This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/B3x10EBzihJq8QxD90A60FEqEz0.roa File: B3x10EBzihJq8QxD90A60FEqEz0.roa (raw, json) Hash identifier: X2mSotg1WCyJhyzR7z2UsB+9u+XI3nXErU62l1uIIvo= Subject key identifier: 07:7C:75:D0:40:73:8A:12:6A:F1:0C:43:F7:40:3A:D0:51:2A:13:3D Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Certificate serial: 019C2987FB1F3865D38234B388EEF5AF2B1C Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/B3x10EBzihJq8QxD90A60FEqEz0.roa Signing time: Wed 04 Feb 2026 16:41:43 +0000 ROA not before: Wed 04 Feb 2026 16:41:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35574 IP address blocks: 93.101.0.0/20 maxlen: 24 185.40.12.0/22 maxlen: 24 194.187.172.0/22 maxlen: 24 194.187.174.0/24 maxlen: 24 2a04:a9c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:29:87:fb:1f:38:65:d3:82:34:b3:88:ee:f5:af:2b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69 Validity Not Before: Feb 4 16:41:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=077c75d040738a126af10c43f7403ad0512a133d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:df:17:66:92:cf:1a:a7:6e:92:55:b1:e7: 4a:a2:fb:64:61:15:79:d3:e2:4b:a9:4a:f5:1e:98: 64:3b:37:b7:5a:d4:5b:99:fb:70:af:86:a9:9e:c7: 91:d8:3d:b5:cb:71:4d:05:98:b1:6d:4a:db:9b:d4: 76:90:36:39:10:e5:32:87:19:18:ff:eb:97:dc:57: 1f:13:99:56:d3:72:17:85:bd:65:28:97:93:31:06: aa:6f:6e:07:22:d6:f9:23:7f:07:bd:7f:88:f1:75: 9c:31:85:ab:57:39:9f:de:34:14:5c:3a:16:5a:a5: 3d:8b:a6:40:90:ea:16:73:38:1f:bd:14:4b:e0:e5: 7d:62:30:b7:76:05:49:58:a9:53:72:e9:a8:f4:5e: 55:3a:06:d7:a9:24:07:11:ba:40:ca:7c:3b:bf:4b: 53:52:21:c3:aa:2e:3b:16:76:8b:20:dd:b0:5b:53: 38:32:60:aa:c5:24:9b:c5:1b:4a:b1:2b:b4:28:76: 3e:24:ac:ed:59:25:69:10:60:61:c6:0e:c7:c1:33: cb:13:ea:00:db:45:fd:af:21:67:cb:05:fa:bb:f3: 7a:4e:fc:97:c7:6a:75:19:d4:5e:c2:9b:80:95:b9: 7a:e3:e0:92:57:af:e6:69:4e:2a:df:4d:d3:63:9c: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7C:75:D0:40:73:8A:12:6A:F1:0C:43:F7:40:3A:D0:51:2A:13:3D X509v3 Authority Key Identifier: keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/B3x10EBzihJq8QxD90A60FEqEz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.101.0.0/20 185.40.12.0/22 194.187.172.0/22 IPv6: 2a04:a9c0::/29 Signature Algorithm: sha256WithRSAEncryption ad:4a:8f:e5:95:50:61:63:16:0a:d2:ec:74:5f:3d:a3:a9:9a: 07:8d:7b:14:33:ca:02:21:6e:85:9a:69:ac:5f:6b:16:40:ed: cd:58:2c:cc:58:70:09:0b:bc:24:f6:45:07:af:82:1d:0a:34: a5:a9:26:04:93:e1:c0:68:da:b2:ea:71:ff:85:ee:8b:72:de: f6:b6:6d:74:90:37:f8:2b:f5:c0:4d:8d:a5:dd:0c:bf:63:6a: 21:ba:30:75:a3:06:df:eb:30:31:68:04:79:80:9f:93:df:66: be:d7:45:a2:7a:23:cd:e0:07:f8:fe:fc:a7:77:12:2e:6d:d2: 8b:02:12:31:04:d1:ec:a7:2d:20:4e:39:27:6e:5c:99:cc:84: 8f:97:e8:4c:40:86:8e:66:a9:d8:ed:57:eb:2a:67:ea:45:36: 97:b5:2e:36:9c:c4:f4:1c:92:c0:05:f2:dc:46:ea:3a:31:d5: 87:db:51:c4:43:7a:bb:45:08:d6:6f:ee:50:43:90:f3:a6:32: bb:dd:23:1e:20:f1:31:64:4f:68:16:af:83:0c:7f:18:39:65: 07:4a:36:bd:a5:8d:c4:a8:d5:d9:f0:c4:9f:ad:fb:f7:49:10: 96:cc:39:9b:b2:3c:50:18:99:c5:1e:27:ee:19:2f:da:39:f8: 45:89:f1:fb -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZwph/sfOGXTgjSziO71ryscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2YzNjBkZjlhMWY2MWUyMzMyN2RhMGQyYzA5MTEyZTBh OWJkNjkwHhcNMjYwMjA0MTY0MTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzdjNzVkMDQwNzM4YTEyNmFmMTBjNDNmNzQwM2FkMDUxMmExMzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDXfF2aSzxqnbpJVsedKovtkYRV5 0+JLqUr1HphkOze3WtRbmftwr4apnseR2D21y3FNBZixbUrbm9R2kDY5EOUyhxkY /+uX3FcfE5lW03IXhb1lKJeTMQaqb24HItb5I38HvX+I8XWcMYWrVzmf3jQUXDoW WqU9i6ZAkOoWczgfvRRL4OV9YjC3dgVJWKlTcumo9F5VOgbXqSQHEbpAynw7v0tT UiHDqi47FnaLIN2wW1M4MmCqxSSbxRtKsSu0KHY+JKztWSVpEGBhxg7HwTPLE+oA 20X9ryFnywX6u/N6TvyXx2p1GdRewpuAlbl64+CSV6/maU4q303TY5wFNwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAd8ddBAc4oSavEMQ/dAOtBRKhM9MB8GA1UdIwQY MBaAFGzPNg35ofYeIzJ9oNLAkRLgqb1pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTIt NzcxNDBkMDk3ODNjLzEvQjN4MTBFQnppaEpxOFF4RDkwQTYwRkVxRXowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8wNmFjNGYtOTgzMy00ZThkLWIzNTItNzcxNDBkMDk3ODNj LzEvYk04MkRmbWg5aDRqTW4yZzBzQ1JFdUNwdldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEXWUAAwQC uSgMAwQCwrusMA0EAgACMAcDBQMqBKnAMA0GCSqGSIb3DQEBCwUAA4IBAQCtSo/l lVBhYxYK0ux0Xz2jqZoHjXsUM8oCIW6FmmmsX2sWQO3NWCzMWHAJC7wk9kUHr4Id CjSlqSYEk+HAaNqy6nH/he6Lct72tm10kDf4K/XATY2l3Qy/Y2ohujB1owbf6zAx aAR5gJ+T32a+10WieiPN4Af4/vyndxIubdKLAhIxBNHspy0gTjknblyZzISPl+hM QIaOZqnY7VfrKmfqRTaXtS42nMT0HJLABfLcRuo6MdWH21HEQ3q7RQjWb+5QQ5Dz pjK73SMeIPExZE9oFq+DDH8YOWUHSja9pY3EqNXZ8MSfrfv3SRCWzDmbsjxQGJnF HifuGS/aOfhFifH7 -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:13 2026 by rpki-client