This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/F4iAzCEfDLvdpiMWWckwjJJrSsI.roa File: F4iAzCEfDLvdpiMWWckwjJJrSsI.roa (raw, json) Hash identifier: YFjFAwlmoqlWOtp7nZ0zL9vJHXGTyX16GUXYOVErggo= Subject key identifier: 17:88:80:CC:21:1F:0C:BB:DD:A6:23:16:59:C9:30:8C:92:6B:4A:C2 Certificate issuer: /CN=d8a994d846cb6696e889c1cc32285e0b23afc777 Certificate serial: 019B7BA4BD57FA75026B6A9FCCC3684472CB Authority key identifier: D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/F4iAzCEfDLvdpiMWWckwjJJrSsI.roa Signing time: Thu 01 Jan 2026 22:19:12 +0000 ROA not before: Thu 01 Jan 2026 22:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202707 IP address blocks: 185.156.156.0/22 maxlen: 24 185.156.156.0/24 maxlen: 24 185.156.157.0/24 maxlen: 24 185.156.158.0/24 maxlen: 24 185.156.159.0/24 maxlen: 24 2a07:9f80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.mft rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:bd:57:fa:75:02:6b:6a:9f:cc:c3:68:44:72:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8a994d846cb6696e889c1cc32285e0b23afc777 Validity Not Before: Jan 1 22:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=178880cc211f0cbbdda6231659c9308c926b4ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8c:6f:26:16:5e:92:1c:a1:70:b3:00:12:64: b8:f1:45:95:0f:04:b6:b2:00:29:77:e3:25:04:5f: ee:0b:b4:0b:5d:10:36:54:62:7b:ee:d7:c9:e1:cb: 63:0d:b0:f3:cd:9b:d2:4b:e9:2c:99:2d:23:07:16: d1:48:93:59:2e:65:4b:4d:f6:6b:06:2f:30:da:19: 65:16:22:10:01:9f:9c:98:c6:c4:56:e7:d2:b0:98: 26:22:6a:6b:80:c0:9f:84:70:a6:d0:35:56:da:66: 2b:96:f5:a2:df:fc:0a:74:82:01:cd:6a:0f:6e:9a: ec:f0:ae:73:04:70:61:f4:0f:fc:59:c1:01:83:2d: 07:00:03:2b:9b:13:b2:38:bf:3f:33:13:61:ec:0d: eb:ac:1c:df:92:f4:8a:00:21:eb:5e:4f:70:bc:5e: 14:4b:7e:84:90:3f:00:a7:6d:4f:59:14:69:70:34: 03:be:86:e4:a4:7b:5f:30:05:9d:53:8f:87:3d:f0: 07:f3:f4:3c:20:6d:71:e5:dd:89:c3:99:df:8d:86: 79:92:0d:a2:8b:51:8f:22:7d:42:68:c2:40:ab:f4: 8f:89:ec:9f:0a:b7:c7:e0:41:82:db:ae:b2:0a:28: 75:d4:e9:6f:67:82:49:51:49:98:7e:62:cd:3c:d8: 51:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:88:80:CC:21:1F:0C:BB:DD:A6:23:16:59:C9:30:8C:92:6B:4A:C2 X509v3 Authority Key Identifier: keyid:D8:A9:94:D8:46:CB:66:96:E8:89:C1:CC:32:28:5E:0B:23:AF:C7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KmU2EbLZpboicHMMiheCyOvx3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/F4iAzCEfDLvdpiMWWckwjJJrSsI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/dd08f7-b6f4-4b42-81d7-23ab59798421/1/2KmU2EbLZpboicHMMiheCyOvx3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.156.0/22 IPv6: 2a07:9f80::/29 Signature Algorithm: sha256WithRSAEncryption 47:31:56:9f:a4:c0:50:d6:04:dd:ed:7e:18:14:0e:9b:2d:ff: 16:1b:88:bf:11:e5:14:c0:24:27:06:aa:ad:17:e6:37:40:07: 17:d6:4a:00:1d:65:a3:16:fb:ee:32:b5:08:26:0a:ea:ad:64: f7:2e:25:d1:4f:fb:5d:d4:54:24:41:37:f7:8e:d8:91:33:db: 7d:75:3b:b9:a8:cb:04:97:b7:a4:dd:43:c1:50:43:06:91:96: ec:ee:91:69:b8:23:17:2e:80:4f:cf:80:89:15:6e:4d:dc:74: 06:66:36:c5:fd:74:f4:77:07:58:7c:74:de:08:62:fa:83:35: 8d:9c:b6:2a:21:e4:1b:9d:51:6c:b3:3c:9e:00:76:d1:ae:fc: 34:f7:99:4e:e8:20:b0:fd:ea:57:f5:44:30:9f:29:fa:8e:5d: ea:75:0d:dc:6b:34:58:72:cb:3b:0b:79:0e:fc:fb:1d:09:1b: 4c:20:e9:b4:1b:fa:26:9a:a8:49:23:e7:b7:ba:b1:35:d2:07: 71:68:bb:00:c6:02:98:8b:0c:86:2b:7b:3b:23:6e:54:e5:ab: 97:38:5a:3c:83:4c:cf:65:70:86:7a:37:31:77:b0:60:a7:7d: 02:50:46:48:db:e3:b7:2c:78:68:33:36:85:d2:4e:91:49:45: 04:ae:54:71 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7pL1X+nUCa2qfzMNoRHLLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YTk5NGQ4NDZjYjY2OTZlODg5YzFjYzMyMjg1ZTBiMjNh ZmM3NzcwHhcNMjYwMTAxMjIxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzg4ODBjYzIxMWYwY2JiZGRhNjIzMTY1OWM5MzA4YzkyNmI0YWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYxvJhZekhyhcLMAEmS48UWVDwS2 sgApd+MlBF/uC7QLXRA2VGJ77tfJ4ctjDbDzzZvSS+ksmS0jBxbRSJNZLmVLTfZr Bi8w2hllFiIQAZ+cmMbEVufSsJgmImprgMCfhHCm0DVW2mYrlvWi3/wKdIIBzWoP bprs8K5zBHBh9A/8WcEBgy0HAAMrmxOyOL8/MxNh7A3rrBzfkvSKACHrXk9wvF4U S36EkD8Ap21PWRRpcDQDvobkpHtfMAWdU4+HPfAH8/Q8IG1x5d2Jw5nfjYZ5kg2i i1GPIn1CaMJAq/SPieyfCrfH4EGC266yCih11OlvZ4JJUUmYfmLNPNhRowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFBeIgMwhHwy73aYjFlnJMIySa0rCMB8GA1UdIwQY MBaAFNiplNhGy2aW6InBzDIoXgsjr8d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDct MjNhYjU5Nzk4NDIxLzEvRjRpQXpDRWZETHZkcGlNV1dja3dqSkpyU3NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9kZDA4ZjctYjZmNC00YjQyLTgxZDctMjNhYjU5Nzk4NDIx LzEvMkttVTJFYkxacGJvaWNITU1paGVDeU92eDNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZycMA0E AgACMAcDBQMqB5+AMA0GCSqGSIb3DQEBCwUAA4IBAQBHMVafpMBQ1gTd7X4YFA6b Lf8WG4i/EeUUwCQnBqqtF+Y3QAcX1koAHWWjFvvuMrUIJgrqrWT3LiXRT/td1FQk QTf3jtiRM9t9dTu5qMsEl7ek3UPBUEMGkZbs7pFpuCMXLoBPz4CJFW5N3HQGZjbF /XT0dwdYfHTeCGL6gzWNnLYqIeQbnVFsszyeAHbRrvw095lO6CCw/epX9UQwnyn6 jl3qdQ3cazRYcss7C3kO/PsdCRtMIOm0G/ommqhJI+e3urE10gdxaLsAxgKYiwyG K3s7I25U5auXOFo8g0zPZXCGejcxd7Bgp30CUEZI2+O3LHhoMzaF0k6RSUUErlRx -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:02 2026 by rpki-client