This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/1-f78bU_yS-lUGdzoe8vmLLrb5Ew.roa File: 1-f78bU_yS-lUGdzoe8vmLLrb5Ew.roa (raw, json) Hash identifier: bNfrVNzH2BXnE1dQKvpq85yCYPmZuhWsqc5IpPdYyzo= Subject key identifier: F9:FE:FC:6D:4F:F2:4B:E9:54:19:DC:E8:7B:CB:E6:2C:BA:DB:E4:4C Certificate issuer: /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Certificate serial: 019B79ED33B3FD5553BAFB99C2CDA57E288A Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/1-f78bU_yS-lUGdzoe8vmLLrb5Ew.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198178 IP address blocks: 185.157.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:33:b3:fd:55:53:ba:fb:99:c2:cd:a5:7e:28:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9fefc6d4ff24be95419dce87bcbe62cbadbe44c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:cb:26:fe:21:41:df:93:17:be:0a:7d:12:42: af:1c:22:bf:4c:e6:af:51:c6:7e:65:30:49:12:fb: 03:9f:58:d8:38:cd:22:ef:bd:ac:ba:c9:80:dd:89: 60:10:80:2f:cb:9c:ac:70:09:ca:ad:58:19:a2:7f: 09:1f:ac:ed:7b:d3:c1:a7:ae:b2:f4:da:7b:1d:83: c2:b1:49:77:27:fc:72:96:f3:98:14:5a:38:0c:bd: 63:b1:00:59:66:a1:d7:a3:4f:2f:71:ef:c8:98:74: e9:a5:97:ab:03:d9:d7:a0:bc:c1:84:86:b2:e5:2f: 16:c4:f1:9f:20:f2:e0:5c:bf:f6:63:5c:bc:9b:72: 99:dc:59:18:75:14:c6:97:a1:84:ef:1b:7d:89:c7: 7c:b5:84:15:31:87:52:38:86:c7:69:38:fe:70:f4: 7b:23:41:7b:6e:8e:50:00:ba:ea:d1:77:e3:84:cf: c8:7a:e7:b3:c2:05:15:59:91:59:8e:68:be:12:68: e1:32:c1:e0:64:91:0f:0b:47:9a:c6:5f:23:1b:91: 2a:a6:10:c6:6f:46:e9:bf:11:23:bf:01:ca:ea:c1: 7a:08:f4:ef:3e:8a:c8:5a:f0:77:be:39:ff:dd:3b: 83:88:bd:1c:22:63:f5:b1:69:bf:58:46:6e:3d:2a: 5a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FE:FC:6D:4F:F2:4B:E9:54:19:DC:E8:7B:CB:E6:2C:BA:DB:E4:4C X509v3 Authority Key Identifier: keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/1-f78bU_yS-lUGdzoe8vmLLrb5Ew.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.157.120.0/24 Signature Algorithm: sha256WithRSAEncryption 35:5c:f5:8d:23:47:d7:d4:59:a3:24:c1:fc:66:31:58:c0:7b: d0:c1:72:96:c3:ec:ee:09:7b:6b:fa:95:84:86:f0:2f:d9:77: b2:d3:2a:6c:90:cf:2c:8d:f7:04:1d:79:4f:bf:68:50:8e:04: f4:f1:41:ca:6d:b3:70:06:d1:5a:4e:0e:0e:19:9b:85:84:b1: c9:ff:94:18:2f:6a:0d:10:e5:3d:f4:53:fd:3b:72:32:33:89: 2f:93:60:3e:a6:d3:2e:c3:8e:eb:a2:33:65:2b:e0:fd:d7:f5: 2d:2b:0e:3d:66:a4:30:6a:5a:5c:b2:05:2d:ad:00:d4:a1:9a: c4:e2:6e:3d:62:9e:98:75:92:57:08:df:ac:1f:73:ee:c8:ca: 76:ee:52:86:f4:9e:6f:53:c5:ce:90:27:c2:12:00:3c:22:2f: 44:f2:93:9c:04:7b:28:22:67:13:be:86:47:0f:2d:08:2d:e6: 47:d1:cc:41:d7:e1:9c:ba:29:61:15:a3:84:69:54:eb:67:5d: a7:8b:2c:eb:71:b0:97:c3:9b:14:94:78:d2:a0:5c:6b:bb:15: e8:8f:6f:33:bf:a5:ba:7c:8c:4f:2b:78:f2:40:18:66:64:d9: bc:a2:29:27:bd:98:2f:23:61:ea:cb:09:d9:0a:1f:e2:a5:9a: 1e:12:c9:80 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57TOz/VVTuvuZws2lfiiKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmQzMGIwMTVlYzRlZjFiMGQzYzY0MzQ3YzhkMWI1OTgy OTNmODEwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWZlZmM2ZDRmZjI0YmU5NTQxOWRjZTg3YmNiZTYyY2JhZGJlNDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMsm/iFB35MXvgp9EkKvHCK/TOav UcZ+ZTBJEvsDn1jYOM0i772susmA3YlgEIAvy5yscAnKrVgZon8JH6zte9PBp66y 9Np7HYPCsUl3J/xylvOYFFo4DL1jsQBZZqHXo08vce/ImHTppZerA9nXoLzBhIay 5S8WxPGfIPLgXL/2Y1y8m3KZ3FkYdRTGl6GE7xt9icd8tYQVMYdSOIbHaTj+cPR7 I0F7bo5QALrq0XfjhM/IeuezwgUVWZFZjmi+EmjhMsHgZJEPC0eaxl8jG5EqphDG b0bpvxEjvwHK6sF6CPTvPorIWvB3vjn/3TuDiL0cImP1sWm/WEZuPSpa+QIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPn+/G1P8kvpVBnc6HvL5iy62+RMMB8GA1UdIwQY MBaAFE8tMLAV7E7xsNPGQ0fI0bWYKT+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHkwd3NCWHNUdkd3MDhaRFI4alJ0WmdwUDRFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi85NjY4YjUtNWU5Mi00YzE4LTliYjkt NDM1MWJiZjc0YzBjLzEvMS1mNzhiVV95Uy1sVUdkem9lOHZtTExyYjVFdy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWYvOTY2OGI1LTVlOTItNGMxOC05YmI5LTQzNTFiYmY3NGMw Yy8xL1R5MHdzQlhzVHZHdzA4WkRSOGpSdFpncFA0RS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALmdeDAN BgkqhkiG9w0BAQsFAAOCAQEANVz1jSNH19RZoyTB/GYxWMB70MFylsPs7gl7a/qV hIbwL9l3stMqbJDPLI33BB15T79oUI4E9PFBym2zcAbRWk4ODhmbhYSxyf+UGC9q DRDlPfRT/TtyMjOJL5NgPqbTLsOO66IzZSvg/df1LSsOPWakMGpaXLIFLa0A1KGa xOJuPWKemHWSVwjfrB9z7sjKdu5ShvSeb1PFzpAnwhIAPCIvRPKTnAR7KCJnE76G Rw8tCC3mR9HMQdfhnLopYRWjhGlU62ddp4ss63Gwl8ObFJR40qBca7sV6I9vM7+l unyMTyt48kAYZmTZvKIpJ72YLyNh6ssJ2Qof4qWaHhLJgA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:32 2026 by rpki-client