This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-nb-21DXmf62BIC9VxV2OpkYnHY.roa File: 1-nb-21DXmf62BIC9VxV2OpkYnHY.roa (raw, json) Hash identifier: j+M5U6ra0ssEQFmg+65JUjEOQeVCtqgDScB/iptdlL8= Subject key identifier: FA:76:FE:DB:50:D7:99:FE:B6:04:80:BD:57:15:76:3A:99:18:9C:76 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8BB54ABB1C8A7FD4BDC4615774B0 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-nb-21DXmf62BIC9VxV2OpkYnHY.roa Signing time: Fri 02 Jan 2026 04:18:21 +0000 ROA not before: Fri 02 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199173 IP address blocks: 77.78.157.0/24 maxlen: 24 77.78.158.0/24 maxlen: 24 85.187.184.0/23 maxlen: 23 85.187.184.0/24 maxlen: 24 85.187.185.0/24 maxlen: 24 85.187.186.0/24 maxlen: 24 85.187.218.0/23 maxlen: 23 85.187.218.0/24 maxlen: 24 85.187.219.0/24 maxlen: 24 85.187.224.0/21 maxlen: 21 85.187.224.0/24 maxlen: 24 85.187.225.0/24 maxlen: 24 85.187.226.0/24 maxlen: 24 85.187.227.0/24 maxlen: 24 85.187.228.0/24 maxlen: 24 85.187.229.0/24 maxlen: 24 85.187.230.0/24 maxlen: 24 85.187.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:8b:b5:4a:bb:1c:8a:7f:d4:bd:c4:61:57:74:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa76fedb50d799feb60480bd5715763a99189c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:95:86:76:4c:ca:45:dc:eb:a3:35:01:62:40: 31:43:eb:2b:d3:c0:23:68:9b:17:47:a7:91:c7:20: 61:93:20:f5:48:0a:81:bf:d3:10:e4:c8:c9:dd:67: bc:62:74:4c:ed:a1:54:68:8f:9d:f6:52:e7:e5:07: 6e:5e:e9:dc:92:97:10:ea:57:7a:a1:8a:60:ee:5d: 95:4f:06:41:40:aa:e6:dd:fd:81:91:2a:8f:63:49: c3:64:33:84:37:ba:3f:13:8c:cc:67:c8:25:9c:4c: 89:90:c7:68:9d:db:6b:c9:c4:0b:0e:9b:43:7d:df: 3a:cc:6a:f6:ad:15:84:ce:95:41:07:60:8d:16:bb: 8a:f5:e7:c2:c6:a1:02:02:4c:30:b7:24:67:13:36: 61:ed:a8:fe:53:10:c9:fa:c3:ab:6c:f3:2e:2e:49: 8e:62:36:26:00:dd:5c:ad:73:8a:03:cc:67:0b:17: dd:61:06:46:3a:19:e3:6b:98:c7:89:f6:2b:ca:e8: 37:ef:57:92:05:9b:83:ad:d7:9f:b3:ba:b2:d8:20: 1a:81:b1:1e:fd:45:b7:a0:d2:9a:3f:54:14:68:6c: ab:c0:05:dd:61:44:57:ca:f2:7d:c6:e3:ea:b5:43: 09:d2:b7:e1:00:81:c0:74:c0:71:9a:e9:54:e1:8a: 0e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:76:FE:DB:50:D7:99:FE:B6:04:80:BD:57:15:76:3A:99:18:9C:76 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-nb-21DXmf62BIC9VxV2OpkYnHY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.78.157.0-77.78.158.255 85.187.184.0-85.187.186.255 85.187.218.0/23 85.187.224.0/21 Signature Algorithm: sha256WithRSAEncryption 2f:05:d9:95:c0:ae:8c:09:ba:cc:10:87:2b:f9:70:a5:e5:98: b4:d5:7d:7e:37:4c:cc:92:0d:2f:b5:a1:39:97:f1:93:c7:d3: df:28:e3:04:f3:d7:4d:90:ee:76:e9:21:f2:da:5a:ac:d1:50: d9:f3:a9:d5:1d:71:24:7e:11:ac:bf:1e:b4:ca:c9:ac:70:7b: 19:dc:25:92:f4:68:0e:59:6a:bd:79:c4:0e:d5:a1:ff:f8:3a: 1c:7c:1f:73:e8:e1:95:e0:cc:c1:9d:30:bc:0f:c6:80:a3:b1: 33:e5:82:a5:3b:7e:d3:d2:53:6b:b9:59:69:9e:9c:23:1b:14: 6a:87:e7:1d:7e:bb:57:d3:49:73:ec:c5:9c:23:01:0d:06:b7: 29:f4:7c:e4:17:e4:db:80:c3:0a:b0:2c:8d:00:f2:b8:b8:89: b8:34:8e:1e:c4:27:94:84:2f:74:68:9f:96:8c:bf:36:ab:7f: 6d:7b:9d:2e:78:32:1e:30:da:2d:25:c2:a3:45:f1:43:d8:1c: 54:8f:41:85:25:e1:ed:54:7a:bc:58:c3:b4:42:dd:79:2b:b8: 0e:04:28:df:d2:4a:e1:90:41:d4:32:7a:38:74:1c:92:39:5b: a3:99:e0:d1:09:44:27:e6:72:26:7a:d0:ab:ee:f3:7e:ee:71: 1d:f0:09:01 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt87Yu1Srscin/UvcRhV3SwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTc2ZmVkYjUwZDc5OWZlYjYwNDgwYmQ1NzE1NzYzYTk5MTg5Yzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypWGdkzKRdzrozUBYkAxQ+sr08Aj aJsXR6eRxyBhkyD1SAqBv9MQ5MjJ3We8YnRM7aFUaI+d9lLn5QduXunckpcQ6ld6 oYpg7l2VTwZBQKrm3f2BkSqPY0nDZDOEN7o/E4zMZ8glnEyJkMdondtrycQLDptD fd86zGr2rRWEzpVBB2CNFruK9efCxqECAkwwtyRnEzZh7aj+UxDJ+sOrbPMuLkmO YjYmAN1crXOKA8xnCxfdYQZGOhnja5jHifYryug371eSBZuDrdefs7qy2CAagbEe /UW3oNKaP1QUaGyrwAXdYURXyvJ9xuPqtUMJ0rfhAIHAdMBxmulU4YoOowIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFPp2/ttQ15n+tgSAvVcVdjqZGJx2MB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvMS1uYi0yMURYbWY2MkJJQzlWeFYyT3BrWW5IWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvY2MvZjhjNGEyLTk2YWMtNGI0ZS1hMTk1LWE5N2MwZGMwYTc0 OS8xL19yOHdJQjhTb0VEVGh0SzA3dFJJUmlQazBScy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBBBggrBgEFBQcBBwEB/wQyMDAwLgQCAAEwKDAMAwQATU6d AwQATU6eMAwDBANVu7gDBABVu7oDBAFVu9oDBANVu+AwDQYJKoZIhvcNAQELBQAD ggEBAC8F2ZXArowJuswQhyv5cKXlmLTVfX43TMySDS+1oTmX8ZPH098o4wTz102Q 7nbpIfLaWqzRUNnzqdUdcSR+Eay/HrTKyaxwexncJZL0aA5Zar15xA7Vof/4Ohx8 H3Po4ZXgzMGdMLwPxoCjsTPlgqU7ftPSU2u5WWmenCMbFGqH5x1+u1fTSXPsxZwj AQ0Gtyn0fOQX5NuAwwqwLI0A8ri4ibg0jh7EJ5SEL3Ron5aMvzarf217nS54Mh4w 2i0lwqNF8UPYHFSPQYUl4e1UerxYw7RC3XkruA4EKN/SSuGQQdQyejh0HJI5W6OZ 4NEJRCfmciZ60Kvu837ucR3wCQE= -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:18 2026 by rpki-client