This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BrWqmn6ufu1c3ybbHYyn6m2ftOw.roa File: BrWqmn6ufu1c3ybbHYyn6m2ftOw.roa (raw, json) Hash identifier: pAOxKx1gtDUQFlIMdZFxk4PbU1mAiO8jSv4488AwJjA= Subject key identifier: 06:B5:AA:9A:7E:AE:7E:ED:5C:DF:26:DB:1D:8C:A7:EA:6D:9F:B4:EC Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B7758BDA42870D243BBD67661C0F2B4FB Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BrWqmn6ufu1c3ybbHYyn6m2ftOw.roa Signing time: Thu 01 Jan 2026 02:17:43 +0000 ROA not before: Thu 01 Jan 2026 02:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212598 IP address blocks: 185.254.29.0/24 maxlen: 24 185.254.236.0/24 maxlen: 24 185.254.239.0/24 maxlen: 24 193.35.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:bd:a4:28:70:d2:43:bb:d6:76:61:c0:f2:b4:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 1 02:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06b5aa9a7eae7eed5cdf26db1d8ca7ea6d9fb4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:aa:40:0a:42:6d:86:d1:09:da:5f:57:cc: cb:7c:4d:62:10:88:d5:25:f4:fe:eb:19:20:ad:43: ab:44:8c:c2:6c:b7:1a:ba:ec:99:c1:6f:8e:61:b0: f4:84:08:82:40:10:77:67:34:f7:ed:67:fb:73:68: fd:60:91:97:0e:da:88:3e:a9:15:e9:28:e1:09:53: 1e:11:b4:dd:54:08:33:ab:ec:09:a5:6d:d0:a4:b9: 7e:1a:99:80:70:48:aa:60:1d:a2:4a:d0:4c:0a:56: 5a:75:4f:df:5c:5c:89:40:e5:73:27:22:d7:f8:4b: 0a:7f:43:45:23:2d:f6:5b:82:e0:f3:97:ae:57:2c: d7:03:d0:0f:61:af:ea:5d:1d:3b:bf:2d:1f:fd:af: 02:c3:30:d0:54:e0:f9:84:32:3a:61:b5:65:5e:5a: c7:cd:bc:a9:e6:3c:44:df:96:b2:d5:8b:03:07:e8: 4b:ae:41:72:5d:a9:3d:ca:07:0c:88:cf:80:97:76: 70:b0:31:82:15:c5:bf:cc:4f:2b:a3:38:48:d3:ef: 49:1d:72:b6:a5:61:9b:4c:34:96:c8:9d:77:77:2f: cf:5f:e8:3e:75:86:f7:bb:57:7d:d0:56:5c:83:04: 06:27:e2:a0:4e:af:30:ac:f8:4d:e9:75:61:d0:fa: 5f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B5:AA:9A:7E:AE:7E:ED:5C:DF:26:DB:1D:8C:A7:EA:6D:9F:B4:EC X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/BrWqmn6ufu1c3ybbHYyn6m2ftOw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.29.0/24 185.254.236.0/24 185.254.239.0/24 193.35.152.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:0a:a3:29:aa:3d:ff:bc:bc:71:93:aa:45:d8:4f:9d:e0:3e: c2:f9:da:c3:ca:0c:bf:47:38:6b:ee:45:ac:a2:cc:0f:58:29: 5a:fc:f0:46:71:65:67:49:c6:39:64:b6:75:c2:42:41:14:b5: f3:20:df:55:85:e3:79:4d:37:35:89:9f:de:8c:e4:53:8f:40: 04:86:6f:e6:85:95:5f:4d:3c:93:79:82:5b:5e:1a:d1:be:82: f7:17:7a:86:27:5d:ef:89:3e:f8:90:d6:75:32:28:ba:b3:e7: 68:4c:cc:3b:b5:29:f2:44:05:b7:38:23:91:e2:a1:63:29:42: 23:f0:23:62:1e:74:66:d1:c4:ce:21:98:6e:97:da:5d:e6:43: 67:73:49:b1:57:34:d7:52:cc:5f:0c:ad:9a:fd:40:a3:fc:d4: a1:15:1e:e8:71:fc:6f:d6:a1:e2:d2:3e:6d:0f:23:e0:dd:c5: 5f:d4:03:26:67:28:96:b5:ed:38:97:48:99:17:e2:c0:6d:3f: 0b:e9:27:30:f9:5a:de:1f:32:d6:d7:cd:53:6b:f8:2e:4f:bc: 66:c8:9e:90:e5:d2:ab:87:d9:df:8d:f9:ed:5e:5a:6b:19:9b: 48:d0:a7:90:60:ee:94:2a:59:85:ef:3a:cb:2d:ac:7c:67:a2: d8:dc:0e:3b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt3WL2kKHDSQ7vWdmHA8rT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTAxMDIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmI1YWE5YTdlYWU3ZWVkNWNkZjI2ZGIxZDhjYTdlYTZkOWZiNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1qqQApCbYbRCdpfV8zLfE1iEIjV JfT+6xkgrUOrRIzCbLcauuyZwW+OYbD0hAiCQBB3ZzT37Wf7c2j9YJGXDtqIPqkV 6SjhCVMeEbTdVAgzq+wJpW3QpLl+GpmAcEiqYB2iStBMClZadU/fXFyJQOVzJyLX +EsKf0NFIy32W4Lg85euVyzXA9APYa/qXR07vy0f/a8CwzDQVOD5hDI6YbVlXlrH zbyp5jxE35ay1YsDB+hLrkFyXak9ygcMiM+Al3ZwsDGCFcW/zE8rozhI0+9JHXK2 pWGbTDSWyJ13dy/PX+g+dYb3u1d90FZcgwQGJ+KgTq8wrPhN6XVh0PpfXQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAa1qpp+rn7tXN8m2x2Mp+ptn7TsMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvQnJXcW1uNnVmdTFjM3liYkhZeW42bTJmdE93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuf4dAwQA uf7sAwQAuf7vAwQAwSOYMA0GCSqGSIb3DQEBCwUAA4IBAQAtCqMpqj3/vLxxk6pF 2E+d4D7C+drDygy/Rzhr7kWsoswPWCla/PBGcWVnScY5ZLZ1wkJBFLXzIN9VheN5 TTc1iZ/ejORTj0AEhm/mhZVfTTyTeYJbXhrRvoL3F3qGJ13viT74kNZ1Mii6s+do TMw7tSnyRAW3OCOR4qFjKUIj8CNiHnRm0cTOIZhul9pd5kNnc0mxVzTXUsxfDK2a /UCj/NShFR7ocfxv1qHi0j5tDyPg3cVf1AMmZyiWte04l0iZF+LAbT8L6Scw+Vre HzLW181Ta/guT7xmyJ6Q5dKrh9nfjfntXlprGZtI0KeQYO6UKlmF7zrLLax8Z6LY 3A47 -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:24 2026 by rpki-client