This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/1-uapFsJGKC_fK5bX4vidKDJn0HE.roa File: 1-uapFsJGKC_fK5bX4vidKDJn0HE.roa (raw, json) Hash identifier: GOVn0PIk7Y5SfmSrA/v+/c91vfTOsMUpyn3e33Mi8Rk= Subject key identifier: FA:E6:A9:16:C2:46:28:2F:DF:2B:96:D7:E2:F8:9D:28:32:67:D0:71 Certificate issuer: /CN=8beb65a71af02959272acc00d5c4c1958385de94 Certificate serial: 019B7E387BF40642CC8D8D802E7C05EC8012 Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/1-uapFsJGKC_fK5bX4vidKDJn0HE.roa Signing time: Fri 02 Jan 2026 10:19:49 +0000 ROA not before: Fri 02 Jan 2026 10:19:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41676 IP address blocks: 77.46.0.0/22 maxlen: 22 80.238.96.0/19 maxlen: 19 93.174.24.0/21 maxlen: 21 109.233.88.0/21 maxlen: 21 176.241.240.0/21 maxlen: 21 185.25.216.0/22 maxlen: 22 185.78.132.0/22 maxlen: 22 185.93.92.0/22 maxlen: 22 185.102.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:7b:f4:06:42:cc:8d:8d:80:2e:7c:05:ec:80:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94 Validity Not Before: Jan 2 10:19:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fae6a916c246282fdf2b96d7e2f89d283267d071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6d:fd:28:b6:17:08:98:a7:61:21:dd:cd:bd: 3d:cb:88:70:60:d0:ce:d8:52:64:11:af:5b:c3:5e: 9c:54:c5:df:87:62:9b:8b:04:2c:fa:fe:57:13:4c: f8:fa:df:a9:0d:44:58:a7:51:d4:3f:c3:80:34:95: 38:5e:14:6c:3a:07:87:06:18:5c:99:85:28:55:09: d8:9a:8d:2a:ed:01:0f:30:cf:7c:8d:aa:cd:ee:6d: c2:cc:0d:13:8d:72:92:7b:c9:2e:48:12:6a:76:40: 1e:43:af:c3:87:1f:b6:9a:23:11:fc:c5:0f:7f:c9: 10:ac:d0:01:b4:d6:fc:c0:a0:f4:33:70:81:8f:cc: e3:69:3e:42:fb:92:0b:19:d7:bc:c3:71:48:33:01: c8:1e:f1:40:f9:6c:21:9e:8d:c8:7f:0a:ee:d5:31: 32:42:13:f8:b4:ac:8c:6d:a5:c6:ca:29:24:a8:6e: ed:cc:94:05:2b:d2:ea:24:b9:d9:33:46:c8:d7:9b: a3:1b:14:f7:66:bb:12:69:70:6f:21:35:5d:c0:26: 83:6a:f3:a9:8b:ad:e6:b4:e5:ab:5c:b0:3d:59:ff: e8:fe:60:ab:29:2f:55:23:ab:e5:71:5e:a3:f3:48: 1b:93:5f:10:41:8f:a9:39:2a:61:24:b8:fa:f1:77: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E6:A9:16:C2:46:28:2F:DF:2B:96:D7:E2:F8:9D:28:32:67:D0:71 X509v3 Authority Key Identifier: keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/1-uapFsJGKC_fK5bX4vidKDJn0HE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.46.0.0/22 80.238.96.0/19 93.174.24.0/21 109.233.88.0/21 176.241.240.0/21 185.25.216.0/22 185.78.132.0/22 185.93.92.0/22 185.102.188.0/22 Signature Algorithm: sha256WithRSAEncryption 92:fa:d7:7e:54:4f:4e:20:ee:42:1c:fe:56:27:9a:20:c9:26: 7c:72:42:12:91:02:cc:b7:26:85:d8:0f:1c:6b:1c:46:a7:c8: b4:e2:12:64:0b:c6:47:e9:1d:88:99:ec:3d:f8:1d:1a:0e:2c: 14:3c:be:b9:92:c9:f1:30:9e:5c:a0:d6:ba:dd:88:5c:67:be: 84:53:00:e6:41:ad:46:6e:2a:bc:51:e9:0b:ea:bf:28:55:b5: cb:a8:39:93:86:65:2e:e3:c5:ac:1c:00:bf:a3:e3:a1:9e:64: 53:e4:b6:ee:39:9a:fc:03:a3:25:46:9d:fb:46:d1:55:0c:12: 3f:4a:e3:7c:74:2a:14:b2:92:16:8f:33:d3:5c:95:a0:dd:e8: d9:cd:71:66:6b:f5:fb:30:bb:3a:49:58:e1:b3:6f:de:86:a7: 26:67:f4:03:01:4e:cd:ba:f1:c1:ca:32:6e:76:49:a8:76:9d: 88:e2:93:29:29:61:38:da:64:09:70:18:fb:63:3f:35:98:8a: 7c:27:38:91:0b:2c:da:04:3f:f3:0c:38:92:49:5f:98:50:6c: 4a:a6:6c:82:0e:90:59:db:58:d8:7d:52:07:04:58:47:6c:34: d0:68:7e:d2:eb:03:6f:e1:b8:60:20:8c:b4:be:4a:c5:04:92: ef:f4:9e:f9 -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZt+OHv0BkLMjY2ALnwF7IASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZWI2NWE3MWFmMDI5NTkyNzJhY2MwMGQ1YzRjMTk1ODM4 NWRlOTQwHhcNMjYwMTAyMTAxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWU2YTkxNmMyNDYyODJmZGYyYjk2ZDdlMmY4OWQyODMyNjdkMDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnG39KLYXCJinYSHdzb09y4hwYNDO 2FJkEa9bw16cVMXfh2KbiwQs+v5XE0z4+t+pDURYp1HUP8OANJU4XhRsOgeHBhhc mYUoVQnYmo0q7QEPMM98jarN7m3CzA0TjXKSe8kuSBJqdkAeQ6/Dhx+2miMR/MUP f8kQrNABtNb8wKD0M3CBj8zjaT5C+5ILGde8w3FIMwHIHvFA+Wwhno3Ifwru1TEy QhP4tKyMbaXGyikkqG7tzJQFK9LqJLnZM0bI15ujGxT3ZrsSaXBvITVdwCaDavOp i63mtOWrXLA9Wf/o/mCrKS9VI6vlcV6j80gbk18QQY+pOSphJLj68XcyDQIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFPrmqRbCRigv3yuW1+L4nSgyZ9BxMB8GA1UdIwQY MBaAFIvrZaca8ClZJyrMANXEwZWDhd6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaS10bHB4cndLVmtuS3N3QTFjVEJsWU9GM3BRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZTk5NTctYzdjYy00OTk3LWEyMmIt MTY1YTg0NmQ0ODFkLzEvMS11YXBGc0pHS0NfZks1Ylg0dmlkS0RKbjBIRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjUvZGU5OTU3LWM3Y2MtNDk5Ny1hMjJiLTE2NWE4NDZkNDgx ZC8xL2ktdGxweHJ3S1Zrbktzd0ExY1RCbFlPRjNwUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRAMD4wPAQCAAEwNgMEAk0uAAME BVDuYAMEA12uGAMEA23pWAMEA7Dx8AMEArkZ2AMEArlOhAMEArldXAMEArlmvDAN BgkqhkiG9w0BAQsFAAOCAQEAkvrXflRPTiDuQhz+VieaIMkmfHJCEpECzLcmhdgP HGscRqfItOISZAvGR+kdiJnsPfgdGg4sFDy+uZLJ8TCeXKDWut2IXGe+hFMA5kGt Rm4qvFHpC+q/KFW1y6g5k4ZlLuPFrBwAv6PjoZ5kU+S27jma/AOjJUad+0bRVQwS P0rjfHQqFLKSFo8z01yVoN3o2c1xZmv1+zC7OklY4bNv3oanJmf0AwFOzbrxwcoy bnZJqHadiOKTKSlhONpkCXAY+2M/NZiKfCc4kQss2gQ/8ww4kklfmFBsSqZsgg6Q WdtY2H1SBwRYR2w00Gh+0usDb+G4YCCMtL5KxQSS7/Se+Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:12 2026 by rpki-client