This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/RsFe9krKRUtkC3L7-MC9WR0bVdM.roa File: RsFe9krKRUtkC3L7-MC9WR0bVdM.roa (raw, json) Hash identifier: lbqH6pbmwmSHgVXzsms7NFLtSzq9IEJtOR+CsCDKF1M= Subject key identifier: 46:C1:5E:F6:4A:CA:45:4B:64:0B:72:FB:F8:C0:BD:59:1D:1B:55:D3 Certificate issuer: /CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d Certificate serial: 019BFA12BB7734A73B3A257962B60E7EC807 Authority key identifier: 47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/RsFe9krKRUtkC3L7-MC9WR0bVdM.roa Signing time: Mon 26 Jan 2026 11:31:30 +0000 ROA not before: Mon 26 Jan 2026 11:31:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31438 IP address blocks: 83.137.64.0/21 maxlen: 21 212.89.196.0/22 maxlen: 22 2a0d:5f00::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:12:bb:77:34:a7:3b:3a:25:79:62:b6:0e:7e:c8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47bcd770f8ea3d48ecbb4c3eab895f422ffac90d Validity Not Before: Jan 26 11:31:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46c15ef64aca454b640b72fbf8c0bd591d1b55d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:c6:f1:0f:c1:cb:f9:66:f8:c6:b8:5e:d1: 76:48:9f:65:ac:84:3c:18:91:1b:61:2c:09:55:c8: 8a:18:90:26:05:f5:7d:3f:a3:8f:5d:28:60:0b:d5: 6e:76:50:72:e4:89:91:8a:2c:68:b2:e7:5a:a5:0b: 11:d1:9c:ed:f0:d2:24:f7:db:21:6a:3a:3e:36:5a: 43:0a:c2:6f:9d:ca:32:6b:e7:ec:12:d2:00:39:6b: 3a:a4:eb:9b:59:8c:28:d0:ec:1b:1f:5e:71:22:a9: 1b:84:3f:31:82:24:8e:71:ef:05:4f:ef:76:3d:df: d6:b9:ee:e2:38:d0:df:24:c7:76:6c:52:84:7d:75: 88:54:d3:85:bf:48:55:52:31:8e:47:35:33:cf:f4: ea:80:41:67:c1:32:fa:6e:eb:41:16:aa:a2:30:54: 7a:19:59:e1:15:a1:59:a5:da:f8:d4:ca:f6:7e:25: da:66:50:7e:d3:86:f6:00:4b:b6:b9:b6:7d:e5:14: 90:1e:71:ba:6e:ea:b1:c4:b8:4c:00:38:d3:8b:48: 1d:35:71:25:27:7a:2c:28:69:5d:54:b8:53:09:50: 1e:54:fb:2f:91:b9:3d:b3:26:a4:df:ac:d1:c1:42: 2d:72:5f:7f:f2:79:0e:05:de:d0:30:33:fe:ef:be: 0f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C1:5E:F6:4A:CA:45:4B:64:0B:72:FB:F8:C0:BD:59:1D:1B:55:D3 X509v3 Authority Key Identifier: keyid:47:BC:D7:70:F8:EA:3D:48:EC:BB:4C:3E:AB:89:5F:42:2F:FA:C9:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/RsFe9krKRUtkC3L7-MC9WR0bVdM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/97a5c9-6b28-4c61-96e1-a6d000203fb5/1/R7zXcPjqPUjsu0w-q4lfQi_6yQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.64.0/21 212.89.196.0/22 IPv6: 2a0d:5f00::/30 Signature Algorithm: sha256WithRSAEncryption 1a:56:d2:dd:db:a8:0f:cd:f0:14:46:66:ec:08:8e:8d:ba:c8: 18:c4:47:41:2d:a6:41:32:03:22:3b:d6:6d:7b:84:49:9c:13: 1f:78:83:84:7c:80:9c:5f:b7:3e:c1:a7:0b:67:af:39:9b:9b: c8:d2:83:e0:5b:d9:9f:64:72:87:ea:53:85:c2:2f:db:e0:18: f7:f3:70:9a:e4:6b:9c:5e:4a:ee:66:1c:61:b0:b9:27:85:d6: 5a:ef:c8:e4:f7:d3:1d:e0:eb:4a:89:16:df:a0:f9:77:12:8f: 90:6b:fe:7d:a6:c2:b7:3c:c1:ee:ee:72:fa:8d:e7:2e:a4:38: ca:f3:7d:ea:bd:4a:28:dc:b4:53:f6:72:ec:75:0c:7d:43:2f: 4e:ad:66:2d:2a:e8:b1:35:8f:89:9b:24:8e:0a:b8:5e:0f:ca: 1c:12:3d:8e:a2:49:bd:c4:33:8f:ea:ab:2a:91:df:9b:fd:6d: 26:79:27:11:4a:e1:42:51:30:8a:f7:1f:22:d0:b9:e4:a9:50: 25:8c:6a:a8:6e:2f:0e:d1:8c:ba:22:33:02:b9:e5:58:de:5f: 13:bd:6f:59:95:ad:72:48:2b:ed:9d:e3:f5:df:6f:c1:d0:59: 9e:d4:4a:9b:6d:50:28:16:77:2f:ca:f6:a7:f5:37:5d:f9:0e: 93:8d:95:57 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZv6Ert3NKc7OiV5YrYOfsgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YmNkNzcwZjhlYTNkNDhlY2JiNGMzZWFiODk1ZjQyMmZm YWM5MGQwHhcNMjYwMTI2MTEzMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmMxNWVmNjRhY2E0NTRiNjQwYjcyZmJmOGMwYmQ1OTFkMWI1NWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNLG8Q/By/lm+Ma4XtF2SJ9lrIQ8 GJEbYSwJVciKGJAmBfV9P6OPXShgC9VudlBy5ImRiixosudapQsR0Zzt8NIk99sh ajo+NlpDCsJvncoya+fsEtIAOWs6pOubWYwo0OwbH15xIqkbhD8xgiSOce8FT+92 Pd/Wue7iONDfJMd2bFKEfXWIVNOFv0hVUjGORzUzz/TqgEFnwTL6butBFqqiMFR6 GVnhFaFZpdr41Mr2fiXaZlB+04b2AEu2ubZ95RSQHnG6buqxxLhMADjTi0gdNXEl J3osKGldVLhTCVAeVPsvkbk9syak36zRwUItcl9/8nkOBd7QMDP+774P3QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEbBXvZKykVLZAty+/jAvVkdG1XTMB8GA1UdIwQY MBaAFEe813D46j1I7LtMPquJX0Iv+skNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEt YTZkMDAwMjAzZmI1LzEvUnNGZTlrcktSVXRrQzNMNy1NQzlXUjBiVmRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC85N2E1YzktNmIyOC00YzYxLTk2ZTEtYTZkMDAwMjAzZmI1 LzEvUjd6WGNQanFQVWpzdTB3LXE0bGZRaV82eVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDU4lAAwQC 1FnEMA0EAgACMAcDBQIqDV8AMA0GCSqGSIb3DQEBCwUAA4IBAQAaVtLd26gPzfAU RmbsCI6NusgYxEdBLaZBMgMiO9Zte4RJnBMfeIOEfICcX7c+wacLZ685m5vI0oPg W9mfZHKH6lOFwi/b4Bj383Ca5GucXkruZhxhsLknhdZa78jk99Md4OtKiRbfoPl3 Eo+Qa/59psK3PMHu7nL6jecupDjK833qvUoo3LRT9nLsdQx9Qy9OrWYtKuixNY+J mySOCrheD8ocEj2Ookm9xDOP6qsqkd+b/W0meScRSuFCUTCK9x8i0LnkqVAljGqo bi8O0Yy6IjMCueVY3l8TvW9Zla1ySCvtneP132/B0Fme1EqbbVAoFncvyvan9Tdd +Q6TjZVX -----END CERTIFICATE-----Generated at Thu Feb 5 20:47:41 2026 by rpki-client