This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/1-7fCFfmBzfhvbZm5ltarbzKg3O8.roa File: 1-7fCFfmBzfhvbZm5ltarbzKg3O8.roa (raw, json) Hash identifier: wQ4c+uhGDeDDDLG1psaXqpOdZAfEQ8RyWqk8yEuY7+g= Subject key identifier: FB:B7:C2:15:F9:81:CD:F8:6F:6D:99:B9:96:D6:AB:6F:32:A0:DC:EF Certificate issuer: /CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0 Certificate serial: 019B77C70AE0F4C0BEA1229AA179FBBD0733 Authority key identifier: 4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/1-7fCFfmBzfhvbZm5ltarbzKg3O8.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48449 IP address blocks: 185.111.160.0/24 maxlen: 24 185.111.161.0/24 maxlen: 24 185.111.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.mft rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0a:e0:f4:c0:be:a1:22:9a:a1:79:fb:bd:07:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c18a44d54a47a5ea97dedfd5ed8379d7eea02d0 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbb7c215f981cdf86f6d99b996d6ab6f32a0dcef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:33:32:4c:d1:df:65:bb:81:6e:88:04:0c:ac: f6:70:69:1e:65:f9:3d:d1:ea:34:f4:ff:77:07:fc: d2:6c:74:b5:77:66:55:8e:b1:3d:26:98:a9:92:27: e6:c6:9a:ac:4b:46:3d:50:ac:87:a2:72:54:8a:d1: 9a:25:26:f0:48:a5:ec:a2:c2:38:f0:d2:14:dc:3a: 9d:cc:98:fa:bb:3d:3e:ec:0a:7d:09:14:40:da:06: 8a:7e:f3:af:b5:19:59:4a:e4:44:46:85:10:63:06: 73:65:71:8d:df:1e:a7:15:ac:24:1a:f2:b3:f9:87: db:98:82:fb:9f:4a:c2:2e:fc:41:31:36:c4:0f:b3: bc:cc:1f:33:c8:f7:0c:4f:c7:cb:75:22:e3:cc:64: a9:18:8d:ab:e2:e4:86:7e:1d:f5:81:8f:34:82:cc: fa:7b:b5:aa:fa:0b:45:48:18:9b:e1:7d:de:df:5f: 48:5e:68:02:34:cd:bf:e5:47:8a:e7:ed:57:e5:c8: 99:98:81:01:bb:34:3b:5b:5d:78:32:bc:56:1b:3c: e5:f1:ea:ae:77:13:b7:10:97:a4:20:cf:29:1b:fd: ad:8c:dd:db:77:8b:81:b1:17:a7:e7:da:e2:0b:fd: 60:35:28:50:dd:c5:0c:40:41:e7:40:a1:62:fc:b2: 70:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B7:C2:15:F9:81:CD:F8:6F:6D:99:B9:96:D6:AB:6F:32:A0:DC:EF X509v3 Authority Key Identifier: keyid:4C:18:A4:4D:54:A4:7A:5E:A9:7D:ED:FD:5E:D8:37:9D:7E:EA:02:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBikTVSkel6pfe39Xtg3nX7qAtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/1-7fCFfmBzfhvbZm5ltarbzKg3O8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/abe6c0-e79d-4cdd-92ad-f21363071591/1/TBikTVSkel6pfe39Xtg3nX7qAtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.111.160.0-185.111.162.255 Signature Algorithm: sha256WithRSAEncryption 86:b6:76:00:7f:2d:63:4a:e3:4b:0a:9c:5a:51:53:36:59:37: 11:6d:70:d6:57:24:2f:2a:16:8c:16:b6:53:f8:79:b6:ac:25: ac:89:1d:f5:b6:df:ca:c4:96:a7:89:83:11:d7:f2:0d:a0:6e: 4a:8b:6f:93:7d:0e:0d:3c:0c:60:6f:28:fb:51:5c:9b:4e:1b: f3:ae:79:e8:1e:c1:07:0e:e0:81:6c:b7:88:ba:97:fc:7a:57: 1e:e1:a3:5b:c4:19:f4:fe:4a:c4:d3:a9:4d:30:83:7d:c9:4b: e9:13:f2:59:ee:4b:81:1c:01:1f:09:86:f2:5b:b4:01:2c:1c: 42:f4:6c:84:f2:b2:89:3f:f9:03:6e:e0:bd:b6:b1:36:94:d3: 38:06:45:08:12:ca:5b:f1:c1:c3:22:38:7f:3d:ae:77:f3:47: b7:51:1f:55:e4:b1:68:41:eb:d4:62:9a:de:cc:13:d8:d8:e3: 7d:d2:81:12:49:d0:1c:87:86:36:53:22:c2:08:0a:30:20:b0: bb:b5:7e:88:ca:18:2f:ab:e1:12:8a:7b:44:be:bc:e5:3b:0b: ac:5f:74:28:67:6b:4d:10:f5:a7:34:08:be:05:1d:3f:3d:6a: 6b:32:fe:71:be:c3:c2:b6:00:00:5c:96:c5:05:0d:f4:ec:52: 38:a2:65:0b -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgISAZt3xwrg9MC+oSKaoXn7vQczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMThhNDRkNTRhNDdhNWVhOTdkZWRmZDVlZDgzNzlkN2Vl YTAyZDAwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmI3YzIxNWY5ODFjZGY4NmY2ZDk5Yjk5NmQ2YWI2ZjMyYTBkY2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujMyTNHfZbuBbogEDKz2cGkeZfk9 0eo09P93B/zSbHS1d2ZVjrE9JpipkifmxpqsS0Y9UKyHonJUitGaJSbwSKXsosI4 8NIU3DqdzJj6uz0+7Ap9CRRA2gaKfvOvtRlZSuRERoUQYwZzZXGN3x6nFawkGvKz +YfbmIL7n0rCLvxBMTbED7O8zB8zyPcMT8fLdSLjzGSpGI2r4uSGfh31gY80gsz6 e7Wq+gtFSBib4X3e319IXmgCNM2/5UeK5+1X5ciZmIEBuzQ7W114MrxWGzzl8equ dxO3EJekIM8pG/2tjN3bd4uBsRen59riC/1gNShQ3cUMQEHnQKFi/LJw7QIDAQAB o4ICEjCCAg4wHQYDVR0OBBYEFPu3whX5gc34b22ZuZbWq28yoNzvMB8GA1UdIwQY MBaAFEwYpE1UpHpeqX3t/V7YN51+6gLQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJpa1RWU2tlbDZwZmUzOVh0ZzNuWDdxQXRBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hYmU2YzAtZTc5ZC00Y2RkLTkyYWQt ZjIxMzYzMDcxNTkxLzEvMS03ZkNGZm1CemZodmJabTVsdGFyYnpLZzNPOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODIvYWJlNmMwLWU3OWQtNGNkZC05MmFkLWYyMTM2MzA3MTU5 MS8xL1RCaWtUVlNrZWw2cGZlMzlYdGczblg3cUF0QS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAnBggrBgEFBQcBBwEB/wQYMBYwFAQCAAEwDjAMAwQFuW+g AwQAuW+iMA0GCSqGSIb3DQEBCwUAA4IBAQCGtnYAfy1jSuNLCpxaUVM2WTcRbXDW VyQvKhaMFrZT+Hm2rCWsiR31tt/KxJaniYMR1/INoG5Ki2+TfQ4NPAxgbyj7UVyb ThvzrnnoHsEHDuCBbLeIupf8elce4aNbxBn0/krE06lNMIN9yUvpE/JZ7kuBHAEf CYbyW7QBLBxC9GyE8rKJP/kDbuC9trE2lNM4BkUIEspb8cHDIjh/Pa5380e3UR9V 5LFoQevUYprezBPY2ON90oESSdAch4Y2UyLCCAowILC7tX6Iyhgvq+ESintEvrzl OwusX3QoZ2tNEPWnNAi+BR0/PWprMv5xvsPCtgAAXJbFBQ307FI4omUL -----END CERTIFICATE-----Generated at Mon Jan 26 02:23:28 2026 by rpki-client