This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/1-h07jUm-02q1q7k5iFHSAwPoCOY.roa File: 1-h07jUm-02q1q7k5iFHSAwPoCOY.roa (raw, json) Hash identifier: wYacQ3/0cWpPvmvpOGx2amNX3ChOHhpv2IkMIQcd1kU= Subject key identifier: FA:1D:3B:8D:49:BE:D3:6A:B5:AB:B9:39:88:51:D2:03:03:E8:08:E6 Certificate issuer: /CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Certificate serial: 019B7A5B40291485A156A899FA32386F93D1 Authority key identifier: DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/1-h07jUm-02q1q7k5iFHSAwPoCOY.roa Signing time: Thu 01 Jan 2026 16:19:19 +0000 ROA not before: Thu 01 Jan 2026 16:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25393 IP address blocks: 5.149.120.0/22 maxlen: 24 5.149.124.0/22 maxlen: 24 77.87.192.0/21 maxlen: 21 78.27.224.0/19 maxlen: 24 89.184.68.0/22 maxlen: 24 89.184.72.0/21 maxlen: 21 89.184.88.0/21 maxlen: 21 193.178.144.0/23 maxlen: 23 195.39.197.0/24 maxlen: 24 195.177.116.0/22 maxlen: 22 2a02:2278:100::/44 maxlen: 56 2a02:2278:200::/40 maxlen: 56 2a02:2278:204::/48 maxlen: 48 2a02:2278:208::/48 maxlen: 48 2a02:2279::/32 maxlen: 32 2a02:2279::/40 maxlen: 56 2a02:2279:200::/40 maxlen: 56 2a02:2279:1200::/40 maxlen: 56 2a02:2279:1300::/40 maxlen: 56 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.mft rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:40:29:14:85:a1:56:a8:99:fa:32:38:6f:93:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd1daecd30aeb74652bbdda5dad9676ce488aa49 Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa1d3b8d49bed36ab5abb9398851d20303e808e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d3:fe:08:9a:e1:f3:d9:8b:05:7a:e3:69:b6: 63:88:87:78:d8:4c:a4:ca:55:5c:b9:53:c4:d8:ba: e1:27:11:59:d3:75:0b:99:9d:a8:21:08:a5:b2:93: 0c:0c:36:22:7e:24:ea:49:a5:07:18:7a:85:c3:f9: c7:db:e1:54:a6:13:7c:27:26:cf:34:27:fb:74:65: 4f:27:31:ab:f9:d7:50:67:ab:79:27:31:01:72:3a: 02:fb:b3:29:2e:66:26:c5:c0:d5:5f:f3:11:63:8f: 7d:ac:42:0a:69:5e:ee:9f:36:88:06:09:b2:dc:f0: ed:ec:dc:4a:5f:63:4e:b1:bc:fe:8d:ee:e5:5d:7e: e3:97:29:32:37:a3:62:32:1e:ec:a7:21:eb:c8:28: eb:99:bb:bd:81:ae:ff:f4:80:2a:76:b3:da:f5:e5: 44:ea:e6:3f:3e:9a:47:02:6b:0b:75:05:b0:af:82: 10:83:f2:68:ca:c9:3d:20:f2:2e:3b:62:c4:1d:31: 7f:98:14:b4:0e:73:14:14:95:59:03:b4:4d:ad:fb: c2:1f:98:06:84:3e:87:92:c6:3c:25:dc:a4:9c:5a: 04:a6:cb:ca:52:72:48:8a:97:06:ce:d7:a0:79:61: f9:0b:3e:0a:dc:c8:e0:62:8a:0f:38:66:be:19:c5: 96:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1D:3B:8D:49:BE:D3:6A:B5:AB:B9:39:88:51:D2:03:03:E8:08:E6 X509v3 Authority Key Identifier: keyid:DD:1D:AE:CD:30:AE:B7:46:52:BB:DD:A5:DA:D9:67:6C:E4:88:AA:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3R2uzTCut0ZSu92l2tlnbOSIqkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/1-h07jUm-02q1q7k5iFHSAwPoCOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/4a7539-b149-48e9-88e7-060ac0890966/1/3R2uzTCut0ZSu92l2tlnbOSIqkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.120.0/21 77.87.192.0/21 78.27.224.0/19 89.184.68.0-89.184.79.255 89.184.88.0/21 193.178.144.0/23 195.39.197.0/24 195.177.116.0/22 IPv6: 2a02:2278:100::/44 2a02:2278:200::/40 2a02:2279::/32 Signature Algorithm: sha256WithRSAEncryption 9b:49:60:86:6a:fd:9f:b0:40:9e:8d:e1:f5:8c:dd:a8:1c:fa: fe:44:16:66:16:26:5d:62:6b:33:8e:b8:33:2f:98:05:81:04: 35:fe:1a:f1:79:b7:9d:f8:a8:e2:01:e0:c6:7c:bf:5d:d4:32: 9c:98:26:89:42:2b:6b:24:c5:78:6a:fe:5d:87:08:b8:e0:03: f4:ec:ea:aa:88:94:5a:dd:ef:69:bf:bd:64:42:21:9c:4f:29: 0f:71:c0:f3:65:31:40:6e:b0:55:91:a3:71:f4:fe:1a:b9:08: f2:04:96:43:32:6f:a3:9a:d1:b8:40:1f:fb:5a:a5:79:bb:a4: fe:c3:94:ed:46:28:e1:6b:20:d2:23:be:89:b3:22:ba:0a:3f: c8:1a:f4:8a:bf:f4:8f:4e:c5:37:96:99:bd:9a:02:5a:1d:ac: 1b:2d:8a:c0:0b:82:fc:71:cf:bf:55:dc:dc:bf:25:dd:43:ac: ae:a5:e6:7e:6e:d9:1b:2c:b6:3b:a0:1f:06:96:19:7f:aa:8c: a7:e9:69:c4:12:41:4c:e3:1e:34:2c:9b:b5:e4:c6:70:7a:3a: 52:04:c2:95:80:c9:6a:b6:50:a4:85:ee:d8:2e:ad:2a:2c:1d: 86:32:be:47:9c:99:d7:0c:db:e6:db:73:30:fa:35:ee:f8:f1: 96:0e:1c:5f -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgISAZt6W0ApFIWhVqiZ+jI4b5PRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMWRhZWNkMzBhZWI3NDY1MmJiZGRhNWRhZDk2NzZjZTQ4 OGFhNDkwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTFkM2I4ZDQ5YmVkMzZhYjVhYmI5Mzk4ODUxZDIwMzAzZTgwOGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9P+CJrh89mLBXrjabZjiId42Eyk ylVcuVPE2LrhJxFZ03ULmZ2oIQilspMMDDYifiTqSaUHGHqFw/nH2+FUphN8JybP NCf7dGVPJzGr+ddQZ6t5JzEBcjoC+7MpLmYmxcDVX/MRY499rEIKaV7unzaIBgmy 3PDt7NxKX2NOsbz+je7lXX7jlykyN6NiMh7spyHryCjrmbu9ga7/9IAqdrPa9eVE 6uY/PppHAmsLdQWwr4IQg/Joysk9IPIuO2LEHTF/mBS0DnMUFJVZA7RNrfvCH5gG hD6HksY8JdyknFoEpsvKUnJIipcGztegeWH5Cz4K3MjgYooPOGa+GcWWFQIDAQAB o4ICXDCCAlgwHQYDVR0OBBYEFPodO41JvtNqtau5OYhR0gMD6AjmMB8GA1UdIwQY MBaAFN0drs0wrrdGUrvdpdrZZ2zkiKpJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1IydXpUQ3V0MFpTdTkybDJ0bG5iT1NJcWtrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS80YTc1MzktYjE0OS00OGU5LTg4ZTct MDYwYWMwODkwOTY2LzEvMS1oMDdqVW0tMDJxMXE3azVpRkhTQXdQb0NPWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOTkvNGE3NTM5LWIxNDktNDhlOS04OGU3LTA2MGFjMDg5MDk2 Ni8xLzNSMnV6VEN1dDBaU3U5MmwydGxuYk9TSXFray5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBxBggrBgEFBQcBBwEB/wRiMGAwPgQCAAEwOAMEAwWVeAME A01XwAMEBU4b4DAMAwQCWbhEAwQEWbhAAwQDWbhYAwQBwbKQAwQAwyfFAwQCw7F0 MB4EAgACMBgDBwQqAiJ4AQADBgAqAiJ4AgMFACoCInkwDQYJKoZIhvcNAQELBQAD ggEBAJtJYIZq/Z+wQJ6N4fWM3agc+v5EFmYWJl1iazOOuDMvmAWBBDX+GvF5t534 qOIB4MZ8v13UMpyYJolCK2skxXhq/l2HCLjgA/Ts6qqIlFrd72m/vWRCIZxPKQ9x wPNlMUBusFWRo3H0/hq5CPIElkMyb6Oa0bhAH/tapXm7pP7DlO1GKOFrINIjvomz IroKP8ga9Iq/9I9OxTeWmb2aAlodrBstisALgvxxz79V3Ny/Jd1DrK6l5n5u2Rss tjugHwaWGX+qjKfpacQSQUzjHjQsm7XkxnB6OlIEwpWAyWq2UKSF7tgurSosHYYy vkecmdcM2+bbczD6Ne748ZYOHF8= -----END CERTIFICATE-----Generated at Tue Feb 10 07:12:42 2026 by rpki-client