This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/bCNLowmF60GtTgq9MrPewL3-uQM.roa File: bCNLowmF60GtTgq9MrPewL3-uQM.roa (raw, json) Hash identifier: 6XTgGY9inLGGmIYKO2xERVTl3h4QMDusQwowddy15I8= Subject key identifier: 6C:23:4B:A3:09:85:EB:41:AD:4E:0A:BD:32:B3:DE:C0:BD:FE:B9:03 Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 019B7F1605085FF8B9A82766C4161DF32E31 Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/bCNLowmF60GtTgq9MrPewL3-uQM.roa Signing time: Fri 02 Jan 2026 14:21:48 +0000 ROA not before: Fri 02 Jan 2026 14:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211250 IP address blocks: 195.64.229.0/24 maxlen: 24 195.64.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:16:05:08:5f:f8:b9:a8:27:66:c4:16:1d:f3:2e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Jan 2 14:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c234ba30985eb41ad4e0abd32b3dec0bdfeb903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:bd:2c:dc:ee:85:ff:a0:69:60:6b:ff:86: a3:4e:e8:3c:13:5e:94:6c:62:2d:e3:85:ba:cf:c9: 72:2b:fa:b0:74:e2:e5:34:02:78:14:9a:81:35:16: 43:3a:dd:b2:01:e5:50:92:34:e2:6d:3c:b2:62:63: ba:86:d4:dc:9a:a8:c7:e2:96:9e:b3:82:60:4c:b3: 97:0b:12:a4:c1:fc:ff:fe:67:f8:ef:64:1e:94:1c: 32:21:55:6e:a6:16:4a:38:83:07:6e:85:da:02:19: af:e1:05:97:9d:5f:c1:a8:12:9f:ef:f8:e8:fe:ce: 34:98:f3:68:e1:5c:35:dd:d1:28:e7:85:db:a6:ca: 2f:3d:fe:de:c4:04:b8:0d:43:56:6c:d6:a5:11:54: 53:53:5f:a6:44:72:1e:ab:b2:16:58:cd:e6:b2:bb: a9:d7:90:44:3d:a5:3c:d2:f3:ab:1a:13:de:4f:95: 85:81:0d:b6:05:5b:c0:f3:79:3c:74:75:69:86:52: da:91:b1:50:ba:7f:04:5f:8f:1b:2b:9d:98:97:50: c1:cb:94:e5:ed:61:55:a7:5d:9b:ae:35:f2:cd:d4: f0:8b:d4:75:31:af:51:79:36:f5:34:40:ea:6b:14: 29:f0:23:c9:ab:24:bd:7f:b3:d2:dd:53:f9:0c:6e: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:23:4B:A3:09:85:EB:41:AD:4E:0A:BD:32:B3:DE:C0:BD:FE:B9:03 X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/bCNLowmF60GtTgq9MrPewL3-uQM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.64.229.0/24 195.64.239.0/24 Signature Algorithm: sha256WithRSAEncryption 93:39:7f:a3:a4:77:17:b0:b5:52:68:24:af:ab:12:18:f9:76: d1:c4:f5:1d:37:5b:25:e9:13:13:30:66:19:eb:7a:e5:9d:81: 7f:3f:7d:1c:59:a1:0a:54:4d:77:5c:2b:c9:71:65:74:5c:45: 58:ff:ee:63:0b:78:11:2e:6f:d8:09:31:4b:69:8d:21:2c:fd: 4c:3f:db:54:87:81:c5:36:8c:d2:e9:fe:20:d7:1f:f3:01:f3: 9e:c8:38:df:bc:b7:94:87:0d:51:4a:32:38:42:a1:dd:e5:13: 23:ca:a9:07:e3:3c:bf:58:4e:fd:87:45:dc:50:2b:88:a9:59: ff:ca:37:96:d6:67:59:e7:5e:65:3d:3b:5f:9e:8e:78:30:27: ea:cf:73:ec:fe:04:31:77:14:05:72:5b:58:98:1a:eb:90:71: 30:2f:86:d2:26:11:d8:06:58:ef:e4:46:24:04:7b:85:8c:cb: 54:7f:2d:69:c9:5f:19:bf:ce:79:2a:5c:3b:0d:b1:48:34:6b: 6d:55:57:99:88:1f:9c:da:bd:68:c7:91:22:e3:ae:c9:23:de: a6:e7:2a:90:2a:de:d6:72:f3:de:de:cc:bd:76:67:7c:05:da: fc:a2:a0:ef:c8:fc:f6:c5:62:ee:5d:c2:c4:12:cb:8a:1d:0f: 17:da:ed:78 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FgUIX/i5qCdmxBYd8y4xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjYwMTAyMTQyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzIzNGJhMzA5ODVlYjQxYWQ0ZTBhYmQzMmIzZGVjMGJkZmViOTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WW9LNzuhf+gaWBr/4ajTug8E16U bGIt44W6z8lyK/qwdOLlNAJ4FJqBNRZDOt2yAeVQkjTibTyyYmO6htTcmqjH4pae s4JgTLOXCxKkwfz//mf472QelBwyIVVuphZKOIMHboXaAhmv4QWXnV/BqBKf7/jo /s40mPNo4Vw13dEo54XbpsovPf7exAS4DUNWbNalEVRTU1+mRHIeq7IWWM3msrup 15BEPaU80vOrGhPeT5WFgQ22BVvA83k8dHVphlLakbFQun8EX48bK52Yl1DBy5Tl 7WFVp12brjXyzdTwi9R1Ma9ReTb1NEDqaxQp8CPJqyS9f7PS3VP5DG7v8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGwjS6MJhetBrU4KvTKz3sC9/rkDMB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvYkNOTG93bUY2MEd0VGdxOU1yUGV3TDMtdVFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw0DlAwQA w0DvMA0GCSqGSIb3DQEBCwUAA4IBAQCTOX+jpHcXsLVSaCSvqxIY+XbRxPUdN1sl 6RMTMGYZ63rlnYF/P30cWaEKVE13XCvJcWV0XEVY/+5jC3gRLm/YCTFLaY0hLP1M P9tUh4HFNozS6f4g1x/zAfOeyDjfvLeUhw1RSjI4QqHd5RMjyqkH4zy/WE79h0Xc UCuIqVn/yjeW1mdZ515lPTtfno54MCfqz3Ps/gQxdxQFcltYmBrrkHEwL4bSJhHY Bljv5EYkBHuFjMtUfy1pyV8Zv855Klw7DbFINGttVVeZiB+c2r1ox5Ei467JI96m 5yqQKt7WcvPe3sy9dmd8Bdr8oqDvyPz2xWLuXcLEEsuKHQ8X2u14 -----END CERTIFICATE-----Generated at Tue Feb 10 04:27:37 2026 by rpki-client