This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/BIbEENkk1VYHKgEjraLUKclwiTY.roa File: BIbEENkk1VYHKgEjraLUKclwiTY.roa (raw, json) Hash identifier: Xt3A7RQYaDzUTGNw8VMdtqurMB1YlizmqkVXb08fVNk= Subject key identifier: 04:86:C4:10:D9:24:D5:56:07:2A:01:23:AD:A2:D4:29:C9:70:89:36 Certificate issuer: /CN=a7a77078af387b48d70810eb1604df0ade118fda Certificate serial: 019B7834FEBECA4BBCC4D601E7014B7412D8 Authority key identifier: A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/BIbEENkk1VYHKgEjraLUKclwiTY.roa Signing time: Thu 01 Jan 2026 06:18:17 +0000 ROA not before: Thu 01 Jan 2026 06:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51809 IP address blocks: 45.82.140.0/22 maxlen: 22 63.135.72.0/21 maxlen: 21 67.208.52.0/22 maxlen: 22 185.232.119.0/24 maxlen: 24 2a10:d580::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.mft rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:fe:be:ca:4b:bc:c4:d6:01:e7:01:4b:74:12:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7a77078af387b48d70810eb1604df0ade118fda Validity Not Before: Jan 1 06:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0486c410d924d556072a0123ada2d429c9708936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:1b:6b:65:d5:03:99:3b:19:f7:45:9e:0f: 8f:25:d3:ad:60:8e:35:9a:c9:a0:2c:d6:1e:1f:e4: c5:dd:82:95:f1:18:60:67:43:fb:97:e8:fb:9b:a0: 53:81:ba:60:34:83:a6:41:eb:48:21:48:c7:0b:1f: f4:ba:65:f9:c9:30:6a:23:3f:e8:d5:f3:95:2b:98: 00:bc:3c:7c:9e:87:7b:6a:9e:30:28:65:47:00:30: 5e:b5:84:2f:8d:89:7b:f1:57:cd:a1:cd:77:b2:2b: 03:1b:b0:be:79:31:36:d5:3c:86:d1:74:ac:03:24: f9:05:c8:4c:b8:93:56:5a:f4:6f:c3:74:e7:57:cf: fc:77:e2:13:51:8a:2e:2e:b8:3a:3d:b5:5e:e5:73: 46:b3:59:1e:2c:e3:ea:a8:e5:c0:4e:93:d3:ca:5e: 89:b9:a0:52:2b:d9:79:bb:a7:d7:0f:c8:30:6c:aa: 60:3e:08:96:97:e9:17:78:e7:39:1c:85:3e:29:9a: f3:cc:a8:d7:69:a1:fc:16:99:57:2e:da:f3:40:2c: 86:f9:fb:ce:3b:22:31:9a:ef:ec:f2:2c:47:28:d9: 91:86:20:54:50:99:14:10:d2:fd:61:67:b0:3b:2a: 5c:99:e3:50:4f:cd:d2:30:79:fe:0e:7a:32:46:0b: 51:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:86:C4:10:D9:24:D5:56:07:2A:01:23:AD:A2:D4:29:C9:70:89:36 X509v3 Authority Key Identifier: keyid:A7:A7:70:78:AF:38:7B:48:D7:08:10:EB:16:04:DF:0A:DE:11:8F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6dweK84e0jXCBDrFgTfCt4Rj9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/BIbEENkk1VYHKgEjraLUKclwiTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/021f6b-6fd0-4365-92f7-4de47b80440a/1/p6dweK84e0jXCBDrFgTfCt4Rj9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.140.0/22 63.135.72.0/21 67.208.52.0/22 185.232.119.0/24 IPv6: 2a10:d580::/29 Signature Algorithm: sha256WithRSAEncryption 76:67:b3:e2:f7:41:0b:96:db:98:18:e7:f7:85:d9:15:9f:16: 3d:38:92:e5:16:aa:48:77:3c:77:b2:d2:ed:8a:5e:3b:b3:32: 78:24:a0:ff:ae:0e:2a:79:70:76:f6:ba:f9:69:ce:93:69:49: a0:c9:19:74:ac:5d:cb:e8:a3:26:a3:fa:fa:b6:c6:31:00:05: a9:d1:c0:78:d5:f9:fb:8d:e2:4f:13:1e:07:27:e4:eb:b1:24: 58:d3:ad:e8:86:a5:e8:16:4f:dd:13:81:9b:4f:cb:33:a6:7e: a7:3c:a2:5f:82:26:43:1a:db:59:f4:01:9e:af:c9:89:c7:4d: fe:eb:e3:bb:f8:39:9d:79:4c:e0:d6:ec:36:6e:ff:bb:56:36: 21:31:69:db:55:11:5f:20:95:99:7a:da:21:ee:45:34:5f:71: 0c:76:a6:df:1b:d9:f3:d2:2a:cd:e9:d1:06:58:10:06:af:7e: a0:6f:df:f5:8c:53:31:c4:1a:8a:78:60:d2:17:3c:7b:ec:94: df:bf:87:0c:d2:7c:0d:89:26:e3:3c:9e:d0:0f:f1:bb:4b:70: e8:dd:c3:b2:cb:b6:ff:3b:03:4c:cb:9c:8c:6d:6a:c5:40:25: d7:d8:ca:c6:89:08:bb:e7:25:28:7d:c1:7d:73:51:e4:00:1c: db:d7:4c:f3 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4NP6+yku8xNYB5wFLdBLYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3YTc3MDc4YWYzODdiNDhkNzA4MTBlYjE2MDRkZjBhZGUx MThmZGEwHhcNMjYwMTAxMDYxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDg2YzQxMGQ5MjRkNTU2MDcyYTAxMjNhZGEyZDQyOWM5NzA4OTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArREba2XVA5k7GfdFng+PJdOtYI41 msmgLNYeH+TF3YKV8RhgZ0P7l+j7m6BTgbpgNIOmQetIIUjHCx/0umX5yTBqIz/o 1fOVK5gAvDx8nod7ap4wKGVHADBetYQvjYl78VfNoc13sisDG7C+eTE21TyG0XSs AyT5BchMuJNWWvRvw3TnV8/8d+ITUYouLrg6PbVe5XNGs1keLOPqqOXATpPTyl6J uaBSK9l5u6fXD8gwbKpgPgiWl+kXeOc5HIU+KZrzzKjXaaH8FplXLtrzQCyG+fvO OyIxmu/s8ixHKNmRhiBUUJkUENL9YWewOypcmeNQT83SMHn+DnoyRgtRTQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFASGxBDZJNVWByoBI62i1CnJcIk2MB8GA1UdIwQY MBaAFKencHivOHtI1wgQ6xYE3wreEY/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMjFmNmItNmZkMC00MzY1LTkyZjct NGRlNDdiODA0NDBhLzEvQkliRUVOa2sxVllIS2dFanJhTFVLY2x3aVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wMjFmNmItNmZkMC00MzY1LTkyZjctNGRlNDdiODA0NDBh LzEvcDZkd2VLODRlMGpYQ0JEckZnVGZDdDRSajlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCLVKMAwQD P4dIAwQCQ9A0AwQAueh3MA0EAgACMAcDBQMqENWAMA0GCSqGSIb3DQEBCwUAA4IB AQB2Z7Pi90ELltuYGOf3hdkVnxY9OJLlFqpIdzx3stLtil47szJ4JKD/rg4qeXB2 9rr5ac6TaUmgyRl0rF3L6KMmo/r6tsYxAAWp0cB41fn7jeJPEx4HJ+TrsSRY063o hqXoFk/dE4GbT8szpn6nPKJfgiZDGttZ9AGer8mJx03+6+O7+DmdeUzg1uw2bv+7 VjYhMWnbVRFfIJWZetoh7kU0X3EMdqbfG9nz0irN6dEGWBAGr36gb9/1jFMxxBqK eGDSFzx77JTfv4cM0nwNiSbjPJ7QD/G7S3Do3cOyy7b/OwNMy5yMbWrFQCXX2MrG iQi75yUofcF9c1HkABzb10zz -----END CERTIFICATE-----Generated at Tue Feb 10 01:24:18 2026 by rpki-client