This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/bF8Fj85M5baKnqvJRx8XW6rb7BQ.roa File: bF8Fj85M5baKnqvJRx8XW6rb7BQ.roa (raw, json) Hash identifier: f3mVln76POyyxSCx8XE3vxQpqNxsBFWRi4oixhIFTn8= Subject key identifier: 6C:5F:05:8F:CE:4C:E5:B6:8A:9E:AB:C9:47:1F:17:5B:AA:DB:EC:14 Certificate issuer: /CN=64daba15d1d366cb53095412d06490e23498e170 Certificate serial: 019B7C80CFCF0A20671B16B318D6F8E29FE6 Authority key identifier: 64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/bF8Fj85M5baKnqvJRx8XW6rb7BQ.roa Signing time: Fri 02 Jan 2026 02:19:35 +0000 ROA not before: Fri 02 Jan 2026 02:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25115 IP address blocks: 193.23.243.0/24 maxlen: 24 193.201.236.0/22 maxlen: 22 194.15.176.0/23 maxlen: 23 2a09:20c0::/32 maxlen: 32 2a09:20c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:cf:cf:0a:20:67:1b:16:b3:18:d6:f8:e2:9f:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64daba15d1d366cb53095412d06490e23498e170 Validity Not Before: Jan 2 02:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c5f058fce4ce5b68a9eabc9471f175baadbec14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:69:f9:39:36:67:2d:2a:11:c9:52:ff:ca: ad:9d:8f:c4:e2:86:01:16:56:13:fb:df:74:42:08: 2c:e3:c2:e2:eb:da:4b:5a:4d:e0:9c:fd:3c:a9:13: 25:65:53:e2:75:dc:a2:e6:30:45:d7:86:37:8e:92: e4:3d:64:99:0f:4c:bb:d2:76:50:ef:07:c0:24:de: 81:45:f5:76:a8:9c:21:84:18:11:ed:86:13:8c:4e: 37:e7:17:b9:27:d2:63:f4:28:c9:6f:94:10:5c:13: 54:8b:59:ad:e2:3a:8c:82:34:08:f9:f3:98:af:0e: 4e:79:4a:95:0a:be:b1:f6:27:ef:f1:05:ec:67:f2: 14:21:3c:fa:a7:26:39:1d:1e:46:05:38:41:3f:3c: 37:1c:b4:d2:e6:c7:37:91:3e:f2:da:d1:06:4c:9c: da:e5:0e:1a:13:f4:4e:16:da:a7:22:47:f2:b9:f7: e9:a7:43:ae:4e:73:c7:25:eb:08:3e:0c:a1:f8:30: 9e:25:de:88:c0:0f:d5:74:2d:d0:35:b2:94:16:59: 26:a3:77:b3:42:98:a4:00:14:d5:99:bb:8e:2f:91: dd:54:d9:0a:89:8d:25:dd:c3:e5:f5:ec:42:8c:1c: 1f:11:74:ef:3b:01:fd:25:8b:0a:65:25:66:f2:33: 89:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5F:05:8F:CE:4C:E5:B6:8A:9E:AB:C9:47:1F:17:5B:AA:DB:EC:14 X509v3 Authority Key Identifier: keyid:64:DA:BA:15:D1:D3:66:CB:53:09:54:12:D0:64:90:E2:34:98:E1:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/bF8Fj85M5baKnqvJRx8XW6rb7BQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/736db2-0c64-45ed-833a-a94dd8ccaf9f/1/ZNq6FdHTZstTCVQS0GSQ4jSY4XA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.243.0/24 193.201.236.0/22 194.15.176.0/23 IPv6: 2a09:20c0::/31 Signature Algorithm: sha256WithRSAEncryption 6e:32:d1:57:fc:e4:2a:be:c4:64:4f:eb:f5:df:2b:6f:94:82: da:32:f7:89:81:e3:6a:9f:9b:f6:a0:64:a1:1c:e8:c0:3a:8d: e6:7f:56:35:46:96:45:d9:6c:b3:6e:d1:e2:0a:ca:14:1f:c8: 28:a9:d0:2d:9f:da:94:f8:46:7d:4c:b1:98:40:0c:0f:67:1b: 5b:3f:22:eb:8a:b1:78:2d:43:51:6e:e2:47:ec:d0:9b:0a:d6: d6:bc:5b:85:f4:5a:4a:fb:2b:7f:0b:e0:05:4b:74:32:bc:05: 73:fa:85:0a:34:37:ac:e7:c1:4d:34:ff:1d:e0:7d:39:a7:ac: 68:e7:a1:2c:e6:2b:d9:ab:a6:d8:ba:6c:13:c9:1f:5a:81:5c: d1:a2:8e:24:6a:11:4c:1d:6f:b0:4f:12:af:e0:3f:4e:83:1c: 22:78:78:74:7c:e9:c5:29:2f:f1:2d:05:19:5d:c4:dd:26:f0: 64:21:90:61:8c:c1:4d:e7:4d:04:64:4c:24:82:91:11:57:8f: d2:b8:b4:e8:56:92:dd:82:bf:af:bd:98:67:4d:cf:6d:10:80: be:35:b5:36:26:86:0b:4e:46:c2:17:fd:e0:d3:ad:5a:66:66: 97:4a:17:63:66:b9:3e:1f:3f:5d:40:27:4f:00:6a:07:be:4f: 3f:8b:f1:b0 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8gM/PCiBnGxazGNb44p/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGFiYTE1ZDFkMzY2Y2I1MzA5NTQxMmQwNjQ5MGUyMzQ5 OGUxNzAwHhcNMjYwMTAyMDIxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzVmMDU4ZmNlNGNlNWI2OGE5ZWFiYzk0NzFmMTc1YmFhZGJlYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK5p+Tk2Zy0qEclS/8qtnY/E4oYB FlYT+990Qggs48Li69pLWk3gnP08qRMlZVPiddyi5jBF14Y3jpLkPWSZD0y70nZQ 7wfAJN6BRfV2qJwhhBgR7YYTjE435xe5J9Jj9CjJb5QQXBNUi1mt4jqMgjQI+fOY rw5OeUqVCr6x9ifv8QXsZ/IUITz6pyY5HR5GBThBPzw3HLTS5sc3kT7y2tEGTJza 5Q4aE/ROFtqnIkfyuffpp0OuTnPHJesIPgyh+DCeJd6IwA/VdC3QNbKUFlkmo3ez QpikABTVmbuOL5HdVNkKiY0l3cPl9exCjBwfEXTvOwH9JYsKZSVm8jOJSwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGxfBY/OTOW2ip6ryUcfF1uq2+wUMB8GA1UdIwQY MBaAFGTauhXR02bLUwlUEtBkkOI0mOFwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5xNkZkSFRac3RUQ1ZRUzBHU1E0alNZNFhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi83MzZkYjItMGM2NC00NWVkLTgzM2Et YTk0ZGQ4Y2NhZjlmLzEvYkY4Rmo4NU01YmFLbnF2SlJ4OFhXNnJiN0JRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi83MzZkYjItMGM2NC00NWVkLTgzM2EtYTk0ZGQ4Y2NhZjlm LzEvWk5xNkZkSFRac3RUQ1ZRUzBHU1E0alNZNFhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAwRfzAwQC wcnsAwQBwg+wMA0EAgACMAcDBQEqCSDAMA0GCSqGSIb3DQEBCwUAA4IBAQBuMtFX /OQqvsRkT+v13ytvlILaMveJgeNqn5v2oGShHOjAOo3mf1Y1RpZF2WyzbtHiCsoU H8goqdAtn9qU+EZ9TLGYQAwPZxtbPyLrirF4LUNRbuJH7NCbCtbWvFuF9FpK+yt/ C+AFS3QyvAVz+oUKNDes58FNNP8d4H05p6xo56Es5ivZq6bYumwTyR9agVzRoo4k ahFMHW+wTxKv4D9OgxwieHh0fOnFKS/xLQUZXcTdJvBkIZBhjMFN500EZEwkgpER V4/SuLToVpLdgr+vvZhnTc9tEIC+NbU2JoYLTkbCF/3g061aZmaXShdjZrk+Hz9d QCdPAGoHvk8/i/Gw -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:59 2026 by rpki-client