This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/1-sLM79fhgln3kKtmAVDWOo1kwmw.roa File: 1-sLM79fhgln3kKtmAVDWOo1kwmw.roa (raw, json) Hash identifier: EUHr6hsfI8WuHLl/CT9f9Qt7naBdoIdHB1PmYGEqxpI= Subject key identifier: FA:C2:CC:EF:D7:E1:82:59:F7:90:AB:66:01:50:D6:3A:8D:64:C2:6C Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Certificate serial: 019B797DE91139458C276EA42179177B3DC8 Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/1-sLM79fhgln3kKtmAVDWOo1kwmw.roa Signing time: Thu 01 Jan 2026 12:17:33 +0000 ROA not before: Thu 01 Jan 2026 12:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203396 IP address blocks: 145.12.0.0/16 maxlen: 16 145.12.0.0/24 maxlen: 24 145.12.10.0/24 maxlen: 24 145.12.20.0/24 maxlen: 24 145.12.26.0/24 maxlen: 24 145.12.27.0/24 maxlen: 24 145.12.31.0/24 maxlen: 24 145.12.34.0/24 maxlen: 24 145.12.36.0/24 maxlen: 24 145.12.37.0/24 maxlen: 24 145.12.40.0/24 maxlen: 24 145.12.46.0/24 maxlen: 24 145.12.47.0/24 maxlen: 24 145.12.68.0/24 maxlen: 24 145.12.69.0/24 maxlen: 24 145.12.100.0/24 maxlen: 24 145.12.101.0/24 maxlen: 24 145.12.102.0/24 maxlen: 24 145.12.103.0/24 maxlen: 24 145.12.104.0/24 maxlen: 24 145.12.105.0/24 maxlen: 24 145.12.137.0/24 maxlen: 24 145.12.210.0/24 maxlen: 24 145.12.216.0/24 maxlen: 24 145.12.218.0/24 maxlen: 24 145.12.219.0/24 maxlen: 24 145.12.220.0/24 maxlen: 24 145.12.221.0/24 maxlen: 24 145.12.227.0/24 maxlen: 24 145.12.242.0/24 maxlen: 24 145.12.243.0/24 maxlen: 24 145.69.0.0/16 maxlen: 16 145.69.0.0/19 maxlen: 19 145.69.0.0/24 maxlen: 24 145.69.25.0/24 maxlen: 24 145.69.40.0/21 maxlen: 21 145.69.42.0/24 maxlen: 24 145.69.47.0/24 maxlen: 24 145.69.56.0/21 maxlen: 21 145.69.96.0/19 maxlen: 19 145.69.100.0/24 maxlen: 24 145.69.101.0/24 maxlen: 24 145.69.102.0/24 maxlen: 24 145.69.103.0/24 maxlen: 24 145.69.104.0/24 maxlen: 24 145.69.105.0/24 maxlen: 24 145.69.106.0/24 maxlen: 24 145.69.107.0/24 maxlen: 24 145.69.108.0/24 maxlen: 24 145.69.109.0/24 maxlen: 24 145.69.110.0/24 maxlen: 24 145.69.128.0/17 maxlen: 17 145.69.210.0/24 maxlen: 24 145.69.216.0/24 maxlen: 24 145.69.218.0/24 maxlen: 24 145.69.219.0/24 maxlen: 24 145.69.220.0/24 maxlen: 24 145.69.221.0/24 maxlen: 24 145.69.227.0/24 maxlen: 24 145.69.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:e9:11:39:45:8c:27:6e:a4:21:79:17:7b:3d:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Validity Not Before: Jan 1 12:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fac2ccefd7e18259f790ab660150d63a8d64c26c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:72:d9:b5:ab:7b:e7:82:2c:16:b1:5f:82:21: 3c:91:4f:da:b8:15:47:af:52:bb:7c:7a:aa:da:fe: 00:f4:02:8f:09:f4:dc:8e:ef:32:ed:c3:51:9d:2a: dd:b5:63:7e:e3:60:24:5e:ac:d1:b4:4c:23:c6:10: 44:f2:34:25:93:e4:0a:e0:98:20:bd:76:3f:e2:d3: 71:38:be:60:59:8b:34:24:a8:2c:b9:0a:7b:79:2f: 20:79:46:23:2b:87:31:0f:c7:36:15:d0:b0:9b:f0: 30:c8:a2:04:50:da:45:87:15:6b:ae:1f:17:09:15: ca:cb:30:2c:4b:90:00:2c:cf:e3:ad:23:b8:9d:92: 80:08:e0:cb:df:fd:37:f7:26:65:20:7f:3e:b2:07: 45:a9:cb:ad:b9:16:dc:82:41:f5:0d:fa:d6:ba:ac: c3:1b:15:dd:a5:30:56:85:0d:51:ae:7e:51:d8:40: d3:b3:cc:a5:02:ce:e5:cf:f5:5b:b9:80:af:0b:ae: c8:dc:ba:55:35:2b:42:5c:79:a3:65:c1:77:e2:d4: 33:6e:df:82:ca:31:0d:06:ee:48:f7:0e:4b:3a:a6: fa:70:86:7a:77:45:50:21:1c:b7:0f:1b:48:e5:05: 84:5d:d9:9d:e8:d7:6a:8e:95:7d:e9:95:95:aa:ae: a8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C2:CC:EF:D7:E1:82:59:F7:90:AB:66:01:50:D6:3A:8D:64:C2:6C X509v3 Authority Key Identifier: keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/1-sLM79fhgln3kKtmAVDWOo1kwmw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.12.0.0/16 145.69.0.0/16 Signature Algorithm: sha256WithRSAEncryption 33:2f:98:94:1c:aa:ab:2b:04:4d:db:ca:27:84:fd:93:e6:82: 35:85:df:c3:d0:85:36:db:c7:b9:c9:a9:62:69:1e:33:ac:89: dd:82:f4:64:09:a5:19:33:3f:cd:5c:6a:24:18:bb:2a:08:be: 1a:5d:00:d1:eb:51:ba:da:a6:e6:49:e4:f4:18:1a:82:6a:48: 07:70:a8:10:36:88:c6:6c:9f:21:e9:59:cb:50:f0:9c:97:13: 46:4c:33:52:dd:97:75:99:05:44:f8:ad:aa:87:0c:ef:63:d3: 59:5c:a9:77:0e:29:a5:a2:43:63:43:59:f1:77:86:1f:92:71: d5:27:3d:59:f5:73:0a:36:0b:ba:b6:f4:0c:55:bf:81:9a:6c: 7c:fe:bc:bb:f4:43:e2:11:d7:78:2a:5c:30:7c:7f:03:3f:5c: 76:1d:fa:26:9a:7a:14:c1:b4:25:5e:3f:10:f9:1d:13:42:b0: 45:d2:d8:31:46:e6:b2:69:63:14:b4:9b:3c:67:68:ae:f7:29: 48:c6:c7:d0:a0:eb:8d:ab:19:b5:2b:ce:34:4c:bc:dc:5e:b5: d2:3e:5f:5c:9b:2f:45:6f:12:8e:16:af:b9:7b:0d:eb:d7:2f: 3e:62:f1:36:57:ff:03:ad:75:0c:52:ce:9e:bd:99:de:6f:ca: 1a:63:ab:70 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgISAZt5fekROUWMJ26kIXkXez3IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDY5ZTE5ZTEyYzEwNDAwNGU4YjRiNzVmOGE3Nzg5Yjdl MTEzOTYwHhcNMjYwMTAxMTIxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWMyY2NlZmQ3ZTE4MjU5Zjc5MGFiNjYwMTUwZDYzYThkNjRjMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+nLZtat754IsFrFfgiE8kU/auBVH r1K7fHqq2v4A9AKPCfTcju8y7cNRnSrdtWN+42AkXqzRtEwjxhBE8jQlk+QK4Jgg vXY/4tNxOL5gWYs0JKgsuQp7eS8geUYjK4cxD8c2FdCwm/AwyKIEUNpFhxVrrh8X CRXKyzAsS5AALM/jrSO4nZKACODL3/039yZlIH8+sgdFqcutuRbcgkH1DfrWuqzD GxXdpTBWhQ1Rrn5R2EDTs8ylAs7lz/VbuYCvC67I3LpVNStCXHmjZcF34tQzbt+C yjENBu5I9w5LOqb6cIZ6d0VQIRy3DxtI5QWEXdmd6NdqjpV96ZWVqq6oYwIDAQAB o4ICDjCCAgowHQYDVR0OBBYEFPrCzO/X4YJZ95CrZgFQ1jqNZMJsMB8GA1UdIwQY MBaAFG0GnhnhLBBABOi0t1+Kd4m34ROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmIt N2JmZjI5NmM2YjAyLzEvMS1zTE03OWZoZ2xuM2tLdG1BVkRXT28xa3dtdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmIvY2Y2NGY2LTA3ODktNDNlMy1iZDZiLTdiZmYyOTZjNmIw Mi8xL2JRYWVHZUVzRUVBRTZMUzNYNHAzaWJmaEU1WS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAjBggrBgEFBQcBBwEB/wQUMBIwEAQCAAEwCgMDAJEMAwMA kUUwDQYJKoZIhvcNAQELBQADggEBADMvmJQcqqsrBE3byieE/ZPmgjWF38PQhTbb x7nJqWJpHjOsid2C9GQJpRkzP81caiQYuyoIvhpdANHrUbrapuZJ5PQYGoJqSAdw qBA2iMZsnyHpWctQ8JyXE0ZMM1Ldl3WZBUT4raqHDO9j01lcqXcOKaWiQ2NDWfF3 hh+ScdUnPVn1cwo2C7q29AxVv4GabHz+vLv0Q+IR13gqXDB8fwM/XHYd+iaaehTB tCVePxD5HRNCsEXS2DFG5rJpYxS0mzxnaK73KUjGx9Cg642rGbUrzjRMvNxetdI+ X1ybL0VvEo4Wr7l7DevXLz5i8TZX/wOtdQxSzp69md5vyhpjq3A= -----END CERTIFICATE-----Generated at Tue Jan 20 07:48:00 2026 by rpki-client