This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/f-tzK1iAlLs8aRi0AyCxgDEylPA.roa File: f-tzK1iAlLs8aRi0AyCxgDEylPA.roa (raw, json) Hash identifier: tmzTE7Y4PLq+5yZgbNkkBhahYZsZnMbmme/FsPVSswQ= Subject key identifier: 7F:EB:73:2B:58:80:94:BB:3C:69:18:B4:03:20:B1:80:31:32:94:F0 Certificate issuer: /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab Certificate serial: 019B7EA74A00A5AE092FAA15F953E31C4358 Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/f-tzK1iAlLs8aRi0AyCxgDEylPA.roa Signing time: Fri 02 Jan 2026 12:20:51 +0000 ROA not before: Fri 02 Jan 2026 12:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39896 IP address blocks: 45.159.109.0/24 maxlen: 24 45.159.110.0/24 maxlen: 24 45.159.111.0/24 maxlen: 24 146.255.24.0/21 maxlen: 21 193.150.128.0/20 maxlen: 20 193.150.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:4a:00:a5:ae:09:2f:aa:15:f9:53:e3:1c:43:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab Validity Not Before: Jan 2 12:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7feb732b588094bb3c6918b40320b180313294f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:08:74:2b:52:39:28:54:bc:f1:d6:40:1e: 6f:37:65:63:6b:b3:2e:2a:39:95:2c:03:02:ab:b4: 5c:70:1e:57:bb:f9:ba:11:f0:71:34:99:cf:77:39: 47:7f:a5:8d:9a:03:a8:bd:02:4a:af:7c:25:f1:24: 48:d3:c4:6f:97:2e:5b:d3:4a:32:34:7b:77:5e:c8: 84:17:28:dc:8e:e1:8d:93:49:8a:78:5f:43:a7:fd: 77:53:e0:94:dd:6f:c8:14:44:85:0a:8d:f4:75:9f: 60:1c:b3:6a:c5:c3:e6:a4:bd:a8:e9:b6:88:ed:0a: e4:7f:2f:04:87:d0:c5:1e:0a:b3:ee:f3:49:e1:f6: c5:90:74:90:25:9b:f3:ec:08:b0:23:8f:f7:33:df: 08:fa:e6:bf:32:27:d1:31:a3:8a:51:cb:3a:ef:b7: 26:0c:19:c8:54:63:e0:7b:aa:8a:a3:23:be:08:4d: ef:c9:48:ab:f4:90:bd:d0:0d:8d:d6:8e:5d:b9:84: be:78:c1:bf:3e:4b:4f:c2:49:69:8d:3d:43:38:97: 67:e4:ca:ac:3e:aa:27:76:d7:a5:28:82:cc:73:25: 2f:76:c1:f6:3c:ef:f6:47:d3:92:be:41:e5:84:b2: cc:1d:63:61:4e:75:6e:7c:d3:80:fc:1b:35:3f:3f: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:EB:73:2B:58:80:94:BB:3C:69:18:B4:03:20:B1:80:31:32:94:F0 X509v3 Authority Key Identifier: keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/f-tzK1iAlLs8aRi0AyCxgDEylPA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.159.109.0-45.159.111.255 146.255.24.0/21 193.150.128.0-193.150.151.255 Signature Algorithm: sha256WithRSAEncryption 16:6c:a7:08:34:46:e7:dc:3b:6f:84:55:21:c2:7f:89:36:79: d4:c0:8b:70:c3:f4:1e:1c:96:ae:52:0d:41:dd:39:66:23:b1: 46:20:30:19:4c:43:b8:c9:e6:cc:ed:b9:5b:d1:ba:69:d8:6c: 98:4b:7a:76:4d:f3:9e:9d:e4:a9:13:1e:f6:40:d0:07:cf:76: 83:9f:04:77:11:d2:bb:07:a7:7f:52:e8:47:cb:40:d0:d6:cb: 43:14:d5:a5:5f:1c:a4:63:d8:d1:3a:43:c8:5b:e8:aa:eb:b6: 37:69:a8:44:c0:f3:8d:4b:76:ce:20:c3:45:87:16:1c:6b:f3: bd:7a:f9:05:60:4f:22:b2:2e:23:53:74:ba:fe:aa:ca:4a:52: a1:27:ef:fb:59:d5:5c:2e:20:06:a8:75:74:79:32:84:fa:4e: 52:9f:ff:5a:3d:0a:ae:0b:67:1f:2a:ef:d4:0e:03:6d:d4:fc: 1c:47:54:85:5e:a5:0f:0c:60:be:85:91:15:83:1a:c0:c4:36: 94:11:29:c3:dc:33:f6:bf:bb:a3:89:b2:b3:68:82:65:41:6b: 82:93:48:26:2d:dc:94:96:bd:e5:85:2b:6c:1e:cf:5e:33:bd: b3:96:45:5f:dc:cb:02:b3:28:8a:c6:d7:be:ea:68:a0:54:b4: 61:cc:5b:5d -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt+p0oApa4JL6oV+VPjHENYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYWJkNjgyYzFhOGZjNTAzN2FkYmY2ODE0M2FlNzdmZDAw ZjM4YWIwHhcNMjYwMTAyMTIyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZmViNzMyYjU4ODA5NGJiM2M2OTE4YjQwMzIwYjE4MDMxMzI5NGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPUIdCtSOShUvPHWQB5vN2Vja7Mu KjmVLAMCq7RccB5Xu/m6EfBxNJnPdzlHf6WNmgOovQJKr3wl8SRI08Rvly5b00oy NHt3XsiEFyjcjuGNk0mKeF9Dp/13U+CU3W/IFESFCo30dZ9gHLNqxcPmpL2o6baI 7Qrkfy8Eh9DFHgqz7vNJ4fbFkHSQJZvz7AiwI4/3M98I+ua/MifRMaOKUcs677cm DBnIVGPge6qKoyO+CE3vyUir9JC90A2N1o5duYS+eMG/PktPwklpjT1DOJdn5Mqs PqondtelKILMcyUvdsH2PO/2R9OSvkHlhLLMHWNhTnVufNOA/Bs1Pz9tjQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFH/rcytYgJS7PGkYtAMgsYAxMpTwMB8GA1UdIwQY MBaAFAur1oLBqPxQN62/aBQ653/QDzirMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzZ2V2dzR29fRkEzcmI5b0ZEcm5mOUFQT0tzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9iYzQwMWEtNjkzOC00ZmRjLTljNmUt ZmFjM2Q1NTQzYTJjLzEvZi10eksxaUFsTHM4YVJpMEF5Q3hnREV5bFBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9iYzQwMWEtNjkzOC00ZmRjLTljNmUtZmFjM2Q1NTQzYTJj LzEvQzZ2V2dzR29fRkEzcmI5b0ZEcm5mOUFQT0tzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAAtn20D BAQtn2ADBAOS/xgwDAMEB8GWgAMEA8GWkDANBgkqhkiG9w0BAQsFAAOCAQEAFmyn CDRG59w7b4RVIcJ/iTZ51MCLcMP0HhyWrlINQd05ZiOxRiAwGUxDuMnmzO25W9G6 adhsmEt6dk3znp3kqRMe9kDQB892g58EdxHSuwenf1LoR8tA0NbLQxTVpV8cpGPY 0TpDyFvoquu2N2moRMDzjUt2ziDDRYcWHGvzvXr5BWBPIrIuI1N0uv6qykpSoSfv +1nVXC4gBqh1dHkyhPpOUp//Wj0KrgtnHyrv1A4DbdT8HEdUhV6lDwxgvoWRFYMa wMQ2lBEpw9wz9r+7o4mys2iCZUFrgpNIJi3clJa95YUrbB7PXjO9s5ZFX9zLArMo isbXvupooFS0YcxbXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:32:24 2026 by rpki-client