This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/bC2nxaXOoHLRq70D4NmWbSzAMRA.roa File: bC2nxaXOoHLRq70D4NmWbSzAMRA.roa (raw, json) Hash identifier: Rlixk9Fe/cWKW5omfOghhyxI9gFtiGAWS+9ajtBV+dc= Subject key identifier: 6C:2D:A7:C5:A5:CE:A0:72:D1:AB:BD:03:E0:D9:96:6D:2C:C0:31:10 Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Certificate serial: 019C05D6D211CDE4FA6860E51BFFED2F8ADA Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/bC2nxaXOoHLRq70D4NmWbSzAMRA.roa Signing time: Wed 28 Jan 2026 18:21:30 +0000 ROA not before: Wed 28 Jan 2026 18:21:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48539 IP address blocks: 109.205.189.0/24 maxlen: 24 146.19.131.0/24 maxlen: 24 178.212.137.0/24 maxlen: 24 194.63.144.0/24 maxlen: 24 194.147.218.0/24 maxlen: 24 213.239.152.0/24 maxlen: 24 213.239.153.0/24 maxlen: 24 2a11:6a00::/48 maxlen: 48 2a12:2780::/48 maxlen: 48 2a12:8200::/48 maxlen: 48 2a12:ab00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:d6:d2:11:cd:e4:fa:68:60:e5:1b:ff:ed:2f:8a:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Validity Not Before: Jan 28 18:21:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c2da7c5a5cea072d1abbd03e0d9966d2cc03110 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:99:8d:0d:a0:98:94:2a:99:2a:b7:08:57:71: f0:3e:bc:ea:7f:db:0d:3d:ad:78:d1:2e:7a:56:ad: 6e:59:b5:44:1a:51:9b:e0:60:b4:7a:22:ae:3a:2a: ff:20:8c:21:57:3b:df:27:f7:be:2a:d5:25:bc:4f: 14:18:95:74:20:a1:0c:84:3d:dd:0d:67:0b:9a:59: 46:84:ab:6e:a7:fa:5c:6d:d8:a2:fb:bc:c5:35:b9: 46:dd:fc:9c:b1:a3:c5:d8:68:8b:bc:da:c4:35:87: 19:19:d8:e3:bb:a9:96:00:cc:9f:43:72:0a:c7:02: 6d:26:7e:77:93:5c:3c:8d:d8:39:70:55:88:06:1d: e9:9c:fd:73:7c:45:f9:c8:c7:c2:cb:96:22:ae:55: 15:4f:29:e0:71:f7:4e:83:54:d3:32:6a:2b:e4:0e: bf:14:46:26:64:b2:c9:15:46:14:9d:39:69:74:1c: 27:e5:3c:ec:85:f7:1a:be:08:95:5e:40:52:3a:5f: 53:3c:e2:02:09:83:28:92:f6:cc:8e:c9:bc:46:11: 66:64:7d:6f:99:b3:3f:e7:61:2e:ad:e6:cb:38:28: 2d:90:67:18:72:28:2c:f5:54:9e:e6:d7:6e:99:8f: 8d:7f:2c:e2:e4:4f:a0:31:cb:43:91:25:d0:19:4f: 42:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2D:A7:C5:A5:CE:A0:72:D1:AB:BD:03:E0:D9:96:6D:2C:C0:31:10 X509v3 Authority Key Identifier: keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/bC2nxaXOoHLRq70D4NmWbSzAMRA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.205.189.0/24 146.19.131.0/24 178.212.137.0/24 194.63.144.0/24 194.147.218.0/24 213.239.152.0/23 IPv6: 2a11:6a00::/48 2a12:2780::/48 2a12:8200::/48 2a12:ab00::/48 Signature Algorithm: sha256WithRSAEncryption a9:13:c8:9f:88:09:96:c1:86:f9:91:e8:7f:8e:a4:c8:eb:aa: f7:71:f9:4e:ef:27:9b:4d:89:4e:01:4b:ef:af:95:60:04:28: e1:3b:ae:f1:88:f8:8c:d8:7e:59:c6:aa:50:e4:1e:d5:d8:31: cb:e4:ad:e8:6d:bd:60:3a:44:f0:61:b6:b6:a7:0a:cb:96:b4: d4:e2:bb:a3:8b:76:4c:79:4e:6b:1e:e3:17:11:cf:97:e1:06: 84:df:02:38:4c:f3:72:e5:de:ac:43:ca:0f:36:da:fe:20:69: 10:c6:de:de:1b:9e:2b:70:76:69:2a:a1:13:b8:a6:eb:5e:e6: 46:e0:3b:1f:a1:9c:e4:43:29:3a:04:9d:45:b4:24:68:18:7e: 0c:75:ac:09:31:28:7d:ac:14:6a:b0:c1:84:04:f8:aa:0b:59: 94:73:80:80:a5:a1:8b:9b:f9:ec:86:21:ca:7b:01:c8:8d:10: 3e:a8:15:fa:f4:ee:4a:43:51:2d:db:15:e5:41:35:d3:f5:bc: db:bb:b2:45:81:39:9b:82:30:28:ca:0c:13:9c:d1:42:fd:7c: b8:72:0e:3f:03:a2:7e:72:58:80:6b:0e:f6:9a:40:eb:3e:c3: 55:bc:c7:d1:b3:95:5c:29:80:ff:08:db:bd:3f:fc:d5:22:b1: eb:ff:3c:76 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZwF1tIRzeT6aGDlG//tL4raMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2NjOGY0YjM3ZDg5MjI4Y2QwMjNkMjUyMWQyOTk2OGRl MGI5MjUwHhcNMjYwMTI4MTgyMTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzJkYTdjNWE1Y2VhMDcyZDFhYmJkMDNlMGQ5OTY2ZDJjYzAzMTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pmNDaCYlCqZKrcIV3HwPrzqf9sN Pa140S56Vq1uWbVEGlGb4GC0eiKuOir/IIwhVzvfJ/e+KtUlvE8UGJV0IKEMhD3d DWcLmllGhKtup/pcbdii+7zFNblG3fycsaPF2GiLvNrENYcZGdjju6mWAMyfQ3IK xwJtJn53k1w8jdg5cFWIBh3pnP1zfEX5yMfCy5YirlUVTyngcfdOg1TTMmor5A6/ FEYmZLLJFUYUnTlpdBwn5TzshfcavgiVXkBSOl9TPOICCYMokvbMjsm8RhFmZH1v mbM/52EurebLOCgtkGcYcigs9VSe5tdumY+Nfyzi5E+gMctDkSXQGU9CYwIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFGwtp8WlzqBy0au9A+DZlm0swDEQMB8GA1UdIwQY MBaAFLzMyPSzfYkijNAj0lIdKZaN4LklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYt MDIxNWM0ZWFhN2MzLzEvYkMybnhhWE9vSExScTcwRDRObVdiU3pBTVJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYtMDIxNWM0ZWFhN2Mz LzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDAqBAIAATAkAwQAbc29AwQA khODAwQAstSJAwQAwj+QAwQAwpPaAwQB1e+YMCoEAgACMCQDBwAqEWoAAAADBwAq EieAAAADBwAqEoIAAAADBwAqEqsAAAAwDQYJKoZIhvcNAQELBQADggEBAKkTyJ+I CZbBhvmR6H+OpMjrqvdx+U7vJ5tNiU4BS++vlWAEKOE7rvGI+IzYflnGqlDkHtXY McvkrehtvWA6RPBhtranCsuWtNTiu6OLdkx5Tmse4xcRz5fhBoTfAjhM83Ll3qxD yg822v4gaRDG3t4bnitwdmkqoRO4pute5kbgOx+hnORDKToEnUW0JGgYfgx1rAkx KH2sFGqwwYQE+KoLWZRzgICloYub+eyGIcp7AciNED6oFfr07kpDUS3bFeVBNdP1 vNu7skWBOZuCMCjKDBOc0UL9fLhyDj8Don5yWIBrDvaaQOs+w1W8x9GzlVwpgP8I 270//NUisev/PHY= -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:42 2026 by rpki-client