This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa File: f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa (raw, json) Hash identifier: nGiLxaL0gxMQlJ8QNtQpsASY+2PMktxV9lPqNFVspg0= Subject key identifier: 7F:5F:D8:94:C1:D7:91:F1:1C:C6:6F:02:98:20:6B:08:BC:64:1A:A9 Certificate issuer: /CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f Certificate serial: 019B7AC8AB8DA07E0742CF28B2AACF6FBF54 Authority key identifier: 4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa Signing time: Thu 01 Jan 2026 18:18:50 +0000 ROA not before: Thu 01 Jan 2026 18:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 559 IP address blocks: 146.136.0.0/16 maxlen: 16 152.96.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.mft rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:ab:8d:a0:7e:07:42:cf:28:b2:aa:cf:6f:bf:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2f58d394af703fb9ef0fc537bed0e97db75a8f Validity Not Before: Jan 1 18:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f5fd894c1d791f11cc66f0298206b08bc641aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:83:ee:5a:1e:68:fa:5f:85:a1:04:3e:e6: c6:35:54:5d:ad:d8:0d:7f:74:d9:6e:0b:fe:b2:d2: 18:60:31:de:9b:d8:7e:2d:37:75:55:81:af:1d:88: d8:34:15:35:05:29:80:c3:3f:a6:05:aa:95:5f:42: ad:da:33:fd:56:70:e9:cf:8b:8a:04:a0:99:f4:77: c1:8f:3f:60:39:e6:2e:ce:f9:ca:08:d0:44:9e:f8: 7d:e3:6b:0b:59:e6:fc:70:e0:72:47:ba:74:59:9e: 09:42:2d:bd:04:a7:ab:1b:a6:a1:d7:3e:3d:cd:d6: f3:d6:6e:a3:a8:07:14:9e:85:69:2d:05:62:2f:47: 99:26:55:45:c5:73:2b:4c:13:12:b7:8d:36:a8:ca: 40:35:e6:7c:68:46:db:da:fe:da:13:22:f5:f9:e1: cb:8e:3f:59:1f:c5:b8:76:41:07:28:4b:84:18:5a: 01:66:e0:7f:cc:30:3e:b9:e9:b6:b8:9a:ca:08:01: be:44:fa:8f:db:64:9d:fc:03:0f:bd:75:0d:74:ef: 37:aa:e0:97:3b:fd:05:f4:21:bc:77:df:8b:62:f1: a6:96:8d:68:0c:3d:75:03:94:49:30:cb:02:54:f9: ee:37:be:4b:65:48:01:9e:10:63:7d:bc:55:b6:5a: 15:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:5F:D8:94:C1:D7:91:F1:1C:C6:6F:02:98:20:6B:08:BC:64:1A:A9 X509v3 Authority Key Identifier: keyid:4C:2F:58:D3:94:AF:70:3F:B9:EF:0F:C5:37:BE:D0:E9:7D:B7:5A:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TC9Y05SvcD-57w_FN77Q6X23Wo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/f1_YlMHXkfEcxm8CmCBrCLxkGqk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/246769-d876-4f22-9a1c-45c5f456d4bb/1/TC9Y05SvcD-57w_FN77Q6X23Wo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.136.0.0/16 152.96.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:b9:7b:b6:a8:63:41:fb:a2:9f:5e:fa:ab:cb:52:29:a6:54: 40:92:5d:14:e5:1c:b6:07:34:bc:2b:34:45:3d:24:36:4f:82: 14:0e:66:ae:af:5d:12:98:8d:e2:5e:78:0a:3b:87:31:e6:49: fa:4a:ee:fe:9c:c2:98:52:0e:87:59:72:0a:79:6b:0a:7e:ed: b8:75:38:99:4f:0d:4e:4a:cf:ea:1b:01:94:f2:e9:4e:5e:a8: 09:74:0b:be:c0:20:95:f3:98:10:e4:0c:7a:4a:d0:3a:cf:e8: 76:73:8a:ad:7e:13:4f:fb:9f:cb:67:16:78:64:62:27:36:df: 4b:e2:88:1c:99:ce:af:59:72:aa:cb:3a:a7:3d:72:ec:0d:a1: 1d:6e:dd:f9:db:da:d5:5a:e5:b4:c3:8a:a4:6d:1b:56:f3:1f: c1:28:2d:ed:0a:62:fb:1c:f4:6a:62:20:47:4c:47:a3:47:5c: 7e:bf:68:60:93:80:3e:ee:8b:3b:6a:42:f7:23:3b:c6:1e:ef: 32:54:3b:81:f7:92:04:00:9d:16:4f:ad:de:1a:01:1a:79:bd: a0:91:53:c4:3f:97:3b:c8:dc:5e:f9:78:fd:95:b0:41:1f:38: 14:6e:a2:60:d1:af:93:f9:0c:f3:10:96:92:c8:c3:2e:74:1d: fa:9c:50:80 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISAZt6yKuNoH4HQs8osqrPb79UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmY1OGQzOTRhZjcwM2ZiOWVmMGZjNTM3YmVkMGU5N2Ri NzVhOGYwHhcNMjYwMTAxMTgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjVmZDg5NGMxZDc5MWYxMWNjNjZmMDI5ODIwNmIwOGJjNjQxYWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/mD7loeaPpfhaEEPubGNVRdrdgN f3TZbgv+stIYYDHem9h+LTd1VYGvHYjYNBU1BSmAwz+mBaqVX0Kt2jP9VnDpz4uK BKCZ9HfBjz9gOeYuzvnKCNBEnvh942sLWeb8cOByR7p0WZ4JQi29BKerG6ah1z49 zdbz1m6jqAcUnoVpLQViL0eZJlVFxXMrTBMSt402qMpANeZ8aEbb2v7aEyL1+eHL jj9ZH8W4dkEHKEuEGFoBZuB/zDA+uem2uJrKCAG+RPqP22Sd/AMPvXUNdO83quCX O/0F9CG8d9+LYvGmlo1oDD11A5RJMMsCVPnuN75LZUgBnhBjfbxVtloVBQIDAQAB o4ICDTCCAgkwHQYDVR0OBBYEFH9f2JTB15HxHMZvApggawi8ZBqpMB8GA1UdIwQY MBaAFEwvWNOUr3A/ue8PxTe+0Ol9t1qPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEM5WTA1U3ZjRC01N3dfRk43N1E2WDIzV284LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8yNDY3NjktZDg3Ni00ZjIyLTlhMWMt NDVjNWY0NTZkNGJiLzEvZjFfWWxNSFhrZkVjeG04Q21DQnJDTHhrR3FrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi8yNDY3NjktZDg3Ni00ZjIyLTlhMWMtNDVjNWY0NTZkNGJi LzEvVEM5WTA1U3ZjRC01N3dfRk43N1E2WDIzV284LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAkogDAwCY YDANBgkqhkiG9w0BAQsFAAOCAQEAdrl7tqhjQfuin176q8tSKaZUQJJdFOUctgc0 vCs0RT0kNk+CFA5mrq9dEpiN4l54CjuHMeZJ+kru/pzCmFIOh1lyCnlrCn7tuHU4 mU8NTkrP6hsBlPLpTl6oCXQLvsAglfOYEOQMekrQOs/odnOKrX4TT/ufy2cWeGRi JzbfS+KIHJnOr1lyqss6pz1y7A2hHW7d+dva1VrltMOKpG0bVvMfwSgt7Qpi+xz0 amIgR0xHo0dcfr9oYJOAPu6LO2pC9yM7xh7vMlQ7gfeSBACdFk+t3hoBGnm9oJFT xD+XO8jcXvl4/ZWwQR84FG6iYNGvk/kM8xCWksjDLnQd+pxQgA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:28:56 2026 by rpki-client