This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/_BGqcu40RXoTf10_8VGIOgqYEiw.roa File: _BGqcu40RXoTf10_8VGIOgqYEiw.roa (raw, json) Hash identifier: EO0e4LrOi8gJaif6ib941Se3Fz7ZwcHJpJUxBOS6sjg= Subject key identifier: FC:11:AA:72:EE:34:45:7A:13:7F:5D:3F:F1:51:88:3A:0A:98:12:2C Certificate issuer: /CN=464d733de81fbd486d442358e0c15370520f9312 Certificate serial: 019B7A5ADC272183E1D315C9D8CA560FDAE6 Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/_BGqcu40RXoTf10_8VGIOgqYEiw.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57174 IP address blocks: 95.215.176.0/21 maxlen: 21 185.42.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:dc:27:21:83:e1:d3:15:c9:d8:ca:56:0f:da:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464d733de81fbd486d442358e0c15370520f9312 Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc11aa72ee34457a137f5d3ff151883a0a98122c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7e:7d:a8:de:04:03:c7:a3:72:9d:dc:2c:92: 97:fb:ed:79:06:6e:2a:2c:34:85:2c:ce:fb:ba:6e: 78:cd:3b:32:6b:a5:cc:5e:ab:5f:ba:a6:e2:a6:f3: 04:a3:56:17:3b:f6:a5:5d:7b:17:4a:7d:4e:79:c0: b1:07:ad:e1:19:67:c3:70:70:ca:2c:f0:52:9a:b3: 05:65:89:ac:6f:85:5c:83:b9:6e:73:6b:e7:48:10: 51:17:4c:2b:22:b9:fe:d1:37:ff:f6:a7:68:f3:c3: 35:e2:ec:ab:7d:d4:8e:a0:6c:6e:cb:9b:e6:49:50: 9e:6f:91:35:36:e7:48:b0:cf:85:11:df:57:2f:1f: 0b:af:10:a9:88:35:14:f1:5a:d8:11:b7:54:7f:c2: 04:a8:81:da:01:34:1d:80:9c:92:9b:68:96:91:07: 86:c7:08:c8:2b:cd:96:0a:1f:16:c7:2d:bc:d0:9b: bf:1c:34:57:51:79:81:81:8b:4d:d8:cc:c1:26:b4: a7:fc:37:4e:e2:a8:80:49:71:fa:24:ab:85:4c:38: 96:df:ff:61:e3:ec:9e:cd:8f:3a:81:51:ab:95:8c: 42:1b:ff:ab:fe:ed:50:5a:18:44:0d:1b:65:c3:05: bf:c9:7a:9e:11:83:cf:fc:1b:f4:b5:39:eb:d8:d2: 67:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:11:AA:72:EE:34:45:7A:13:7F:5D:3F:F1:51:88:3A:0A:98:12:2C X509v3 Authority Key Identifier: keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/_BGqcu40RXoTf10_8VGIOgqYEiw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.215.176.0/21 185.42.48.0/22 Signature Algorithm: sha256WithRSAEncryption 82:32:0c:fc:42:35:1c:34:1e:c4:25:c2:c3:a7:5e:7f:45:fb: 7c:fe:b3:d2:4e:43:96:0f:fd:60:c3:19:f2:fb:49:e0:3f:29: cd:48:14:e0:9e:6d:8d:05:49:42:2b:98:5c:86:cc:9a:35:68: d1:c4:52:5b:6d:6f:50:b9:76:f7:e8:bb:6e:3e:0a:0c:8a:63: 59:be:b6:f9:b1:8d:bb:56:82:dd:2c:8f:7f:bb:9a:9e:74:34: 5f:a3:65:b9:0f:89:b4:ac:fe:d7:96:95:42:6a:61:eb:bd:9c: 2e:24:06:41:5c:94:2c:24:94:fe:25:16:a3:e3:03:0e:fa:16: fa:ed:44:c5:a4:4a:47:b8:ab:38:46:f5:0a:7c:2e:c1:e6:04: 3b:2c:26:24:f4:f3:0f:45:4c:d3:df:e6:79:2f:45:e0:d0:e8: 85:11:40:26:ac:bf:dd:86:26:25:e9:bf:5a:ad:e7:26:59:63: b8:1e:47:09:a6:8d:eb:75:2f:e1:af:29:87:aa:38:33:a0:06: d4:80:9d:47:cf:f5:bc:5c:b1:0d:39:02:81:e2:e3:ee:b9:2c: ac:f5:4e:c1:16:91:41:a0:26:ae:0d:0c:9a:be:cf:45:64:bd: a1:ad:56:cb:73:79:da:66:01:e8:99:6f:4a:78:46:f4:9b:52: c8:0f:91:fc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WtwnIYPh0xXJ2MpWD9rmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NGQ3MzNkZTgxZmJkNDg2ZDQ0MjM1OGUwYzE1MzcwNTIw ZjkzMTIwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzExYWE3MmVlMzQ0NTdhMTM3ZjVkM2ZmMTUxODgzYTBhOTgxMjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2359qN4EA8ejcp3cLJKX++15Bm4q LDSFLM77um54zTsya6XMXqtfuqbipvMEo1YXO/alXXsXSn1OecCxB63hGWfDcHDK LPBSmrMFZYmsb4Vcg7luc2vnSBBRF0wrIrn+0Tf/9qdo88M14uyrfdSOoGxuy5vm SVCeb5E1NudIsM+FEd9XLx8LrxCpiDUU8VrYEbdUf8IEqIHaATQdgJySm2iWkQeG xwjIK82WCh8Wxy280Ju/HDRXUXmBgYtN2MzBJrSn/DdO4qiASXH6JKuFTDiW3/9h 4+yezY86gVGrlYxCG/+r/u1QWhhEDRtlwwW/yXqeEYPP/Bv0tTnr2NJnhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPwRqnLuNEV6E39dP/FRiDoKmBIsMB8GA1UdIwQY MBaAFEZNcz3oH71IbUQjWODBU3BSD5MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYt YTQ5ZDFhMDA2ZGM5LzEvX0JHcWN1NDBSWG9UZjEwXzhWR0lPZ3FZRWl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYtYTQ5ZDFhMDA2ZGM5 LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDX9ewAwQC uSowMA0GCSqGSIb3DQEBCwUAA4IBAQCCMgz8QjUcNB7EJcLDp15/Rft8/rPSTkOW D/1gwxny+0ngPynNSBTgnm2NBUlCK5hchsyaNWjRxFJbbW9QuXb36LtuPgoMimNZ vrb5sY27VoLdLI9/u5qedDRfo2W5D4m0rP7XlpVCamHrvZwuJAZBXJQsJJT+JRaj 4wMO+hb67UTFpEpHuKs4RvUKfC7B5gQ7LCYk9PMPRUzT3+Z5L0Xg0OiFEUAmrL/d hiYl6b9arecmWWO4HkcJpo3rdS/hrymHqjgzoAbUgJ1Hz/W8XLENOQKB4uPuuSys 9U7BFpFBoCauDQyavs9FZL2hrVbLc3naZgHomW9KeEb0m1LID5H8 -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:18 2026 by rpki-client