This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/b4AFCTNKeJ0xNYdoOFidnd_6XrQ.roa File: b4AFCTNKeJ0xNYdoOFidnd_6XrQ.roa (raw, json) Hash identifier: +W/PCB4vB7d4sz4grk0af5C3/JM5opRiYyqa2mG79zM= Subject key identifier: 6F:80:05:09:33:4A:78:9D:31:35:87:68:38:58:9D:9D:DF:FA:5E:B4 Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239 Certificate serial: 019B7910EC8D928DF45DC15B6160D90AC170 Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/b4AFCTNKeJ0xNYdoOFidnd_6XrQ.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39538 IP address blocks: 194.15.191.0/24 maxlen: 24 194.31.221.0/24 maxlen: 24 195.244.0.0/23 maxlen: 23 2001:67c:2308::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ec:8d:92:8d:f4:5d:c1:5b:61:60:d9:0a:c1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239 Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f800509334a789d3135876838589d9ddffa5eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ac:db:f2:14:cf:ec:d6:e3:21:3f:31:52:75: a1:c3:52:4b:71:62:e7:41:36:d5:d8:41:39:4b:99: 34:92:fe:67:c5:d6:dc:23:bc:64:ae:0b:a8:33:ab: d5:83:ed:05:ed:83:1a:cd:c8:43:97:08:67:aa:0d: 1b:b6:53:f2:9e:34:66:6d:a2:1e:28:d6:68:d4:9b: 9c:3b:db:56:36:b9:f3:62:25:ab:95:27:76:4d:5e: 4f:be:66:44:61:ef:44:69:61:2a:30:67:ba:75:ff: cd:17:72:c9:54:7d:aa:70:3b:0d:5d:55:47:b7:07: aa:11:1c:b9:6a:bf:b1:c9:84:86:de:cf:34:6c:05: 7e:97:21:82:72:f0:7a:48:56:c9:47:18:88:7b:e3: 55:ea:15:f4:e4:13:2e:7b:c6:01:df:bc:48:6b:ac: 14:6b:b3:4f:b1:51:0b:d0:02:5b:d6:31:1b:f1:d5: 11:f4:e5:03:3f:ad:d5:9f:ed:21:76:aa:81:48:a9: 29:10:c3:96:51:bb:a6:b6:3d:9c:84:87:a9:f5:7f: 49:ad:d2:82:12:5d:15:e9:2f:f0:a4:d8:50:fa:e5: a0:9a:48:2e:49:2a:f3:8e:4c:5f:e3:b6:70:b6:5c: 43:1c:dc:ae:53:83:38:e1:a4:73:10:66:c3:3f:61: 53:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:80:05:09:33:4A:78:9D:31:35:87:68:38:58:9D:9D:DF:FA:5E:B4 X509v3 Authority Key Identifier: keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/b4AFCTNKeJ0xNYdoOFidnd_6XrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.191.0/24 194.31.221.0/24 195.244.0.0/23 IPv6: 2001:67c:2308::/48 Signature Algorithm: sha256WithRSAEncryption 05:ab:a5:e9:45:76:0d:c1:1d:94:b0:04:06:5e:a5:dd:c3:34: a7:2f:ab:f1:08:bb:63:0d:bd:f6:3b:65:70:38:d2:fe:b5:4b: 5b:5a:c4:81:ff:61:0f:97:76:79:65:97:76:26:9a:ef:50:78: 9c:00:bd:91:d3:c6:87:1f:2a:1e:01:c3:d6:8a:f0:cd:a0:28: 45:29:28:11:4e:f9:02:b9:d7:e0:07:91:d3:c7:98:48:a2:72: 45:64:17:cd:c8:b2:2b:02:6f:8b:fb:81:a4:2b:2d:e8:13:3b: 20:3b:f9:2f:f7:2f:03:9e:1f:18:33:d0:1c:75:c4:a4:ef:48: 97:41:4e:d9:dc:90:b2:d0:5d:97:7c:41:20:21:af:af:16:2a: 8a:cc:17:8d:80:e6:86:a0:2a:53:ce:80:34:ce:bb:d4:a3:44: 8a:67:ad:49:90:a0:be:aa:17:22:1b:9d:66:27:f7:04:82:bf: cb:5d:0d:7b:89:7c:f5:b6:7e:4f:54:77:5e:b1:74:bb:27:3b: 0c:77:fd:17:a8:01:2d:3c:62:9a:77:d5:a9:1c:1d:6b:36:c6: 9b:6b:2b:68:6c:57:43:98:9c:41:3a:10:c5:68:25:e2:fe:5b: 1e:0a:8f:5c:68:f4:7b:70:95:17:de:50:9a:de:4e:27:17:27: 10:56:9a:f6 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt5EOyNko30XcFbYWDZCsFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTQ3ZWJiNWMwNTZmNzAyOTZlNDA4NjIxMjYxZjNjNGUy ZDQyMzkwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjgwMDUwOTMzNGE3ODlkMzEzNTg3NjgzODU4OWQ5ZGRmZmE1ZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6zb8hTP7NbjIT8xUnWhw1JLcWLn QTbV2EE5S5k0kv5nxdbcI7xkrguoM6vVg+0F7YMazchDlwhnqg0btlPynjRmbaIe KNZo1JucO9tWNrnzYiWrlSd2TV5PvmZEYe9EaWEqMGe6df/NF3LJVH2qcDsNXVVH tweqERy5ar+xyYSG3s80bAV+lyGCcvB6SFbJRxiIe+NV6hX05BMue8YB37xIa6wU a7NPsVEL0AJb1jEb8dUR9OUDP63Vn+0hdqqBSKkpEMOWUbumtj2chIep9X9JrdKC El0V6S/wpNhQ+uWgmkguSSrzjkxf47ZwtlxDHNyuU4M44aRzEGbDP2FTtQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFG+ABQkzSnidMTWHaDhYnZ3f+l60MB8GA1UdIwQY MBaAFL5UfrtcBW9wKW5AhiEmHzxOLUI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDkt ZDBiOWRjM2FjYTIzLzEvYjRBRkNUTktlSjB4Tllkb09GaWRuZF82WHJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDktZDBiOWRjM2FjYTIz LzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQAwg+/AwQA wh/dAwQBw/QAMA8EAgACMAkDBwAgAQZ8IwgwDQYJKoZIhvcNAQELBQADggEBAAWr pelFdg3BHZSwBAZepd3DNKcvq/EIu2MNvfY7ZXA40v61S1taxIH/YQ+Xdnlll3Ym mu9QeJwAvZHTxocfKh4Bw9aK8M2gKEUpKBFO+QK51+AHkdPHmEiickVkF83IsisC b4v7gaQrLegTOyA7+S/3LwOeHxgz0Bx1xKTvSJdBTtnckLLQXZd8QSAhr68WKorM F42A5oagKlPOgDTOu9SjRIpnrUmQoL6qFyIbnWYn9wSCv8tdDXuJfPW2fk9Ud16x dLsnOwx3/ReoAS08Ypp31akcHWs2xptrK2hsV0OYnEE6EMVoJeL+Wx4Kj1xo9Htw lRfeUJreTicXJxBWmvY= -----END CERTIFICATE-----Generated at Tue Feb 10 06:07:40 2026 by rpki-client