This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/bKdz8rFHyrzAIFA57TIT19mDKGc.roa File: bKdz8rFHyrzAIFA57TIT19mDKGc.roa (raw, json) Hash identifier: 22Fu9At8wBjrLfQsilSYa4ZG0swleKB41MAi2nrwzHg= Subject key identifier: 6C:A7:73:F2:B1:47:CA:BC:C0:20:50:39:ED:32:13:D7:D9:83:28:67 Certificate issuer: /CN=fc0487a04f5aa442be519a17cb2bb22d783df23b Certificate serial: 019B797E526666E84E700F6238038C6A4E3B Authority key identifier: FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/bKdz8rFHyrzAIFA57TIT19mDKGc.roa Signing time: Thu 01 Jan 2026 12:18:00 +0000 ROA not before: Thu 01 Jan 2026 12:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44764 IP address blocks: 46.29.216.0/21 maxlen: 21 78.41.120.0/21 maxlen: 21 92.42.64.0/21 maxlen: 21 185.46.132.0/22 maxlen: 22 2a00:13e0::/32 maxlen: 32 2a00:1400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.mft rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:52:66:66:e8:4e:70:0f:62:38:03:8c:6a:4e:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc0487a04f5aa442be519a17cb2bb22d783df23b Validity Not Before: Jan 1 12:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ca773f2b147cabcc0205039ed3213d7d9832867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:02:22:cc:2b:89:a7:f6:ca:65:ba:00:e1:b8: be:8e:3e:96:85:d9:3c:ad:93:30:59:56:bd:eb:96: 1a:97:b3:91:94:c0:cd:e5:72:30:7c:29:bf:82:26: 6c:ce:b2:aa:49:e9:4b:f3:72:24:83:1e:d0:2a:89: 72:76:1d:f8:b2:df:32:ef:23:0a:c4:75:d4:1d:c7: ac:73:b6:88:68:96:3b:d1:1a:96:6d:ba:0e:81:46: b7:72:ae:ec:d1:c6:74:87:78:ee:8a:23:da:1e:5a: b4:ae:c5:f8:7b:bc:7b:44:f4:5f:2e:64:9a:ec:1d: 0c:b8:b4:07:95:d7:c5:a6:96:12:e9:fc:1f:87:3a: df:6d:02:68:70:f9:2c:e9:72:bf:62:f8:ab:99:26: 7b:f8:bc:c8:d7:cd:8c:2c:24:81:e9:47:1b:c7:23: 93:e8:1d:77:04:35:a9:b8:cc:55:8e:9d:fb:73:8c: 87:3f:3a:ca:8d:4b:b0:fb:43:71:99:f1:ca:39:42: 49:2e:d1:d3:16:34:d2:80:52:8a:bc:15:8d:20:72: 6c:3c:e5:6e:ca:75:82:b1:0d:1e:90:cf:57:51:f3: d0:2c:05:d7:9d:20:82:36:59:09:73:09:48:46:a4: 52:fe:fd:e0:3b:93:4c:4b:df:33:c2:4b:8b:ca:42: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A7:73:F2:B1:47:CA:BC:C0:20:50:39:ED:32:13:D7:D9:83:28:67 X509v3 Authority Key Identifier: keyid:FC:04:87:A0:4F:5A:A4:42:BE:51:9A:17:CB:2B:B2:2D:78:3D:F2:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ASHoE9apEK-UZoXyyuyLXg98js.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/bKdz8rFHyrzAIFA57TIT19mDKGc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/781a61-7d03-4a8e-90ba-1b3a36e1aca8/1/_ASHoE9apEK-UZoXyyuyLXg98js.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.216.0/21 78.41.120.0/21 92.42.64.0/21 185.46.132.0/22 IPv6: 2a00:13e0::/32 2a00:1400::/32 Signature Algorithm: sha256WithRSAEncryption 22:db:d1:75:d3:55:11:53:f3:71:d2:df:81:eb:a4:f4:d4:cd: 04:26:cd:e3:20:0b:f7:86:74:a8:6c:ef:b6:9e:53:85:20:f9: d2:10:09:f4:6e:18:cd:ee:d9:70:b5:b0:be:af:ef:79:0f:71: aa:22:6b:58:8e:57:92:57:3a:41:ff:da:f8:c4:ee:b1:ed:fe: 8a:cb:61:67:b7:b1:a2:8f:b3:33:f8:23:89:d6:40:f4:f6:2a: 2b:d9:75:f9:33:de:fb:ac:55:bf:90:6f:d9:0d:24:d1:58:35: 35:5d:1f:3c:71:57:dd:64:6d:c5:76:f6:4c:72:2b:8c:1d:8c: 3e:08:d3:e0:81:ab:f3:d4:79:96:ff:56:d3:72:6a:19:62:1f: 6b:68:b1:6d:17:b5:00:ff:3e:0b:fe:58:2f:ef:ed:b7:80:20: b9:a9:80:66:0e:d4:16:f0:df:30:8a:56:e7:7d:c1:58:c3:ba: 48:d6:6f:39:a9:ac:b8:f1:a8:d8:f6:b6:28:a7:d8:2d:05:f3: da:07:67:e2:de:73:9c:ab:6c:1f:53:fe:a1:7b:09:38:7c:63: 44:7c:db:6b:e6:2c:1b:1d:3a:85:a0:97:99:af:e0:af:46:c6: 30:c5:d8:07:6f:fe:92:0f:5a:28:27:0e:0f:41:44:38:7f:32: 98:71:be:8e -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt5flJmZuhOcA9iOAOMak47MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMDQ4N2EwNGY1YWE0NDJiZTUxOWExN2NiMmJiMjJkNzgz ZGYyM2IwHhcNMjYwMTAxMTIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2E3NzNmMmIxNDdjYWJjYzAyMDUwMzllZDMyMTNkN2Q5ODMyODY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wIizCuJp/bKZboA4bi+jj6Whdk8 rZMwWVa965Yal7ORlMDN5XIwfCm/giZszrKqSelL83Ikgx7QKolydh34st8y7yMK xHXUHcesc7aIaJY70RqWbboOgUa3cq7s0cZ0h3juiiPaHlq0rsX4e7x7RPRfLmSa 7B0MuLQHldfFppYS6fwfhzrfbQJocPks6XK/YvirmSZ7+LzI182MLCSB6UcbxyOT 6B13BDWpuMxVjp37c4yHPzrKjUuw+0NxmfHKOUJJLtHTFjTSgFKKvBWNIHJsPOVu ynWCsQ0ekM9XUfPQLAXXnSCCNlkJcwlIRqRS/v3gO5NMS98zwkuLykJEnwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFGync/KxR8q8wCBQOe0yE9fZgyhnMB8GA1UdIwQY MBaAFPwEh6BPWqRCvlGaF8srsi14PfI7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEt MWIzYTM2ZTFhY2E4LzEvYktkejhyRkh5cnpBSUZBNTdUSVQxOW1ES0djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83ODFhNjEtN2QwMy00YThlLTkwYmEtMWIzYTM2ZTFhY2E4 LzEvX0FTSG9FOWFwRUstVVpvWHl5dXlMWGc5OGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQDLh3YAwQD Til4AwQDXCpAAwQCuS6EMBQEAgACMA4DBQAqABPgAwUAKgAUADANBgkqhkiG9w0B AQsFAAOCAQEAItvRddNVEVPzcdLfgeuk9NTNBCbN4yAL94Z0qGzvtp5ThSD50hAJ 9G4Yze7ZcLWwvq/veQ9xqiJrWI5Xklc6Qf/a+MTuse3+isthZ7exoo+zM/gjidZA 9PYqK9l1+TPe+6xVv5Bv2Q0k0Vg1NV0fPHFX3WRtxXb2THIrjB2MPgjT4IGr89R5 lv9W03JqGWIfa2ixbRe1AP8+C/5YL+/tt4AguamAZg7UFvDfMIpW533BWMO6SNZv OamsuPGo2Pa2KKfYLQXz2gdn4t5znKtsH1P+oXsJOHxjRHzba+YsGx06haCXma/g r0bGMMXYB2/+kg9aKCcOD0FEOH8ymHG+jg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:09 2026 by rpki-client