This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/bBIFCGdvF8mKkDrDw-Rw4gAf2ZM.roa File: bBIFCGdvF8mKkDrDw-Rw4gAf2ZM.roa (raw, json) Hash identifier: Pe7mBPOrFLn90ywuQC52nwN2BP+M+QmJ3kUcCqitDdE= Subject key identifier: 6C:12:05:08:67:6F:17:C9:8A:90:3A:C3:C3:E4:70:E2:00:1F:D9:93 Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a Certificate serial: 019B7DC9A7810952CC11EC276A4324ACF74C Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/bBIFCGdvF8mKkDrDw-Rw4gAf2ZM.roa Signing time: Fri 02 Jan 2026 08:18:46 +0000 ROA not before: Fri 02 Jan 2026 08:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34197 IP address blocks: 185.150.160.0/22 maxlen: 22 185.150.160.0/24 maxlen: 24 185.150.162.0/24 maxlen: 24 194.187.224.0/22 maxlen: 22 195.95.224.0/23 maxlen: 23 2a07:7200::/29 maxlen: 29 2a07:7200:1::/48 maxlen: 48 2a07:7200:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:a7:81:09:52:cc:11:ec:27:6a:43:24:ac:f7:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a Validity Not Before: Jan 2 08:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c120508676f17c98a903ac3c3e470e2001fd993 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5a:eb:db:86:67:41:02:ec:52:ae:a8:43:29: 46:9a:57:92:e5:c2:76:84:a0:7b:39:68:23:e8:59: 94:fb:d1:73:2d:d0:39:69:17:0d:98:a4:c8:09:e8: b7:09:80:cd:9a:09:8b:14:8c:02:91:fe:b9:3d:41: 2d:f3:07:93:0b:ed:6e:54:bb:88:7d:44:0a:48:c2: cb:6c:c6:ee:64:ff:33:5b:c1:74:fb:c4:fd:d3:62: d2:83:ae:37:be:45:5f:f1:90:93:5f:1a:9c:5f:25: fb:a1:cd:b7:b6:7c:6a:1f:11:bd:60:2e:e3:04:22: 5f:6a:bd:b0:4d:20:d2:d3:85:12:c3:0c:ce:95:e2: 22:3e:c5:58:c5:5c:07:de:d5:f6:5b:a2:f3:18:ed: 69:29:e1:b5:75:6b:78:0e:b9:08:04:ca:af:b1:ae: 96:c4:54:b8:18:3e:67:27:71:31:c2:08:07:92:d1: 3f:63:24:95:75:3f:7c:bf:3b:f0:d7:d1:fb:33:b5: de:9d:0c:c0:fe:e8:82:b7:aa:92:91:ac:b2:d2:f5: 76:63:e1:9b:71:83:61:85:46:a2:62:13:87:93:6c: ef:7a:a6:fe:42:35:4f:b1:7e:16:a9:f2:98:7c:72: 54:a4:6f:ac:6b:2d:bf:e8:c3:1b:ae:72:26:64:e8: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:12:05:08:67:6F:17:C9:8A:90:3A:C3:C3:E4:70:E2:00:1F:D9:93 X509v3 Authority Key Identifier: keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/bBIFCGdvF8mKkDrDw-Rw4gAf2ZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.150.160.0/22 194.187.224.0/22 195.95.224.0/23 IPv6: 2a07:7200::/29 Signature Algorithm: sha256WithRSAEncryption 33:fb:8e:1c:cd:40:97:e5:e8:1d:50:29:12:45:31:9d:99:50: 4b:ce:51:8d:f6:2e:11:ea:29:ae:0d:82:4c:89:11:30:d2:d8: ba:c7:15:94:a4:b6:cc:5c:4c:f6:ef:4d:33:19:77:09:6d:34: 13:d7:9a:0a:9b:f2:3c:ff:f9:75:5b:e0:ea:59:b9:c5:13:a3: 2e:9c:dd:0a:85:98:c3:d0:3d:93:30:40:b1:43:cc:67:3f:ca: dc:22:ff:ac:ae:2c:96:dd:f4:9a:06:f4:ab:89:52:27:40:f0: 19:e0:8a:f5:54:10:95:58:d0:48:96:89:81:2a:95:b7:e4:f8: 08:e7:1e:70:92:52:cf:b6:0c:b7:12:9e:92:d4:71:e3:40:16: e3:5d:15:53:d9:40:f7:b9:f9:1f:2b:10:7e:a5:bc:1c:1e:60: 8c:b4:09:d1:c0:d0:2e:b7:03:f8:d4:f7:3d:6d:af:fa:f7:cc: 24:35:d7:b7:52:4d:00:6a:b5:6d:1b:cd:57:1e:a7:d3:69:b7: 2a:f6:8c:5b:03:f4:0c:55:a6:0f:d8:3b:a8:b6:ec:11:a8:56: 62:56:e2:fe:82:24:a8:a3:99:0b:e5:5f:e2:40:85:44:dc:b1: 9a:56:c9:78:2e:f1:35:69:82:20:9f:3b:13:61:ce:28:d9:0f: 79:af:1d:23 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt9yaeBCVLMEewnakMkrPdMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5NGQwZWFmODAyNTBhYjgyNDg5ODliZTcxYTQwMzk3MThk NjkzNWEwHhcNMjYwMTAyMDgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzEyMDUwODY3NmYxN2M5OGE5MDNhYzNjM2U0NzBlMjAwMWZkOTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1rr24ZnQQLsUq6oQylGmleS5cJ2 hKB7OWgj6FmU+9FzLdA5aRcNmKTICei3CYDNmgmLFIwCkf65PUEt8weTC+1uVLuI fUQKSMLLbMbuZP8zW8F0+8T902LSg643vkVf8ZCTXxqcXyX7oc23tnxqHxG9YC7j BCJfar2wTSDS04USwwzOleIiPsVYxVwH3tX2W6LzGO1pKeG1dWt4DrkIBMqvsa6W xFS4GD5nJ3ExwggHktE/YySVdT98vzvw19H7M7XenQzA/uiCt6qSkayy0vV2Y+Gb cYNhhUaiYhOHk2zveqb+QjVPsX4WqfKYfHJUpG+say2/6MMbrnImZOiBxQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGwSBQhnbxfJipA6w8PkcOIAH9mTMB8GA1UdIwQY MBaAFElNDq+AJQq4JImJvnGkA5cY1pNaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jODg1NTUtYWJiNy00YjEwLWFiNjQt MTljNTQyN2U0MTZmLzEvYkJJRkNHZHZGOG1La0RyRHctUnc0Z0FmMlpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jODg1NTUtYWJiNy00YjEwLWFiNjQtMTljNTQyN2U0MTZm LzEvU1UwT3I0QWxDcmdraVltLWNhUURseGpXazFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuZagAwQC wrvgAwQBw1/gMA0EAgACMAcDBQMqB3IAMA0GCSqGSIb3DQEBCwUAA4IBAQAz+44c zUCX5egdUCkSRTGdmVBLzlGN9i4R6imuDYJMiREw0ti6xxWUpLbMXEz2700zGXcJ bTQT15oKm/I8//l1W+DqWbnFE6MunN0KhZjD0D2TMECxQ8xnP8rcIv+sriyW3fSa BvSriVInQPAZ4Ir1VBCVWNBIlomBKpW35PgI5x5wklLPtgy3Ep6S1HHjQBbjXRVT 2UD3ufkfKxB+pbwcHmCMtAnRwNAutwP41Pc9ba/698wkNde3Uk0AarVtG81XHqfT abcq9oxbA/QMVaYP2DuotuwRqFZiVuL+giSoo5kL5V/iQIVE3LGaVsl4LvE1aYIg nzsTYc4o2Q95rx0j -----END CERTIFICATE-----Generated at Mon Feb 9 22:59:45 2026 by rpki-client