This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/bReCIVuQYApcR9bghyySzc1rX0U.roa File: bReCIVuQYApcR9bghyySzc1rX0U.roa (raw, json) Hash identifier: magcfvf5CzoyLEkyPyEHEy4bFJNpUsQt9gCbLUeNHIA= Subject key identifier: 6D:17:82:21:5B:90:60:0A:5C:47:D6:E0:87:2C:92:CD:CD:6B:5F:45 Certificate issuer: /CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63 Certificate serial: 019B7CEDF1B54677AF6A618FC2388F2019E4 Authority key identifier: C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/bReCIVuQYApcR9bghyySzc1rX0U.roa Signing time: Fri 02 Jan 2026 04:18:47 +0000 ROA not before: Fri 02 Jan 2026 04:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49024 IP address blocks: 185.154.28.0/22 maxlen: 24 2a02:c49::/32 maxlen: 32 2a02:c4a::/31 maxlen: 31 2a02:c4a::/32 maxlen: 32 2a02:c4c::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:f1:b5:46:77:af:6a:61:8f:c2:38:8f:20:19:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c02f59eca64293d2c916e7abb09e052e2cb1cb63 Validity Not Before: Jan 2 04:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d1782215b90600a5c47d6e0872c92cdcd6b5f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ac:ea:a8:e7:28:a2:36:57:cf:40:8d:67:a2: 1a:a8:a8:a2:db:02:47:2e:ef:4a:2e:12:c3:59:bb: 90:8b:f1:3e:61:a0:4a:1a:93:c3:15:da:75:e6:bb: 26:be:24:08:f4:75:11:4d:d9:a3:8e:b2:d2:72:b0: 75:0c:ed:c6:21:6c:a2:fc:99:60:10:33:3e:e2:33: e7:f4:e3:85:dc:61:44:72:bb:d7:08:c3:7f:17:21: 61:0e:a7:77:1d:b0:c3:f9:09:65:e8:e5:27:48:11: e7:83:42:91:38:af:60:a1:c2:90:29:d6:87:fc:4b: 78:9e:78:9f:28:82:46:77:48:11:2e:5d:c2:8a:e8: f2:08:9b:75:bf:58:df:00:1e:7b:f7:19:8e:2e:42: c1:85:4b:fd:58:0c:b1:18:c7:05:c1:15:f1:79:66: 00:2c:ac:f6:68:1f:d5:e0:18:44:3f:90:d6:5d:6a: a6:18:e8:21:f2:5a:89:f7:bc:72:b2:64:b6:a2:38: 6d:d3:dc:0b:14:9f:b0:3f:14:e8:28:68:d3:22:d8: 2c:f5:af:2d:20:8c:2a:38:e4:9e:79:3c:4c:2f:65: 54:1f:27:14:1f:7b:37:fc:8e:7e:9a:23:fd:d7:80: ea:ab:9e:b2:2e:e1:83:e0:33:28:b1:94:21:1f:75: 1a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:17:82:21:5B:90:60:0A:5C:47:D6:E0:87:2C:92:CD:CD:6B:5F:45 X509v3 Authority Key Identifier: keyid:C0:2F:59:EC:A6:42:93:D2:C9:16:E7:AB:B0:9E:05:2E:2C:B1:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wC9Z7KZCk9LJFuersJ4FLiyxy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/bReCIVuQYApcR9bghyySzc1rX0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/58b20a-452b-4f2b-aab5-7d13c072d96b/1/wC9Z7KZCk9LJFuersJ4FLiyxy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.28.0/22 IPv6: 2a02:c49::-2a02:c4f:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3e:97:28:28:46:0c:58:19:34:44:94:18:fb:a6:1e:d5:70:a6: 7c:b6:9a:e7:9a:1e:16:f6:3a:5c:d5:dc:39:23:6f:f7:83:63: e5:1a:32:a9:5d:09:35:02:23:e9:72:2a:2c:34:52:80:34:5f: 5e:b2:46:2f:e3:e4:27:d8:83:b8:15:95:92:2f:c3:07:70:05: a6:d5:4e:42:ac:af:17:93:0b:5b:b2:c8:d7:f0:88:8c:c3:8d: b4:7d:11:6c:ff:68:64:6e:14:59:64:97:bd:72:fe:32:2e:65: 2f:4d:30:0c:f2:bd:14:cf:be:00:84:83:86:69:87:5a:f8:d9: 84:9a:80:e4:0c:e2:7d:fe:38:2e:04:0f:43:78:ac:ce:82:de: 62:79:b3:a7:0a:e0:59:5b:7c:4d:bb:8f:3f:5c:24:84:5c:26: 2a:b5:fe:04:52:24:75:8d:9f:38:51:57:1d:b8:06:91:77:a9: b1:8d:91:ec:fd:dd:7f:9f:ab:54:e3:3b:e8:18:09:08:77:0d: fe:dc:74:ea:ad:24:6a:71:7a:7e:eb:b7:51:87:57:5a:4d:cd: 57:c1:46:de:77:0a:1f:39:d8:5a:22:2a:a8:65:b1:83:b2:5a: e5:4a:37:79:24:71:33:f1:9e:bb:b9:55:cd:fa:dd:1d:7a:17: 91:09:77:3d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt87fG1RnevamGPwjiPIBnkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMmY1OWVjYTY0MjkzZDJjOTE2ZTdhYmIwOWUwNTJlMmNi MWNiNjMwHhcNMjYwMTAyMDQxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDE3ODIyMTViOTA2MDBhNWM0N2Q2ZTA4NzJjOTJjZGNkNmI1ZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqzqqOcoojZXz0CNZ6IaqKii2wJH Lu9KLhLDWbuQi/E+YaBKGpPDFdp15rsmviQI9HURTdmjjrLScrB1DO3GIWyi/Jlg EDM+4jPn9OOF3GFEcrvXCMN/FyFhDqd3HbDD+Qll6OUnSBHng0KROK9gocKQKdaH /Et4nnifKIJGd0gRLl3CiujyCJt1v1jfAB579xmOLkLBhUv9WAyxGMcFwRXxeWYA LKz2aB/V4BhEP5DWXWqmGOgh8lqJ97xysmS2ojht09wLFJ+wPxToKGjTItgs9a8t IIwqOOSeeTxML2VUHycUH3s3/I5+miP914Dqq56yLuGD4DMosZQhH3UaaQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFG0XgiFbkGAKXEfW4Icsks3Na19FMB8GA1UdIwQY MBaAFMAvWeymQpPSyRbnq7CeBS4ssctjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0M5WjdLWkNrOUxKRnVlcnNKNEZMaXl4eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81OGIyMGEtNDUyYi00ZjJiLWFhYjUt N2QxM2MwNzJkOTZiLzEvYlJlQ0lWdVFZQXBjUjliZ2h5eVN6YzFyWDBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS81OGIyMGEtNDUyYi00ZjJiLWFhYjUtN2QxM2MwNzJkOTZi LzEvd0M5WjdLWkNrOUxKRnVlcnNKNEZMaXl4eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQCuZocMBYE AgACMBAwDgMFACoCDEkDBQQqAgxAMA0GCSqGSIb3DQEBCwUAA4IBAQA+lygoRgxY GTRElBj7ph7VcKZ8tprnmh4W9jpc1dw5I2/3g2PlGjKpXQk1AiPpciosNFKANF9e skYv4+Qn2IO4FZWSL8MHcAWm1U5CrK8XkwtbssjX8IiMw420fRFs/2hkbhRZZJe9 cv4yLmUvTTAM8r0Uz74AhIOGaYda+NmEmoDkDOJ9/jguBA9DeKzOgt5iebOnCuBZ W3xNu48/XCSEXCYqtf4EUiR1jZ84UVcduAaRd6mxjZHs/d1/n6tU4zvoGAkIdw3+ 3HTqrSRqcXp+67dRh1daTc1XwUbedwofOdhaIiqoZbGDslrlSjd5JHEz8Z67uVXN +t0deheRCXc9 -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:36 2026 by rpki-client