This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/B_KGcXQ0DuIdghhkI0CttQjaBiY.roa File: B_KGcXQ0DuIdghhkI0CttQjaBiY.roa (raw, json) Hash identifier: vrjC5dTNYvxDZ+tn/uxjJ/eLDEIZEWZ3qbbhNWSnHdg= Subject key identifier: 07:F2:86:71:74:34:0E:E2:1D:82:18:64:23:40:AD:B5:08:DA:06:26 Certificate issuer: /CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72 Certificate serial: 019B7E3738FFF608E802F08DE0933CECC11D Authority key identifier: FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/B_KGcXQ0DuIdghhkI0CttQjaBiY.roa Signing time: Fri 02 Jan 2026 10:18:26 +0000 ROA not before: Fri 02 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210990 IP address blocks: 176.106.40.0/24 maxlen: 24 176.106.41.0/24 maxlen: 24 176.106.42.0/24 maxlen: 24 176.106.43.0/24 maxlen: 24 176.106.44.0/24 maxlen: 24 176.106.45.0/24 maxlen: 24 176.106.46.0/24 maxlen: 24 176.106.47.0/24 maxlen: 24 192.145.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:38:ff:f6:08:e8:02:f0:8d:e0:93:3c:ec:c1:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa56c7e660b1c74e3b0318b14338c3f00dd7bc72 Validity Not Before: Jan 2 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07f2867174340ee21d8218642340adb508da0626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:26:85:f5:f1:f3:5b:54:a1:b3:f8:fa:2e:ad: b9:32:e5:25:00:f9:41:59:46:6d:64:df:fa:78:4c: ba:d0:30:7a:4c:96:b4:6a:d6:94:ad:9f:f6:c3:d4: 71:06:e7:37:47:57:91:f3:2b:cc:ca:78:4f:86:6c: 64:5d:ab:68:65:cb:55:bf:b3:f0:7d:ad:6e:8c:2a: 2f:1f:30:13:f7:5c:c3:d2:66:85:8b:3f:2c:57:97: a9:95:99:7f:8b:bf:67:50:2c:15:26:a2:05:4e:ac: 67:44:6e:31:d0:80:44:a1:11:77:ca:7e:00:2b:2b: b9:a2:fa:74:5e:17:fc:7b:a7:6e:e8:6d:40:15:56: 3e:77:26:36:62:e5:81:fa:53:77:06:77:01:8a:c6: 7e:54:8b:a2:c5:7d:2e:a8:db:e1:68:9b:ef:3e:a0: 49:1f:85:c8:18:bd:77:eb:ad:99:2c:8a:6b:2b:4c: 96:9b:97:09:c0:c4:68:72:05:9b:45:bf:94:2c:e2: 69:be:c3:8b:83:6a:0e:80:99:5e:21:ce:23:67:71: 5b:e0:21:46:46:49:51:20:b2:79:8c:ef:d9:ac:d5: 48:6b:d6:8c:40:5f:95:83:29:18:68:15:76:d4:95: af:e9:64:25:43:a6:0c:1a:74:69:aa:2a:85:7d:4b: 09:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F2:86:71:74:34:0E:E2:1D:82:18:64:23:40:AD:B5:08:DA:06:26 X509v3 Authority Key Identifier: keyid:FA:56:C7:E6:60:B1:C7:4E:3B:03:18:B1:43:38:C3:F0:0D:D7:BC:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lbH5mCxx047AxixQzjD8A3XvHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/B_KGcXQ0DuIdghhkI0CttQjaBiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/276c24-2a7f-4726-8d9f-8bf4fe4c7732/1/1-lbH5mCxx047AxixQzjD8A3XvHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.106.40.0/21 192.145.120.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:03:97:d2:cf:be:ce:da:50:30:2e:72:33:71:b9:ab:aa:e8: 6b:65:1b:48:f2:bf:09:bd:5c:d2:bf:83:02:17:92:b1:c9:e8: f4:98:33:6d:a3:4d:22:75:8a:6d:f9:e7:2a:18:1c:46:b6:5a: 46:d3:9c:4c:9b:8d:48:2e:0f:50:70:c8:af:eb:8a:b5:e8:ed: c4:26:7e:4e:1a:b9:7d:01:83:6c:48:ad:7e:28:9a:ff:3a:70: 38:e5:d3:ed:99:7b:6f:91:b3:87:36:29:50:3d:65:41:a7:36: 6f:7f:2b:31:e1:8d:cb:1b:8b:ec:c5:54:6a:0f:e1:af:4f:48: 4d:08:a8:33:1f:3c:95:fe:00:a5:ec:f2:ea:00:7c:c4:5e:b3: ee:d4:bd:55:34:e2:02:6c:30:ff:9a:6f:df:f6:e0:eb:15:cb: d1:54:08:af:25:84:b0:ff:c2:d5:58:f6:20:ce:8b:f8:70:6b: 1e:5e:10:4b:eb:1f:00:34:b0:7a:9a:18:58:09:45:1d:4b:0c: e7:50:32:62:a0:e5:99:a7:b5:0c:ec:66:ce:03:d6:5c:b6:6e: cc:da:23:62:b9:d0:59:ef:ea:36:69:0c:03:48:58:bd:8a:45: 1d:f7:b3:c9:b6:7d:29:e6:23:4b:b4:3b:67:29:1d:5d:b4:10: bc:16:fd:96 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt+Nzj/9gjoAvCN4JM87MEdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTZjN2U2NjBiMWM3NGUzYjAzMThiMTQzMzhjM2YwMGRk N2JjNzIwHhcNMjYwMTAyMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2YyODY3MTc0MzQwZWUyMWQ4MjE4NjQyMzQwYWRiNTA4ZGEwNjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCaF9fHzW1Shs/j6Lq25MuUlAPlB WUZtZN/6eEy60DB6TJa0ataUrZ/2w9RxBuc3R1eR8yvMynhPhmxkXatoZctVv7Pw fa1ujCovHzAT91zD0maFiz8sV5eplZl/i79nUCwVJqIFTqxnRG4x0IBEoRF3yn4A Kyu5ovp0Xhf8e6du6G1AFVY+dyY2YuWB+lN3BncBisZ+VIuixX0uqNvhaJvvPqBJ H4XIGL13662ZLIprK0yWm5cJwMRocgWbRb+ULOJpvsOLg2oOgJleIc4jZ3Fb4CFG RklRILJ5jO/ZrNVIa9aMQF+VgykYaBV21JWv6WQlQ6YMGnRpqiqFfUsJTQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFAfyhnF0NA7iHYIYZCNArbUI2gYmMB8GA1UdIwQY MBaAFPpWx+ZgscdOOwMYsUM4w/AN17xyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sYkg1bUN4eDA0N0F4aXhRempEOEEzWHZISS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlm LThiZjRmZTRjNzczMi8xL0JfS0djWFEwRHVJZGdoaGtJMEN0dFFqYUJpWS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODIvMjc2YzI0LTJhN2YtNDcyNi04ZDlmLThiZjRmZTRjNzcz Mi8xLzEtbGJINW1DeHgwNDdBeGl4UXpqRDhBM1h2SEkuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAOwaigD BALAkXgwDQYJKoZIhvcNAQELBQADggEBAE0Dl9LPvs7aUDAucjNxuauq6GtlG0jy vwm9XNK/gwIXkrHJ6PSYM22jTSJ1im355yoYHEa2WkbTnEybjUguD1BwyK/rirXo 7cQmfk4auX0Bg2xIrX4omv86cDjl0+2Ze2+Rs4c2KVA9ZUGnNm9/KzHhjcsbi+zF VGoP4a9PSE0IqDMfPJX+AKXs8uoAfMRes+7UvVU04gJsMP+ab9/24OsVy9FUCK8l hLD/wtVY9iDOi/hwax5eEEvrHwA0sHqaGFgJRR1LDOdQMmKg5ZmntQzsZs4D1ly2 bszaI2K50Fnv6jZpDANIWL2KRR33s8m2fSnmI0u0O2cpHV20ELwW/ZY= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:23 2026 by rpki-client