This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/bpf4dnvqIQj9FFsj01pROUqFMUY.roa File: bpf4dnvqIQj9FFsj01pROUqFMUY.roa (raw, json) Hash identifier: lZnPqgOEDd6XO2vVnnKuHMXawH4M5SYKAszZ/MqTlPk= Subject key identifier: 6E:97:F8:76:7B:EA:21:08:FD:14:5B:23:D3:5A:51:39:4A:85:31:46 Certificate issuer: /CN=feedf2140674ae6ff3e464560c4956ab6e21adee Certificate serial: 019B790FFF570C74C00689F1C80E20A092A3 Authority key identifier: FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/bpf4dnvqIQj9FFsj01pROUqFMUY.roa Signing time: Thu 01 Jan 2026 10:17:30 +0000 ROA not before: Thu 01 Jan 2026 10:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201285 IP address blocks: 185.196.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.mft rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:0f:ff:57:0c:74:c0:06:89:f1:c8:0e:20:a0:92:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=feedf2140674ae6ff3e464560c4956ab6e21adee Validity Not Before: Jan 1 10:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e97f8767bea2108fd145b23d35a51394a853146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c0:17:89:03:25:f3:32:d7:29:2b:6f:79:0a: a2:1d:46:2e:7b:a5:05:9f:17:bf:03:c3:9e:60:92: 5f:ce:75:07:75:f3:3b:da:3e:be:36:f5:c0:a9:bb: 9f:fe:a2:d9:28:41:1f:10:fd:d0:db:fb:cf:60:fe: ab:99:4b:8e:9e:35:7d:55:5b:d2:75:d5:54:a5:51: d0:6f:27:87:fd:ae:69:7c:dc:9e:c7:6c:3b:23:f8: 37:81:8d:3e:ee:ec:bd:00:a2:98:de:33:0a:5d:3c: 82:29:3c:7b:c8:14:77:97:9e:06:16:3e:2d:68:0f: f5:d2:93:84:06:30:bb:5e:95:73:22:a4:7d:11:d0: 26:81:94:4f:44:dc:97:56:c7:f9:da:a2:f8:5c:39: 52:78:b3:59:c9:88:fe:de:99:da:08:00:7b:a8:3f: 1a:1f:0a:24:80:7a:b0:a8:1b:83:b8:f2:fe:a0:8b: 7c:64:f3:99:04:66:fa:72:06:e1:95:92:c3:c6:87: 4e:bc:a6:71:25:71:c8:ce:00:82:2f:82:5a:fd:57: b0:88:ac:76:40:7f:5b:b7:7c:7a:08:d5:fe:61:4c: 29:9c:ad:57:c2:d7:42:e2:52:45:b2:9e:08:91:43: 28:b4:5b:0b:36:3a:79:47:42:bf:20:3a:59:0c:10: da:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:97:F8:76:7B:EA:21:08:FD:14:5B:23:D3:5A:51:39:4A:85:31:46 X509v3 Authority Key Identifier: keyid:FE:ED:F2:14:06:74:AE:6F:F3:E4:64:56:0C:49:56:AB:6E:21:AD:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u3yFAZ0rm_z5GRWDElWq24hre4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/bpf4dnvqIQj9FFsj01pROUqFMUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/5562a1-e1a4-4174-9918-baa05c8190de/1/_u3yFAZ0rm_z5GRWDElWq24hre4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.196.31.0/24 Signature Algorithm: sha256WithRSAEncryption 01:dc:37:ca:d4:82:72:d7:65:bf:81:e2:2b:6c:16:0c:30:bd: 3d:33:17:eb:ce:c0:57:5c:b8:41:14:df:33:ed:b1:52:07:59: a4:25:6d:5b:08:56:5c:8f:be:4a:f5:59:18:7d:21:72:7b:9d: fe:c9:f5:e2:81:bb:26:b7:06:49:dc:69:49:c4:0f:8c:f1:65: 48:38:77:92:78:0f:fb:7d:17:0d:90:b2:18:08:01:37:aa:f2: 0f:ed:2e:e2:40:0a:82:f7:e9:84:fa:85:ee:de:2e:c5:e8:a5: 49:40:1d:58:07:e3:af:97:ed:6a:ea:33:41:79:7a:79:d0:28: 2e:c5:d5:a9:cf:df:1d:33:3d:89:b5:cf:2b:6d:8c:82:91:f9: a1:82:3b:38:74:c3:cd:08:ff:4a:18:36:36:2c:80:3e:bd:f1: af:d8:e4:db:46:07:c2:a9:3a:32:e4:50:63:07:dc:50:6d:a4: 03:88:1b:4c:fa:de:92:fb:ed:80:20:fc:e1:db:50:f7:5c:1d: 6d:9e:ac:b8:93:76:b6:52:a5:e7:76:58:8e:c5:e5:4a:47:6c: e8:57:c5:7c:f9:85:9d:ce:0a:00:31:33:06:98:29:81:44:a4: e7:c0:a1:af:3a:7a:fc:64:64:0d:39:04:08:34:22:95:f6:11: f4:f2:a1:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5D/9XDHTABonxyA4goJKjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlZWRmMjE0MDY3NGFlNmZmM2U0NjQ1NjBjNDk1NmFiNmUy MWFkZWUwHhcNMjYwMTAxMTAxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTk3Zjg3NjdiZWEyMTA4ZmQxNDViMjNkMzVhNTEzOTRhODUzMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8AXiQMl8zLXKStveQqiHUYue6UF nxe/A8OeYJJfznUHdfM72j6+NvXAqbuf/qLZKEEfEP3Q2/vPYP6rmUuOnjV9VVvS ddVUpVHQbyeH/a5pfNyex2w7I/g3gY0+7uy9AKKY3jMKXTyCKTx7yBR3l54GFj4t aA/10pOEBjC7XpVzIqR9EdAmgZRPRNyXVsf52qL4XDlSeLNZyYj+3pnaCAB7qD8a HwokgHqwqBuDuPL+oIt8ZPOZBGb6cgbhlZLDxodOvKZxJXHIzgCCL4Ja/VewiKx2 QH9bt3x6CNX+YUwpnK1XwtdC4lJFsp4IkUMotFsLNjp5R0K/IDpZDBDawwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG6X+HZ76iEI/RRbI9NaUTlKhTFGMB8GA1UdIwQY MBaAFP7t8hQGdK5v8+RkVgxJVqtuIa3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3UzeUZBWjBybV96NUdSV0RFbFdxMjRocmU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC81NTYyYTEtZTFhNC00MTc0LTk5MTgt YmFhMDVjODE5MGRlLzEvYnBmNGRudnFJUWo5RkZzajAxcFJPVXFGTVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC81NTYyYTEtZTFhNC00MTc0LTk5MTgtYmFhMDVjODE5MGRl LzEvX3UzeUZBWjBybV96NUdSV0RFbFdxMjRocmU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucQfMA0G CSqGSIb3DQEBCwUAA4IBAQAB3DfK1IJy12W/geIrbBYMML09MxfrzsBXXLhBFN8z 7bFSB1mkJW1bCFZcj75K9VkYfSFye53+yfXigbsmtwZJ3GlJxA+M8WVIOHeSeA/7 fRcNkLIYCAE3qvIP7S7iQAqC9+mE+oXu3i7F6KVJQB1YB+Ovl+1q6jNBeXp50Cgu xdWpz98dMz2Jtc8rbYyCkfmhgjs4dMPNCP9KGDY2LIA+vfGv2OTbRgfCqToy5FBj B9xQbaQDiBtM+t6S++2AIPzh21D3XB1tnqy4k3a2UqXndliOxeVKR2zoV8V8+YWd zgoAMTMGmCmBRKTnwKGvOnr8ZGQNOQQINCKV9hH08qH0 -----END CERTIFICATE-----Generated at Tue Feb 10 02:28:01 2026 by rpki-client