This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/v06BU2iHIu9uorNsisLEBjplmZA.roa File: v06BU2iHIu9uorNsisLEBjplmZA.roa (raw, json) Hash identifier: MXRyS0OQvbC4wtl745NoArc8F6bSSkBVii6fN2pQffw= Subject key identifier: BF:4E:81:53:68:87:22:EF:6E:A2:B3:6C:8A:C2:C4:06:3A:65:99:90 Certificate issuer: /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037 Certificate serial: 019B7834DE32F1E3A8828D1C22922CF3E7F6 Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/v06BU2iHIu9uorNsisLEBjplmZA.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39642 IP address blocks: 37.75.160.0/19 maxlen: 19 77.68.128.0/17 maxlen: 17 78.156.96.0/19 maxlen: 19 83.137.120.0/21 maxlen: 21 85.191.128.0/17 maxlen: 17 85.203.128.0/17 maxlen: 17 89.249.0.0/20 maxlen: 20 92.246.0.0/19 maxlen: 19 95.138.208.0/20 maxlen: 20 139.45.0.0/17 maxlen: 17 178.21.88.0/21 maxlen: 21 178.157.192.0/18 maxlen: 18 185.17.216.0/22 maxlen: 22 185.101.88.0/22 maxlen: 22 188.114.128.0/18 maxlen: 18 217.198.208.0/20 maxlen: 20 2a00:1f98::/29 maxlen: 29 2a02:25c8::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:de:32:f1:e3:a8:82:8d:1c:22:92:2c:f3:e7:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf4e8153688722ef6ea2b36c8ac2c4063a659990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cb:b9:e8:67:31:5c:96:59:bf:88:cf:99:e9: a5:46:bb:45:7f:c4:26:c8:e8:a3:4f:ea:1f:36:d2: 8b:07:f7:64:a8:05:9d:38:f4:8b:38:5f:4d:b1:5a: f7:02:f1:43:96:78:7e:83:35:3e:3e:07:bb:f5:a3: 3d:62:7b:08:79:6f:16:07:12:13:ce:32:0b:c6:db: a4:52:0c:6b:07:52:1f:d8:1d:83:6a:86:56:b3:dc: 8b:b5:5a:ad:59:5d:a5:d0:97:f1:b3:40:d6:47:da: bc:33:e8:da:41:11:39:a8:5b:3e:53:c5:fb:59:89: de:90:69:20:76:fa:68:21:0e:42:e6:0c:c8:b8:73: c5:72:7c:75:59:0d:4f:c1:6f:ef:36:0f:c3:25:5b: ed:44:6b:de:84:d3:01:fc:3e:17:90:bc:5b:45:b1: 02:46:0e:99:d9:d1:fc:47:84:4f:ef:4b:df:c9:18: fa:6a:70:ef:9b:0c:e0:51:24:b5:cb:97:ed:74:a9: 58:d1:be:e4:a7:59:b7:b2:74:1d:a6:69:b1:69:0f: 2f:b5:8b:b1:5e:61:8a:10:5b:2f:69:6e:a4:eb:7b: 01:c9:c0:61:23:4b:be:28:6b:42:2a:ec:16:ac:99: 6e:c8:ea:73:11:11:23:81:e4:ca:5b:ce:87:ff:b9: 9d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:4E:81:53:68:87:22:EF:6E:A2:B3:6C:8A:C2:C4:06:3A:65:99:90 X509v3 Authority Key Identifier: keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/v06BU2iHIu9uorNsisLEBjplmZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.75.160.0/19 77.68.128.0/17 78.156.96.0/19 83.137.120.0/21 85.191.128.0/17 85.203.128.0/17 89.249.0.0/20 92.246.0.0/19 95.138.208.0/20 139.45.0.0/17 178.21.88.0/21 178.157.192.0/18 185.17.216.0/22 185.101.88.0/22 188.114.128.0/18 217.198.208.0/20 IPv6: 2a00:1f98::/29 2a02:25c8::/29 Signature Algorithm: sha256WithRSAEncryption 86:d0:48:8a:be:2d:c1:cc:76:f3:7b:40:fa:30:f3:f4:8c:25: 65:4e:20:4c:d2:b3:bb:a5:32:23:26:59:31:e8:9c:93:86:23: 5f:5b:85:53:b5:cc:f2:cc:aa:04:6e:5b:89:8b:d9:93:32:07: 62:cd:a4:4d:08:93:5d:26:6f:02:6c:4a:4c:bf:db:48:57:22: eb:3f:c7:ce:90:75:4d:fa:06:9e:dc:d5:00:c4:20:9b:aa:32: 3f:e4:26:38:64:b1:4d:e1:91:d3:2b:a0:c6:b5:2f:56:c2:91: ad:a5:eb:fa:34:41:1c:a3:cd:dd:32:3e:73:a6:03:08:93:cd: 95:b5:0c:9b:9d:90:b7:a7:93:e7:7f:ea:b3:16:a4:c6:0c:76: 95:ca:b1:af:d6:7d:af:df:13:9a:73:8f:d8:4b:29:ff:ed:3f: 53:67:b3:28:fc:65:ce:6c:fd:bd:79:d2:55:41:0d:39:e1:c6: 3f:f0:ab:3b:8c:06:15:ef:ae:94:31:59:d8:01:88:d6:97:33: 5c:fe:12:34:b2:d5:b7:df:9d:c4:18:f5:4e:bd:bd:8b:c8:72: 62:0c:ec:85:14:1f:9e:6a:ae:9d:61:2b:b5:69:bc:83:8f:6c: 81:f3:5b:56:dd:3b:45:1a:1b:02:14:16:a4:8d:81:7a:c7:22: f6:07:28:3a -----BEGIN CERTIFICATE----- MIIFbzCCBFegAwIBAgISAZt4NN4y8eOogo0cIpIs8+f2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjdlZTNkZTg4MTU2MmVlYTdkZjJlMzIzMmNkYjMyYjU0 ZmUwMzcwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjRlODE1MzY4ODcyMmVmNmVhMmIzNmM4YWMyYzQwNjNhNjU5OTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18u56GcxXJZZv4jPmemlRrtFf8Qm yOijT+ofNtKLB/dkqAWdOPSLOF9NsVr3AvFDlnh+gzU+Pge79aM9YnsIeW8WBxIT zjILxtukUgxrB1If2B2DaoZWs9yLtVqtWV2l0Jfxs0DWR9q8M+jaQRE5qFs+U8X7 WYnekGkgdvpoIQ5C5gzIuHPFcnx1WQ1PwW/vNg/DJVvtRGvehNMB/D4XkLxbRbEC Rg6Z2dH8R4RP70vfyRj6anDvmwzgUSS1y5ftdKlY0b7kp1m3snQdpmmxaQ8vtYux XmGKEFsvaW6k63sBycBhI0u+KGtCKuwWrJluyOpzEREjgeTKW86H/7mdCwIDAQAB o4ICezCCAncwHQYDVR0OBBYEFL9OgVNohyLvbqKzbIrCxAY6ZZmQMB8GA1UdIwQY MBaAFHxn7j3ogVYu6n3y4yMs2zK1T+A3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81ZmFiNzUtNWYzNS00NjRkLTlmMGQt M2VkMmVjZWI0ZjZjLzEvdjA2QlUyaUhJdTl1b3JOc2lzTEVCanBsbVpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi81ZmFiNzUtNWYzNS00NjRkLTlmMGQtM2VkMmVjZWI0ZjZj LzEvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGQBggrBgEFBQcBBwEB/wSBgDB+MGYEAgABMGADBAUlS6AD BAdNRIADBAVOnGADBANTiXgDBAdVv4ADBAdVy4ADBARZ+QADBAVc9gADBARfitAD BAeLLQADBAOyFVgDBAayncADBAK5EdgDBAK5ZVgDBAa8coADBATZxtAwFAQCAAIw DgMFAyoAH5gDBQMqAiXIMA0GCSqGSIb3DQEBCwUAA4IBAQCG0EiKvi3BzHbze0D6 MPP0jCVlTiBM0rO7pTIjJlkx6JyThiNfW4VTtczyzKoEbluJi9mTMgdizaRNCJNd Jm8CbEpMv9tIVyLrP8fOkHVN+gae3NUAxCCbqjI/5CY4ZLFN4ZHTK6DGtS9WwpGt pev6NEEco83dMj5zpgMIk82VtQybnZC3p5Pnf+qzFqTGDHaVyrGv1n2v3xOac4/Y Syn/7T9TZ7Mo/GXObP29edJVQQ054cY/8Ks7jAYV766UMVnYAYjWlzNc/hI0stW3 353EGPVOvb2LyHJiDOyFFB+eaq6dYSu1abyDj2yB81tW3TtFGhsCFBakjYF6xyL2 Byg6 -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:48 2026 by rpki-client