This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/n1hcin5XuxDcfmvnyBOQ4_26dDM.roa File: n1hcin5XuxDcfmvnyBOQ4_26dDM.roa (raw, json) Hash identifier: IZZIXC5MuXhDzfA36CNDkCZUlVtgUezifVjte9uNxLw= Subject key identifier: 9F:58:5C:8A:7E:57:BB:10:DC:7E:6B:E7:C8:13:90:E3:FD:BA:74:33 Certificate issuer: /CN=5b6d178f13851306b5634df159716319f4d82478 Certificate serial: 019B7AC86F540A59BBAFA7888EA7791B1340 Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/n1hcin5XuxDcfmvnyBOQ4_26dDM.roa Signing time: Thu 01 Jan 2026 18:18:34 +0000 ROA not before: Thu 01 Jan 2026 18:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207459 IP address blocks: 80.253.254.0/24 maxlen: 32 80.253.255.0/24 maxlen: 32 91.217.119.0/24 maxlen: 32 193.31.117.0/24 maxlen: 32 213.142.132.0/24 maxlen: 24 213.142.133.0/24 maxlen: 24 213.142.134.0/24 maxlen: 24 213.142.149.0/24 maxlen: 24 213.142.150.0/24 maxlen: 32 213.142.156.0/24 maxlen: 24 2a0e:36c0::/29 maxlen: 32 2a0e:36c0::/32 maxlen: 32 2a0e:36c1::/32 maxlen: 32 2a0e:36c2::/32 maxlen: 32 2a0e:36c3::/32 maxlen: 32 2a0e:36c4::/32 maxlen: 32 2a0e:36c5::/32 maxlen: 32 2a0e:36c6::/32 maxlen: 32 2a0e:36c6:ff80::/48 maxlen: 48 2a0e:36c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6f:54:0a:59:bb:af:a7:88:8e:a7:79:1b:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b6d178f13851306b5634df159716319f4d82478 Validity Not Before: Jan 1 18:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f585c8a7e57bb10dc7e6be7c81390e3fdba7433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:71:93:cc:39:38:ab:af:de:0a:6f:ef:4a:7e: cc:c5:2b:99:9e:cd:9e:02:dd:da:af:6f:1e:bc:99: 15:bc:f9:44:9c:bf:70:49:39:47:78:07:5e:aa:cd: 84:52:f7:47:48:c4:83:1e:6c:11:3c:e6:44:83:c7: a6:49:4a:a6:e2:f1:3b:8e:88:71:25:8e:a4:b4:ab: 7c:41:c0:77:b0:a0:dc:6b:be:58:6b:ef:ab:2d:ba: bf:28:78:d5:43:c7:6a:ed:25:69:91:02:36:5e:ab: 2f:e4:a7:32:e0:ab:ea:0d:26:fe:4d:9e:97:49:20: 44:0b:31:c7:08:11:07:e6:64:61:7b:c8:59:b4:85: 66:5e:f9:22:77:f6:9e:2f:d6:e2:ff:ac:a6:54:cd: f5:15:98:16:1c:e9:fb:fa:39:3d:63:38:ae:75:03: df:bd:3c:f0:9e:7a:a2:b3:de:7c:5b:df:e4:58:8b: b3:a6:5f:26:b9:da:9e:5b:35:3b:94:23:b3:6f:0b: 5c:cf:b8:68:d5:25:86:f1:02:81:5a:e0:e0:a4:f7: c4:4c:65:f8:35:8d:4c:93:b0:e4:0d:ff:1f:8b:eb: 49:5f:f7:4e:6b:50:3e:69:43:35:90:a8:b2:cd:04: b9:64:cf:9d:37:05:dd:85:20:bc:a8:ba:9f:e0:96: 06:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:58:5C:8A:7E:57:BB:10:DC:7E:6B:E7:C8:13:90:E3:FD:BA:74:33 X509v3 Authority Key Identifier: keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/n1hcin5XuxDcfmvnyBOQ4_26dDM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.253.254.0/23 91.217.119.0/24 193.31.117.0/24 213.142.132.0-213.142.134.255 213.142.149.0-213.142.150.255 213.142.156.0/24 IPv6: 2a0e:36c0::/29 Signature Algorithm: sha256WithRSAEncryption 07:ca:02:9a:30:b4:22:41:63:f6:a9:c2:31:4d:6a:72:1f:59: d0:43:c2:44:3a:46:04:e8:53:82:7f:f8:a1:d7:35:41:89:8e: 1f:70:1d:e1:5e:f2:00:e1:4d:68:b0:57:b4:f8:55:2b:13:f3: ea:d4:ca:c1:35:66:27:c7:39:3b:25:52:5f:02:af:88:e8:53: f2:58:5b:23:5d:5a:3f:64:77:19:7e:34:5d:13:49:95:e0:44: 31:cc:69:7a:a9:3f:d5:2c:e4:02:3c:0a:56:b0:bb:65:d5:50: c4:b4:83:79:a1:4a:8e:2c:04:ed:81:ae:c4:96:58:65:c9:e1: 44:18:7d:4a:d3:62:b4:5e:93:46:4c:20:19:ca:7c:9c:a3:05: f8:a5:42:ac:a1:bd:71:69:96:39:22:05:67:41:ce:30:de:33: 00:ad:a3:05:f5:d8:1a:eb:d8:b2:db:c9:ef:37:c1:0c:d2:1a: e4:5f:a1:6b:ff:a0:14:79:1b:1c:f1:76:2d:c9:3a:f2:12:11: 87:49:ad:6b:30:2a:d2:69:88:3d:02:50:86:4e:5d:69:b0:73: b5:58:19:84:a7:0b:76:f3:ae:6a:d9:e9:59:be:89:d5:bc:80: 15:35:5d:84:02:74:02:01:85:53:6d:2b:2e:14:bd:84:d7:8d: f3:3c:71:3a -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZt6yG9UClm7r6eIjqd5GxNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNmQxNzhmMTM4NTEzMDZiNTYzNGRmMTU5NzE2MzE5ZjRk ODI0NzgwHhcNMjYwMTAxMTgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjU4NWM4YTdlNTdiYjEwZGM3ZTZiZTdjODEzOTBlM2ZkYmE3NDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13GTzDk4q6/eCm/vSn7MxSuZns2e At3ar28evJkVvPlEnL9wSTlHeAdeqs2EUvdHSMSDHmwRPOZEg8emSUqm4vE7johx JY6ktKt8QcB3sKDca75Ya++rLbq/KHjVQ8dq7SVpkQI2Xqsv5Kcy4KvqDSb+TZ6X SSBECzHHCBEH5mRhe8hZtIVmXvkid/aeL9bi/6ymVM31FZgWHOn7+jk9YziudQPf vTzwnnqis958W9/kWIuzpl8mudqeWzU7lCOzbwtcz7ho1SWG8QKBWuDgpPfETGX4 NY1Mk7DkDf8fi+tJX/dOa1A+aUM1kKiyzQS5ZM+dNwXdhSC8qLqf4JYGewIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFJ9YXIp+V7sQ3H5r58gTkOP9unQzMB8GA1UdIwQY MBaAFFttF48ThRMGtWNN8VlxYxn02CR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2It NGJiOTRjYmMyZTczLzEvbjFoY2luNVh1eERjZm12bnlCT1E0XzI2ZERNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9hMWM2ZWMtYzI2MC00Y2EyLTg4N2ItNGJiOTRjYmMyZTcz LzEvVzIwWGp4T0ZFd2ExWTAzeFdYRmpHZlRZSkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0AwQBUP3+AwQA W9l3AwQAwR91MAwDBALVjoQDBADVjoYwDAMEANWOlQMEANWOlgMEANWOnDANBAIA AjAHAwUDKg42wDANBgkqhkiG9w0BAQsFAAOCAQEAB8oCmjC0IkFj9qnCMU1qch9Z 0EPCRDpGBOhTgn/4odc1QYmOH3Ad4V7yAOFNaLBXtPhVKxPz6tTKwTVmJ8c5OyVS XwKviOhT8lhbI11aP2R3GX40XRNJleBEMcxpeqk/1SzkAjwKVrC7ZdVQxLSDeaFK jiwE7YGuxJZYZcnhRBh9StNitF6TRkwgGcp8nKMF+KVCrKG9cWmWOSIFZ0HOMN4z AK2jBfXYGuvYstvJ7zfBDNIa5F+ha/+gFHkbHPF2Lck68hIRh0mtazAq0mmIPQJQ hk5dabBztVgZhKcLdvOuatnpWb6J1byAFTVdhAJ0AgGFU20rLhS9hNeN8zxxOg== -----END CERTIFICATE-----Generated at Wed Jan 21 22:21:03 2026 by rpki-client