This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/1-9VvIj4I5VuB1gt29vzT-2uQZlA.roa File: 1-9VvIj4I5VuB1gt29vzT-2uQZlA.roa (raw, json) Hash identifier: aDxytIY+QLBvjB+sNfj6erO7LbHVI7jcd1DbRYQbTzE= Subject key identifier: FB:D5:6F:22:3E:08:E5:5B:81:D6:0B:76:F6:FC:D3:FB:6B:90:66:50 Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9 Certificate serial: 019B7DCB337439BBEB630FB740D7823A27E3 Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/1-9VvIj4I5VuB1gt29vzT-2uQZlA.roa Signing time: Fri 02 Jan 2026 08:20:27 +0000 ROA not before: Fri 02 Jan 2026 08:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35205 IP address blocks: 46.28.80.0/21 maxlen: 21 77.78.160.0/19 maxlen: 19 77.78.160.0/20 maxlen: 20 77.78.166.0/24 maxlen: 24 77.78.176.0/20 maxlen: 20 77.78.181.0/24 maxlen: 24 77.78.184.0/22 maxlen: 22 77.78.188.0/22 maxlen: 22 185.27.152.0/22 maxlen: 22 212.37.160.0/19 maxlen: 19 212.37.160.0/20 maxlen: 20 212.37.164.0/22 maxlen: 22 212.37.168.0/21 maxlen: 21 212.37.176.0/20 maxlen: 20 2a03:ed00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:33:74:39:bb:eb:63:0f:b7:40:d7:82:3a:27:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9 Validity Not Before: Jan 2 08:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbd56f223e08e55b81d60b76f6fcd3fb6b906650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e9:42:c7:5b:a4:3a:9c:6f:7d:5f:8b:42:82: 24:79:d5:e8:e1:c2:97:3f:3c:38:ec:9f:e1:02:ac: 0f:6b:81:eb:3e:df:17:c8:3e:d0:f6:6c:cb:93:7b: da:55:95:3a:05:0a:25:86:9f:67:e8:94:26:a7:df: fd:be:63:89:45:98:c6:33:7d:90:02:93:c8:b0:12: 0d:69:80:69:cb:06:59:c6:d2:58:2a:54:04:47:c9: e0:f5:39:eb:16:a3:85:cc:1b:71:5e:f7:70:73:6b: 21:76:3f:93:4e:a2:15:a3:60:50:da:31:18:37:3c: 83:89:d9:97:00:5a:52:7d:62:58:06:38:cc:2a:9b: 2a:9b:f8:8e:bf:6b:f8:88:c9:cb:1b:56:5e:c0:45: c4:bd:4c:50:79:b2:da:d4:4c:8d:92:3c:00:a4:10: e6:d4:ee:56:ff:30:e0:5e:1c:e3:e4:19:e5:a6:2c: 33:03:c8:08:c5:7b:58:29:cb:f5:db:53:b8:06:28: b7:fb:44:59:47:84:2e:d2:17:46:a5:fc:51:fe:0f: d8:cc:9a:d1:69:8a:61:05:7e:07:7c:df:df:2e:1b: de:18:d9:39:5a:60:0e:02:32:fd:0e:61:44:f3:e8: 00:a5:2b:bf:02:ee:63:e5:ed:6d:0d:ab:52:01:8d: f2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D5:6F:22:3E:08:E5:5B:81:D6:0B:76:F6:FC:D3:FB:6B:90:66:50 X509v3 Authority Key Identifier: keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/1-9VvIj4I5VuB1gt29vzT-2uQZlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.80.0/21 77.78.160.0/19 185.27.152.0/22 212.37.160.0/19 IPv6: 2a03:ed00::/32 Signature Algorithm: sha256WithRSAEncryption 78:ce:7d:09:ae:e7:26:ab:3a:6d:6e:ac:93:4a:de:92:75:31: 16:ae:35:c9:19:c3:68:bc:91:5e:80:ca:17:aa:cc:f4:3c:89: db:57:5e:11:d2:c6:b1:00:81:13:33:ff:c3:c1:00:fa:4b:4e: c7:7f:70:3c:87:a5:39:57:29:be:6a:b3:89:0a:dd:8c:b9:1e: 38:fd:26:a1:1f:50:2d:c8:c3:3f:be:7b:6e:8e:9f:3c:bd:06: bd:56:15:7c:9e:33:38:34:7f:c7:c9:ba:34:d7:c8:78:65:5f: 7f:3c:30:d0:39:cf:25:8b:ac:ac:be:94:26:ea:eb:ff:72:ee: 35:82:0f:e3:56:be:36:06:10:db:73:e2:ed:fb:8b:f0:42:05: 76:3f:51:5e:28:0f:61:95:79:f5:1f:77:c7:8d:a7:e6:c8:a2: 8e:2f:2b:bd:45:dc:8b:cd:96:8b:1c:24:6b:c6:13:41:cf:d6: fd:8b:ac:d3:c1:61:b8:bd:25:e1:1e:c6:df:1c:c0:4f:da:63: a2:a9:e0:61:39:fb:e5:d2:ce:4d:46:8b:95:66:53:87:e3:3c: eb:a1:11:41:30:77:b7:ad:c7:40:fb:ed:89:25:42:8b:91:be: fa:70:ae:68:e7:5d:34:e9:99:95:76:11:67:26:2d:ce:6c:18: 25:1a:0f:28 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt9yzN0ObvrYw+3QNeCOifjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkZjJjNmZhNTRhOGNjMmRjNzFlODAyY2Y4M2Y1Yzc3NmNl OTc0YzkwHhcNMjYwMTAyMDgyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmQ1NmYyMjNlMDhlNTViODFkNjBiNzZmNmZjZDNmYjZiOTA2NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2elCx1ukOpxvfV+LQoIkedXo4cKX Pzw47J/hAqwPa4HrPt8XyD7Q9mzLk3vaVZU6BQolhp9n6JQmp9/9vmOJRZjGM32Q ApPIsBINaYBpywZZxtJYKlQER8ng9TnrFqOFzBtxXvdwc2shdj+TTqIVo2BQ2jEY NzyDidmXAFpSfWJYBjjMKpsqm/iOv2v4iMnLG1ZewEXEvUxQebLa1EyNkjwApBDm 1O5W/zDgXhzj5BnlpiwzA8gIxXtYKcv121O4Bii3+0RZR4Qu0hdGpfxR/g/YzJrR aYphBX4HfN/fLhveGNk5WmAOAjL9DmFE8+gApSu/Au5j5e1tDatSAY3y5QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFPvVbyI+COVbgdYLdvb80/trkGZQMB8GA1UdIwQY MBaAFE3yxvpUqMwtxx6ALPg/XHds6XTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGZMRy1sU296QzNISG9Bcy1EOWNkMnpwZE1rLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81NGIwZDAtZTlmZS00OGQxLTk2OGQt OWUyNDNjMmQ4ODIxLzEvMS05VnZJajRJNVZ1QjFndDI5dnpULTJ1UVpsQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvN2MvNTRiMGQwLWU5ZmUtNDhkMS05NjhkLTllMjQzYzJkODgy MS8xL1RmTEctbFNvekMzSEhvQXMtRDljZDJ6cGRNay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBABggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAy4cUAME BU1OoAMEArkbmAMEBdQloDANBAIAAjAHAwUAKgPtADANBgkqhkiG9w0BAQsFAAOC AQEAeM59Ca7nJqs6bW6sk0reknUxFq41yRnDaLyRXoDKF6rM9DyJ21deEdLGsQCB EzP/w8EA+ktOx39wPIelOVcpvmqziQrdjLkeOP0moR9QLcjDP757bo6fPL0GvVYV fJ4zODR/x8m6NNfIeGVffzww0DnPJYusrL6UJurr/3LuNYIP41a+NgYQ23Pi7fuL 8EIFdj9RXigPYZV59R93x42n5siiji8rvUXci82Wixwka8YTQc/W/Yus08FhuL0l 4R7G3xzAT9pjoqngYTn75dLOTUaLlWZTh+M866ERQTB3t63HQPvtiSVCi5G++nCu aOddNOmZlXYRZyYtzmwYJRoPKA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:33:02 2026 by rpki-client