This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/1-tufXICD9zpH9q97ukUAVzwwHjE.roa File: 1-tufXICD9zpH9q97ukUAVzwwHjE.roa (raw, json) Hash identifier: +wtE5yDBNjZJrgkiWy0XjsbVbjlePoHSNbtSgcMLmc8= Subject key identifier: FA:DB:9F:5C:80:83:F7:3A:47:F6:AF:7B:BA:45:00:57:3C:30:1E:31 Certificate issuer: /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e Certificate serial: 019B7D5B6C1B382849315833D913E96F61AF Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/1-tufXICD9zpH9q97ukUAVzwwHjE.roa Signing time: Fri 02 Jan 2026 06:18:22 +0000 ROA not before: Fri 02 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205094 IP address blocks: 195.128.143.0/24 maxlen: 24 213.142.154.0/23 maxlen: 23 2a12:f140::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:6c:1b:38:28:49:31:58:33:d9:13:e9:6f:61:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e Validity Not Before: Jan 2 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fadb9f5c8083f73a47f6af7bba4500573c301e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b8:3d:5b:0a:b1:3e:c1:92:be:33:c0:97:db: 1d:f6:9a:b2:fd:32:ab:f8:bb:12:e1:b5:f9:58:b6: c9:37:2b:2d:c7:e1:59:7b:0b:d8:77:93:71:be:08: 3b:21:2c:a4:5d:fa:d0:b6:d5:be:2c:78:46:17:b2: e6:bc:0d:e8:91:70:c3:fa:07:84:5b:6d:68:7d:51: 57:f8:18:1d:81:7a:30:6c:ca:49:f4:17:cd:e2:db: 21:e8:07:bd:de:aa:d0:50:88:37:f7:4e:00:bb:71: 46:c4:7a:9b:7f:af:70:b9:3a:d3:f6:a2:39:45:a5: 83:69:4b:77:26:8d:72:a6:c6:71:c2:3c:e3:a5:3c: 93:1d:4a:15:cd:77:e5:90:21:ab:8e:d8:67:09:dd: 47:b7:c8:0d:68:99:dd:ec:48:bb:75:c5:f3:55:8d: 7a:4b:89:09:39:6e:ca:da:59:f8:49:1f:ee:83:6b: f7:87:4b:d0:6a:00:bb:61:05:88:97:cd:78:f4:e9: 83:9c:17:95:91:e4:78:78:ed:bc:10:05:61:45:f4: f7:5f:4c:58:2b:cc:c2:e2:51:af:44:f0:51:0d:b4: 4f:0f:84:55:5a:27:de:c3:30:d8:19:b7:9c:ab:03: 04:63:b0:d6:04:ba:03:5d:54:54:3d:6b:da:4f:8a: a1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DB:9F:5C:80:83:F7:3A:47:F6:AF:7B:BA:45:00:57:3C:30:1E:31 X509v3 Authority Key Identifier: keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/1-tufXICD9zpH9q97ukUAVzwwHjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.128.143.0/24 213.142.154.0/23 IPv6: 2a12:f140::/29 Signature Algorithm: sha256WithRSAEncryption 8c:84:e0:a5:53:09:92:e9:3f:c2:c2:1e:58:ed:62:1a:02:46: 9c:98:4a:8b:ea:8f:1f:01:a2:19:a5:7b:b9:b8:f5:45:78:fd: c4:8d:f4:df:b9:0a:c5:55:ae:e1:9d:b8:80:49:bb:68:0c:d4: 69:f2:88:68:b7:c6:88:ec:88:35:21:37:94:71:17:07:c2:a5: 27:e4:4d:d0:f8:7e:d4:b1:8d:47:71:d1:74:31:97:72:87:ef: a4:ba:e3:22:b8:dc:a6:59:5d:c1:be:85:8c:c5:f1:d6:a6:e6: 98:89:8c:9b:89:5b:00:b3:37:b3:0a:e0:6d:66:b3:42:ca:62: 97:a0:1f:7f:16:62:1a:85:cb:f4:45:0b:e6:88:cb:a8:24:37: 82:63:9e:fb:ad:04:f2:6e:4a:96:9a:21:31:2f:1b:ea:eb:55: 28:3a:7c:0f:99:bc:46:f7:d7:92:c3:80:25:26:ea:e9:58:95: db:ca:e7:a6:ba:7c:09:20:ed:d0:17:f3:9d:6a:8c:e6:61:08: 4b:08:6c:0d:68:15:4f:68:11:8b:3a:eb:f6:bb:0b:86:44:1c: 12:8d:17:f7:f0:7c:86:3c:31:5b:48:ec:fe:f2:f1:7e:f2:96: 3d:f3:b8:5d:b4:37:6f:80:1c:81:6a:88:32:cf:1d:a6:2f:d8: 2b:4b:09:62 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt9W2wbOChJMVgz2RPpb2GvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDFmNjczYzZiMGZmODgzNWVhMDJmYWVkYmE1YjQ5Y2Yx NDIyNGUwHhcNMjYwMTAyMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWRiOWY1YzgwODNmNzNhNDdmNmFmN2JiYTQ1MDA1NzNjMzAxZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrg9WwqxPsGSvjPAl9sd9pqy/TKr +LsS4bX5WLbJNystx+FZewvYd5Nxvgg7ISykXfrQttW+LHhGF7LmvA3okXDD+geE W21ofVFX+BgdgXowbMpJ9BfN4tsh6Ae93qrQUIg3904Au3FGxHqbf69wuTrT9qI5 RaWDaUt3Jo1ypsZxwjzjpTyTHUoVzXflkCGrjthnCd1Ht8gNaJnd7Ei7dcXzVY16 S4kJOW7K2ln4SR/ug2v3h0vQagC7YQWIl8149OmDnBeVkeR4eO28EAVhRfT3X0xY K8zC4lGvRPBRDbRPD4RVWifewzDYGbecqwMEY7DWBLoDXVRUPWvaT4qh/wIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPrbn1yAg/c6R/ave7pFAFc8MB4xMB8GA1UdIwQY MBaAFIkB9nPGsP+INeoC+u26W0nPFCJOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFIMmM4YXdfNGcxNmdMNjdicGJTYzhVSWs0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9jMmJhMTAtMjBlZC00ZThjLWI3NmMt NTNjNGQ1NzYyZDFhLzEvMS10dWZYSUNEOXpwSDlxOTd1a1VBVnp3d0hqRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjYvYzJiYTEwLTIwZWQtNGU4Yy1iNzZjLTUzYzRkNTc2MmQx YS8xL2lRSDJjOGF3XzRnMTZnTDY3YnBiU2M4VUlrNC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAMOAjwME AdWOmjANBAIAAjAHAwUDKhLxQDANBgkqhkiG9w0BAQsFAAOCAQEAjITgpVMJkuk/ wsIeWO1iGgJGnJhKi+qPHwGiGaV7ubj1RXj9xI3037kKxVWu4Z24gEm7aAzUafKI aLfGiOyINSE3lHEXB8KlJ+RN0Ph+1LGNR3HRdDGXcofvpLrjIrjcplldwb6FjMXx 1qbmmImMm4lbALM3swrgbWazQspil6AffxZiGoXL9EUL5ojLqCQ3gmOe+60E8m5K lpohMS8b6utVKDp8D5m8RvfXksOAJSbq6ViV28rnprp8CSDt0BfznWqM5mEISwhs DWgVT2gRizrr9rsLhkQcEo0X9/B8hjwxW0js/vLxfvKWPfO4XbQ3b4AcgWqIMs8d pi/YK0sJYg== -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:42 2026 by rpki-client