This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-tt2BgUHKP6OaLk7hn5P58KDGxg.roa File: 1-tt2BgUHKP6OaLk7hn5P58KDGxg.roa (raw, json) Hash identifier: FpA2/kwaA0kKrNN5XHJhQltBt5KpxAXpOOTjyWOusw4= Subject key identifier: FA:DB:76:06:05:07:28:FE:8E:68:B9:3B:86:7E:4F:E7:C2:83:1B:18 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019BB0EDD224EDACA53C9769E9DA685DBC05 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-tt2BgUHKP6OaLk7hn5P58KDGxg.roa Signing time: Mon 12 Jan 2026 06:38:54 +0000 ROA not before: Mon 12 Jan 2026 06:38:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15723 IP address blocks: 5.178.1.0/24 maxlen: 24 5.178.4.0/22 maxlen: 22 5.178.4.0/24 maxlen: 24 5.178.5.0/24 maxlen: 24 5.178.6.0/24 maxlen: 24 5.178.7.0/24 maxlen: 24 5.178.9.0/24 maxlen: 24 5.178.10.0/24 maxlen: 24 5.178.11.0/24 maxlen: 24 5.178.12.0/22 maxlen: 22 5.178.12.0/24 maxlen: 24 5.178.13.0/24 maxlen: 24 5.178.14.0/24 maxlen: 24 5.178.15.0/24 maxlen: 24 46.23.100.0/22 maxlen: 22 46.23.100.0/24 maxlen: 24 46.23.101.0/24 maxlen: 24 46.23.102.0/24 maxlen: 24 46.23.103.0/24 maxlen: 24 62.217.128.0/19 maxlen: 19 62.217.128.0/20 maxlen: 20 62.217.128.0/24 maxlen: 24 62.217.129.0/24 maxlen: 24 62.217.130.0/24 maxlen: 24 62.217.131.0/24 maxlen: 24 62.217.132.0/24 maxlen: 24 62.217.134.0/24 maxlen: 24 62.217.138.0/24 maxlen: 24 62.217.140.0/24 maxlen: 24 62.217.141.0/24 maxlen: 24 62.217.142.0/24 maxlen: 24 62.217.144.0/20 maxlen: 20 62.217.144.0/24 maxlen: 24 62.217.145.0/24 maxlen: 24 62.217.146.0/24 maxlen: 24 62.217.147.0/24 maxlen: 24 62.217.148.0/24 maxlen: 24 62.217.149.0/24 maxlen: 24 62.217.150.0/24 maxlen: 24 62.217.151.0/24 maxlen: 24 62.217.152.0/24 maxlen: 24 62.217.153.0/24 maxlen: 24 62.217.154.0/24 maxlen: 24 62.217.155.0/24 maxlen: 24 62.217.156.0/24 maxlen: 24 62.217.157.0/24 maxlen: 24 62.217.158.0/24 maxlen: 24 62.217.159.0/24 maxlen: 24 88.151.199.0/24 maxlen: 24 109.205.208.0/24 maxlen: 24 109.205.215.0/24 maxlen: 24 185.81.216.0/24 maxlen: 24 185.81.217.0/24 maxlen: 24 185.81.219.0/24 maxlen: 24 188.64.8.0/22 maxlen: 22 188.64.8.0/24 maxlen: 24 188.64.9.0/24 maxlen: 24 188.64.10.0/24 maxlen: 24 188.64.11.0/24 maxlen: 24 188.64.12.0/22 maxlen: 22 188.64.12.0/24 maxlen: 24 188.64.13.0/24 maxlen: 24 188.64.14.0/24 maxlen: 24 188.64.15.0/24 maxlen: 24 2a00:48c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:ed:d2:24:ed:ac:a5:3c:97:69:e9:da:68:5d:bc:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 12 06:38:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fadb7606050728fe8e68b93b867e4fe7c2831b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a0:0a:0a:69:df:85:ca:b3:f2:e7:37:6d:86: eb:2f:59:d5:29:4f:6d:d8:bb:1f:66:75:a7:b5:25: 0e:db:f0:e5:51:b6:57:09:75:40:92:5c:ef:8d:67: 13:b3:2d:1d:6a:2c:56:ea:db:23:2c:fb:47:d8:ca: ca:a3:a4:b8:5c:76:ef:ff:c6:90:1e:91:b7:ae:4d: 1e:c6:73:42:cf:3c:8f:92:df:1b:ee:60:9e:b6:01: eb:a3:ae:30:3e:1b:d7:d7:c2:a5:58:7f:e4:07:a3: 75:63:2a:e6:80:c0:6a:de:e4:43:70:c5:c6:51:47: e8:e3:d5:74:44:9f:37:a6:49:e3:0c:84:80:d5:f1: 5f:a6:23:f4:c6:42:ea:01:f2:8b:24:65:81:20:d2: 26:4e:90:e9:ef:dd:39:c2:71:ac:2b:12:e5:08:52: eb:f9:f7:66:59:e4:29:17:19:44:b2:59:c1:8e:f8: eb:bc:e9:13:7b:05:8d:bd:0a:21:7d:c6:90:6b:0b: 6e:4e:3a:8c:a2:ac:5f:fe:20:87:50:0d:7e:02:2f: f5:94:55:6d:ea:fd:5e:03:7a:f3:30:1c:9d:33:7e: cb:6b:71:79:93:dd:5f:9b:9b:25:cf:23:fd:93:ea: c5:27:f3:1a:03:f4:ae:05:f5:94:b9:19:d8:c0:38: d4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DB:76:06:05:07:28:FE:8E:68:B9:3B:86:7E:4F:E7:C2:83:1B:18 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/1-tt2BgUHKP6OaLk7hn5P58KDGxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.1.0/24 5.178.4.0/22 5.178.9.0-5.178.15.255 46.23.100.0/22 62.217.128.0/19 88.151.199.0/24 109.205.208.0/24 109.205.215.0/24 185.81.216.0/23 185.81.219.0/24 188.64.8.0/21 IPv6: 2a00:48c0::/32 Signature Algorithm: sha256WithRSAEncryption 98:39:98:1c:7c:96:ee:87:11:a7:a2:4f:6a:1c:15:ae:3a:99: 10:13:43:bb:1f:b3:a7:f6:2b:40:34:b6:40:88:de:26:86:06: 0c:6e:1d:63:32:3d:14:25:60:87:0c:ac:6d:1f:24:45:22:4d: f5:42:c5:c5:96:00:3f:71:47:af:1a:40:97:d7:56:73:2a:f1: 83:34:75:dc:fe:ac:d7:5d:4b:c2:18:2c:7d:b4:6f:a9:5d:47: b5:55:07:6d:f1:a3:e4:5f:88:c4:c9:ef:7b:89:ff:e8:30:f4: 45:df:26:00:b5:42:73:85:80:82:d1:2b:82:88:b8:88:31:2b: 03:7b:ca:db:ef:3a:da:af:b1:99:d6:f0:cf:1b:f5:28:f2:11: 64:43:b4:6d:e6:37:40:36:25:aa:78:40:b0:57:64:6a:a3:28: 0c:fe:e7:b6:c8:8a:7c:7a:5e:8d:41:8e:9b:36:88:ab:b5:72: ee:31:e1:7c:8f:c6:99:2b:1d:ee:e8:21:37:88:05:ce:71:b5: b5:4e:12:a2:d8:2b:8d:5b:87:2a:a7:34:2f:6a:4a:76:48:2c: 3c:dc:af:cf:36:ac:df:4e:fb:7e:3a:df:99:3a:dd:5d:f9:93: d0:73:95:9b:34:5a:61:f2:cb:28:93:a5:77:1f:c2:6c:a4:55: 65:c4:e1:f9 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZuw7dIk7aylPJdp6dpoXbwFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTEyMDYzODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWRiNzYwNjA1MDcyOGZlOGU2OGI5M2I4NjdlNGZlN2MyODMxYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaAKCmnfhcqz8uc3bYbrL1nVKU9t 2LsfZnWntSUO2/DlUbZXCXVAklzvjWcTsy0daixW6tsjLPtH2MrKo6S4XHbv/8aQ HpG3rk0exnNCzzyPkt8b7mCetgHro64wPhvX18KlWH/kB6N1YyrmgMBq3uRDcMXG UUfo49V0RJ83pknjDISA1fFfpiP0xkLqAfKLJGWBINImTpDp7905wnGsKxLlCFLr +fdmWeQpFxlEslnBjvjrvOkTewWNvQohfcaQawtuTjqMoqxf/iCHUA1+Ai/1lFVt 6v1eA3rzMBydM37La3F5k91fm5slzyP9k+rFJ/MaA/SuBfWUuRnYwDjUsQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFPrbdgYFByj+jmi5O4Z+T+fCgxsYMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvMS10dDJCZ1VIS1A2T2FMazdobjVQNThLREd4Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZWMvNzgwMDJhLTRmYzAtNGRiZi04NTg1LTJjZjgwNmIyZDBm Mi8xL2ZRYWtLN0pFYmxIeGt1bzNXOTktN0ZwUngzOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjByBggrBgEFBQcBBwEB/wRjMGEwUAQCAAEwSgMEAAWyAQME AgWyBDAMAwQABbIJAwQEBbIAAwQCLhdkAwQFPtmAAwQAWJfHAwQAbc3QAwQAbc3X AwQBuVHYAwQAuVHbAwQDvEAIMA0EAgACMAcDBQAqAEjAMA0GCSqGSIb3DQEBCwUA A4IBAQCYOZgcfJbuhxGnok9qHBWuOpkQE0O7H7On9itANLZAiN4mhgYMbh1jMj0U JWCHDKxtHyRFIk31QsXFlgA/cUevGkCX11ZzKvGDNHXc/qzXXUvCGCx9tG+pXUe1 VQdt8aPkX4jEye97if/oMPRF3yYAtUJzhYCC0SuCiLiIMSsDe8rb7zrar7GZ1vDP G/Uo8hFkQ7Rt5jdANiWqeECwV2RqoygM/ue2yIp8el6NQY6bNoirtXLuMeF8j8aZ Kx3u6CE3iAXOcbW1ThKi2CuNW4cqpzQvakp2SCw83K/PNqzfTvt+Ot+ZOt1d+ZPQ c5WbNFph8ssok6V3H8JspFVlxOH5 -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:04 2026 by rpki-client