This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/bXRkIrV0wQpxtNZxKH1mFWtcddg.roa File: bXRkIrV0wQpxtNZxKH1mFWtcddg.roa (raw, json) Hash identifier: DYSijGZOnfjjVwkoHf3hP0M/u05BlD0+6ng7wBTurKg= Subject key identifier: 6D:74:64:22:B5:74:C1:0A:71:B4:D6:71:28:7D:66:15:6B:5C:75:D8 Certificate issuer: /CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f Certificate serial: 019B7DCA74E9964354AE8E310BD2A80DA56C Authority key identifier: FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/bXRkIrV0wQpxtNZxKH1mFWtcddg.roa Signing time: Fri 02 Jan 2026 08:19:38 +0000 ROA not before: Fri 02 Jan 2026 08:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56390 IP address blocks: 195.3.218.0/24 maxlen: 24 2001:67c:2bf0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.mft rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:74:e9:96:43:54:ae:8e:31:0b:d2:a8:0d:a5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fffe3c79f3277be6bf32b0aa6793df8ee4fc693f Validity Not Before: Jan 2 08:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d746422b574c10a71b4d671287d66156b5c75d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:c9:61:3b:ea:e1:91:9e:10:bb:a3:c7:e9: 2e:8f:64:cf:9a:32:1d:cb:10:66:f4:9e:da:b7:92: d4:9d:c5:2f:a5:60:b1:0a:e0:b6:ee:8f:29:ec:72: 28:94:82:89:64:d8:8d:39:06:5b:97:11:2a:37:17: a0:52:39:d8:25:5c:cf:7d:9c:23:e9:40:47:22:6f: 0c:a8:94:1c:7e:5c:36:c0:76:4b:57:7d:33:e2:d8: c8:2d:cd:98:9d:59:fb:2d:e0:e1:be:5c:b0:f4:5c: e5:6f:94:bc:d9:d3:b7:f7:20:09:5f:3f:21:cb:c5: 88:3b:ad:f7:67:3d:7c:27:49:10:60:68:a9:14:44: 7a:18:c5:c1:5c:7e:e8:5c:d9:10:44:1d:7a:1b:4a: 99:76:a8:df:5b:b1:c4:c8:40:87:eb:3d:d8:f9:70: 6f:5a:bc:83:19:06:33:c2:ff:b9:51:99:91:0c:c6: a7:8e:df:2f:4f:d7:a8:08:e1:b6:c3:04:09:26:c2: 5b:49:08:ea:0b:3d:0d:22:b1:79:b3:80:49:b2:a0: 64:a2:e5:08:41:94:c9:2d:c5:33:bf:3f:d4:a5:9d: 90:de:ac:10:b9:d3:e5:a7:5d:d9:67:df:f0:af:34: 11:b5:bd:ec:12:b7:4f:08:f0:95:92:e7:1e:d5:35: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:74:64:22:B5:74:C1:0A:71:B4:D6:71:28:7D:66:15:6B:5C:75:D8 X509v3 Authority Key Identifier: keyid:FF:FE:3C:79:F3:27:7B:E6:BF:32:B0:AA:67:93:DF:8E:E4:FC:69:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__48efMne-a_MrCqZ5PfjuT8aT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/bXRkIrV0wQpxtNZxKH1mFWtcddg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/22957e-d390-4b79-96b4-f2025d7ae8bd/1/__48efMne-a_MrCqZ5PfjuT8aT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.3.218.0/24 IPv6: 2001:67c:2bf0::/48 Signature Algorithm: sha256WithRSAEncryption 8b:d6:18:28:3a:bc:7b:e9:72:a0:cc:52:19:11:92:5d:73:16: d6:93:d8:41:07:1a:b3:7b:9b:92:d6:57:aa:b6:09:a4:5c:d6: 5a:01:d3:e0:72:6e:c3:63:6a:a5:da:48:86:68:45:43:ea:7e: 0d:00:bf:30:6d:ba:93:d1:f6:9e:1a:89:3e:b2:f7:f0:35:2b: 70:c9:1a:37:f5:82:22:c2:90:1b:cd:28:73:f1:6c:6e:79:14: c0:02:60:b6:40:48:ea:b7:af:16:d2:dd:93:09:6e:64:6e:14: c3:f7:b1:6d:4e:74:e5:6d:75:cb:17:50:0f:c5:50:1d:c5:43: 46:1d:e6:e2:67:be:93:5b:a4:a4:0f:d1:18:67:7e:b4:68:e8: 22:ca:7b:3c:02:b7:ec:27:3a:90:cc:8a:02:16:7d:43:fd:00: 61:09:ce:5c:67:f6:cc:a7:c0:a5:50:05:4d:76:4d:f5:6a:ab: e6:3e:c1:57:60:62:b0:cd:38:e4:6a:11:da:5f:f2:c8:97:61: 6a:1b:3b:19:68:d7:9c:8c:8a:c9:7b:64:dc:ad:fd:62:a9:52: 45:a7:b0:46:64:b9:8b:74:60:96:9d:c8:16:e2:b8:6f:05:8c: 32:5f:80:66:fc:a5:71:0a:e4:9d:3c:53:d7:92:7a:bd:9c:82: 25:b6:19:5f -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9ynTplkNUro4xC9KoDaVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZmUzYzc5ZjMyNzdiZTZiZjMyYjBhYTY3OTNkZjhlZTRm YzY5M2YwHhcNMjYwMTAyMDgxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDc0NjQyMmI1NzRjMTBhNzFiNGQ2NzEyODdkNjYxNTZiNWM3NWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs67JYTvq4ZGeELujx+kuj2TPmjId yxBm9J7at5LUncUvpWCxCuC27o8p7HIolIKJZNiNOQZblxEqNxegUjnYJVzPfZwj 6UBHIm8MqJQcflw2wHZLV30z4tjILc2YnVn7LeDhvlyw9Fzlb5S82dO39yAJXz8h y8WIO633Zz18J0kQYGipFER6GMXBXH7oXNkQRB16G0qZdqjfW7HEyECH6z3Y+XBv WryDGQYzwv+5UZmRDManjt8vT9eoCOG2wwQJJsJbSQjqCz0NIrF5s4BJsqBkouUI QZTJLcUzvz/UpZ2Q3qwQudPlp13ZZ9/wrzQRtb3sErdPCPCVkuce1TUFSwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG10ZCK1dMEKcbTWcSh9ZhVrXHXYMB8GA1UdIwQY MBaAFP/+PHnzJ3vmvzKwqmeT347k/Gk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8yMjk1N2UtZDM5MC00Yjc5LTk2YjQt ZjIwMjVkN2FlOGJkLzEvYlhSa0lyVjB3UXB4dE5aeEtIMW1GV3RjZGRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8yMjk1N2UtZDM5MC00Yjc5LTk2YjQtZjIwMjVkN2FlOGJk LzEvX180OGVmTW5lLWFfTXJDcVo1UGZqdVQ4YVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwwPaMA8E AgACMAkDBwAgAQZ8K/AwDQYJKoZIhvcNAQELBQADggEBAIvWGCg6vHvpcqDMUhkR kl1zFtaT2EEHGrN7m5LWV6q2CaRc1loB0+BybsNjaqXaSIZoRUPqfg0AvzBtupPR 9p4aiT6y9/A1K3DJGjf1giLCkBvNKHPxbG55FMACYLZASOq3rxbS3ZMJbmRuFMP3 sW1OdOVtdcsXUA/FUB3FQ0Yd5uJnvpNbpKQP0RhnfrRo6CLKezwCt+wnOpDMigIW fUP9AGEJzlxn9synwKVQBU12TfVqq+Y+wVdgYrDNOORqEdpf8siXYWobOxlo15yM isl7ZNyt/WKpUkWnsEZkuYt0YJadyBbiuG8FjDJfgGb8pXEK5J08U9eSer2cgiW2 GV8= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:19 2026 by rpki-client