This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/1-tmYVzvNVJR1ub5ycbRbRNNZE3U.roa File: 1-tmYVzvNVJR1ub5ycbRbRNNZE3U.roa (raw, json) Hash identifier: tb5QHJQ7AVuuzomrdqVit+bu70sjceQDpFN/DmSzGeA= Subject key identifier: FA:D9:98:57:3B:CD:54:94:75:B9:BE:72:71:B4:5B:44:D3:59:13:75 Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Certificate serial: 019B7AC949B73F7FC91AFC013D249118A7F1 Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/1-tmYVzvNVJR1ub5ycbRbRNNZE3U.roa Signing time: Thu 01 Jan 2026 18:19:30 +0000 ROA not before: Thu 01 Jan 2026 18:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39906 IP address blocks: 77.104.192.0/18 maxlen: 24 81.92.144.0/20 maxlen: 24 94.138.96.0/19 maxlen: 24 2a02:da8:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:49:b7:3f:7f:c9:1a:fc:01:3d:24:91:18:a7:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2 Validity Not Before: Jan 1 18:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fad998573bcd549475b9be7271b45b44d3591375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ce:ff:bd:70:7f:4b:29:f1:e1:30:82:69:b8: 0a:b3:53:23:75:84:9e:70:19:2c:b4:71:cf:51:ae: ef:5b:f2:20:c8:b6:79:69:16:32:9a:c6:ba:cf:41: e4:9e:78:d9:b4:f8:3e:47:0e:c3:e8:3d:3d:f6:47: d0:58:34:6a:7c:7c:b3:cf:77:25:f2:78:a2:79:e0: f6:48:96:ba:29:0b:f1:17:c2:8d:e8:42:8a:5d:ce: 2f:90:20:20:3b:c7:f6:4c:15:a5:1c:b7:27:6b:17: 39:f6:fe:56:82:df:41:6d:21:a1:6b:f5:64:2f:00: 8a:38:8f:70:dc:a1:b8:e1:5e:eb:8d:c1:25:9a:26: 43:50:90:08:4e:5d:e3:08:f9:df:65:00:3e:92:cc: 4e:49:ab:43:48:45:8e:4f:31:a1:2c:aa:f9:18:e9: 75:d6:5d:55:51:e4:a2:a4:b7:c7:1c:41:43:b0:29: 8f:7c:ad:87:76:46:6d:65:b9:f8:eb:ca:b8:86:53: 67:65:e3:b9:ed:96:d9:dd:00:d8:41:b7:ca:f8:ab: 01:f5:b9:ec:df:5e:fe:ab:98:6a:d1:d2:df:47:c8: 14:3b:9a:c0:90:2b:81:92:9b:11:c3:34:7b:c9:ae: d3:1e:ae:4d:dc:cb:02:22:7c:e9:bb:a7:74:62:61: 8c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:D9:98:57:3B:CD:54:94:75:B9:BE:72:71:B4:5B:44:D3:59:13:75 X509v3 Authority Key Identifier: keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/1-tmYVzvNVJR1ub5ycbRbRNNZE3U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.104.192.0/18 81.92.144.0/20 94.138.96.0/19 IPv6: 2a02:da8:5::/48 Signature Algorithm: sha256WithRSAEncryption 01:3c:7b:c1:73:15:36:1a:7f:b8:c2:e1:3a:51:9f:25:af:cb: 45:80:4a:e1:62:f5:42:48:6b:1c:f7:0e:79:68:bb:5a:7d:b4: 7e:d6:05:f1:b2:64:46:a2:43:db:6e:3e:ce:34:9c:cb:94:56: 87:31:65:ff:c5:42:83:99:f9:ec:08:01:8d:3f:79:2c:64:28: 59:55:c0:9f:ec:2b:30:23:8b:30:f4:74:bc:f0:cc:53:f9:30: a8:b6:8c:a1:59:ab:71:df:89:55:40:93:fe:98:f7:b4:9b:e1: 1c:35:08:77:bd:a8:68:00:74:dc:2e:42:33:5a:b4:ec:74:dd: 28:26:19:5a:3c:4e:bb:39:b9:d9:89:b3:f3:77:22:d1:07:03: 57:3f:f0:e2:d4:f3:db:44:3f:2e:32:52:61:0e:90:0a:97:df: 85:c0:ec:1e:ad:97:2e:0b:7b:f9:5a:5f:9c:fa:92:9f:77:a5: 4d:91:6b:15:4a:68:f7:c9:f3:6f:f2:4b:fd:ca:81:41:3d:52: a8:a9:a1:ec:b6:c2:d4:06:92:0f:b4:74:b5:ad:e1:30:94:b7: c8:fd:1f:8d:2c:89:34:5d:87:6a:85:0c:af:3f:c0:b4:1c:32: 59:7a:30:80:c5:a5:71:3d:f4:43:5b:20:e2:cb:49:41:a5:c1: f9:8a:a4:fd -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt6yUm3P3/JGvwBPSSRGKfxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5NDgxMTE5YWZlMWJmZjIyOWZhY2Q0ZWY5YzhjNjFiMGZh YmVhZjIwHhcNMjYwMTAxMTgxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWQ5OTg1NzNiY2Q1NDk0NzViOWJlNzI3MWI0NWI0NGQzNTkxMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc7/vXB/Synx4TCCabgKs1MjdYSe cBkstHHPUa7vW/IgyLZ5aRYymsa6z0HknnjZtPg+Rw7D6D099kfQWDRqfHyzz3cl 8niieeD2SJa6KQvxF8KN6EKKXc4vkCAgO8f2TBWlHLcnaxc59v5Wgt9BbSGha/Vk LwCKOI9w3KG44V7rjcElmiZDUJAITl3jCPnfZQA+ksxOSatDSEWOTzGhLKr5GOl1 1l1VUeSipLfHHEFDsCmPfK2HdkZtZbn468q4hlNnZeO57ZbZ3QDYQbfK+KsB9bns 317+q5hq0dLfR8gUO5rAkCuBkpsRwzR7ya7THq5N3MsCInzpu6d0YmGMNQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFPrZmFc7zVSUdbm+cnG0W0TTWRN1MB8GA1UdIwQY MBaAFLlIERmv4b/yKfrNTvnIxhsPq+ryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVVnUkdhX2h2X0lwLXMxTy1jakdHdy1yNnZJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jYjAwMDctM2VhOS00NzU5LThkNzAt OWI5YmNlMTVlMGM2LzEvMS10bVlWenZOVkpSMXViNXljYlJiUk5OWkUzVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYzgvY2IwMDA3LTNlYTktNDc1OS04ZDcwLTliOWJjZTE1ZTBj Ni8xL3VVZ1JHYV9odl9JcC1zMU8tY2pHR3ctcjZ2SS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA8BggrBgEFBQcBBwEB/wQtMCswGAQCAAEwEgMEBk1owAME BFFckAMEBV6KYDAPBAIAAjAJAwcAKgINqAAFMA0GCSqGSIb3DQEBCwUAA4IBAQAB PHvBcxU2Gn+4wuE6UZ8lr8tFgErhYvVCSGsc9w55aLtafbR+1gXxsmRGokPbbj7O NJzLlFaHMWX/xUKDmfnsCAGNP3ksZChZVcCf7CswI4sw9HS88MxT+TCotoyhWatx 34lVQJP+mPe0m+EcNQh3vahoAHTcLkIzWrTsdN0oJhlaPE67ObnZibPzdyLRBwNX P/Di1PPbRD8uMlJhDpAKl9+FwOwerZcuC3v5Wl+c+pKfd6VNkWsVSmj3yfNv8kv9 yoFBPVKoqaHstsLUBpIPtHS1reEwlLfI/R+NLIk0XYdqhQyvP8C0HDJZejCAxaVx PfRDWyDiy0lBpcH5iqT9 -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:01 2026 by rpki-client