This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F1cf5sThrMesnZMpD8MW5zJ48go.roa File: F1cf5sThrMesnZMpD8MW5zJ48go.roa (raw, json) Hash identifier: STKKrQ/+M+setnjKBUBCEM7GV17Xph/M9ETwxLRsOl8= Subject key identifier: 17:57:1F:E6:C4:E1:AC:C7:AC:9D:93:29:0F:C3:16:E7:32:78:F2:0A Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D2A0D13C0EE9C9496D8628271D7A0 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F1cf5sThrMesnZMpD8MW5zJ48go.roa Signing time: Fri 02 Jan 2026 06:20:16 +0000 ROA not before: Fri 02 Jan 2026 06:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8151 IP address blocks: 45.144.224.0/24 maxlen: 24 194.5.84.0/24 maxlen: 24 194.242.3.0/24 maxlen: 24 2a10:6c00::/32 maxlen: 32 2a10:7406::/32 maxlen: 32 2a10:7407::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2a:0d:13:c0:ee:9c:94:96:d8:62:82:71:d7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17571fe6c4e1acc7ac9d93290fc316e73278f20a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:c2:1b:3e:d4:38:6a:40:e8:ad:d2:a2:4a:7b: 6f:f5:aa:25:93:3e:5b:5a:47:6a:1b:8c:7d:69:f7: a6:0a:b0:5d:c2:4a:1e:bc:fa:c3:46:83:90:eb:08: f0:ac:b6:a5:21:78:ab:fb:97:e5:fe:76:2b:e9:fc: 2f:b4:23:ad:5b:24:36:3e:e0:65:03:58:80:43:fc: f8:f3:27:17:25:72:9d:83:e6:3f:d4:27:75:6b:35: 33:b7:ea:db:eb:bd:91:9d:db:2c:5b:13:34:3d:7c: ab:9c:3a:58:3f:96:78:85:b2:77:09:d6:9b:74:e4: 84:d4:3e:50:59:ff:71:47:bb:49:1d:7d:06:22:6f: 17:92:1f:5b:2f:28:47:03:37:07:cf:e5:d0:83:22: 6a:a4:34:d9:e7:8c:ab:3a:ba:79:d6:cb:1b:0f:48: 07:17:0b:85:59:8d:da:ff:59:62:79:b1:f9:22:4c: 5e:a4:f5:0a:3c:71:bf:4b:60:ce:39:6d:89:14:13: 1e:19:9d:9b:96:45:69:82:66:ae:bb:a9:58:ad:98: 42:84:83:4e:ab:4d:fd:48:c5:cf:68:1c:e0:05:c7: 85:05:4e:41:49:22:d7:3f:c6:a0:dd:ba:c7:ef:c6: c9:83:6d:c4:c9:39:fe:62:40:90:2d:12:e3:9b:8e: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:57:1F:E6:C4:E1:AC:C7:AC:9D:93:29:0F:C3:16:E7:32:78:F2:0A X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/F1cf5sThrMesnZMpD8MW5zJ48go.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.144.224.0/24 194.5.84.0/24 194.242.3.0/24 IPv6: 2a10:6c00::/32 2a10:7406::/31 Signature Algorithm: sha256WithRSAEncryption 26:e4:4c:f3:20:6e:5d:b5:c3:39:af:9c:31:13:63:2d:11:fc: ef:4b:27:c8:f8:09:58:49:d4:bc:0e:3d:1f:04:e6:e8:93:8b: 3e:f9:92:f7:8b:18:ed:9e:42:7c:ab:9d:27:4a:de:7e:71:79: f1:35:1d:f8:35:d6:ce:cf:e1:48:52:ce:88:05:fa:13:2b:63: 00:a1:4d:0b:01:9c:8c:bc:66:64:d3:fa:5b:02:4e:80:56:01: 85:e5:a0:cb:4c:20:17:a6:95:11:4b:f3:ed:e6:af:8a:22:8d: 07:1e:64:d0:eb:1f:77:ab:dd:25:9b:83:6f:2e:e9:ed:23:57: 1d:fc:58:ba:f0:08:32:f7:1e:a1:2a:96:21:1c:28:f2:9f:f0: de:34:48:55:b2:46:da:64:35:58:75:c3:c6:eb:26:bb:41:de: a7:5d:76:0a:1d:f6:21:30:4b:86:03:27:72:44:4f:21:b9:a3: fd:8a:4a:a4:fd:14:ad:ca:dc:b9:c0:44:02:ed:e4:f6:91:e4: cb:07:d4:51:f5:52:d2:34:bd:37:50:ff:ec:73:b1:92:fc:72: 46:09:11:a0:70:d7:43:0d:07:49:ee:8d:61:60:9b:15:88:56: d1:5e:50:ff:1b:15:a5:69:ec:2e:c4:b1:13:c0:a6:23:0a:aa: 88:8d:d9:c9 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt9XSoNE8DunJSW2GKCcdegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzU3MWZlNmM0ZTFhY2M3YWM5ZDkzMjkwZmMzMTZlNzMyNzhmMjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cIbPtQ4akDordKiSntv9aolkz5b WkdqG4x9afemCrBdwkoevPrDRoOQ6wjwrLalIXir+5fl/nYr6fwvtCOtWyQ2PuBl A1iAQ/z48ycXJXKdg+Y/1Cd1azUzt+rb672RndssWxM0PXyrnDpYP5Z4hbJ3Cdab dOSE1D5QWf9xR7tJHX0GIm8Xkh9bLyhHAzcHz+XQgyJqpDTZ54yrOrp51ssbD0gH FwuFWY3a/1liebH5IkxepPUKPHG/S2DOOW2JFBMeGZ2blkVpgmauu6lYrZhChINO q039SMXPaBzgBceFBU5BSSLXP8ag3brH78bJg23EyTn+YkCQLRLjm473TQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFBdXH+bE4azHrJ2TKQ/DFucyePIKMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvRjFjZjVzVGhyTWVzblpNcEQ4TVc1eko0OGdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQALZDgAwQA wgVUAwQAwvIDMBQEAgACMA4DBQAqEGwAAwUBKhB0BjANBgkqhkiG9w0BAQsFAAOC AQEAJuRM8yBuXbXDOa+cMRNjLRH870snyPgJWEnUvA49HwTm6JOLPvmS94sY7Z5C fKudJ0refnF58TUd+DXWzs/hSFLOiAX6EytjAKFNCwGcjLxmZNP6WwJOgFYBheWg y0wgF6aVEUvz7eaviiKNBx5k0Osfd6vdJZuDby7p7SNXHfxYuvAIMvceoSqWIRwo 8p/w3jRIVbJG2mQ1WHXDxusmu0Hep112Ch32ITBLhgMnckRPIbmj/YpKpP0Urcrc ucBEAu3k9pHkywfUUfVS0jS9N1D/7HOxkvxyRgkRoHDXQw0HSe6NYWCbFYhW0V5Q /xsVpWnsLsSxE8CmIwqqiI3ZyQ== -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:13 2026 by rpki-client