This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/Bf9RdHQMdQL9V8vN6-doDD0kdao.roa File: Bf9RdHQMdQL9V8vN6-doDD0kdao.roa (raw, json) Hash identifier: OeRuEu23I1npxCLbqKUi8RpgkFTQ1kB32heke6+KB6M= Subject key identifier: 05:FF:51:74:74:0C:75:02:FD:57:CB:CD:EB:E7:68:0C:3D:24:75:AA Certificate issuer: /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca Certificate serial: 019B79ECD481DDD2F7E93F62CADE1C32FBC3 Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/Bf9RdHQMdQL9V8vN6-doDD0kdao.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202908 IP address blocks: 194.124.190.0/24 maxlen: 24 194.124.191.0/24 maxlen: 24 194.147.68.0/24 maxlen: 24 194.147.69.0/24 maxlen: 24 2a0a:aec0::/29 maxlen: 48 2a0a:aec0:100b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 14:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d4:81:dd:d2:f7:e9:3f:62:ca:de:1c:32:fb:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05ff5174740c7502fd57cbcdebe7680c3d2475aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:aa:ab:5e:3d:9d:ce:20:a0:80:25:be:14:54: 46:dc:12:60:7f:3c:8c:e1:c1:c7:29:b4:0e:52:7d: af:9e:e9:18:13:3b:ea:6b:6f:5c:b7:88:69:17:b9: fd:d8:d7:5c:9e:1b:3b:91:e7:65:94:9e:2f:a3:f5: 59:c4:31:01:be:60:9f:43:71:68:1c:c8:cb:cc:eb: 8a:8f:69:28:b9:4e:68:53:1c:1e:0f:1d:5e:3e:a6: e8:ee:0a:1d:0a:78:55:26:05:94:34:72:2b:f3:c4: 06:4a:16:50:d1:4d:39:7f:8b:56:02:cc:9a:c6:78: 85:c7:67:e5:32:a9:94:2b:63:cb:21:4b:c9:e1:4b: 9a:52:0c:4f:50:c9:17:df:80:cb:67:e8:14:ea:2a: b5:19:e7:f1:79:94:06:33:56:b5:5c:68:5b:16:9b: ea:31:59:37:f6:a4:95:fe:c2:7e:60:19:f2:bc:74: a5:3e:ef:25:5d:73:4c:03:04:bc:92:f3:09:ff:fa: fb:8e:00:d5:2e:6c:7c:b3:5b:0b:f4:99:00:3e:56: b0:bb:4f:33:79:41:1d:4a:17:2b:3e:63:84:6a:d1: 16:c3:dc:07:a8:91:ab:08:32:45:31:ae:01:23:19: a9:f3:02:fd:2f:3a:08:81:d4:8e:c3:70:0e:58:6a: 21:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FF:51:74:74:0C:75:02:FD:57:CB:CD:EB:E7:68:0C:3D:24:75:AA X509v3 Authority Key Identifier: keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/Bf9RdHQMdQL9V8vN6-doDD0kdao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.124.190.0/23 194.147.68.0/23 IPv6: 2a0a:aec0::/29 Signature Algorithm: sha256WithRSAEncryption 8c:37:b1:5f:f3:4e:5e:8c:51:1b:46:25:fe:b9:90:22:ac:e4: 41:44:ef:c1:91:d9:20:8d:f6:fa:93:25:8d:84:ac:1b:5c:bd: d1:8c:fb:64:8a:4e:14:d7:cf:ef:b5:9c:95:8f:4f:0f:37:1f: f8:68:8d:68:d9:e2:2f:8e:24:b5:58:e3:5f:91:b6:9c:1b:b8: 32:60:73:b2:44:4d:db:eb:8f:e5:dd:ed:56:87:5d:44:de:e4: 2e:62:55:be:b2:fa:28:9a:06:14:ca:68:54:d1:42:6d:2b:0a: 58:d8:d4:39:08:80:ea:4c:77:dc:7b:a8:75:4d:86:b3:79:dd: 8c:04:59:61:d6:52:a6:c6:c6:af:ec:a3:c2:8d:66:60:25:45: 38:1a:37:9a:ce:39:27:02:20:f4:5f:18:ba:57:63:97:03:cb: bb:36:8a:94:dc:9f:54:a7:cf:5e:0c:ac:bd:79:b5:e6:7b:19: a3:af:f0:e2:56:ba:20:03:fd:17:d3:6a:f6:26:c7:03:f4:76: f3:7f:a7:71:78:10:d5:2d:a7:2e:d6:66:d5:16:e5:cb:27:84: 33:c5:22:50:df:15:ed:51:17:5c:2a:34:2e:45:49:ee:0d:7f: aa:3d:84:0a:8e:0c:d4:72:e2:a1:27:43:b3:0d:53:4d:c1:4b: 79:e3:ce:75 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57NSB3dL36T9iyt4cMvvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNGIzZTZhN2M4NzgzZmM4YTU3MTlmYmQ5ZjM3YjMyYzhj N2M1Y2EwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWZmNTE3NDc0MGM3NTAyZmQ1N2NiY2RlYmU3NjgwYzNkMjQ3NWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaqrXj2dziCggCW+FFRG3BJgfzyM 4cHHKbQOUn2vnukYEzvqa29ct4hpF7n92Ndcnhs7kedllJ4vo/VZxDEBvmCfQ3Fo HMjLzOuKj2kouU5oUxweDx1ePqbo7godCnhVJgWUNHIr88QGShZQ0U05f4tWAsya xniFx2flMqmUK2PLIUvJ4UuaUgxPUMkX34DLZ+gU6iq1GefxeZQGM1a1XGhbFpvq MVk39qSV/sJ+YBnyvHSlPu8lXXNMAwS8kvMJ//r7jgDVLmx8s1sL9JkAPlawu08z eUEdShcrPmOEatEWw9wHqJGrCDJFMa4BIxmp8wL9LzoIgdSOw3AOWGohYQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAX/UXR0DHUC/VfLzevnaAw9JHWqMB8GA1UdIwQY MBaAFGtLPmp8h4P8ilcZ+9nzezLIx8XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmIt NDMzMmM5NTdhMjJmLzEvQmY5UmRIUU1kUUw5Vjh2TjYtZG9ERDBrZGFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmItNDMzMmM5NTdhMjJm LzEvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBwny+AwQB wpNEMA0EAgACMAcDBQMqCq7AMA0GCSqGSIb3DQEBCwUAA4IBAQCMN7Ff805ejFEb RiX+uZAirORBRO/Bkdkgjfb6kyWNhKwbXL3RjPtkik4U18/vtZyVj08PNx/4aI1o 2eIvjiS1WONfkbacG7gyYHOyRE3b64/l3e1Wh11E3uQuYlW+svoomgYUymhU0UJt KwpY2NQ5CIDqTHfce6h1TYazed2MBFlh1lKmxsav7KPCjWZgJUU4GjeazjknAiD0 Xxi6V2OXA8u7NoqU3J9Up89eDKy9ebXmexmjr/DiVrogA/0X02r2JscD9Hbzf6dx eBDVLacu1mbVFuXLJ4QzxSJQ3xXtURdcKjQuRUnuDX+qPYQKjgzUcuKhJ0OzDVNN wUt54851 -----END CERTIFICATE-----Generated at Thu Jan 22 22:45:44 2026 by rpki-client