This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/bCfnN8Cs-rhA4Q1_kWGUzS2fAKc.roa File: bCfnN8Cs-rhA4Q1_kWGUzS2fAKc.roa (raw, json) Hash identifier: KNO75JkgNbMb91A1hmTO0xTL3a65pxvLADRxVDguCYw= Subject key identifier: 6C:27:E7:37:C0:AC:FA:B8:40:E1:0D:7F:91:61:94:CD:2D:9F:00:A7 Certificate issuer: /CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186 Certificate serial: 019B76EB563FA0FFC1997BC9552988C8A80A Authority key identifier: 81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/bCfnN8Cs-rhA4Q1_kWGUzS2fAKc.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21221 IP address blocks: 82.210.96.0/19 maxlen: 24 84.35.0.0/16 maxlen: 24 212.29.160.0/19 maxlen: 24 2001:15b0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.mft rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:56:3f:a0:ff:c1:99:7b:c9:55:29:88:c8:a8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81069c09551b3fe3ba2c9a6e55d8e059bba0b186 Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c27e737c0acfab840e10d7f916194cd2d9f00a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bd:7b:d3:7a:d8:83:8e:e3:d7:a1:21:94:e5: b7:f9:f3:90:9c:06:16:79:9e:d6:59:81:0a:7d:6d: 28:7e:9b:7f:39:2c:f4:de:a6:10:27:31:72:62:6d: b1:0a:3a:1e:a4:0e:4c:46:06:91:02:c4:72:ac:92: 08:bf:9c:f4:30:7b:37:92:e6:57:6a:d9:b3:05:5c: 62:9f:f1:4a:6c:a3:82:ec:33:65:ad:ef:54:1e:23: fa:cf:eb:ae:56:61:b4:cb:6c:7e:74:f5:0c:d7:64: 53:5a:2e:cb:91:1c:d2:3a:0d:61:06:4f:1f:43:1e: 5a:24:9f:47:01:83:d6:c7:b0:e0:b8:c6:06:33:22: 05:3a:cd:52:c0:a4:2e:74:d5:03:73:02:5d:1f:3d: ea:b0:da:7b:49:8c:a8:d8:10:fb:a9:0d:ff:5f:87: 35:e4:bf:11:a2:18:9c:51:6e:1f:75:e4:7a:45:49: 3f:e3:94:ea:5a:cc:77:14:fd:ac:bb:c7:f9:37:66: 43:9c:69:ed:e1:49:e2:26:b2:77:70:a8:27:9c:d0: ee:31:82:cf:c1:ce:40:c7:a3:fc:12:70:9f:3a:bd: 73:a3:ce:28:ab:04:49:e6:91:6e:2b:81:a5:e0:9b: e1:7d:1c:4d:7b:e6:77:b5:9a:9f:fc:6e:73:6e:25: e2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:27:E7:37:C0:AC:FA:B8:40:E1:0D:7F:91:61:94:CD:2D:9F:00:A7 X509v3 Authority Key Identifier: keyid:81:06:9C:09:55:1B:3F:E3:BA:2C:9A:6E:55:D8:E0:59:BB:A0:B1:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gQacCVUbP-O6LJpuVdjgWbugsYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/bCfnN8Cs-rhA4Q1_kWGUzS2fAKc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/f378d3-3947-47f9-805d-829acebc1169/1/gQacCVUbP-O6LJpuVdjgWbugsYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.210.96.0/19 84.35.0.0/16 212.29.160.0/19 IPv6: 2001:15b0::/32 Signature Algorithm: sha256WithRSAEncryption 68:ae:35:7f:0f:92:88:81:a7:28:0b:3f:26:22:36:15:6b:0c: b3:52:f3:49:d2:e2:c7:a4:f1:1b:da:de:5c:64:d2:b8:6e:b7: b8:d6:45:03:cf:83:1e:8b:d1:74:4f:29:17:57:e7:16:e0:f9: 94:47:d7:75:83:29:aa:34:a8:77:73:cb:9e:e0:26:9c:d6:5a: c0:de:0a:27:bc:f4:78:86:37:5b:11:6a:f4:41:21:78:5b:40: 6e:4c:11:74:03:37:cf:28:e5:19:59:9e:2a:08:2d:56:3d:94: 2e:f3:b5:37:be:b2:22:5b:df:6a:c0:18:11:a5:56:df:4a:93: 7e:c6:7c:1c:d4:49:5c:fe:43:80:81:19:30:e3:5c:bd:47:45: 2c:03:33:da:bc:fc:20:fc:a6:6f:33:5c:f8:ac:6b:a7:34:81: 98:36:94:cb:8a:c7:82:c8:6d:9f:b7:1a:c7:eb:f7:fb:6b:b6: fb:a5:03:89:3b:f1:1a:3f:c5:24:da:3b:19:45:1b:88:ca:6b: 07:cb:4e:15:48:0f:b5:7c:7a:1e:f7:45:82:8c:f6:26:bc:6a: e7:67:10:5a:6e:cb:e8:81:08:bf:b5:ca:4d:7d:52:e7:96:f3: be:ae:56:25:86:10:b5:e6:2f:d5:4a:2e:03:0c:af:e4:01:42: b6:0e:7e:d6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt261Y/oP/BmXvJVSmIyKgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxMDY5YzA5NTUxYjNmZTNiYTJjOWE2ZTU1ZDhlMDU5YmJh MGIxODYwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzI3ZTczN2MwYWNmYWI4NDBlMTBkN2Y5MTYxOTRjZDJkOWYwMGE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL1703rYg47j16EhlOW3+fOQnAYW eZ7WWYEKfW0ofpt/OSz03qYQJzFyYm2xCjoepA5MRgaRAsRyrJIIv5z0MHs3kuZX atmzBVxin/FKbKOC7DNlre9UHiP6z+uuVmG0y2x+dPUM12RTWi7LkRzSOg1hBk8f Qx5aJJ9HAYPWx7DguMYGMyIFOs1SwKQudNUDcwJdHz3qsNp7SYyo2BD7qQ3/X4c1 5L8RohicUW4fdeR6RUk/45TqWsx3FP2su8f5N2ZDnGnt4UniJrJ3cKgnnNDuMYLP wc5Ax6P8EnCfOr1zo84oqwRJ5pFuK4Gl4JvhfRxNe+Z3tZqf/G5zbiXiJwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFGwn5zfArPq4QOENf5FhlM0tnwCnMB8GA1UdIwQY MBaAFIEGnAlVGz/juiyablXY4Fm7oLGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1FhY0NWVWJQLU82TEpwdVZkamdXYnVnc1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9mMzc4ZDMtMzk0Ny00N2Y5LTgwNWQt ODI5YWNlYmMxMTY5LzEvYkNmbk44Q3MtcmhBNFExX2tXR1V6UzJmQUtjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9mMzc4ZDMtMzk0Ny00N2Y5LTgwNWQtODI5YWNlYmMxMTY5 LzEvZ1FhY0NWVWJQLU82TEpwdVZkamdXYnVnc1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQFUtJgAwMA VCMDBAXUHaAwDQQCAAIwBwMFACABFbAwDQYJKoZIhvcNAQELBQADggEBAGiuNX8P koiBpygLPyYiNhVrDLNS80nS4sek8Rva3lxk0rhut7jWRQPPgx6L0XRPKRdX5xbg +ZRH13WDKao0qHdzy57gJpzWWsDeCie89HiGN1sRavRBIXhbQG5MEXQDN88o5RlZ nioILVY9lC7ztTe+siJb32rAGBGlVt9Kk37GfBzUSVz+Q4CBGTDjXL1HRSwDM9q8 /CD8pm8zXPisa6c0gZg2lMuKx4LIbZ+3Gsfr9/trtvulA4k78Ro/xSTaOxlFG4jK awfLThVID7V8eh73RYKM9ia8audnEFpuy+iBCL+1yk19UueW876uViWGELXmL9VK LgMMr+QBQrYOftY= -----END CERTIFICATE-----Generated at Wed Feb 4 09:19:31 2026 by rpki-client