This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bMTS2A87aEejzK3eKCQU8zS4Tsc.roa File: bMTS2A87aEejzK3eKCQU8zS4Tsc.roa (raw, json) Hash identifier: NSTOiMnZOnB16p7UkLVVaCLUT9cLixKW/555b9iQG/0= Subject key identifier: 6C:C4:D2:D8:0F:3B:68:47:A3:CC:AD:DE:28:24:14:F3:34:B8:4E:C7 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F844FF0A5CB912A52CA02E4874CB81A Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bMTS2A87aEejzK3eKCQU8zS4Tsc.roa Signing time: Fri 02 Jan 2026 16:22:16 +0000 ROA not before: Fri 02 Jan 2026 16:22:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209280 IP address blocks: 185.227.81.0/24 maxlen: 24 194.146.45.0/24 maxlen: 24 2a0b:3c40:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4f:f0:a5:cb:91:2a:52:ca:02:e4:87:4c:b8:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cc4d2d80f3b6847a3ccadde282414f334b84ec7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:59:cd:72:88:78:d8:51:6f:60:83:39:99: b8:29:9a:b2:ad:bd:5a:93:38:ce:14:f3:64:a0:b5: 05:b2:b5:69:9a:f6:b4:66:38:3a:9b:19:6a:6f:3a: a2:43:79:20:e6:64:7e:0a:01:97:7a:50:e5:68:89: de:3e:0d:5d:49:29:ff:57:32:f1:32:b3:6f:c9:5a: 96:b4:0c:7a:f4:99:d3:4e:88:ed:9f:72:73:e8:21: 59:9e:a8:6e:4a:13:08:81:70:ee:96:e6:2d:a9:f5: 45:e3:92:48:48:ec:a3:97:75:9c:b7:e6:8d:e9:22: b6:31:91:77:58:11:c2:0d:f2:8e:81:6d:02:e5:fc: 91:1f:03:fc:1d:c3:26:a0:14:61:95:50:2e:17:f9: 2a:18:5e:c4:98:58:21:e0:48:9a:ce:c8:c9:74:93: 11:05:ab:5e:21:ea:56:7b:fb:38:3a:65:cf:e2:64: 14:01:46:d3:b5:7b:4a:3b:c8:8a:3f:db:b7:15:6c: 36:a4:ac:86:df:f6:8f:f4:67:59:35:0a:6b:b3:06: 43:95:77:14:fb:bf:50:e0:bd:fc:cc:7e:72:ea:7b: 22:71:96:6e:53:43:a5:9d:ea:e0:0e:98:52:d3:93: c0:27:6c:9b:69:08:d7:e4:1b:86:d4:c0:79:f0:d8: 3d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C4:D2:D8:0F:3B:68:47:A3:CC:AD:DE:28:24:14:F3:34:B8:4E:C7 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bMTS2A87aEejzK3eKCQU8zS4Tsc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.227.81.0/24 194.146.45.0/24 IPv6: 2a0b:3c40:13::/48 Signature Algorithm: sha256WithRSAEncryption 19:ec:4e:8b:06:f8:ef:10:97:10:79:14:5b:06:e8:37:42:4f: 2e:bb:e1:cd:3f:29:9e:28:d9:c0:c7:f5:bd:0d:7c:55:7a:81: f6:1d:d0:34:3f:66:5a:11:0d:fb:ec:5b:d1:17:76:99:2c:a7: ac:ce:b4:f1:f1:f8:97:cd:b9:ac:56:72:53:47:a3:b2:2b:36: a4:5e:10:b9:c9:a9:e8:0c:72:74:60:f4:07:a8:61:96:b1:f2: fb:5c:9e:ac:21:b9:83:7e:7b:56:e0:33:dd:f2:64:e0:4d:d6: 02:2a:35:f1:b0:6e:f2:30:98:ac:a7:2a:cc:1c:f5:02:8f:40: 6a:1c:8d:ac:d7:8c:f2:d7:c7:54:5a:58:55:bc:65:75:a7:a4: f8:50:bf:de:8f:64:ee:9e:2f:47:34:88:23:63:70:85:c6:8b: 80:57:11:2c:05:56:8b:a6:7f:d4:96:a3:b3:89:4e:a1:b4:b0: 46:50:64:b0:27:a1:f7:99:7a:88:c1:bf:2d:8f:ef:08:46:72: 10:3e:77:43:db:4d:84:ed:3e:ea:72:67:21:e8:66:7c:2a:22: f2:64:ba:1c:22:76:89:4b:e4:80:ab:e6:3f:13:bf:1b:89:dd: 6c:88:69:98:64:07:8a:e4:0f:bf:83:40:a7:cf:66:29:25:ba: 7a:44:df:d0 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt/hE/wpcuRKlLKAuSHTLgaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2M0ZDJkODBmM2I2ODQ3YTNjY2FkZGUyODI0MTRmMzM0Yjg0ZWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd5ZzXKIeNhRb2CDOZm4KZqyrb1a kzjOFPNkoLUFsrVpmva0Zjg6mxlqbzqiQ3kg5mR+CgGXelDlaInePg1dSSn/VzLx MrNvyVqWtAx69JnTTojtn3Jz6CFZnqhuShMIgXDuluYtqfVF45JISOyjl3Wct+aN 6SK2MZF3WBHCDfKOgW0C5fyRHwP8HcMmoBRhlVAuF/kqGF7EmFgh4EiazsjJdJMR BateIepWe/s4OmXP4mQUAUbTtXtKO8iKP9u3FWw2pKyG3/aP9GdZNQprswZDlXcU +79Q4L38zH5y6nsicZZuU0OlnergDphS05PAJ2ybaQjX5BuG1MB58Ng9+wIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFGzE0tgPO2hHo8yt3igkFPM0uE7HMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvYk1UUzJBODdhRWVqekszZUtDUVU4elM0VHNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAueNRAwQA wpItMA8EAgACMAkDBwAqCzxAABMwDQYJKoZIhvcNAQELBQADggEBABnsTosG+O8Q lxB5FFsG6DdCTy674c0/KZ4o2cDH9b0NfFV6gfYd0DQ/ZloRDfvsW9EXdpksp6zO tPHx+JfNuaxWclNHo7IrNqReELnJqegMcnRg9AeoYZax8vtcnqwhuYN+e1bgM93y ZOBN1gIqNfGwbvIwmKynKswc9QKPQGocjazXjPLXx1RaWFW8ZXWnpPhQv96PZO6e L0c0iCNjcIXGi4BXESwFVoumf9SWo7OJTqG0sEZQZLAnofeZeojBvy2P7whGchA+ d0PbTYTtPupyZyHoZnwqIvJkuhwidolL5ICr5j8TvxuJ3WyIaZhkB4rkD7+DQKfP ZiklunpE39A= -----END CERTIFICATE-----Generated at Wed Jan 21 16:57:14 2026 by rpki-client