This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/1-p5in8Iy5xPngB-Lyi8EDLcWxOw.roa File: 1-p5in8Iy5xPngB-Lyi8EDLcWxOw.roa (raw, json) Hash identifier: VqlHGjyV6XrN2/klxM4KjUioPDS5vL2CP/yVnvM9BOI= Subject key identifier: FA:9E:62:9F:C2:32:E7:13:E7:80:1F:8B:CA:2F:04:0C:B7:16:C4:EC Certificate issuer: /CN=96c035bc8fbf6763c888db344d2ab4ae62946665 Certificate serial: 019B7DCAE5C55916CCFC2C994CD0161428AC Authority key identifier: 96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/1-p5in8Iy5xPngB-Lyi8EDLcWxOw.roa Signing time: Fri 02 Jan 2026 08:20:07 +0000 ROA not before: Fri 02 Jan 2026 08:20:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61015 IP address blocks: 185.21.80.0/22 maxlen: 22 2a00:5720::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.mft rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:e5:c5:59:16:cc:fc:2c:99:4c:d0:16:14:28:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96c035bc8fbf6763c888db344d2ab4ae62946665 Validity Not Before: Jan 2 08:20:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa9e629fc232e713e7801f8bca2f040cb716c4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a2:21:c4:bf:86:9b:0f:a1:69:c2:1d:29:58: ad:76:d5:1b:68:68:cc:74:07:e1:21:b3:a8:a7:a7: 32:50:33:3f:e2:a6:57:b8:3b:6b:b6:c3:20:1c:14: bb:3b:f0:35:f4:c2:05:0b:a2:00:64:6d:bb:94:f9: 0d:6e:1c:5f:48:49:9d:51:2a:88:c6:ef:0e:6a:ba: 9a:94:d4:60:b3:f7:95:41:18:2e:34:cf:85:67:f7: 5a:b8:b8:a3:9a:fe:fb:98:51:20:e3:2e:69:e4:81: cd:c8:51:27:e9:1d:21:67:22:0d:4b:08:f8:75:4a: a1:aa:90:31:20:4c:55:a7:0d:a4:f1:49:89:29:85: e5:c3:2b:09:0d:a9:94:dd:71:4e:55:41:ec:e2:23: 18:58:7b:e9:71:29:3a:45:be:0c:c2:60:8c:01:c2: a1:c3:7d:32:8f:95:51:97:45:67:4b:bf:b4:26:a8: d2:1a:2d:47:66:84:a0:ff:20:c0:4b:70:20:57:29: b9:2a:7c:f2:d4:0d:8f:a6:1e:0e:df:1c:0e:b0:58: 3c:40:2a:28:c6:91:86:6e:41:2f:d3:c4:bd:d7:3b: 2e:85:c0:e2:a8:39:53:20:6c:61:64:14:44:a1:c5: ef:3d:95:13:6e:07:28:06:7a:85:9c:37:6c:91:f8: f7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:9E:62:9F:C2:32:E7:13:E7:80:1F:8B:CA:2F:04:0C:B7:16:C4:EC X509v3 Authority Key Identifier: keyid:96:C0:35:BC:8F:BF:67:63:C8:88:DB:34:4D:2A:B4:AE:62:94:66:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/1-p5in8Iy5xPngB-Lyi8EDLcWxOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/600b38-be3d-4a35-8180-d6307e2da9f7/1/lsA1vI-_Z2PIiNs0TSq0rmKUZmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.21.80.0/22 IPv6: 2a00:5720::/32 Signature Algorithm: sha256WithRSAEncryption 5a:08:7d:58:10:15:6a:90:21:25:1c:37:28:0f:b6:49:f7:34: 8f:73:5e:54:e9:03:60:6c:82:35:70:7b:b2:7d:8f:19:f5:43: 3a:4a:d1:1c:76:7a:87:1c:d4:8a:4e:b1:46:46:a4:84:f4:d9: 3e:ea:41:8d:fb:b0:ac:d0:7f:fe:46:f0:23:21:50:6a:c4:4a: 9c:ff:09:d8:49:a2:77:a2:52:8f:67:83:35:2c:f6:8f:90:d6: 03:45:a6:a8:93:d5:8c:d4:89:d7:a9:47:3d:d7:09:df:aa:f6: 89:92:f3:a2:4c:02:3b:4a:7f:ba:cc:50:87:79:6b:6a:25:7c: ac:47:64:83:4d:f0:64:cc:7c:57:3e:d1:03:ad:89:20:0b:db: 45:50:56:26:57:d6:86:26:c8:69:a5:79:21:11:76:dc:6b:1b: f0:3b:c5:d5:26:ed:6f:d0:2d:21:d7:43:7c:b2:c3:f5:c0:23: 0c:ca:39:fb:b5:2c:79:f5:ab:67:78:77:69:e7:0a:20:55:a7: 23:1e:63:17:51:15:f9:65:ac:aa:25:01:4f:69:d5:f1:64:23: ff:32:10:a6:d2:6d:4b:c0:4a:d7:48:c9:33:be:b5:72:0a:e6: 14:f4:1d:97:80:9f:f4:b7:a5:17:55:1b:ed:11:10:d9:51:14: c4:95:df:1e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt9yuXFWRbM/CyZTNAWFCisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2YzAzNWJjOGZiZjY3NjNjODg4ZGIzNDRkMmFiNGFlNjI5 NDY2NjUwHhcNMjYwMTAyMDgyMDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTllNjI5ZmMyMzJlNzEzZTc4MDFmOGJjYTJmMDQwY2I3MTZjNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqIhxL+Gmw+hacIdKVitdtUbaGjM dAfhIbOop6cyUDM/4qZXuDtrtsMgHBS7O/A19MIFC6IAZG27lPkNbhxfSEmdUSqI xu8OarqalNRgs/eVQRguNM+FZ/dauLijmv77mFEg4y5p5IHNyFEn6R0hZyINSwj4 dUqhqpAxIExVpw2k8UmJKYXlwysJDamU3XFOVUHs4iMYWHvpcSk6Rb4MwmCMAcKh w30yj5VRl0VnS7+0JqjSGi1HZoSg/yDAS3AgVym5Knzy1A2Pph4O3xwOsFg8QCoo xpGGbkEv08S91zsuhcDiqDlTIGxhZBREocXvPZUTbgcoBnqFnDdskfj3XwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFPqeYp/CMucT54Afi8ovBAy3FsTsMB8GA1UdIwQY MBaAFJbANbyPv2djyIjbNE0qtK5ilGZlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHNBMXZJLV9aMlBJaU5zMFRTcTBybUtVWm1VLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC82MDBiMzgtYmUzZC00YTM1LTgxODAt ZDYzMDdlMmRhOWY3LzEvMS1wNWluOEl5NXhQbmdCLUx5aThFRExjV3hPdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYTgvNjAwYjM4LWJlM2QtNGEzNS04MTgwLWQ2MzA3ZTJkYTlm Ny8xL2xzQTF2SS1fWjJQSWlOczBUU3Ewcm1LVVptVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEArkVUDAN BAIAAjAHAwUAKgBXIDANBgkqhkiG9w0BAQsFAAOCAQEAWgh9WBAVapAhJRw3KA+2 Sfc0j3NeVOkDYGyCNXB7sn2PGfVDOkrRHHZ6hxzUik6xRkakhPTZPupBjfuwrNB/ /kbwIyFQasRKnP8J2Emid6JSj2eDNSz2j5DWA0WmqJPVjNSJ16lHPdcJ36r2iZLz okwCO0p/usxQh3lraiV8rEdkg03wZMx8Vz7RA62JIAvbRVBWJlfWhibIaaV5IRF2 3Gsb8DvF1Sbtb9AtIddDfLLD9cAjDMo5+7UsefWrZ3h3aecKIFWnIx5jF1EV+WWs qiUBT2nV8WQj/zIQptJtS8BK10jJM761cgrmFPQdl4Cf9LelF1Ub7REQ2VEUxJXf Hg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:29:24 2026 by rpki-client