This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/_4gEdkIozsQL-TWVwZR3ioaNfxk.roa File: _4gEdkIozsQL-TWVwZR3ioaNfxk.roa (raw, json) Hash identifier: ofd30ZN0wNQTf8/vD9ThRnfPhfJvZujQAS6qzYzazNg= Subject key identifier: FF:88:04:76:42:28:CE:C4:0B:F9:35:95:C1:94:77:8A:86:8D:7F:19 Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757 Certificate serial: 019B78A2822F288CBA2F6B3E82D6931661CA Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/_4gEdkIozsQL-TWVwZR3ioaNfxk.roa Signing time: Thu 01 Jan 2026 08:17:54 +0000 ROA not before: Thu 01 Jan 2026 08:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49278 IP address blocks: 144.84.0.0/16 maxlen: 16 144.84.0.0/18 maxlen: 18 144.84.128.0/18 maxlen: 18 144.84.192.0/18 maxlen: 18 158.112.0.0/16 maxlen: 16 158.112.0.0/18 maxlen: 18 158.112.20.0/22 maxlen: 22 158.112.24.0/21 maxlen: 21 158.112.32.0/22 maxlen: 22 158.112.64.0/18 maxlen: 18 158.112.66.0/23 maxlen: 23 158.112.71.0/24 maxlen: 24 158.112.84.0/22 maxlen: 22 158.112.88.0/24 maxlen: 24 158.112.93.0/24 maxlen: 24 158.112.96.0/21 maxlen: 21 158.112.128.0/18 maxlen: 18 158.112.164.0/23 maxlen: 23 158.112.192.0/18 maxlen: 18 158.112.208.0/23 maxlen: 23 158.112.255.0/24 maxlen: 24 185.155.24.0/23 maxlen: 23 185.155.26.0/23 maxlen: 23 2a02:27b8:1::/48 maxlen: 48 2a02:27b8:1111::/48 maxlen: 48 2a02:27b8:1112::/48 maxlen: 48 2a02:27b8:2000::/48 maxlen: 48 2a02:27b8:2002::/48 maxlen: 48 2a02:27b8:2003::/48 maxlen: 48 2a02:27b8:2004::/48 maxlen: 48 2a02:27b8:4000::/48 maxlen: 48 2a02:27ba:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:82:2f:28:8c:ba:2f:6b:3e:82:d6:93:16:61:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757 Validity Not Before: Jan 1 08:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ff8804764228cec40bf93595c194778a868d7f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:34:35:65:21:9d:75:f9:45:2b:b6:9a:c9:ed: 98:30:b5:72:67:b3:0c:93:8a:51:9a:fa:28:9d:20: c9:ec:6f:7c:00:35:ab:16:4b:9d:7d:6d:6e:fb:ce: 10:84:7f:15:bc:58:01:f8:8e:95:5d:36:b6:19:b1: f4:48:16:18:a3:9b:0e:67:2f:4f:63:69:14:57:a8: 53:28:1d:5a:ca:86:7b:40:d3:e6:b3:0b:af:0e:41: 6b:9c:e9:c4:04:2b:ed:bd:ef:06:a5:95:ab:bf:02: 83:f8:ac:11:b2:43:45:04:06:68:86:e7:cf:e6:bd: 66:29:93:64:ae:6b:38:6c:37:ca:a9:2e:03:7d:60: 2e:8f:ea:1f:cb:c6:dc:ac:53:9c:51:b8:17:e3:50: 1b:e8:83:12:16:14:f7:21:94:a0:83:45:21:a7:2c: 23:f0:28:a4:eb:db:8b:dd:a8:c9:53:6c:35:34:1d: 62:92:ea:b0:6d:a9:b5:1f:8c:f4:5c:14:e8:52:d7: f8:11:36:0b:63:e6:d5:34:17:70:5f:e4:8d:42:e9: ad:cc:80:b2:b7:5a:9e:12:a4:cd:d8:60:89:18:38: a7:3b:ba:0c:fc:cd:21:af:01:ec:a7:f9:46:c5:82: e8:a4:eb:dc:c3:dc:40:c6:ad:9e:7e:9a:83:49:65: 31:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:88:04:76:42:28:CE:C4:0B:F9:35:95:C1:94:77:8A:86:8D:7F:19 X509v3 Authority Key Identifier: keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/_4gEdkIozsQL-TWVwZR3ioaNfxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.84.0.0/16 158.112.0.0/16 185.155.24.0/22 IPv6: 2a02:27b8:1::/48 2a02:27b8:1111::-2a02:27b8:1112:ffff:ffff:ffff:ffff:ffff 2a02:27b8:2000::/48 2a02:27b8:2002::-2a02:27b8:2004:ffff:ffff:ffff:ffff:ffff 2a02:27b8:4000::/48 2a02:27ba:4000::/34 Signature Algorithm: sha256WithRSAEncryption 3f:9b:10:86:c4:a9:77:56:94:2b:fb:35:0f:dd:3d:a9:bb:73: 9c:14:2f:aa:1c:dd:fa:a9:fd:2f:eb:ac:fe:0a:46:d6:15:cf: e8:4a:97:5a:35:cf:7f:55:e3:0d:31:5f:96:76:a7:c0:0c:7d: 8a:6b:6e:e8:a2:18:25:89:21:cd:bd:ca:85:b5:6d:60:e9:81: 78:11:98:00:26:f4:36:f8:ed:7a:a7:20:86:b7:5a:72:4b:3f: d8:eb:be:e7:2f:31:7e:5b:13:90:28:1a:0a:93:d8:bc:a3:24: 74:20:12:24:98:5d:ca:6a:d0:8b:bd:50:1f:40:da:a8:61:96: 48:21:34:34:ad:fc:98:2a:d3:3f:58:87:1f:36:eb:34:92:17: 6e:03:00:73:35:c0:72:1c:11:4f:64:cd:f4:8b:de:36:35:1c: d6:63:13:09:8f:2e:af:08:dc:95:f4:95:5f:7b:ed:4e:b2:fd: 1d:cc:f0:12:fa:39:4a:40:4e:0f:b5:2f:67:ab:17:f8:1e:70: fd:b4:f9:c1:8a:5f:f0:71:4a:5d:06:69:b1:70:57:8a:84:c1: 23:4d:27:b7:2a:3d:eb:16:33:ba:db:b3:72:74:27:b2:34:df: 29:c9:c0:5c:20:b0:3d:68:43:e4:fa:68:9e:d9:9a:94:ab:12: 5e:d0:b6:cb -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgISAZt4ooIvKIy6L2s+gtaTFmHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjM1YWUzNmYyZGY0ZjY4ZDNlNTcyYTMxM2UxYTE4YWEy MGI3NTcwHhcNMjYwMTAxMDgxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZjg4MDQ3NjQyMjhjZWM0MGJmOTM1OTVjMTk0Nzc4YTg2OGQ3ZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjQ1ZSGddflFK7aaye2YMLVyZ7MM k4pRmvoonSDJ7G98ADWrFkudfW1u+84QhH8VvFgB+I6VXTa2GbH0SBYYo5sOZy9P Y2kUV6hTKB1ayoZ7QNPmswuvDkFrnOnEBCvtve8GpZWrvwKD+KwRskNFBAZohufP 5r1mKZNkrms4bDfKqS4DfWAuj+ofy8bcrFOcUbgX41Ab6IMSFhT3IZSgg0Uhpywj 8Cik69uL3ajJU2w1NB1ikuqwbam1H4z0XBToUtf4ETYLY+bVNBdwX+SNQumtzICy t1qeEqTN2GCJGDinO7oM/M0hrwHsp/lGxYLopOvcw9xAxq2efpqDSWUxjwIDAQAB o4ICZjCCAmIwHQYDVR0OBBYEFP+IBHZCKM7EC/k1lcGUd4qGjX8ZMB8GA1UdIwQY MBaAFHNjWuNvLfT2jT5XKjE+GhiqILdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEt NWJhZTM3NWNmODVhLzEvXzRnRWRrSW96c1FMLVRXVndaUjNpb2FOZnhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEtNWJhZTM3NWNmODVh LzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazAWBAIAATAQAwMAkFQDAwCe cAMEArmbGDBRBAIAAjBLAwcAKgInuAABMBIDBwAqAie4EREDBwAqAie4ERIDBwAq Aie4IAAwEgMHASoCJ7ggAgMHACoCJ7ggBAMHACoCJ7hAAAMGBioCJ7pAMA0GCSqG SIb3DQEBCwUAA4IBAQA/mxCGxKl3VpQr+zUP3T2pu3OcFC+qHN36qf0v66z+CkbW Fc/oSpdaNc9/VeMNMV+WdqfADH2Ka27oohgliSHNvcqFtW1g6YF4EZgAJvQ2+O16 pyCGt1pySz/Y677nLzF+WxOQKBoKk9i8oyR0IBIkmF3KatCLvVAfQNqoYZZIITQ0 rfyYKtM/WIcfNus0khduAwBzNcByHBFPZM30i942NRzWYxMJjy6vCNyV9JVfe+1O sv0dzPAS+jlKQE4PtS9nqxf4HnD9tPnBil/wcUpdBmmxcFeKhMEjTSe3Kj3rFjO6 27NydCeyNN8pycBcILA9aEPk+mie2ZqUqxJe0LbL -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:37 2026 by rpki-client