This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/L1-dY5IfJdZ5zkeF6wnlRVfcFg8.roa File: L1-dY5IfJdZ5zkeF6wnlRVfcFg8.roa (raw, json) Hash identifier: dFcPnovhPqX+I0cA7rgPPiD8o0Ghfz0dhmsmMJvSAmc= Subject key identifier: 2F:5F:9D:63:92:1F:25:D6:79:CE:47:85:EB:09:E5:45:57:DC:16:0F Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6 Certificate serial: 019B7B365B59DB57FF60D1C0DD00331F8C4D Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/L1-dY5IfJdZ5zkeF6wnlRVfcFg8.roa Signing time: Thu 01 Jan 2026 20:18:38 +0000 ROA not before: Thu 01 Jan 2026 20:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16134 IP address blocks: 185.66.72.0/24 maxlen: 24 2a0a:ee40::/32 maxlen: 32 2a0a:ee40:1::/48 maxlen: 48 2a0a:ee40:2::/48 maxlen: 48 2a0a:ee40:3::/48 maxlen: 48 2a0a:ee40:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:5b:59:db:57:ff:60:d1:c0:dd:00:33:1f:8c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6 Validity Not Before: Jan 1 20:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f5f9d63921f25d679ce4785eb09e54557dc160f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:0e:96:cb:95:a0:23:a2:4e:6f:37:06:58: 6f:02:76:fe:be:67:12:52:de:b1:96:63:8d:8c:db: b9:35:30:9c:fa:96:e8:18:83:fb:6e:ee:80:22:4a: 8e:dd:21:53:78:75:11:a0:3d:5f:f9:17:f3:0f:d5: e2:ef:94:82:4d:f7:ca:6e:0a:c8:27:f0:2c:b6:66: b0:c2:b2:0b:b9:34:26:86:7d:96:b7:26:f9:63:52: 6c:00:96:b4:20:fb:57:a3:30:f5:4b:dd:00:26:b8: 21:48:8f:ee:57:40:7e:77:68:80:9b:5d:3d:d0:41: 25:65:90:fb:d5:be:7e:64:bb:2f:1f:ed:fb:b5:db: 04:56:50:60:0d:9e:cb:12:29:9d:8e:34:d3:21:8f: e6:0c:25:5c:77:20:4f:c7:11:6f:f3:57:8d:0f:21: af:7c:20:49:c1:3c:50:be:24:35:be:e8:c8:85:15: e3:2b:be:6f:b6:92:84:0e:c4:58:21:63:db:bb:3f: 0e:54:4c:3b:8b:98:1e:7a:c7:82:22:ef:ae:ba:2c: 5d:2c:bf:d0:fd:30:ce:ff:d6:66:2a:dc:34:db:43: 02:49:53:75:89:82:87:19:cc:6f:4f:55:b2:2e:5a: f1:6d:3f:98:4e:0f:af:7b:ad:10:8d:1e:4f:e1:de: 73:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5F:9D:63:92:1F:25:D6:79:CE:47:85:EB:09:E5:45:57:DC:16:0F X509v3 Authority Key Identifier: keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/L1-dY5IfJdZ5zkeF6wnlRVfcFg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.66.72.0/24 IPv6: 2a0a:ee40::/32 Signature Algorithm: sha256WithRSAEncryption 31:54:48:ee:6c:a8:5d:5a:55:aa:fc:b6:64:9b:bf:68:29:ce: a6:2c:f4:de:bb:63:a4:d1:ac:26:ca:50:f5:87:c2:75:1a:6e: 49:ba:05:7c:56:a8:02:14:10:92:33:74:04:4e:e0:f1:ad:c6: e6:c6:a4:43:fa:63:33:fc:f1:ad:33:ca:bd:99:09:2c:71:5f: 53:bd:59:5c:b1:52:12:bf:06:ad:03:59:50:56:58:39:65:67: 8f:0d:60:43:bd:c3:c1:44:e1:23:be:e7:0d:0c:46:e9:4a:2f: c9:f7:de:1a:66:46:80:48:eb:12:c1:49:57:26:d5:72:81:5b: d6:98:f8:14:a4:73:45:36:31:c1:39:4d:2e:42:64:65:16:aa: af:65:b1:13:cd:bb:b3:bb:af:af:f3:4c:9c:32:48:24:73:7c: 76:bb:a5:36:42:f3:56:5d:f8:c8:45:50:5b:c6:0b:5c:18:3b: 37:6a:b0:e6:cd:47:ac:ad:03:c6:6a:1b:43:96:86:64:71:23: 28:c5:98:3c:1e:e4:04:ed:4f:da:6d:be:74:62:fa:de:6c:62: 21:74:03:8d:6f:2f:31:a2:72:3f:8d:8a:92:95:ab:07:ba:da: ce:f1:ac:47:38:ad:6c:d4:38:8d:3c:36:b8:c6:d6:24:73:f2: 35:46:e0:d1 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NltZ21f/YNHA3QAzH4xNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNGY3ODk0NzM0MWNlNTU4ODhiN2ViZjM2OTAxNDNiMGNi ZmYzZDYwHhcNMjYwMTAxMjAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjVmOWQ2MzkyMWYyNWQ2NzljZTQ3ODVlYjA5ZTU0NTU3ZGMxNjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LsOlsuVoCOiTm83BlhvAnb+vmcS Ut6xlmONjNu5NTCc+pboGIP7bu6AIkqO3SFTeHURoD1f+RfzD9Xi75SCTffKbgrI J/AstmawwrILuTQmhn2Wtyb5Y1JsAJa0IPtXozD1S90AJrghSI/uV0B+d2iAm109 0EElZZD71b5+ZLsvH+37tdsEVlBgDZ7LEimdjjTTIY/mDCVcdyBPxxFv81eNDyGv fCBJwTxQviQ1vujIhRXjK75vtpKEDsRYIWPbuz8OVEw7i5geeseCIu+uuixdLL/Q /TDO/9ZmKtw020MCSVN1iYKHGcxvT1WyLlrxbT+YTg+ve60QjR5P4d5ziQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC9fnWOSHyXWec5HhesJ5UVX3BYPMB8GA1UdIwQY MBaAFO9PeJRzQc5ViIt+vzaQFDsMv/PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAt OWJhYTY2Y2ExNDA0LzEvTDEtZFk1SWZKZFo1emtlRjZ3bmxSVmZjRmc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAtOWJhYTY2Y2ExNDA0 LzEvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuUJIMA0E AgACMAcDBQAqCu5AMA0GCSqGSIb3DQEBCwUAA4IBAQAxVEjubKhdWlWq/LZkm79o Kc6mLPTeu2Ok0awmylD1h8J1Gm5JugV8VqgCFBCSM3QETuDxrcbmxqRD+mMz/PGt M8q9mQkscV9TvVlcsVISvwatA1lQVlg5ZWePDWBDvcPBROEjvucNDEbpSi/J994a ZkaASOsSwUlXJtVygVvWmPgUpHNFNjHBOU0uQmRlFqqvZbETzbuzu6+v80ycMkgk c3x2u6U2QvNWXfjIRVBbxgtcGDs3arDmzUesrQPGahtDloZkcSMoxZg8HuQE7U/a bb50YvrebGIhdAONby8xonI/jYqSlasHutrO8axHOK1s1DiNPDa4xtYkc/I1RuDR -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:28 2026 by rpki-client