This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/1TnF4i5MoUtLw2ntl3I5OpJDdJw.roa File: 1TnF4i5MoUtLw2ntl3I5OpJDdJw.roa (raw, json) Hash identifier: lCfWll/KzhdeC/p5tZ7e9XTFVVxJgs2go/WDKBpmij0= Subject key identifier: D5:39:C5:E2:2E:4C:A1:4B:4B:C3:69:ED:97:72:39:3A:92:43:74:9C Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Certificate serial: 019B77C6ECF386CEAFB85C60BA48F5DA28A1 Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/1TnF4i5MoUtLw2ntl3I5OpJDdJw.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215070 IP address blocks: 90.156.244.0/22 maxlen: 24 90.156.244.0/24 maxlen: 24 90.156.247.0/24 maxlen: 24 2a03:720:60::/48 maxlen: 48 2a03:720:1060::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ec:f3:86:ce:af:b8:5c:60:ba:48:f5:da:28:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d539c5e22e4ca14b4bc369ed9772393a9243749c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b4:94:98:49:64:1b:a2:48:b4:e4:25:60:a0: 3a:f9:af:ed:08:28:81:ad:53:48:0c:5b:94:88:4d: 93:40:33:a1:0a:2a:09:6b:7d:db:a8:7e:d3:95:cf: cd:00:f9:f9:23:cf:3e:b5:9b:e0:37:d0:63:46:ab: b6:c6:9a:d2:16:55:11:d4:d7:4f:8b:34:fd:3e:1f: 37:14:08:f5:da:47:6d:75:05:5e:ac:12:de:c1:a2: 88:36:16:0f:2f:95:e1:69:d6:33:08:ef:fa:1a:00: fd:24:26:d7:84:82:e9:3f:6f:4d:1f:5a:2a:1d:46: f8:48:60:a1:7c:cf:0a:08:22:aa:91:62:02:07:15: 89:a2:1c:ca:e8:e3:bc:4a:86:5e:9e:c8:5f:92:9e: eb:e6:3d:0d:1d:84:fd:7b:db:56:37:7e:79:14:91: 65:18:06:2b:1d:b5:3c:e7:53:7d:12:2f:ef:89:2f: 1c:73:65:92:6b:5c:a9:9a:00:e1:fd:bb:82:62:de: 02:e8:d8:35:05:c0:30:53:35:80:04:72:f2:60:a2: a7:0a:c4:4c:d7:b4:be:2b:43:92:d5:73:10:ed:09: bb:2f:41:63:ce:15:f6:c3:e8:25:0f:df:a1:c1:97: 52:c9:dd:98:a7:4c:fe:b3:10:04:3b:4c:8a:2f:d7: 61:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:39:C5:E2:2E:4C:A1:4B:4B:C3:69:ED:97:72:39:3A:92:43:74:9C X509v3 Authority Key Identifier: keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/1TnF4i5MoUtLw2ntl3I5OpJDdJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.156.244.0/22 IPv6: 2a03:720:60::/48 2a03:720:1060::/48 Signature Algorithm: sha256WithRSAEncryption 9b:9f:3e:13:fc:43:29:01:fc:a7:46:76:4f:89:e7:bd:07:22: 33:e0:46:af:a4:ad:19:08:fc:7c:f2:d8:4d:73:33:2b:16:a9: 61:10:e0:99:21:00:5d:91:ad:1f:4d:fa:be:4d:e2:9c:9e:91: dd:4d:65:08:ee:47:d1:89:13:9e:cc:8c:85:49:56:ee:7a:14: 00:8c:74:d4:cd:f3:71:c2:e4:06:0f:c9:ad:aa:e8:1d:46:76: 37:9b:76:4a:b1:c7:70:2b:32:0c:0f:a0:54:4a:bd:56:fd:b0: 7c:ef:a0:39:b2:36:65:a9:3e:17:f8:2c:71:fb:81:8f:4e:dd: c8:ff:bb:f8:30:af:65:c9:c5:fc:54:af:15:d3:e7:63:71:c3: 40:84:c2:fe:46:c4:32:bd:30:0e:8f:c4:26:4b:a2:1c:fa:78: 9e:48:8b:e2:57:ba:b3:40:fd:77:7f:43:91:a1:d3:ef:a2:14: d7:0b:b1:bc:ee:54:e0:7a:58:fd:ee:ed:b4:3e:d7:ad:2e:f6: e6:09:8c:31:cc:f0:5a:88:3c:c7:14:fb:a5:5f:8c:fb:69:7a: 75:be:09:79:db:25:7d:60:eb:66:cd:ca:5b:9a:25:46:50:40: 9c:a6:83:99:cc:24:50:f9:fb:0e:bb:2a:cb:57:43:77:29:5e: 14:06:a7:e9 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3xuzzhs6vuFxgukj12iihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5 MDBhNzYwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTM5YzVlMjJlNGNhMTRiNGJjMzY5ZWQ5NzcyMzkzYTkyNDM3NDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67SUmElkG6JItOQlYKA6+a/tCCiB rVNIDFuUiE2TQDOhCioJa33bqH7Tlc/NAPn5I88+tZvgN9BjRqu2xprSFlUR1NdP izT9Ph83FAj12kdtdQVerBLewaKINhYPL5XhadYzCO/6GgD9JCbXhILpP29NH1oq HUb4SGChfM8KCCKqkWICBxWJohzK6OO8SoZenshfkp7r5j0NHYT9e9tWN355FJFl GAYrHbU851N9Ei/viS8cc2WSa1ypmgDh/buCYt4C6Ng1BcAwUzWABHLyYKKnCsRM 17S+K0OS1XMQ7Qm7L0FjzhX2w+glD9+hwZdSyd2Yp0z+sxAEO0yKL9dh/wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFNU5xeIuTKFLS8Np7ZdyOTqSQ3ScMB8GA1UdIwQY MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt ODlhY2UzODIyMGZiLzEvMVRuRjRpNU1vVXRMdzJudGwzSTVPcEpEZEp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWItODlhY2UzODIyMGZi LzEvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCWpz0MBgE AgACMBIDBwAqAwcgAGADBwAqAwcgEGAwDQYJKoZIhvcNAQELBQADggEBAJufPhP8 QykB/KdGdk+J570HIjPgRq+krRkI/Hzy2E1zMysWqWEQ4JkhAF2RrR9N+r5N4pye kd1NZQjuR9GJE57MjIVJVu56FACMdNTN83HC5AYPya2q6B1Gdjebdkqxx3ArMgwP oFRKvVb9sHzvoDmyNmWpPhf4LHH7gY9O3cj/u/gwr2XJxfxUrxXT52Nxw0CEwv5G xDK9MA6PxCZLohz6eJ5Ii+JXurNA/Xd/Q5Gh0++iFNcLsbzuVOB6WP3u7bQ+160u 9uYJjDHM8FqIPMcU+6VfjPtpenW+CXnbJX1g62bNyluaJUZQQJymg5nMJFD5+w67 KstXQ3cpXhQGp+k= -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:34 2026 by rpki-client