This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/B65rjwLsAKNHyDmSqKvHUJ8cNBc.roa File: B65rjwLsAKNHyDmSqKvHUJ8cNBc.roa (raw, json) Hash identifier: 5NrfUPDXXXmhJ+JmLFvf/QPQMfrwfuMZfIVQvRGPZHc= Subject key identifier: 07:AE:6B:8F:02:EC:00:A3:47:C8:39:92:A8:AB:C7:50:9F:1C:34:17 Certificate issuer: /CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Certificate serial: 019BF19545879D8720790DF564BBE8E53A77 Authority key identifier: 2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/B65rjwLsAKNHyDmSqKvHUJ8cNBc.roa Signing time: Sat 24 Jan 2026 19:57:30 +0000 ROA not before: Sat 24 Jan 2026 19:57:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208893 IP address blocks: 45.88.64.0/24 maxlen: 24 91.92.197.0/24 maxlen: 24 93.123.20.0/24 maxlen: 24 94.154.173.0/24 maxlen: 24 94.156.64.0/24 maxlen: 24 94.156.65.0/24 maxlen: 24 94.156.175.0/24 maxlen: 24 94.156.253.0/24 maxlen: 24 193.222.98.0/24 maxlen: 24 2a14:e200::/44 maxlen: 44 2a14:e200::/48 maxlen: 48 2a14:e200:1::/48 maxlen: 48 2a14:e200:2::/48 maxlen: 48 2a14:e200:3::/48 maxlen: 48 2a14:e200:10::/44 maxlen: 44 2a14:e200:20::/44 maxlen: 44 2a14:e200:40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.mft rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 01:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:95:45:87:9d:87:20:79:0d:f5:64:bb:e8:e5:3a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b76e1570cad7739fd0bff60632e05bc06f642e3 Validity Not Before: Jan 24 19:57:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07ae6b8f02ec00a347c83992a8abc7509f1c3417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f0:45:94:f8:59:4f:a2:e4:10:6b:86:78:94: b6:dd:68:fe:e2:6f:9a:ae:91:8c:9f:e4:14:c5:1c: bd:68:3e:52:4f:af:e4:29:b9:c4:25:19:8c:4d:28: ef:e4:1d:d5:ec:b3:06:cd:1f:9c:b6:e2:32:fc:1b: fc:1f:ff:ae:19:b7:55:6e:8a:dd:76:9c:cd:03:6a: 7b:35:73:d2:4c:9c:d0:08:a2:e9:76:85:26:5b:94: d6:c5:47:3d:a8:1b:d8:c0:59:09:8f:cc:99:32:64: 5d:fb:55:fa:53:20:7f:7c:69:81:86:0e:66:21:2b: 69:69:ab:1e:e8:26:8a:1a:42:dd:5a:2f:5a:ee:2f: 24:2e:fd:04:78:be:31:5d:f7:2c:28:6a:e9:67:2b: f0:7a:11:e4:5f:c8:80:6e:93:b1:4d:46:3a:d7:78: a4:23:95:6d:12:e7:74:0f:e8:1d:4b:95:db:5c:98: 97:1f:a9:af:c0:51:e0:2e:96:4a:86:bd:27:a9:16: 73:fc:c0:01:2b:80:10:be:1a:67:1b:ff:55:c7:9a: 26:b0:ef:74:99:8f:a3:3f:59:f4:f5:35:de:9d:75: ea:c8:a9:78:16:98:38:e8:ea:eb:94:80:f1:d3:da: c2:f5:19:12:c5:4a:ac:0d:aa:a1:9c:03:a7:ba:f2: e1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AE:6B:8F:02:EC:00:A3:47:C8:39:92:A8:AB:C7:50:9F:1C:34:17 X509v3 Authority Key Identifier: keyid:2B:76:E1:57:0C:AD:77:39:FD:0B:FF:60:63:2E:05:BC:06:F6:42:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3bhVwytdzn9C_9gYy4FvAb2QuM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/B65rjwLsAKNHyDmSqKvHUJ8cNBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f0f945-dc3b-4672-942d-7f6ee7a76565/1/K3bhVwytdzn9C_9gYy4FvAb2QuM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.64.0/24 91.92.197.0/24 93.123.20.0/24 94.154.173.0/24 94.156.64.0/23 94.156.175.0/24 94.156.253.0/24 193.222.98.0/24 IPv6: 2a14:e200::-2a14:e200:2f:ffff:ffff:ffff:ffff:ffff 2a14:e200:40::/44 Signature Algorithm: sha256WithRSAEncryption 1f:58:00:14:d4:98:05:52:10:22:12:25:d9:c1:8a:8f:f9:2d: b9:52:33:17:59:5b:5b:15:fb:dc:d6:e4:36:e7:11:b4:df:b2: 2c:68:7f:4a:c5:86:93:b2:6b:3d:17:aa:eb:6d:59:b8:9e:9d: 99:bd:ef:c6:cb:39:e5:d9:53:2b:42:14:d6:8a:1a:c4:d3:f1: fd:1f:ea:47:4d:11:9f:09:1c:f3:ed:52:58:c4:e0:7b:b2:c2: 35:74:9c:e0:77:b2:67:a1:cc:73:c4:9e:36:27:42:28:8c:4a: 7e:4c:10:b4:bf:7f:8a:99:36:85:d7:66:7c:6c:fe:62:21:89: b6:0c:48:b3:95:77:b9:4d:9a:b3:b4:19:67:a2:9c:4d:bd:ac: db:db:70:8d:16:95:f5:0e:ef:a3:7a:64:c0:73:8e:89:53:85: 27:23:54:e2:a5:e8:c7:8b:60:7a:d4:0d:ae:4e:b1:fd:e7:5e: c9:19:83:42:ca:d9:b9:f7:09:b8:56:30:ef:b1:19:16:38:ce: d1:fd:68:3b:03:ef:16:d7:7e:d9:10:04:05:76:14:d4:b2:d1: 47:d6:6b:ed:cf:c6:d3:80:ee:7e:af:c4:f5:c5:2d:57:cc:40: 2a:73:99:d4:0b:9e:f2:be:c7:31:0d:7b:70:71:e5:24:78:14: 55:52:c9:4f -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZvxlUWHnYcgeQ31ZLvo5Tp3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiNzZlMTU3MGNhZDc3MzlmZDBiZmY2MDYzMmUwNWJjMDZm NjQyZTMwHhcNMjYwMTI0MTk1NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2FlNmI4ZjAyZWMwMGEzNDdjODM5OTJhOGFiYzc1MDlmMWMzNDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfBFlPhZT6LkEGuGeJS23Wj+4m+a rpGMn+QUxRy9aD5ST6/kKbnEJRmMTSjv5B3V7LMGzR+ctuIy/Bv8H/+uGbdVbord dpzNA2p7NXPSTJzQCKLpdoUmW5TWxUc9qBvYwFkJj8yZMmRd+1X6UyB/fGmBhg5m IStpaase6CaKGkLdWi9a7i8kLv0EeL4xXfcsKGrpZyvwehHkX8iAbpOxTUY613ik I5VtEud0D+gdS5XbXJiXH6mvwFHgLpZKhr0nqRZz/MABK4AQvhpnG/9Vx5omsO90 mY+jP1n09TXenXXqyKl4Fpg46OrrlIDx09rC9RkSxUqsDaqhnAOnuvLhVwIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFAeua48C7ACjR8g5kqirx1CfHDQXMB8GA1UdIwQY MBaAFCt24VcMrXc5/Qv/YGMuBbwG9kLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQt N2Y2ZWU3YTc2NTY1LzEvQjY1cmp3THNBS05IeURtU3FLdkhVSjhjTkJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9mMGY5NDUtZGMzYi00NjcyLTk0MmQtN2Y2ZWU3YTc2NTY1 LzEvSzNiaFZ3eXRkem45Q185Z1l5NEZ2QWIyUXVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjA2BAIAATAwAwQALVhAAwQA W1zFAwQAXXsUAwQAXpqtAwQBXpxAAwQAXpyvAwQAXpz9AwQAwd5iMCAEAgACMBow DwMEASoU4gMHBCoU4gAAIAMHBCoU4gAAQDANBgkqhkiG9w0BAQsFAAOCAQEAH1gA FNSYBVIQIhIl2cGKj/ktuVIzF1lbWxX73NbkNucRtN+yLGh/SsWGk7JrPReq621Z uJ6dmb3vxss55dlTK0IU1ooaxNPx/R/qR00Rnwkc8+1SWMTge7LCNXSc4HeyZ6HM c8SeNidCKIxKfkwQtL9/ipk2hddmfGz+YiGJtgxIs5V3uU2as7QZZ6KcTb2s29tw jRaV9Q7vo3pkwHOOiVOFJyNU4qXox4tgetQNrk6x/edeyRmDQsrZufcJuFYw77EZ FjjO0f1oOwPvFtd+2RAEBXYU1LLRR9Zr7c/G04Dufq/E9cUtV8xAKnOZ1Aue8r7H MQ17cHHlJHgUVVLJTw== -----END CERTIFICATE-----Generated at Mon Feb 2 09:40:01 2026 by rpki-client