This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ff1Fa-kOqddev469q_q9QwdHNOQ.roa File: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (raw, json) Hash identifier: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM= Subject key identifier: 7D:FD:45:6B:E9:0E:A9:D7:5E:BF:8E:BD:AB:FA:BD:43:07:47:34:E4 Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019B77589443E6CA2F2B10A01A17237645B6 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ff1Fa-kOqddev469q_q9QwdHNOQ.roa Signing time: Thu 01 Jan 2026 02:17:32 +0000 ROA not before: Thu 01 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137517 IP address blocks: 194.4.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:94:43:e6:ca:2f:2b:10:a0:1a:17:23:76:45:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jan 1 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dfd456be90ea9d75ebf8ebdabfabd43074734e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e5:89:b3:64:0e:cf:5f:38:6c:e4:14:45:bf: ab:05:f1:74:b2:66:17:eb:b2:92:90:ee:2f:07:20: 02:fa:5a:0b:b1:f0:63:5d:b3:d5:cd:dd:60:38:39: 4e:aa:68:50:cd:db:29:a5:ed:03:7e:b7:aa:f4:b3: df:28:df:0a:b2:76:70:3a:b4:69:55:d7:e0:51:c6: 9c:32:4a:76:5e:87:70:87:46:ed:6d:94:25:53:09: 89:08:b7:fb:dd:3d:a7:24:0f:58:08:8f:67:b3:e9: c5:3d:0f:e0:cd:f3:af:d0:6f:3c:3a:65:c0:af:2e: 2d:7e:cf:cf:98:14:33:9b:f6:cf:e8:28:12:49:c5: 66:f8:1f:30:22:f6:99:d3:a0:46:bd:48:3f:ef:54: 20:e6:68:b4:d8:cc:4f:58:be:cd:50:fb:17:c8:e9: 96:08:99:7e:9c:f3:92:6c:67:5e:15:9a:a2:63:12: a9:e3:35:8d:ef:05:87:d2:3f:30:4d:1f:18:cc:84: 88:14:d4:bd:75:35:18:fe:84:03:85:a6:ef:f4:00: 44:b8:ff:fe:98:f7:7f:46:14:aa:4a:3b:86:c0:57: 11:72:5e:cc:7d:89:fd:60:c2:dc:72:be:17:68:d1: d4:b0:67:96:77:e3:0f:b8:ff:e4:ba:1c:82:1a:6e: 31:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FD:45:6B:E9:0E:A9:D7:5E:BF:8E:BD:AB:FA:BD:43:07:47:34:E4 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/ff1Fa-kOqddev469q_q9QwdHNOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.4.52.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:a4:e7:2a:ad:25:2d:03:64:84:6b:9d:db:c3:8f:fb:3f:2a: 09:6f:c4:8c:7b:41:67:b0:b4:a7:30:9a:11:ef:db:1e:f9:5c: ff:56:4e:75:7a:39:7a:c8:7d:a1:f4:6f:09:58:02:14:f7:1d: 3b:08:02:3c:dd:2c:51:09:ba:c7:cb:2c:2d:76:f8:29:9e:91: 58:a7:6b:6a:40:89:6d:27:b9:a1:d6:0c:fd:7c:5a:c6:c0:d6: 17:ab:4d:b7:64:d9:3c:44:75:0a:32:07:c1:e6:34:70:2c:65: af:44:ce:df:bb:ce:90:9a:9b:cf:e8:7c:02:d7:0c:2e:45:2e: 50:d2:11:9b:43:f9:6b:a2:89:14:69:3e:ce:16:72:9e:d2:2c: ac:ae:1d:fe:37:cf:2d:2b:8a:01:fe:e1:91:3f:84:b3:2a:e2: c6:13:32:e1:da:a9:0b:89:df:1c:fe:86:fe:01:82:91:fd:fa: cc:de:de:5b:22:77:d9:8d:ce:e9:9c:e5:eb:59:83:f5:2c:62: 3c:ff:a8:49:bd:a6:f2:d7:e6:96:67:47:09:d3:1c:0f:8a:20: 93:7f:b1:cf:d1:ae:b5:64:70:a1:f0:f6:29:54:86:b9:61:2f: 5e:b5:1b:b4:4f:ad:b0:d7:ca:b3:04:98:4b:f7:28:f4:cb:f4: 83:f4:2e:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJRD5sovKxCgGhcjdkW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwMTAxMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGZkNDU2YmU5MGVhOWQ3NWViZjhlYmRhYmZhYmQ0MzA3NDczNGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OWJs2QOz184bOQURb+rBfF0smYX 67KSkO4vByAC+loLsfBjXbPVzd1gODlOqmhQzdsppe0Dfreq9LPfKN8KsnZwOrRp VdfgUcacMkp2Xodwh0btbZQlUwmJCLf73T2nJA9YCI9ns+nFPQ/gzfOv0G88OmXA ry4tfs/PmBQzm/bP6CgSScVm+B8wIvaZ06BGvUg/71Qg5mi02MxPWL7NUPsXyOmW CJl+nPOSbGdeFZqiYxKp4zWN7wWH0j8wTR8YzISIFNS9dTUY/oQDhabv9ABEuP/+ mPd/RhSqSjuGwFcRcl7MfYn9YMLccr4XaNHUsGeWd+MPuP/kuhyCGm4xmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH39RWvpDqnXXr+Ovav6vUMHRzTkMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvZmYxRmEta09xZGRldjQ2OXFfcTlRd2RITk9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgQ0MA0G CSqGSIb3DQEBCwUAA4IBAQA6pOcqrSUtA2SEa53bw4/7PyoJb8SMe0FnsLSnMJoR 79se+Vz/Vk51ejl6yH2h9G8JWAIU9x07CAI83SxRCbrHyywtdvgpnpFYp2tqQIlt J7mh1gz9fFrGwNYXq023ZNk8RHUKMgfB5jRwLGWvRM7fu86QmpvP6HwC1wwuRS5Q 0hGbQ/lrookUaT7OFnKe0iysrh3+N88tK4oB/uGRP4SzKuLGEzLh2qkLid8c/ob+ AYKR/frM3t5bInfZjc7pnOXrWYP1LGI8/6hJvaby1+aWZ0cJ0xwPiiCTf7HP0a61 ZHCh8PYpVIa5YS9etRu0T62w18qzBJhL9yj0y/SD9C5u -----END CERTIFICATE-----Generated at Tue Jan 20 06:07:14 2026 by rpki-client