This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa File: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (raw, json) Hash identifier: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4= Subject key identifier: 6C:26:D2:46:9A:3D:8C:DA:0E:F4:2A:49:51:D0:5C:10:A1:23:71:0C Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B7F160FE9579D5EFBFB812D4EAADC8762 Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa Signing time: Fri 02 Jan 2026 14:21:50 +0000 ROA not before: Fri 02 Jan 2026 14:21:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213622 IP address blocks: 92.62.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:0f:e9:57:9d:5e:fb:fb:81:2d:4e:aa:dc:87:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Jan 2 14:21:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c26d2469a3d8cda0ef42a4951d05c10a123710c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:24:e9:60:4d:ec:e8:ed:61:43:87:a0:bf:ba: 87:c1:3b:3b:4f:d4:a4:80:47:ea:8e:d9:0d:4a:cf: b1:b8:8f:52:3b:0f:f1:95:9e:86:5f:6d:12:5d:81: 1b:30:26:80:8b:c0:a7:08:80:13:38:f0:e8:e2:c4: 68:2d:ff:9b:bb:cf:ac:94:d8:96:5e:88:41:4c:2f: fc:db:8e:92:c4:d4:29:d6:2c:c3:36:eb:fc:81:2c: 69:82:e8:45:5f:0e:31:3b:77:18:ac:cc:00:d2:04: 42:63:2e:0a:26:fc:ae:8e:43:0f:ab:10:c9:fd:7f: cd:78:b4:85:44:5b:95:ba:63:ef:d5:6e:a2:7d:62: 9e:af:8d:65:0f:8a:59:8f:b7:f9:5c:68:34:5f:e6: b0:c4:bc:e6:55:b1:9f:a7:de:f9:b0:b0:c2:fd:d2: 6d:6b:ff:a9:ba:03:54:1d:84:d2:c6:b9:a1:ed:85: 58:02:63:0e:75:69:4a:40:0b:e1:e2:81:05:f7:08: 20:b9:09:35:62:58:66:18:fd:14:96:c9:a9:af:5a: 81:87:7a:c2:67:25:0d:fd:f0:44:38:e2:94:35:0d: de:a9:4e:c8:2b:dc:77:74:00:89:21:7c:e1:00:1f: f8:7f:e8:5d:c2:57:5a:5f:cb:09:0b:4c:de:d2:d5: 27:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:26:D2:46:9A:3D:8C:DA:0E:F4:2A:49:51:D0:5C:10:A1:23:71:0C X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.62.247.0/24 Signature Algorithm: sha256WithRSAEncryption ba:f4:de:4b:49:bc:3a:28:6a:2d:a7:b6:a0:a1:cc:0a:75:74: 4e:3e:b8:4e:15:1b:75:55:76:d9:54:b4:97:71:20:bd:e8:ac: c3:48:c2:bb:93:e3:40:1a:cd:83:d9:fd:05:6e:d4:9e:c1:31: 79:37:82:e6:3c:eb:05:11:df:37:83:c1:2f:d3:00:80:dc:3b: 55:be:8e:02:10:ec:ee:10:5b:cb:2a:35:72:61:4b:ff:eb:53: 35:94:ca:a2:ae:b0:07:48:c5:27:d7:5d:c6:63:3c:c0:e4:39: 93:26:c7:6b:bb:8b:b4:38:9d:5f:5b:f6:2f:1a:ae:b0:86:1e: 2d:e1:12:ee:73:85:7d:4c:8a:a4:60:54:b0:bd:5b:7c:99:1b: 8a:ba:e4:30:c4:59:a8:e7:be:2e:7c:d7:6e:ec:b2:24:fd:0a: f4:f6:ca:c2:fd:e3:20:4c:d9:73:55:a7:bc:7b:76:89:73:6a: 18:bb:35:a6:90:f6:7c:78:7d:64:8b:f1:cf:53:95:a0:2f:19: c7:c3:34:d0:f5:97:ce:bf:1c:a2:7f:fa:95:50:2e:41:49:46: 42:a7:07:97:34:2d:b8:b9:c4:ba:57:9e:fb:26:df:c0:67:bf: 99:a1:5a:5f:e6:67:e0:fd:5c:21:fc:dc:5d:0a:8c:44:81:53: d3:4c:c3:f7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fg/pV51e+/uBLU6q3IdiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjYwMTAyMTQyMTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzI2ZDI0NjlhM2Q4Y2RhMGVmNDJhNDk1MWQwNWMxMGExMjM3MTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iTpYE3s6O1hQ4egv7qHwTs7T9Sk gEfqjtkNSs+xuI9SOw/xlZ6GX20SXYEbMCaAi8CnCIATOPDo4sRoLf+bu8+slNiW XohBTC/8246SxNQp1izDNuv8gSxpguhFXw4xO3cYrMwA0gRCYy4KJvyujkMPqxDJ /X/NeLSFRFuVumPv1W6ifWKer41lD4pZj7f5XGg0X+awxLzmVbGfp975sLDC/dJt a/+pugNUHYTSxrmh7YVYAmMOdWlKQAvh4oEF9wgguQk1YlhmGP0Ulsmpr1qBh3rC ZyUN/fBEOOKUNQ3eqU7IK9x3dACJIXzhAB/4f+hdwldaX8sJC0ze0tUnNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGwm0kaaPYzaDvQqSVHQXBChI3EMMB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvYkNiU1JwbzlqTm9POUNwSlVkQmNFS0VqY1F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD73MA0G CSqGSIb3DQEBCwUAA4IBAQC69N5LSbw6KGotp7agocwKdXROPrhOFRt1VXbZVLSX cSC96KzDSMK7k+NAGs2D2f0FbtSewTF5N4LmPOsFEd83g8Ev0wCA3DtVvo4CEOzu EFvLKjVyYUv/61M1lMqirrAHSMUn113GYzzA5DmTJsdru4u0OJ1fW/YvGq6whh4t 4RLuc4V9TIqkYFSwvVt8mRuKuuQwxFmo574ufNdu7LIk/Qr09srC/eMgTNlzVae8 e3aJc2oYuzWmkPZ8eH1ki/HPU5WgLxnHwzTQ9ZfOvxyif/qVUC5BSUZCpweXNC24 ucS6V577Jt/AZ7+ZoVpf5mfg/Vwh/NxdCoxEgVPTTMP3 -----END CERTIFICATE-----Generated at Sun Jan 11 20:02:41 2026 by rpki-client