This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/1-iYojE0-bkqoV5dZTp5mESZkuMc.roa File: 1-iYojE0-bkqoV5dZTp5mESZkuMc.roa (raw, json) Hash identifier: IBrMOBEILaJ3aIFlHGFpIPbUN6/UuC5r0K5zqJd+Mnk= Subject key identifier: FA:26:28:8C:4D:3E:6E:4A:A8:57:97:59:4E:9E:66:11:26:64:B8:C7 Certificate issuer: /CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Certificate serial: 019B78A2F75AEE209E79A257D28B87DE21CF Authority key identifier: EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/1-iYojE0-bkqoV5dZTp5mESZkuMc.roa Signing time: Thu 01 Jan 2026 08:18:24 +0000 ROA not before: Thu 01 Jan 2026 08:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203641 IP address blocks: 5.182.160.0/22 maxlen: 24 185.107.160.0/22 maxlen: 24 193.111.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.mft rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f7:5a:ee:20:9e:79:a2:57:d2:8b:87:de:21:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0ec81b9c653b8e340508ff848db066e36772b0 Validity Not Before: Jan 1 08:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa26288c4d3e6e4aa85797594e9e66112664b8c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7d:60:ad:f4:a0:3c:40:c9:70:1d:e1:fa:27: 89:2b:ee:c6:bd:3e:2f:2f:cd:96:56:0b:b5:99:73: f5:67:d2:e2:f1:5f:94:12:d2:66:0c:f7:07:c6:5d: 03:03:9e:8d:df:27:49:46:27:68:32:01:c8:11:63: 9d:e2:e3:99:36:41:44:a7:0d:3a:4f:84:cb:e1:be: d9:5f:28:ce:5d:ba:39:63:18:6d:ef:c9:04:77:1f: b5:ba:88:89:21:f6:0c:72:3f:16:c2:95:e2:d5:29: 96:12:56:b2:46:01:59:83:1a:c6:f5:69:65:70:15: d6:8e:da:ca:53:e7:9f:e7:85:59:a9:25:08:ae:2f: 3b:77:e8:e6:f5:15:fe:a8:35:f0:75:b7:5a:40:c8: 8a:66:4e:1d:6b:11:c1:75:80:52:91:ad:b4:d0:19: ad:a2:1e:0c:e9:36:31:a6:d0:8a:c1:ec:da:f5:a9: f0:6d:16:c2:39:11:9d:35:99:75:58:a7:1e:84:67: 5b:ac:5c:0d:b7:6c:6e:4b:dc:dc:c5:81:11:07:6e: 32:9a:de:d6:8a:15:aa:47:eb:ad:1f:7f:45:d2:89: 49:0b:fe:9f:bd:65:27:5f:af:0f:9c:5a:b6:e3:58: 73:dd:09:48:e0:ec:2f:77:1b:bc:84:43:90:bf:15: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:26:28:8C:4D:3E:6E:4A:A8:57:97:59:4E:9E:66:11:26:64:B8:C7 X509v3 Authority Key Identifier: keyid:EF:0E:C8:1B:9C:65:3B:8E:34:05:08:FF:84:8D:B0:66:E3:67:72:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w7IG5xlO440BQj_hI2wZuNncrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/1-iYojE0-bkqoV5dZTp5mESZkuMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4f1087-2f1b-4ab5-ae71-26cdc55644d4/1/7w7IG5xlO440BQj_hI2wZuNncrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.182.160.0/22 185.107.160.0/22 193.111.170.0/24 Signature Algorithm: sha256WithRSAEncryption 30:10:8a:79:47:2a:a3:03:4f:26:7f:81:18:1d:53:7f:f9:8e: 03:cc:d2:73:cd:2a:9e:92:f5:d2:a8:b0:20:36:7d:58:6c:3c: 9e:ec:f2:a0:34:58:8c:68:52:98:6e:5f:00:6d:77:c1:ec:57: 62:55:8d:45:f7:c9:e2:5f:50:52:83:f5:56:ea:d4:bc:f5:51: ce:64:5c:9c:7d:14:75:00:63:b5:39:78:2d:99:e7:3b:3b:b1: dc:b0:70:06:65:fd:07:89:d2:74:8e:e1:2f:8a:d1:21:43:68: 52:a8:80:41:fa:53:53:63:e4:7e:42:27:ac:99:78:51:31:d0: 43:17:79:c7:7c:e1:2a:65:ae:8f:0f:5a:f4:61:27:78:f3:a0: 6b:91:fa:98:26:04:ff:5c:2d:a9:5f:44:39:67:8b:4f:7c:ef: 97:d1:0e:57:98:b5:29:d2:ea:9d:ed:19:e6:d6:a5:f9:6a:25: 69:e7:d1:3e:8f:2b:d8:aa:8d:3b:d9:e6:da:d4:9f:02:52:3b: e9:01:11:ca:a2:96:0d:0e:44:b9:ac:e7:c0:61:55:37:4e:41: bc:71:c4:96:09:a1:9f:7f:86:21:01:ae:a2:6c:11:72:04:db: 7b:1a:a2:56:d4:59:fb:45:6b:dc:d5:6c:5f:b5:ca:e0:3b:d7: 5c:f5:30:4f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt4ovda7iCeeaJX0ouH3iHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVjODFiOWM2NTNiOGUzNDA1MDhmZjg0OGRiMDY2ZTM2 NzcyYjAwHhcNMjYwMTAxMDgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTI2Mjg4YzRkM2U2ZTRhYTg1Nzk3NTk0ZTllNjYxMTI2NjRiOGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH1grfSgPEDJcB3h+ieJK+7GvT4v L82WVgu1mXP1Z9Li8V+UEtJmDPcHxl0DA56N3ydJRidoMgHIEWOd4uOZNkFEpw06 T4TL4b7ZXyjOXbo5Yxht78kEdx+1uoiJIfYMcj8WwpXi1SmWElayRgFZgxrG9Wll cBXWjtrKU+ef54VZqSUIri87d+jm9RX+qDXwdbdaQMiKZk4daxHBdYBSka200Bmt oh4M6TYxptCKweza9anwbRbCORGdNZl1WKcehGdbrFwNt2xuS9zcxYERB24ymt7W ihWqR+utH39F0olJC/6fvWUnX68PnFq241hz3QlI4Owvdxu8hEOQvxVDJQIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPomKIxNPm5KqFeXWU6eZhEmZLjHMB8GA1UdIwQY MBaAFO8OyBucZTuONAUI/4SNsGbjZ3KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3SUc1eGxPNDQwQlFqX2hJMndadU5uY3JBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80ZjEwODctMmYxYi00YWI1LWFlNzEt MjZjZGM1NTY0NGQ0LzEvMS1pWW9qRTAtYmtxb1Y1ZFpUcDVtRVNaa3VNYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYmMvNGYxMDg3LTJmMWItNGFiNS1hZTcxLTI2Y2RjNTU2NDRk NC8xLzd3N0lHNXhsTzQ0MEJRal9oSTJ3WnVObmNyQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAgW2oAME ArlroAMEAMFvqjANBgkqhkiG9w0BAQsFAAOCAQEAMBCKeUcqowNPJn+BGB1Tf/mO A8zSc80qnpL10qiwIDZ9WGw8nuzyoDRYjGhSmG5fAG13wexXYlWNRffJ4l9QUoP1 VurUvPVRzmRcnH0UdQBjtTl4LZnnOzux3LBwBmX9B4nSdI7hL4rRIUNoUqiAQfpT U2PkfkInrJl4UTHQQxd5x3zhKmWujw9a9GEnePOga5H6mCYE/1wtqV9EOWeLT3zv l9EOV5i1KdLqne0Z5tal+WolaefRPo8r2KqNO9nm2tSfAlI76QERyqKWDQ5Euazn wGFVN05BvHHElgmhn3+GIQGuomwRcgTbexqiVtRZ+0Vr3NVsX7XK4DvXXPUwTw== -----END CERTIFICATE-----Generated at Sat Jan 3 01:01:55 2026 by rpki-client