This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/B4xegdrDQXwXhNKCpBtNtcsBfAc.roa File: B4xegdrDQXwXhNKCpBtNtcsBfAc.roa (raw, json) Hash identifier: YIcVaV+2+ISJm+vQERcn8J2nPw2M/lckYq1wjorX5fA= Subject key identifier: 07:8C:5E:81:DA:C3:41:7C:17:84:D2:82:A4:1B:4D:B5:CB:01:7C:07 Certificate issuer: /CN=0e3198a9827deeafab1d27b553794f44b91a6c06 Certificate serial: 019B7A5AD6E8FD6C1D0A0369C0EA36C2E93C Authority key identifier: 0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/B4xegdrDQXwXhNKCpBtNtcsBfAc.roa Signing time: Thu 01 Jan 2026 16:18:52 +0000 ROA not before: Thu 01 Jan 2026 16:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43436 IP address blocks: 185.6.140.0/22 maxlen: 23 193.58.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.mft rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d6:e8:fd:6c:1d:0a:03:69:c0:ea:36:c2:e9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3198a9827deeafab1d27b553794f44b91a6c06 Validity Not Before: Jan 1 16:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=078c5e81dac3417c1784d282a41b4db5cb017c07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:31:91:8c:5c:2b:60:31:45:ee:df:d9:26:2c: 52:15:f0:c9:dc:f9:20:d3:47:e4:38:b6:c6:b7:9b: 53:5c:02:f9:51:d4:56:75:18:6f:94:ff:5e:46:17: 05:b6:b4:2e:a4:56:26:13:8c:a6:d6:56:65:00:5b: 3d:48:09:f6:e0:8e:1e:e7:b5:8e:6c:79:57:9d:ac: 1e:4c:41:ef:c0:9c:ae:4b:9d:28:07:64:44:db:8a: ec:ae:fb:90:e3:f7:67:da:36:6a:c1:dd:cc:2c:9c: 52:dc:47:63:ef:34:ce:b8:eb:07:93:4b:b7:64:31: 98:5c:e3:64:67:39:06:6b:f4:81:07:d1:b4:91:6d: dc:dd:12:15:2a:a9:24:ff:ff:b6:3f:89:fe:c7:f6: 2f:d4:76:51:39:a9:fa:ed:70:06:5f:70:52:68:f7: b1:ff:2f:57:28:d3:0b:43:b6:f6:19:c3:79:5f:44: b0:d1:d6:7b:af:88:4b:fc:65:d7:6b:9c:63:16:3c: 40:8f:07:f1:9b:1d:10:c1:db:d2:f9:38:e2:ea:39: ff:5e:04:74:56:60:ef:0a:07:77:e3:7f:d6:e7:59: 79:aa:cb:7b:7a:b2:44:ec:0a:14:0c:af:3f:40:0d: 29:1a:05:5d:54:c9:8f:f6:6c:ca:74:70:2b:43:77: 9b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8C:5E:81:DA:C3:41:7C:17:84:D2:82:A4:1B:4D:B5:CB:01:7C:07 X509v3 Authority Key Identifier: keyid:0E:31:98:A9:82:7D:EE:AF:AB:1D:27:B5:53:79:4F:44:B9:1A:6C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DjGYqYJ97q-rHSe1U3lPRLkabAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/B4xegdrDQXwXhNKCpBtNtcsBfAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/2f7b91-17bf-4c2a-a81e-41527961d48e/1/DjGYqYJ97q-rHSe1U3lPRLkabAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.6.140.0/22 193.58.247.0/24 Signature Algorithm: sha256WithRSAEncryption a0:71:a7:06:36:9e:c8:07:45:24:69:2b:03:2f:4b:24:71:5f: 5a:5c:ab:d6:d6:db:df:12:29:08:4b:97:b2:95:c7:e7:03:c9: 83:84:a7:1f:09:42:ef:52:ea:9a:d1:ea:95:13:af:c4:07:89: c5:c1:ab:f2:de:98:7c:25:61:fd:95:16:02:4f:ef:12:ff:e4: b6:84:6d:44:92:21:63:6b:46:4b:cd:a1:49:26:cc:6f:ff:09: 7a:10:dd:31:f7:21:44:e9:fc:a9:3e:e2:c0:de:37:e7:77:f2: c5:3d:38:6a:e4:0b:45:90:cc:d0:3d:18:1f:e4:fc:cd:5a:3d: 0e:73:91:87:92:67:d3:9c:f7:e6:f5:65:e2:9d:b6:79:35:7d: 57:10:eb:53:99:81:06:c0:9f:fb:7d:cb:da:6a:34:54:18:dd: 25:c4:4f:86:cc:7b:65:c3:a7:32:38:37:f8:e7:a6:51:46:16: 73:50:f6:bb:94:6a:84:67:3e:2d:45:be:f2:39:dd:3c:4d:80: f4:ac:36:5a:6f:85:48:02:e3:de:b2:46:ab:b7:d4:8f:00:d2: 7c:f0:a0:4c:02:bf:ae:74:98:c9:e7:9f:5d:81:cd:d1:06:f9: 9a:8a:41:9f:85:b2:6d:1d:55:61:e9:6d:42:39:53:5f:27:d7: 5b:e9:00:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wtbo/WwdCgNpwOo2wuk8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMzE5OGE5ODI3ZGVlYWZhYjFkMjdiNTUzNzk0ZjQ0Yjkx YTZjMDYwHhcNMjYwMTAxMTYxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzhjNWU4MWRhYzM0MTdjMTc4NGQyODJhNDFiNGRiNWNiMDE3YzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTGRjFwrYDFF7t/ZJixSFfDJ3Pkg 00fkOLbGt5tTXAL5UdRWdRhvlP9eRhcFtrQupFYmE4ym1lZlAFs9SAn24I4e57WO bHlXnaweTEHvwJyuS50oB2RE24rsrvuQ4/dn2jZqwd3MLJxS3Edj7zTOuOsHk0u3 ZDGYXONkZzkGa/SBB9G0kW3c3RIVKqkk//+2P4n+x/Yv1HZROan67XAGX3BSaPex /y9XKNMLQ7b2GcN5X0Sw0dZ7r4hL/GXXa5xjFjxAjwfxmx0QwdvS+Tji6jn/XgR0 VmDvCgd343/W51l5qst7erJE7AoUDK8/QA0pGgVdVMmP9mzKdHArQ3ebDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAeMXoHaw0F8F4TSgqQbTbXLAXwHMB8GA1UdIwQY MBaAFA4xmKmCfe6vqx0ntVN5T0S5GmwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8yZjdiOTEtMTdiZi00YzJhLWE4MWUt NDE1Mjc5NjFkNDhlLzEvQjR4ZWdkckRRWHdYaE5LQ3BCdE50Y3NCZkFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8yZjdiOTEtMTdiZi00YzJhLWE4MWUtNDE1Mjc5NjFkNDhl LzEvRGpHWXFZSjk3cS1ySFNlMVUzbFBSTGthYkFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuQaMAwQA wTr3MA0GCSqGSIb3DQEBCwUAA4IBAQCgcacGNp7IB0UkaSsDL0skcV9aXKvW1tvf EikIS5eylcfnA8mDhKcfCULvUuqa0eqVE6/EB4nFwavy3ph8JWH9lRYCT+8S/+S2 hG1EkiFja0ZLzaFJJsxv/wl6EN0x9yFE6fypPuLA3jfnd/LFPThq5AtFkMzQPRgf 5PzNWj0Oc5GHkmfTnPfm9WXinbZ5NX1XEOtTmYEGwJ/7fcvaajRUGN0lxE+GzHtl w6cyODf456ZRRhZzUPa7lGqEZz4tRb7yOd08TYD0rDZab4VIAuPeskart9SPANJ8 8KBMAr+udJjJ559dgc3RBvmaikGfhbJtHVVh6W1COVNfJ9db6QBD -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:42 2026 by rpki-client