This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/_bNCiGJxahmWNfuieBMbkzGV9Ow.roa File: _bNCiGJxahmWNfuieBMbkzGV9Ow.roa (raw, json) Hash identifier: jgB/46kLWrM8U+ephCXoLnuepJdYT1yvSIychEW3MaY= Subject key identifier: FD:B3:42:88:62:71:6A:19:96:35:FB:A2:78:13:1B:93:31:95:F4:EC Certificate issuer: /CN=5f75203151d3b23ecccb64f520fb42549860cff0 Certificate serial: 019B7910D3F0336DB5757778F808F1A59FBC Authority key identifier: 5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/_bNCiGJxahmWNfuieBMbkzGV9Ow.roa Signing time: Thu 01 Jan 2026 10:18:24 +0000 ROA not before: Thu 01 Jan 2026 10:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43532 IP address blocks: 185.191.48.0/22 maxlen: 22 2a0a:1540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.mft rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:d3:f0:33:6d:b5:75:77:78:f8:08:f1:a5:9f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f75203151d3b23ecccb64f520fb42549860cff0 Validity Not Before: Jan 1 10:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdb3428862716a199635fba278131b933195f4ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4c:2f:d2:1d:64:8f:7e:a5:8a:00:45:5b:b1: f3:f7:19:9b:df:84:7f:76:b8:d3:9f:0d:fa:c9:88: 36:03:fc:a0:11:6c:26:3a:d3:0e:ec:fe:e4:88:13: 16:0a:64:d9:b1:8c:90:76:b7:1f:58:ab:d3:5b:ce: 15:08:2b:84:e6:57:d8:68:75:14:33:52:45:a7:3e: 4b:d1:98:6b:13:09:83:07:3b:c2:e3:90:4e:13:ba: fa:e1:65:76:1a:5d:d3:4a:59:ae:6e:8d:2b:9b:37: 8e:72:6e:59:b2:d9:e4:f1:eb:81:52:6a:26:11:bb: 72:19:78:40:cf:50:9c:dd:42:24:6b:ba:96:ef:38: 3c:97:ef:fb:98:ce:80:cc:64:8a:69:fc:46:68:b0: f1:ca:67:99:a3:66:b1:03:27:1d:9a:a4:e9:c0:1e: 0e:40:5e:a3:a3:b4:63:14:9a:25:2a:83:65:40:46: b9:f1:f5:b7:cd:cc:61:54:3a:15:7a:8d:d2:dc:6b: 3f:72:10:e1:4d:82:a5:39:31:19:c1:61:39:01:8c: 0a:4f:63:f4:e3:7a:8d:a5:3f:9b:b2:0f:51:e3:47: 4e:48:47:ca:92:84:ad:2e:a7:27:0a:ea:26:20:41: b0:ec:82:96:0b:34:44:c3:b0:0e:bb:9e:91:2e:33: f7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B3:42:88:62:71:6A:19:96:35:FB:A2:78:13:1B:93:31:95:F4:EC X509v3 Authority Key Identifier: keyid:5F:75:20:31:51:D3:B2:3E:CC:CB:64:F5:20:FB:42:54:98:60:CF:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3UgMVHTsj7My2T1IPtCVJhgz_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/_bNCiGJxahmWNfuieBMbkzGV9Ow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/f2a66f-2b4a-4610-8da8-09dd4c28b1e4/1/X3UgMVHTsj7My2T1IPtCVJhgz_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.48.0/22 IPv6: 2a0a:1540::/29 Signature Algorithm: sha256WithRSAEncryption 15:41:18:fa:86:aa:61:32:b5:a1:bc:bd:64:5e:dd:7c:f8:ea: ea:e0:5d:0e:7e:71:f2:00:f3:95:d8:dd:65:79:c0:d8:86:bb: 08:d9:54:17:89:5e:70:a7:cb:ae:f3:96:ac:14:d9:3d:d1:26: c3:b7:27:74:da:4b:d7:64:ed:9e:a7:a3:fe:3b:f3:a2:60:fe: 9b:6c:2b:0c:9d:ed:0c:f5:80:15:22:c4:99:06:64:b3:56:17: 33:72:31:1b:d7:dd:10:02:5e:2e:e6:a4:43:79:08:5a:ec:3f: d5:32:a4:fa:18:02:dd:12:d6:ac:bf:e8:f7:8f:39:93:2b:60: 20:25:da:b8:0a:8d:16:1c:e2:b5:e9:5f:75:b1:a5:78:d6:67: 0c:0a:1b:74:10:b9:cc:aa:1c:da:ef:f0:0f:07:57:4e:75:51: 8a:5e:96:34:48:66:f9:25:c7:dd:70:f6:4f:6c:c1:7c:58:af: b2:aa:e3:3b:ae:1b:68:67:a1:09:2b:2c:23:6a:60:15:79:95: 49:80:64:2f:0e:ae:fa:38:c7:4c:f0:8b:1b:c5:b1:6b:7c:c1: 37:4d:16:7d:2e:ea:6a:58:0b:2a:45:ce:61:5f:c4:38:00:8b: 0f:6f:3a:eb:7e:a3:08:05:c3:08:4d:a8:1d:39:bb:f6:c2:32: 70:c5:e0:17 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5ENPwM221dXd4+AjxpZ+8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNzUyMDMxNTFkM2IyM2VjY2NiNjRmNTIwZmI0MjU0OTg2 MGNmZjAwHhcNMjYwMTAxMTAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGIzNDI4ODYyNzE2YTE5OTYzNWZiYTI3ODEzMWI5MzMxOTVmNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0wv0h1kj36ligBFW7Hz9xmb34R/ drjTnw36yYg2A/ygEWwmOtMO7P7kiBMWCmTZsYyQdrcfWKvTW84VCCuE5lfYaHUU M1JFpz5L0ZhrEwmDBzvC45BOE7r64WV2Gl3TSlmubo0rmzeOcm5Zstnk8euBUmom EbtyGXhAz1Cc3UIka7qW7zg8l+/7mM6AzGSKafxGaLDxymeZo2axAycdmqTpwB4O QF6jo7RjFJolKoNlQEa58fW3zcxhVDoVeo3S3Gs/chDhTYKlOTEZwWE5AYwKT2P0 43qNpT+bsg9R40dOSEfKkoStLqcnCuomIEGw7IKWCzREw7AOu56RLjP3iQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFP2zQohicWoZljX7ongTG5MxlfTsMB8GA1UdIwQY MBaAFF91IDFR07I+zMtk9SD7QlSYYM/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9mMmE2NmYtMmI0YS00NjEwLThkYTgt MDlkZDRjMjhiMWU0LzEvX2JOQ2lHSnhhaG1XTmZ1aWVCTWJrekdWOU93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9mMmE2NmYtMmI0YS00NjEwLThkYTgtMDlkZDRjMjhiMWU0 LzEvWDNVZ01WSFRzajdNeTJUMUlQdENWSmhnel9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCub8wMA0E AgACMAcDBQMqChVAMA0GCSqGSIb3DQEBCwUAA4IBAQAVQRj6hqphMrWhvL1kXt18 +Orq4F0OfnHyAPOV2N1lecDYhrsI2VQXiV5wp8uu85asFNk90SbDtyd02kvXZO2e p6P+O/OiYP6bbCsMne0M9YAVIsSZBmSzVhczcjEb190QAl4u5qRDeQha7D/VMqT6 GALdEtasv+j3jzmTK2AgJdq4Co0WHOK16V91saV41mcMCht0ELnMqhza7/APB1dO dVGKXpY0SGb5JcfdcPZPbMF8WK+yquM7rhtoZ6EJKywjamAVeZVJgGQvDq76OMdM 8IsbxbFrfME3TRZ9LupqWAsqRc5hX8Q4AIsPbzrrfqMIBcMITagdObv2wjJwxeAX -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:23 2026 by rpki-client