea:01:f5: b2:de:7c:34 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZuNyx5qsKGoG56bBtc5un6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTc1ODI2ZTk5MTIyNWE0MjlmZjhhMWU3ZmZkYzgwNDY2 NDIwZGYwHhcNMjYwMTA1MTA1NDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWYyZmJkZWU0YTFjZjBhOTk1NGRhMTFiNTQ0ZDM1MjVhYTQ2MmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgw/IDUsE9b7Qq6ANAdrz4JCT0Ti 0WPTd1FujN6yUtRgvKfqHx0p/9+DjRlmqkf89slScJ/2PyDIZmDYlGTalhOmEpZO oloHMiJpF00SdSo9XNvh7P27j55PAq7YGYlFJHhVBwINAVkjvNHV7EJBJ0nZFTdq LLpJZqgLFT2zxiKF72QEGClh7Xyvdx7QQLfF/UF238epAapTapRBZ0NrM6RO9KMg 9d9JB+2VcLk73O0mfnpSSUVRlqQZmXzxjAcQQWV9NMc+RuV2c1jramsjuNOhZY5D ToUkCBDpaWCh2yvxqN3/kXm8SFnAPE67/Ob5YdYBk3XaNJNQbQUZ6Mr7bQIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFBXy+97koc8KmVTaEbVE01JapGLQMB8GA1UdIwQY MBaAFHanWCbpkSJaQp/4oef/3IBGZCDfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTct YWQ4ZmJlYWE4ZGQ5LzEvRmZMNzN1U2h6d3FaVk5vUnRVVFRVbHFrWXRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8xZDMzY2EtOGQxYy00OWMwLWJlOTctYWQ4ZmJlYWE4ZGQ5 LzEvZHFkWUp1bVJJbHBDbl9paDVfX2NnRVprSU44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBlQQCAAEwgY4wDAME BoHpwAMEAIHpxDAMAwQCmWAcAwQDmWAgAwQAmWA8MAwDBAGZYEYDBAKZYEgDBAKZ YFgDBAGZYHIDBAKZYIAwDAMEAplgzAMEAJlgzgMEAMAp4wMEAMAsBwMEAMAsDgME AMAsEAMEAMAsEwMEAMAsFgMEAMAsGzAMAwQAwGvrAwQAwGvsAwQCwnFgMBgEAgAC MBIDBwAqA9uASBADBwAqA9uASBQwDQYJKoZIhvcNAQELBQADggEBAHoNKKl/4RVK KIdAb3EPZdk+XbpktmO55KSANwJyaJbUAb4NcMMb6iQ2Q7WjVn8K5yeAembszjHK /l9FjWmTS8vcAzctAYOnRI9T1Pg53KdHCSLIe+e/9Q+j6hF1jrx9J1g0pftfzwbM lBCZAJ78pMA63akzmZCg4Myz06fjIWXqKB3F4lHXkpFnFuzKNY73oobOLLINEMhm HHaQdYAwL79wc9mDbVeSpUkweDkRszPMOhC2EDPpD13Q0YzLB5e08FMqeZYkF1K3 SikACPmfklVYAlOMzn1TSfTS1yZ54AOo3qXt5W1qxByj617HQEv9kd3GGdQ91D0I A+oB9bLefDQ= -----END CERTIFICATE-----Generated at Wed Jan 21 14:41:10 2026 by rpki-client