This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/f1RIf1-ORLkFjvrKjvkMFA0HFj8.roa File: f1RIf1-ORLkFjvrKjvkMFA0HFj8.roa (raw, json) Hash identifier: m0ZpTDHe0Lt8sTEhFdoAdXrigthPb+OHnjraE5/ATto= Subject key identifier: 7F:54:48:7F:5F:8E:44:B9:05:8E:FA:CA:8E:F9:0C:14:0D:07:16:3F Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62 Certificate serial: 019B99201168EDD0F61E0470B0A18E075488 Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/f1RIf1-ORLkFjvrKjvkMFA0HFj8.roa Signing time: Wed 07 Jan 2026 15:42:54 +0000 ROA not before: Wed 07 Jan 2026 15:42:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1836 IP address blocks: 80.86.192.0/20 maxlen: 21 80.86.192.0/24 maxlen: 24 80.86.193.0/24 maxlen: 24 80.253.80.0/21 maxlen: 22 80.254.160.0/19 maxlen: 20 81.6.0.0/19 maxlen: 20 81.6.48.0/20 maxlen: 21 81.221.0.0/16 maxlen: 17 81.221.250.0/24 maxlen: 24 81.221.252.0/24 maxlen: 24 81.221.254.0/24 maxlen: 24 82.195.224.0/19 maxlen: 20 146.228.0.0/16 maxlen: 17 146.228.64.0/24 maxlen: 24 193.72.0.0/18 maxlen: 19 193.72.64.0/21 maxlen: 21 193.72.72.0/22 maxlen: 22 193.72.76.0/23 maxlen: 23 193.72.78.0/24 maxlen: 24 193.72.81.0/24 maxlen: 24 193.72.82.0/23 maxlen: 24 193.72.84.0/22 maxlen: 23 193.72.88.0/21 maxlen: 22 193.72.96.0/19 maxlen: 20 193.72.128.0/20 maxlen: 21 193.72.148.0/22 maxlen: 23 193.72.152.0/21 maxlen: 22 193.72.160.0/22 maxlen: 23 193.72.164.0/23 maxlen: 24 193.72.167.0/24 maxlen: 24 193.72.168.0/21 maxlen: 22 193.72.176.0/21 maxlen: 22 193.72.184.0/23 maxlen: 24 193.72.187.0/24 maxlen: 24 193.72.188.0/22 maxlen: 23 193.72.192.0/20 maxlen: 21 193.72.208.0/21 maxlen: 22 193.72.217.0/24 maxlen: 24 193.72.218.0/23 maxlen: 24 193.72.220.0/22 maxlen: 23 193.72.224.0/19 maxlen: 20 193.73.0.0/18 maxlen: 19 193.73.64.0/19 maxlen: 20 193.73.80.0/20 maxlen: 20 193.73.96.0/21 maxlen: 21 193.73.96.0/22 maxlen: 22 193.73.100.0/22 maxlen: 22 193.73.104.0/23 maxlen: 24 193.73.108.0/22 maxlen: 23 193.73.112.0/24 maxlen: 24 193.73.115.0/24 maxlen: 24 193.73.116.0/22 maxlen: 23 193.73.120.0/23 maxlen: 24 193.73.123.0/24 maxlen: 24 193.73.124.0/24 maxlen: 24 193.73.126.0/23 maxlen: 24 193.73.128.0/18 maxlen: 19 193.73.192.0/20 maxlen: 21 193.73.209.0/24 maxlen: 24 193.73.210.0/24 maxlen: 24 193.73.212.0/22 maxlen: 23 193.73.216.0/21 maxlen: 22 193.73.224.0/21 maxlen: 22 193.73.232.0/22 maxlen: 23 193.73.236.0/23 maxlen: 24 193.73.239.0/24 maxlen: 24 193.73.240.0/23 maxlen: 24 193.73.244.0/22 maxlen: 23 193.73.248.0/23 maxlen: 24 193.73.252.0/22 maxlen: 23 193.193.128.0/19 maxlen: 20 194.191.0.0/16 maxlen: 17 194.191.16.0/24 maxlen: 24 194.191.18.0/24 maxlen: 24 194.191.19.0/24 maxlen: 24 194.191.20.0/24 maxlen: 24 194.191.24.0/24 maxlen: 24 194.191.25.0/24 maxlen: 24 194.191.26.0/24 maxlen: 24 194.191.28.0/24 maxlen: 24 194.191.29.0/24 maxlen: 24 194.191.30.0/24 maxlen: 24 194.191.31.0/24 maxlen: 24 195.48.0.0/16 maxlen: 17 195.48.221.0/24 maxlen: 24 195.49.0.0/17 maxlen: 18 195.49.6.0/24 maxlen: 24 195.49.16.0/24 maxlen: 24 195.49.78.0/24 maxlen: 24 195.49.79.0/24 maxlen: 24 195.130.160.0/19 maxlen: 20 212.59.128.0/18 maxlen: 19 2001:1b50::/29 maxlen: 29 2a01:2a8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:20:11:68:ed:d0:f6:1e:04:70:b0:a1:8e:07:54:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62 Validity Not Before: Jan 7 15:42:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f54487f5f8e44b9058efaca8ef90c140d07163f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f1:12:d0:60:e6:74:cb:05:d8:e4:05:02:70: 04:07:cd:6c:82:19:b7:fe:13:e0:dd:d3:bc:d9:ab: 14:58:4a:6c:fd:75:04:b1:b7:3d:2f:1c:d5:f7:f5: d4:69:be:69:48:15:4c:0a:c8:2f:4f:94:26:f7:cb: f8:6c:6c:95:6d:18:c8:b5:d0:49:e5:81:ed:26:63: 99:ed:94:f6:bf:e2:2e:ab:9b:b8:fc:60:82:2a:25: c1:05:fb:c5:0c:6c:c9:5b:6e:39:06:54:58:b1:be: 50:81:33:ba:10:87:88:cc:66:e9:5f:ea:bc:5c:33: 30:8f:95:b3:58:3e:06:5f:02:6f:58:b1:82:cb:ec: c8:5b:96:36:77:b3:83:5e:4b:f9:e2:3e:f4:dc:e7: 94:e6:d5:f3:b6:f7:e2:82:4f:5d:f3:02:7d:d2:3c: 36:28:34:64:ff:db:7f:21:6c:9e:20:04:5b:c3:f2: 6c:72:b6:d3:db:86:7a:15:2e:bb:0b:20:2d:71:4f: a0:0e:ae:9f:a9:ae:cc:6b:0e:98:db:19:48:60:4f: c8:18:00:6f:0b:e3:dd:e2:93:83:72:e1:7d:b4:60: 4e:c2:e6:a4:75:da:e5:05:74:59:c4:84:5f:4c:01: b5:d5:df:55:32:07:f6:3e:5a:cd:7d:e5:15:81:82: 4d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:54:48:7F:5F:8E:44:B9:05:8E:FA:CA:8E:F9:0C:14:0D:07:16:3F X509v3 Authority Key Identifier: keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/f1RIf1-ORLkFjvrKjvkMFA0HFj8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.86.192.0/20 80.253.80.0/21 80.254.160.0/19 81.6.0.0/19 81.6.48.0/20 81.221.0.0/16 82.195.224.0/19 146.228.0.0/16 193.72.0.0-193.72.78.255 193.72.81.0-193.72.143.255 193.72.148.0-193.72.165.255 193.72.167.0-193.72.185.255 193.72.187.0-193.72.215.255 193.72.217.0-193.73.105.255 193.73.108.0-193.73.112.255 193.73.115.0-193.73.121.255 193.73.123.0-193.73.124.255 193.73.126.0-193.73.207.255 193.73.209.0-193.73.210.255 193.73.212.0-193.73.237.255 193.73.239.0-193.73.241.255 193.73.244.0-193.73.249.255 193.73.252.0/22 193.193.128.0/19 194.191.0.0/16 195.48.0.0-195.49.127.255 195.130.160.0/19 212.59.128.0/18 IPv6: 2001:1b50::/29 2a01:2a8::/29 Signature Algorithm: sha256WithRSAEncryption 5c:58:fc:cd:ff:5c:c6:0d:4f:52:27:3a:ee:16:9e:6a:f2:d4: 43:19:1f:d0:20:b0:78:40:9f:f5:96:25:58:37:23:27:86:8e: 32:d3:d8:52:52:89:21:08:be:25:cb:de:26:2e:68:2d:45:a3: 96:c7:3e:df:7e:3a:0c:eb:1c:e8:ad:c8:d9:da:d4:e1:62:03: 13:35:bc:68:3f:ea:9e:9c:4a:ed:52:8c:ca:bb:aa:26:41:48: 53:cf:fa:b8:3b:54:ba:19:61:dc:1c:a6:d3:c0:26:9d:04:c3: 80:a0:d3:ce:45:29:ad:f4:38:7f:25:e4:b0:cb:e4:1d:0b:0e: 6d:b3:16:20:83:a8:09:5e:f4:39:06:4a:38:38:5e:e1:36:6c: 0c:d3:33:43:40:8d:05:95:f5:38:7b:e3:a4:2e:d1:f7:c7:f3: 6d:f6:21:6f:ed:3a:26:04:95:5d:f1:3b:ab:23:55:e4:14:c8: 02:8e:bf:30:22:91:1e:45:ca:17:ec:ba:53:5e:7d:1a:03:66: 5b:dc:70:9c:71:de:22:33:95:b6:5d:76:d5:a9:f7:39:71:79: c0:1d:81:b4:7c:59:9c:4e:88:f2:e5:bd:58:e5:7d:5b:2d:1e: 49:5e:e8:08:44:ad:65:07:e4:d0:9e:12:a8:b0:82:2e:16:a8: c3:e2:95:b0 -----BEGIN CERTIFICATE----- MIIGMjCCBRqgAwIBAgISAZuZIBFo7dD2HgRwsKGOB1SIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NGM2NzA2ZTNmYmViZGZmMTQ2YThhMTRlYzJhMzI4NGE5 MmJhNjIwHhcNMjYwMTA3MTU0MjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjU0NDg3ZjVmOGU0NGI5MDU4ZWZhY2E4ZWY5MGMxNDBkMDcxNjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/ES0GDmdMsF2OQFAnAEB81sghm3 /hPg3dO82asUWEps/XUEsbc9LxzV9/XUab5pSBVMCsgvT5Qm98v4bGyVbRjItdBJ 5YHtJmOZ7ZT2v+Iuq5u4/GCCKiXBBfvFDGzJW245BlRYsb5QgTO6EIeIzGbpX+q8 XDMwj5WzWD4GXwJvWLGCy+zIW5Y2d7ODXkv54j703OeU5tXztvfigk9d8wJ90jw2 KDRk/9t/IWyeIARbw/JscrbT24Z6FS67CyAtcU+gDq6fqa7Maw6Y2xlIYE/IGABv C+Pd4pODcuF9tGBOwuakddrlBXRZxIRfTAG11d9VMgf2PlrNfeUVgYJNVQIDAQAB o4IDPjCCAzowHQYDVR0OBBYEFH9USH9fjkS5BY76yo75DBQNBxY/MB8GA1UdIwQY MBaAFKdMZwbj++vf8UaooU7CoyhKkrpiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjIt YWE3ODhhNDIwYWVjLzEvZjFSSWYxLU9STGtGanZyS2p2a01GQTBIRmo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hMGM0NDQtOTc5Ni00ZjA2LTgzZjItYWE3ODhhNDIwYWVj LzEvcDB4bkJ1UDc2OV94UnFpaFRzS2pLRXFTdW1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBUgYIKwYBBQUHAQcBAf8EggFBMIIBPTCCASMEAgABMIIB GwMEBFBWwAMEA1D9UAMEBVD+oAMEBVEGAAMEBFEGMAMDAFHdAwQFUsPgAwMAkuQw CwMDA8FIAwQAwUhOMAwDBADBSFEDBATBSIAwDAMEAsFIlAMEAcFIpDAMAwQAwUin AwQBwUi4MAwDBADBSLsDBAPBSNAwDAMEAMFI2QMEAcFJaDAMAwQCwUlsAwQAwUlw MAwDBADBSXMDBAHBSXgwDAMEAMFJewMEAMFJfDAMAwQBwUl+AwQEwUnAMAwDBADB SdEDBADBSdIwDAMEAsFJ1AMEAcFJ7DAMAwQAwUnvAwQBwUnwMAwDBALBSfQDBAHB SfgDBALBSfwDBAXBwYADAwDCvzALAwMEwzADBAfDMQADBAXDgqADBAbUO4AwFAQC AAIwDgMFAyABG1ADBQMqAQKoMA0GCSqGSIb3DQEBCwUAA4IBAQBcWPzN/1zGDU9S JzruFp5q8tRDGR/QILB4QJ/1liVYNyMnho4y09hSUokhCL4ly94mLmgtRaOWxz7f fjoM6xzorcjZ2tThYgMTNbxoP+qenErtUozKu6omQUhTz/q4O1S6GWHcHKbTwCad BMOAoNPORSmt9Dh/JeSwy+QdCw5tsxYgg6gJXvQ5Bko4OF7hNmwM0zNDQI0FlfU4 e+OkLtH3x/Nt9iFv7TomBJVd8TurI1XkFMgCjr8wIpEeRcoX7LpTXn0aA2Zb3HCc cd4iM5W2XXbVqfc5cXnAHYG0fFmcTojy5b1Y5X1bLR5JXugIRK1lB+TQnhKosIIu FqjD4pWw -----END CERTIFICATE-----Generated at Mon Jan 26 11:05:00 2026 by rpki-client