This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1-vNISdAgr1vxuSu-Toco8sAAfmc.roa File: 1-vNISdAgr1vxuSu-Toco8sAAfmc.roa (raw, json) Hash identifier: FafBdHtMW1cgxu/h4FqfgmHc5gJkbiyqRpvw+bdoRVc= Subject key identifier: FA:F3:48:49:D0:20:AF:5B:F1:B9:2B:BE:4E:87:28:F2:C0:00:7E:67 Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Certificate serial: 019B7C115D7795BADD6E9CCE93778E7DE91D Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1-vNISdAgr1vxuSu-Toco8sAAfmc.roa Signing time: Fri 02 Jan 2026 00:17:51 +0000 ROA not before: Fri 02 Jan 2026 00:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207412 IP address blocks: 5.40.77.0/24 maxlen: 24 5.40.224.0/24 maxlen: 24 62.81.242.0/24 maxlen: 24 62.175.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:5d:77:95:ba:dd:6e:9c:ce:93:77:8e:7d:e9:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b Validity Not Before: Jan 2 00:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=faf34849d020af5bf1b92bbe4e8728f2c0007e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:87:16:bb:d5:91:a9:08:52:42:bd:63:68: d7:d6:7f:42:81:ad:fe:07:6f:7e:b7:68:1a:aa:aa: 34:fa:87:68:f9:25:7c:25:a9:8a:30:15:31:b8:01: 05:c7:09:06:09:8a:eb:df:25:b6:b5:9c:91:27:cc: aa:ef:73:11:ee:88:54:e9:37:4b:16:6a:6d:eb:1c: 43:17:a9:b9:75:40:78:0b:cf:b0:43:24:fa:4b:68: c5:26:4e:e9:7f:e8:d0:05:05:cf:0f:68:b2:fa:29: de:f6:33:5a:01:53:e2:49:90:23:df:06:d0:2d:d3: 12:88:e9:79:f4:ab:51:32:71:b7:06:53:8d:2b:f2: 71:30:e3:57:3d:3a:22:95:ce:34:77:a9:c9:d4:9a: 54:c2:4d:5a:7f:3f:4f:bb:fa:31:61:c5:85:0b:43: 20:56:8d:da:b5:84:ef:28:ce:cc:19:de:29:a1:e7: d4:e1:0c:d0:6d:8f:31:90:b6:22:71:ec:fd:5a:3c: b6:ec:ec:25:1f:27:b4:a1:f2:c1:8a:e1:fe:ac:21: 90:81:fd:f6:16:48:95:90:1d:0a:4c:0b:47:39:8c: 68:d4:8a:ae:c2:e7:50:bb:fd:e1:56:39:23:e8:2b: a9:61:6e:33:ea:20:17:3d:6d:79:fa:a7:d9:c6:36: c1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:F3:48:49:D0:20:AF:5B:F1:B9:2B:BE:4E:87:28:F2:C0:00:7E:67 X509v3 Authority Key Identifier: keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1-vNISdAgr1vxuSu-Toco8sAAfmc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.40.77.0/24 5.40.224.0/24 62.81.242.0/24 62.175.180.0/24 Signature Algorithm: sha256WithRSAEncryption 45:7e:79:2a:95:1c:2c:b0:e3:d2:2e:c0:8f:dd:fa:76:76:01: 23:73:81:74:76:34:26:9b:59:d1:72:04:26:6d:97:d6:6c:2c: 7f:b8:9f:ec:2b:3c:b5:22:4c:ed:a5:1a:ea:34:54:0e:f4:7d: 2b:c0:ce:3d:42:80:e2:b6:a0:b4:6a:b2:2b:c8:c5:85:ed:10: 54:99:c0:80:5a:69:83:c9:07:8b:52:9d:c9:6f:1e:88:9d:b6: bd:7a:c8:7f:fb:cd:21:69:52:7c:e7:11:98:c7:8e:dc:9d:81: 2a:2c:0b:bc:7d:52:57:90:35:b2:14:5f:ac:ec:ca:45:21:a5: 9c:1f:2c:1b:b0:34:a2:9d:7f:c0:cb:05:f0:40:5d:29:3d:69: 60:f4:45:ec:4f:c1:c7:d8:e7:59:11:14:c4:10:f9:57:4a:f2: 64:a4:f7:3c:67:43:cd:57:19:d5:5b:35:ac:8d:4c:c1:e5:95: 7d:70:90:37:ab:ab:af:64:ba:2a:0a:f1:0d:60:bb:8c:1a:6a: 4b:18:94:72:ac:c4:7a:f7:57:d7:5b:a8:7b:29:39:97:83:7a: 34:c9:2a:39:c4:0d:78:4d:dc:40:bd:30:2c:b7:1b:db:92:43: 7c:1c:08:79:c5:40:44:48:61:27:bc:d0:ea:67:38:7d:a8:8c: 0d:38:a7:e2 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgISAZt8EV13lbrdbpzOk3eOfekdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw ZDdiNmIwHhcNMjYwMTAyMDAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWYzNDg0OWQwMjBhZjViZjFiOTJiYmU0ZTg3MjhmMmMwMDA3ZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoo6HFrvVkakIUkK9Y2jX1n9Cga3+ B29+t2gaqqo0+odo+SV8JamKMBUxuAEFxwkGCYrr3yW2tZyRJ8yq73MR7ohU6TdL Fmpt6xxDF6m5dUB4C8+wQyT6S2jFJk7pf+jQBQXPD2iy+ine9jNaAVPiSZAj3wbQ LdMSiOl59KtRMnG3BlONK/JxMONXPToilc40d6nJ1JpUwk1afz9Pu/oxYcWFC0Mg Vo3atYTvKM7MGd4poefU4QzQbY8xkLYicez9Wjy27OwlHye0ofLBiuH+rCGQgf32 FkiVkB0KTAtHOYxo1IquwudQu/3hVjkj6CupYW4z6iAXPW15+qfZxjbBawIDAQAB o4ICHDCCAhgwHQYDVR0OBBYEFPrzSEnQIK9b8bkrvk6HKPLAAH5nMB8GA1UdIwQY MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut NTcxMmQ5NWFlNjM4LzEvMS12TklTZEFncjF2eHVTdS1Ub2NvOHNBQWZtYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmQvNzI2YmI0LTVkODctNDAyZC05MWNlLTU3MTJkOTVhZTYz OC8xLzFEVHhhR0VDaDJ4aUZyenFLS1hsQXV3TmUycy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAAUoTQME AAUo4AMEAD5R8gMEAD6vtDANBgkqhkiG9w0BAQsFAAOCAQEARX55KpUcLLDj0i7A j936dnYBI3OBdHY0JptZ0XIEJm2X1mwsf7if7Cs8tSJM7aUa6jRUDvR9K8DOPUKA 4ragtGqyK8jFhe0QVJnAgFppg8kHi1KdyW8eiJ22vXrIf/vNIWlSfOcRmMeO3J2B KiwLvH1SV5A1shRfrOzKRSGlnB8sG7A0op1/wMsF8EBdKT1pYPRF7E/Bx9jnWREU xBD5V0ryZKT3PGdDzVcZ1Vs1rI1MweWVfXCQN6urr2S6KgrxDWC7jBpqSxiUcqzE evdX11uoeyk5l4N6NMkqOcQNeE3cQL0wLLcb25JDfBwIecVAREhhJ7zQ6mc4faiM DTin4g== -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:49 2026 by rpki-client