This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/1-aCnSCh2k6EoO6v8K8YGH6-ZFag.roa File: 1-aCnSCh2k6EoO6v8K8YGH6-ZFag.roa (raw, json) Hash identifier: TXqm016RQPYqrirzt4ClgfgwS79aUK1qbegI6yBDVqc= Subject key identifier: F9:A0:A7:48:28:76:93:A1:28:3B:AB:FC:2B:C6:06:1F:AF:99:15:A8 Certificate issuer: /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f Certificate serial: 019B78A27DEE9A1E7C113C978C8E546F39E4 Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/1-aCnSCh2k6EoO6v8K8YGH6-ZFag.roa Signing time: Thu 01 Jan 2026 08:17:53 +0000 ROA not before: Thu 01 Jan 2026 08:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216018 IP address blocks: 185.77.88.0/24 maxlen: 24 185.77.91.0/24 maxlen: 24 2a05:60c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:7d:ee:9a:1e:7c:11:3c:97:8c:8e:54:6f:39:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f Validity Not Before: Jan 1 08:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9a0a748287693a1283babfc2bc6061faf9915a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:94:0b:db:4a:f9:aa:7f:99:18:fe:e2:98:bf: ef:48:1a:04:95:a3:22:89:80:83:2f:06:96:66:e8: 16:37:7d:07:a7:08:a4:88:88:a2:1a:52:5e:cd:75: a4:f4:da:b8:eb:df:84:0a:36:97:9e:de:19:ed:b4: 69:c2:46:78:bd:0c:d0:f7:f4:e4:b1:63:0a:82:60: 14:1f:62:3e:4c:ab:01:ef:de:d7:ed:b5:a5:7b:7f: 67:36:3c:80:2a:74:3a:db:b4:0c:b9:4d:c4:e5:d2: 30:f8:9f:d4:52:1d:5a:49:c4:ce:dc:79:77:99:0d: 23:55:89:c3:c7:9c:13:28:57:5d:02:24:49:a9:8c: 37:35:25:29:a7:80:eb:0c:c7:60:3d:68:2e:f7:4b: 71:dd:83:78:59:1a:ce:39:bd:05:bd:ba:9e:7e:92: a7:87:f9:78:1f:3c:26:64:5b:e2:14:b5:f9:80:55: 40:65:0a:9f:9b:92:26:f8:a6:20:0b:7b:46:9c:45: 65:32:85:5a:f1:28:47:00:c9:e4:4c:db:e1:53:e1: 70:78:49:a9:f5:a6:5a:c4:ac:a9:cb:eb:69:c8:13: 8f:d9:0a:67:72:7f:08:9b:c5:32:6f:3f:57:d0:78: 8e:50:4c:c9:4d:23:93:b9:1b:51:4e:ae:72:f0:1e: 64:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:A7:48:28:76:93:A1:28:3B:AB:FC:2B:C6:06:1F:AF:99:15:A8 X509v3 Authority Key Identifier: keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/1-aCnSCh2k6EoO6v8K8YGH6-ZFag.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.88.0/24 185.77.91.0/24 IPv6: 2a05:60c0:2::/48 Signature Algorithm: sha256WithRSAEncryption 04:b6:51:42:e4:05:29:62:e3:a1:57:ac:04:b8:cb:79:a0:a9: aa:23:0c:fb:60:1e:fd:fd:0a:8f:a4:92:42:ce:2b:d6:b2:40: 61:4e:ce:58:d3:ae:41:c9:f3:19:cf:e4:08:f4:04:c2:d3:ce: d1:c8:95:f6:28:af:5e:a0:4e:10:db:a8:3d:28:51:27:26:d9: 5e:0d:07:45:8d:e3:11:d2:81:83:73:5b:e8:00:e9:c3:b1:bd: d5:6e:5d:4b:ac:e9:d6:56:0e:9a:f0:3d:aa:c6:1f:2a:fd:a0: be:bd:13:5d:d9:6b:6b:1a:fc:c6:6b:6e:db:4e:62:b0:7d:ea: 5f:2c:5c:1e:d6:8b:5d:63:2a:53:0e:14:a7:6d:82:a2:01:0c: 16:86:1e:0a:4d:6c:8d:33:09:65:47:8c:66:9e:ed:b0:35:23: 8b:96:67:5e:fd:01:a2:42:3c:44:29:0f:c5:7b:39:c8:eb:50: 0e:0f:05:2a:71:5e:9c:59:51:5b:4b:2c:4b:13:c4:5f:2a:ef: 40:df:d3:72:1f:55:04:ec:c4:0a:06:50:19:97:dd:ba:df:58: 0d:37:5a:b4:22:2c:6b:49:21:a5:d8:26:3d:70:69:f5:bd:2e: 43:d8:65:f6:bd:f9:49:cb:7a:3e:df:4f:2b:a6:27:8c:8b:88: 0a:5c:7d:d4 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt4on3umh58ETyXjI5UbznkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYmI4ODhmMmI5OWRlOTk3MmUyNDQ2ZWJhMDU4YWI4ZTJj ZDdiM2YwHhcNMjYwMTAxMDgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWEwYTc0ODI4NzY5M2ExMjgzYmFiZmMyYmM2MDYxZmFmOTkxNWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZQL20r5qn+ZGP7imL/vSBoElaMi iYCDLwaWZugWN30HpwikiIiiGlJezXWk9Nq469+ECjaXnt4Z7bRpwkZ4vQzQ9/Tk sWMKgmAUH2I+TKsB797X7bWle39nNjyAKnQ627QMuU3E5dIw+J/UUh1aScTO3Hl3 mQ0jVYnDx5wTKFddAiRJqYw3NSUpp4DrDMdgPWgu90tx3YN4WRrOOb0FvbqefpKn h/l4HzwmZFviFLX5gFVAZQqfm5Im+KYgC3tGnEVlMoVa8ShHAMnkTNvhU+FweEmp 9aZaxKypy+tpyBOP2Qpncn8Im8Uybz9X0HiOUEzJTSOTuRtRTq5y8B5kEwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPmgp0godpOhKDur/CvGBh+vmRWoMB8GA1UdIwQY MBaAFH67iI8rmd6ZcuJEbroFirjizXs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnJ1SWp5dVozcGx5NGtSdXVnV0t1T0xOZXo4LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMWIzNGEtZjM4OC00ZGRkLTkyY2Qt ZTFjMGE0ZDA0OTE3LzEvMS1hQ25TQ2gyazZFb082djhLOFlHSDYtWkZhZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODkvZTFiMzRhLWYzODgtNGRkZC05MmNkLWUxYzBhNGQwNDkx Ny8xL2ZydUlqeXVaM3BseTRrUnV1Z1dLdU9MTmV6OC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA2BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEALlNWAME ALlNWzAPBAIAAjAJAwcAKgVgwAACMA0GCSqGSIb3DQEBCwUAA4IBAQAEtlFC5AUp YuOhV6wEuMt5oKmqIwz7YB79/QqPpJJCzivWskBhTs5Y065ByfMZz+QI9ATC087R yJX2KK9eoE4Q26g9KFEnJtleDQdFjeMR0oGDc1voAOnDsb3Vbl1LrOnWVg6a8D2q xh8q/aC+vRNd2WtrGvzGa27bTmKwfepfLFwe1otdYypTDhSnbYKiAQwWhh4KTWyN MwllR4xmnu2wNSOLlmde/QGiQjxEKQ/FeznI61AODwUqcV6cWVFbSyxLE8RfKu9A 39NyH1UE7MQKBlAZl92631gNN1q0IixrSSGl2CY9cGn1vS5D2GX2vflJy3o+308r pieMi4gKXH3U -----END CERTIFICATE-----Generated at Mon Jan 26 05:14:53 2026 by rpki-client