This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1-fnKnftkxo9cmAsQkPsG-I4ca0I.roa File: 1-fnKnftkxo9cmAsQkPsG-I4ca0I.roa (raw, json) Hash identifier: UbSvch0TgdBBUmSrH2mJ9dZgvzb+FMllfQIcUu2Fc2k= Subject key identifier: F9:F9:CA:9D:FB:64:C6:8F:5C:98:0B:10:90:FB:06:F8:8E:1C:6B:42 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A2754588537F13A80BA3D0149C298B Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1-fnKnftkxo9cmAsQkPsG-I4ca0I.roa Signing time: Thu 01 Jan 2026 08:17:51 +0000 ROA not before: Thu 01 Jan 2026 08:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13213 IP address blocks: 45.67.146.0/24 maxlen: 24 185.52.136.0/24 maxlen: 24 185.161.191.0/24 maxlen: 24 185.205.206.0/24 maxlen: 24 185.208.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:75:45:88:53:7f:13:a8:0b:a3:d0:14:9c:29:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9f9ca9dfb64c68f5c980b1090fb06f88e1c6b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e6:23:55:e0:e4:c1:82:32:85:84:74:c0:01: 94:bb:92:26:c3:6f:f3:c5:f7:6a:ba:b6:bd:f7:9e: 60:70:05:33:e7:89:e6:fb:a7:e6:f9:c4:2b:cb:66: 6d:ed:d4:42:6a:cd:58:4a:71:af:d7:62:64:1f:5c: 40:5d:e2:23:5b:a9:2f:23:d6:0d:04:d8:89:67:0a: cd:75:d2:79:cf:24:63:e9:ce:de:03:49:27:c8:b9: 53:db:17:11:e7:df:01:67:bf:7c:68:bf:57:cf:52: 8b:bc:01:a6:34:d6:5e:39:40:d1:02:6a:f5:8e:36: cd:cc:7a:9e:13:f7:85:7e:97:f4:f2:39:a0:1e:f5: 04:b5:af:5b:b3:b1:4c:d9:ba:77:9e:46:64:f5:f9: b3:53:7e:5a:c8:b1:8c:07:47:2f:55:d2:92:3b:cb: e5:f0:65:b4:1a:93:70:37:35:9b:3f:38:bf:46:5e: f5:2f:5e:3f:80:8d:78:3e:c8:6a:7e:3b:22:ad:5a: fc:6a:41:3d:6a:f4:a5:b5:6b:f8:b7:89:71:8d:c2: d0:be:da:6b:08:1c:1c:f8:cf:b4:1e:bc:be:97:7a: bf:62:61:8a:f7:63:3d:34:7b:0c:40:7a:3c:81:e1: 47:52:59:a7:5c:61:99:43:92:2c:a0:01:2b:c3:2e: 83:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F9:CA:9D:FB:64:C6:8F:5C:98:0B:10:90:FB:06:F8:8E:1C:6B:42 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/1-fnKnftkxo9cmAsQkPsG-I4ca0I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.146.0/24 185.52.136.0/24 185.161.191.0/24 185.205.206.0/24 185.208.152.0/24 Signature Algorithm: sha256WithRSAEncryption 52:ea:20:08:f2:57:e7:6a:f0:8e:1a:fd:df:bf:ec:0a:a0:d9: a6:6b:0f:db:3d:87:79:ff:70:83:e6:49:67:bb:36:40:8e:c1: 4d:1e:fe:25:fb:46:fb:95:ba:c1:c3:11:67:99:bd:85:c3:2a: 81:2c:15:bf:02:11:f3:e6:83:47:4b:7d:c1:bb:74:93:89:b6: 6c:98:21:75:d8:c7:c9:af:3f:d7:75:9a:75:72:ae:12:37:a9: 3f:9a:cd:81:83:2e:09:60:e7:4c:4f:e8:8c:e6:d0:07:8d:4e: 2e:95:38:78:0f:df:3b:1c:1c:95:64:8e:74:64:ba:84:a1:ec: 60:2f:2b:67:99:e7:57:af:e4:99:1b:96:bd:e8:12:02:7b:d1: 07:82:ed:0e:6b:92:9d:28:52:14:64:49:09:2e:ba:9f:45:78: 39:a0:f2:31:1b:6d:6a:9b:eb:ef:eb:ef:ab:67:7b:39:77:ba: e1:f6:82:6c:8d:59:ff:61:40:80:28:32:e2:cd:7e:52:19:fe: 47:36:98:84:81:db:36:a9:76:04:b2:0e:e3:91:7e:46:63:25: 7b:81:3c:17:49:d6:da:d2:a2:a8:ab:90:8e:83:9f:eb:b8:e9: 62:05:93:46:b8:b5:8e:69:b7:b9:fa:23:46:a6:8a:2d:46:a1: db:50:06:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4onVFiFN/E6gLo9AUnCmLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWY5Y2E5ZGZiNjRjNjhmNWM5ODBiMTA5MGZiMDZmODhlMWM2YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+YjVeDkwYIyhYR0wAGUu5Imw2/z xfdqura9955gcAUz54nm+6fm+cQry2Zt7dRCas1YSnGv12JkH1xAXeIjW6kvI9YN BNiJZwrNddJ5zyRj6c7eA0knyLlT2xcR598BZ798aL9Xz1KLvAGmNNZeOUDRAmr1 jjbNzHqeE/eFfpf08jmgHvUEta9bs7FM2bp3nkZk9fmzU35ayLGMB0cvVdKSO8vl 8GW0GpNwNzWbPzi/Rl71L14/gI14PshqfjsirVr8akE9avSltWv4t4lxjcLQvtpr CBwc+M+0Hry+l3q/YmGK92M9NHsMQHo8geFHUlmnXGGZQ5IsoAErwy6DFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPn5yp37ZMaPXJgLEJD7BviOHGtCMB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvMS1mbktuZnRreG85Y21Bc1FrUHNHLUk0Y2EwSS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2EvM2M0YjhhLWJmYzctNDFlOS05OWUxLWYzZTUwNmFlYWEw MS8xL2NyZVBab0w4T2NWYlFkU1BnTGlEalYwdHZ3Yy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA3BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAC1DkgME ALk0iAMEALmhvwMEALnNzgMEALnQmDANBgkqhkiG9w0BAQsFAAOCAQEAUuogCPJX 52rwjhr937/sCqDZpmsP2z2Hef9wg+ZJZ7s2QI7BTR7+JftG+5W6wcMRZ5m9hcMq gSwVvwIR8+aDR0t9wbt0k4m2bJghddjHya8/13WadXKuEjepP5rNgYMuCWDnTE/o jObQB41OLpU4eA/fOxwclWSOdGS6hKHsYC8rZ5nnV6/kmRuWvegSAnvRB4LtDmuS nShSFGRJCS66n0V4OaDyMRttapvr7+vvq2d7OXe64faCbI1Z/2FAgCgy4s1+Uhn+ RzaYhIHbNql2BLIO45F+RmMle4E8F0nW2tKiqKuQjoOf67jpYgWTRri1jmm3ufoj RqaKLUah21AGyg== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:28 2026 by rpki-client