This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/d0KoLmpFubQ_64Qc83h5i1L505w.roa File: d0KoLmpFubQ_64Qc83h5i1L505w.roa (raw, json) Hash identifier: zAJ7EXLhHFfDZGHhK77ZVPQkFypogyCaEsnMPH+/6fI= Subject key identifier: 77:42:A8:2E:6A:45:B9:B4:3F:EB:84:1C:F3:78:79:8B:52:F9:D3:9C Certificate issuer: /CN=bbe128dcb6810ffdc502ba3047cd419132da2274 Certificate serial: 019B7A5A6B835FFF475A8F08D47FB661A474 Authority key identifier: BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/d0KoLmpFubQ_64Qc83h5i1L505w.roa Signing time: Thu 01 Jan 2026 16:18:24 +0000 ROA not before: Thu 01 Jan 2026 16:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25460 IP address blocks: 5.61.120.0/21 maxlen: 21 45.154.208.0/22 maxlen: 22 185.118.28.0/22 maxlen: 22 2a01:5ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.mft rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:6b:83:5f:ff:47:5a:8f:08:d4:7f:b6:61:a4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbe128dcb6810ffdc502ba3047cd419132da2274 Validity Not Before: Jan 1 16:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7742a82e6a45b9b43feb841cf378798b52f9d39c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:dc:8b:17:01:97:03:35:7b:3d:4e:ce:49:6d: c0:83:09:71:53:93:53:07:75:b1:a3:a8:8e:86:b5: f1:60:bb:cc:83:95:65:3c:4d:64:2b:33:fa:fc:6c: e3:81:53:1d:63:30:a9:f6:48:81:50:bf:c6:de:8b: 6f:98:64:88:2a:1b:f7:bd:30:01:24:74:cc:05:82: 71:3b:55:64:72:78:5f:40:2b:1a:0c:75:7a:46:62: cd:94:bc:33:3d:06:17:8f:d3:ce:3e:4f:49:e9:95: 8b:19:d9:6d:6d:4f:51:7a:0f:8c:b3:79:c4:8e:8a: 28:da:22:97:c5:be:6e:44:7b:2d:de:b1:07:51:5b: 3d:85:8b:00:ac:2e:63:c9:f4:87:01:3c:59:1b:ab: 59:e1:da:64:fa:ac:12:aa:e0:02:b3:0a:72:30:f5: 39:19:c5:71:05:b1:3d:24:6a:37:2c:bb:e3:e3:34: 30:c8:6a:52:2d:1b:03:66:31:f3:fa:e3:97:e6:90: 49:e5:4a:48:89:b6:2e:fb:ec:06:fe:70:bf:5e:76: 4d:1b:52:03:c3:65:58:98:db:2f:88:fa:92:ac:16: d3:1c:f3:77:8f:85:fb:2c:65:90:aa:06:b7:6d:2b: f7:c1:80:de:69:df:e1:95:df:0f:c8:f8:92:6e:32: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:42:A8:2E:6A:45:B9:B4:3F:EB:84:1C:F3:78:79:8B:52:F9:D3:9C X509v3 Authority Key Identifier: keyid:BB:E1:28:DC:B6:81:0F:FD:C5:02:BA:30:47:CD:41:91:32:DA:22:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-Eo3LaBD_3FArowR81BkTLaInQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/d0KoLmpFubQ_64Qc83h5i1L505w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c071a8-54aa-4abd-8127-edf7bb653f13/1/u-Eo3LaBD_3FArowR81BkTLaInQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.61.120.0/21 45.154.208.0/22 185.118.28.0/22 IPv6: 2a01:5ac0::/32 Signature Algorithm: sha256WithRSAEncryption 91:f6:95:f1:bc:04:da:a1:e4:71:23:b8:d9:be:3c:9c:01:5b: 70:0a:62:d6:da:8f:3a:6c:ec:3a:ba:36:41:42:b9:06:d0:4c: dc:d6:c3:b5:c3:4b:c0:f4:7c:11:fc:48:c8:72:bf:62:66:6f: 64:2b:40:e1:b4:c5:19:ee:79:68:77:a7:be:ec:bd:61:93:e5: 68:59:60:ef:d0:b8:a7:07:d8:aa:45:c2:23:44:e1:4e:70:3a: 55:7c:d8:a5:7f:4a:67:33:2d:c0:84:89:47:b9:05:82:b3:02: ea:b1:fe:3b:d5:37:61:1e:ed:6c:65:38:22:0c:0f:fb:b6:98: b9:ad:43:ef:2e:e0:73:56:21:9a:d4:c8:29:c5:d6:8c:24:0c: f3:78:ea:ef:0b:c0:9f:b6:d4:86:0c:b7:a9:1b:6b:8b:ff:fc: 96:fa:1b:c9:1d:7d:d0:36:59:a3:1c:31:e5:02:7c:51:ba:fa: 48:73:a4:36:ea:d1:b4:5d:16:82:00:63:0e:16:43:d0:b2:62: 7c:88:b8:ab:a5:ab:43:22:4c:ff:fd:e6:46:1d:72:8a:e2:9b: ac:b6:5b:28:36:d9:0d:7e:94:78:3b:05:0d:1a:44:f9:64:b5: 61:9e:44:77:8f:77:2a:a0:60:93:18:f5:fa:62:60:cf:6d:ce: 66:17:ef:ae -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WmuDX/9HWo8I1H+2YaR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZTEyOGRjYjY4MTBmZmRjNTAyYmEzMDQ3Y2Q0MTkxMzJk YTIyNzQwHhcNMjYwMTAxMTYxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzQyYTgyZTZhNDViOWI0M2ZlYjg0MWNmMzc4Nzk4YjUyZjlkMzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidyLFwGXAzV7PU7OSW3AgwlxU5NT B3Wxo6iOhrXxYLvMg5VlPE1kKzP6/GzjgVMdYzCp9kiBUL/G3otvmGSIKhv3vTAB JHTMBYJxO1VkcnhfQCsaDHV6RmLNlLwzPQYXj9POPk9J6ZWLGdltbU9Reg+Ms3nE jooo2iKXxb5uRHst3rEHUVs9hYsArC5jyfSHATxZG6tZ4dpk+qwSquACswpyMPU5 GcVxBbE9JGo3LLvj4zQwyGpSLRsDZjHz+uOX5pBJ5UpIibYu++wG/nC/XnZNG1ID w2VYmNsviPqSrBbTHPN3j4X7LGWQqga3bSv3wYDead/hld8PyPiSbjLLLQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHdCqC5qRbm0P+uEHPN4eYtS+dOcMB8GA1UdIwQY MBaAFLvhKNy2gQ/9xQK6MEfNQZEy2iJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjct ZWRmN2JiNjUzZjEzLzEvZDBLb0xtcEZ1YlFfNjRRYzgzaDVpMUw1MDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9jMDcxYTgtNTRhYS00YWJkLTgxMjctZWRmN2JiNjUzZjEz LzEvdS1FbzNMYUJEXzNGQXJvd1I4MUJrVExhSW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBT14AwQC LZrQAwQCuXYcMA0EAgACMAcDBQAqAVrAMA0GCSqGSIb3DQEBCwUAA4IBAQCR9pXx vATaoeRxI7jZvjycAVtwCmLW2o86bOw6ujZBQrkG0Ezc1sO1w0vA9HwR/EjIcr9i Zm9kK0DhtMUZ7nlod6e+7L1hk+VoWWDv0LinB9iqRcIjROFOcDpVfNilf0pnMy3A hIlHuQWCswLqsf471TdhHu1sZTgiDA/7tpi5rUPvLuBzViGa1MgpxdaMJAzzeOrv C8CfttSGDLepG2uL//yW+hvJHX3QNlmjHDHlAnxRuvpIc6Q26tG0XRaCAGMOFkPQ smJ8iLirpatDIkz//eZGHXKK4pustlsoNtkNfpR4OwUNGkT5ZLVhnkR3j3cqoGCT GPX6YmDPbc5mF++u -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:41 2026 by rpki-client