This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/1-o7HcPngcET6M0yVfPZ56Jv6Q68.roa File: 1-o7HcPngcET6M0yVfPZ56Jv6Q68.roa (raw, json) Hash identifier: mG4SRt751yoK6JRFh5Erxvb85/Tu22QuCVsaem40Yzk= Subject key identifier: FA:8E:C7:70:F9:E0:70:44:FA:33:4C:95:7C:F6:79:E8:9B:FA:43:AF Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F845B8D541CCAAE34685322633DEBDF Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/1-o7HcPngcET6M0yVfPZ56Jv6Q68.roa Signing time: Fri 02 Jan 2026 16:22:19 +0000 ROA not before: Fri 02 Jan 2026 16:22:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9074 IP address blocks: 85.153.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:5b:8d:54:1c:ca:ae:34:68:53:22:63:3d:eb:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa8ec770f9e07044fa334c957cf679e89bfa43af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:af:36:50:f5:af:65:a4:93:d0:bb:9f:7c: 1e:c3:61:85:c0:50:5b:85:43:32:2a:a3:67:24:35: fa:5e:55:70:80:5e:a6:0c:dc:d3:72:79:18:c4:6e: 52:53:05:84:d3:aa:66:54:38:33:40:5e:47:75:a4: 79:05:3a:25:e7:a2:db:4c:f4:3a:f8:35:50:59:52: ef:78:66:b9:4e:f2:55:59:b2:0b:9d:51:0d:46:a3: cf:81:06:df:a1:65:5d:6f:d9:52:55:1d:a2:78:3f: 2b:f4:ad:7b:cc:69:50:3b:1e:a6:c0:20:6c:82:44: 1c:a1:15:45:61:f4:0c:1d:b8:7b:3a:47:4e:23:ae: 66:14:4a:f3:77:76:68:6d:07:b9:e9:d0:40:27:80: c2:45:46:aa:9b:e6:bf:29:61:d8:ae:e8:b4:15:45: 45:e9:a3:84:de:70:0e:fc:d3:d4:a9:ad:0c:a4:0e: 17:81:76:96:ee:2e:58:62:40:b7:75:ac:d9:03:a1: 51:d9:91:32:2c:8c:7e:ca:2e:ef:54:af:d7:78:6e: 4d:b0:f5:ff:f1:79:fb:83:c8:d4:f7:ac:c4:0b:7b: fb:c3:a3:f1:f2:9e:8e:62:c2:35:89:7a:f1:b7:5b: 6e:c5:62:2b:8e:78:a8:44:00:c5:f3:7b:ef:9a:82: 69:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:8E:C7:70:F9:E0:70:44:FA:33:4C:95:7C:F6:79:E8:9B:FA:43:AF X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/1-o7HcPngcET6M0yVfPZ56Jv6Q68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.153.179.0/24 Signature Algorithm: sha256WithRSAEncryption 26:15:00:c6:b0:3c:b2:3b:f5:4c:26:a6:f8:4a:fe:57:c9:a7: 37:84:cb:ee:73:a2:7b:65:a0:d2:f2:9d:bf:5b:80:b1:ba:d7: be:4d:ac:ac:e5:4d:43:66:1f:74:45:d5:28:49:4c:aa:f8:dd: bb:ee:fd:48:59:c8:cd:30:fb:e5:78:9b:c4:03:99:9c:f9:da: 4d:17:94:e0:38:b0:de:81:91:f9:3a:15:49:d8:b3:d0:13:90: f0:47:ea:e2:5d:7a:e1:8b:ba:22:4e:28:7c:d4:79:a7:b4:b1: 8b:17:1c:a5:f1:9f:72:c0:8d:28:a8:ed:47:90:9a:00:25:0d: eb:00:3a:5a:13:3d:65:e9:ab:7b:a2:15:15:0d:5d:af:76:57: ce:4d:89:3d:30:8f:c7:f4:3f:4b:9d:37:e9:25:58:0b:17:bf: 17:89:78:79:da:e6:57:67:9c:55:74:e3:fe:ca:ec:ec:47:d0: f4:f4:8a:5a:85:31:04:4b:3c:ea:18:3c:05:bd:f2:fd:18:3c: 66:ba:4b:77:27:d0:c6:f2:d2:93:25:55:8a:77:c9:f9:72:e9: 10:36:10:52:bc:0a:90:04:bb:38:f2:41:19:a4:31:a1:58:44: d9:ff:e6:ed:9e:83:1f:15:f1:f1:91:37:27:20:ce:40:69:61: 13:dd:35:73 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt/hFuNVBzKrjRoUyJjPevfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYThlYzc3MGY5ZTA3MDQ0ZmEzMzRjOTU3Y2Y2NzllODliZmE0M2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFyvNlD1r2Wkk9C7n3wew2GFwFBb hUMyKqNnJDX6XlVwgF6mDNzTcnkYxG5SUwWE06pmVDgzQF5HdaR5BTol56LbTPQ6 +DVQWVLveGa5TvJVWbILnVENRqPPgQbfoWVdb9lSVR2ieD8r9K17zGlQOx6mwCBs gkQcoRVFYfQMHbh7OkdOI65mFErzd3ZobQe56dBAJ4DCRUaqm+a/KWHYrui0FUVF 6aOE3nAO/NPUqa0MpA4XgXaW7i5YYkC3dazZA6FR2ZEyLIx+yi7vVK/XeG5NsPX/ 8Xn7g8jU96zEC3v7w6Px8p6OYsI1iXrxt1tuxWIrjnioRADF83vvmoJpuwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqOx3D54HBE+jNMlXz2eeib+kOvMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvMS1vN0hjUG5nY0VUNk0weVZmUFo1Nkp2NlE2OC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNjYvZjA5ZWNmLWU4MDUtNDE1OC1iMzE1LWYyYmU5ZjZjNjY0 Yy8xL2pWbkVNajkyZk9UX3lGMnEwZ2k1REFUNzAtay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFWZszAN BgkqhkiG9w0BAQsFAAOCAQEAJhUAxrA8sjv1TCam+Er+V8mnN4TL7nOie2Wg0vKd v1uAsbrXvk2srOVNQ2YfdEXVKElMqvjdu+79SFnIzTD75XibxAOZnPnaTReU4Diw 3oGR+ToVSdiz0BOQ8Efq4l164Yu6Ik4ofNR5p7SxixccpfGfcsCNKKjtR5CaACUN 6wA6WhM9Zemre6IVFQ1dr3ZXzk2JPTCPx/Q/S5036SVYCxe/F4l4edrmV2ecVXTj /srs7EfQ9PSKWoUxBEs86hg8Bb3y/Rg8ZrpLdyfQxvLSkyVVinfJ+XLpEDYQUrwK kAS7OPJBGaQxoVhE2f/m7Z6DHxXx8ZE3JyDOQGlhE901cw== -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:21 2026 by rpki-client