This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/BFse6czCzhUX4BFCXNbQpH61aUc.roa File: BFse6czCzhUX4BFCXNbQpH61aUc.roa (raw, json) Hash identifier: lrRMx6suq3q2UqEU3Xlh4+QvJ0ImVI5zT7U/+FSxmC4= Subject key identifier: 04:5B:1E:E9:CC:C2:CE:15:17:E0:11:42:5C:D6:D0:A4:7E:B5:69:47 Certificate issuer: /CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Certificate serial: 019B7B36ED322FF4B41D2AB1A1D8445A4A56 Authority key identifier: B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/BFse6czCzhUX4BFCXNbQpH61aUc.roa Signing time: Thu 01 Jan 2026 20:19:15 +0000 ROA not before: Thu 01 Jan 2026 20:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44628 IP address blocks: 46.17.240.0/22 maxlen: 22 185.80.152.0/22 maxlen: 22 2a00:1908:faca::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.mft rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:ed:32:2f:f4:b4:1d:2a:b1:a1:d8:44:5a:4a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2e448b4a08f0e4c58a283d80735a8a803e10d4e Validity Not Before: Jan 1 20:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=045b1ee9ccc2ce1517e011425cd6d0a47eb56947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9f:01:7e:d3:23:cd:dd:0a:38:b7:2d:a2:1f: 24:00:0d:22:49:cc:54:29:ea:f0:e2:0c:a7:37:46: b4:6b:eb:6b:e1:2f:0b:f2:8d:91:7e:2a:ad:73:2c: 0d:00:f8:4e:a1:4b:6d:8a:46:d7:3d:8d:b8:cb:4b: 98:72:d2:23:b0:28:0e:73:fb:40:08:36:e0:bd:cd: 0a:dd:4c:0c:f0:f8:0f:1c:6c:f9:75:0d:ab:2d:ee: b8:57:63:64:fd:23:dd:61:12:6a:63:61:99:8b:7a: 13:d4:bc:60:75:30:e5:e5:78:b4:50:e8:35:8c:e2: 4f:19:5c:6e:d9:f8:db:6b:ce:5b:0b:f1:92:37:ec: 61:69:4a:dc:62:ab:f3:8f:c2:78:62:0b:dd:05:5f: 79:66:76:25:dd:1a:89:03:db:73:5f:a6:91:7d:ce: dc:ca:1e:00:d5:cf:4f:a1:4d:fc:c3:e3:4e:8b:c2: 97:77:64:23:f0:b3:09:9c:8f:3a:50:70:0f:8c:0c: e8:dc:0c:c2:95:e5:7a:15:bd:f7:04:e9:fc:ef:30: 69:db:3f:59:78:36:1a:25:6e:53:ec:04:cc:46:e3: 02:eb:81:72:14:35:56:b4:64:df:c1:4b:d6:3a:76: d6:71:26:b5:70:de:f8:59:93:ab:a1:ff:f5:e4:60: d9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5B:1E:E9:CC:C2:CE:15:17:E0:11:42:5C:D6:D0:A4:7E:B5:69:47 X509v3 Authority Key Identifier: keyid:B2:E4:48:B4:A0:8F:0E:4C:58:A2:83:D8:07:35:A8:A8:03:E1:0D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/suRItKCPDkxYooPYBzWoqAPhDU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/BFse6czCzhUX4BFCXNbQpH61aUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a7068a-92ba-42ea-9966-2054d4e903bc/1/suRItKCPDkxYooPYBzWoqAPhDU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.240.0/22 185.80.152.0/22 IPv6: 2a00:1908:faca::/48 Signature Algorithm: sha256WithRSAEncryption 90:f8:7a:f3:8c:02:82:7c:bb:22:81:5b:81:ba:29:04:19:ca: 33:dd:74:aa:89:c2:44:85:cd:af:60:7d:49:9e:42:33:f9:05: de:15:43:29:9a:74:af:fe:b3:b6:78:dd:69:13:15:7f:4c:d6: 1b:93:99:e5:db:60:e6:33:fa:81:09:b4:15:2f:16:3c:67:e7: e2:31:63:a1:64:c4:ac:15:d8:cd:47:bf:12:b2:a8:68:2b:7b: 36:e4:77:8a:e1:1b:50:72:0b:0e:91:b5:66:1d:e4:85:28:c8: f0:e3:7f:be:a7:19:74:7c:4a:7b:b4:85:fb:bc:74:b1:81:d5: 3d:18:ea:87:77:42:05:87:16:04:62:ca:e9:82:15:cb:f8:3d: b8:5d:40:26:a9:6b:fc:fa:0c:ae:cc:d7:97:cb:c6:44:e1:a7: d7:d1:dd:11:ba:07:1c:c6:19:60:66:77:13:2c:42:a8:13:49: bd:e4:75:46:70:62:7e:13:8a:df:82:1a:51:6b:8f:dd:26:e7: 8c:da:03:81:75:2b:92:2b:6b:ad:3d:20:46:4a:69:11:1d:25: 16:e7:d4:d0:34:85:41:3b:5d:73:af:e4:12:61:4f:f5:a6:fc: d7:2f:9b:96:e5:22:8b:a5:f4:56:ea:39:e4:80:ab:b9:d9:24: 38:10:c9:1f -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7Nu0yL/S0HSqxodhEWkpWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyZTQ0OGI0YTA4ZjBlNGM1OGEyODNkODA3MzVhOGE4MDNl MTBkNGUwHhcNMjYwMTAxMjAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDViMWVlOWNjYzJjZTE1MTdlMDExNDI1Y2Q2ZDBhNDdlYjU2OTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA658BftMjzd0KOLctoh8kAA0iScxU Kerw4gynN0a0a+tr4S8L8o2RfiqtcywNAPhOoUttikbXPY24y0uYctIjsCgOc/tA CDbgvc0K3UwM8PgPHGz5dQ2rLe64V2Nk/SPdYRJqY2GZi3oT1LxgdTDl5Xi0UOg1 jOJPGVxu2fjba85bC/GSN+xhaUrcYqvzj8J4YgvdBV95ZnYl3RqJA9tzX6aRfc7c yh4A1c9PoU38w+NOi8KXd2Qj8LMJnI86UHAPjAzo3AzCleV6Fb33BOn87zBp2z9Z eDYaJW5T7ATMRuMC64FyFDVWtGTfwUvWOnbWcSa1cN74WZOrof/15GDZGQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFARbHunMws4VF+ARQlzW0KR+tWlHMB8GA1UdIwQY MBaAFLLkSLSgjw5MWKKD2Ac1qKgD4Q1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYt MjA1NGQ0ZTkwM2JjLzEvQkZzZTZjekN6aFVYNEJGQ1hOYlFwSDYxYVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9hNzA2OGEtOTJiYS00MmVhLTk5NjYtMjA1NGQ0ZTkwM2Jj LzEvc3VSSXRLQ1BEa3hZb29QWUJ6V29xQVBoRFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCLhHwAwQC uVCYMA8EAgACMAkDBwAqABkI+sowDQYJKoZIhvcNAQELBQADggEBAJD4evOMAoJ8 uyKBW4G6KQQZyjPddKqJwkSFza9gfUmeQjP5Bd4VQymadK/+s7Z43WkTFX9M1huT meXbYOYz+oEJtBUvFjxn5+IxY6FkxKwV2M1HvxKyqGgrezbkd4rhG1ByCw6RtWYd 5IUoyPDjf76nGXR8Snu0hfu8dLGB1T0Y6od3QgWHFgRiyumCFcv4PbhdQCapa/z6 DK7M15fLxkThp9fR3RG6BxzGGWBmdxMsQqgTSb3kdUZwYn4Tit+CGlFrj90m54za A4F1K5Ira609IEZKaREdJRbn1NA0hUE7XXOv5BJhT/Wm/Ncvm5blIoul9FbqOeSA q7nZJDgQyR8= -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:30 2026 by rpki-client