This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/C5LrSLcRHuSrJ5qA7Ys4buh2aCk.roa File: C5LrSLcRHuSrJ5qA7Ys4buh2aCk.roa (raw, json) Hash identifier: 6iHK7B3B74ju73Bu4UIi5X39juU33AzJxjN7DE2wqoc= Subject key identifier: 0B:92:EB:48:B7:11:1E:E4:AB:27:9A:80:ED:8B:38:6E:E8:76:68:29 Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca Certificate serial: 019B7D5CF68362296B62441D0C2C69D3C4A2 Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/C5LrSLcRHuSrJ5qA7Ys4buh2aCk.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61006 IP address blocks: 37.252.112.0/21 maxlen: 21 185.39.200.0/22 maxlen: 22 2a00:d740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:f6:83:62:29:6b:62:44:1d:0c:2c:69:d3:c4:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b92eb48b7111ee4ab279a80ed8b386ee8766829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:e4:2d:10:b8:7a:16:59:66:be:e6:7a:c2: a1:7f:a8:a7:2e:0f:e1:7f:5d:e0:86:02:cf:c1:6d: 6b:74:c8:f7:35:47:d4:b3:82:4e:0c:83:b7:4b:1e: 5c:ba:c9:b1:e4:60:e4:a4:1b:0b:9f:c2:0a:37:81: f6:83:8e:21:e9:d6:01:b1:58:eb:99:f6:af:c8:f9: e6:0a:81:71:45:2e:bd:9f:1e:bb:3b:b5:b4:9d:f2: b9:39:0f:80:67:a7:3f:9e:1d:0e:b1:f9:fc:4d:2c: 5d:25:0a:55:8e:d1:02:e1:a6:a2:ba:4b:28:01:fc: f2:96:62:b3:42:76:35:a1:35:c2:f0:01:18:cc:c3: 3b:4f:9a:6a:43:78:f3:24:19:29:ee:ee:2e:94:02: 0c:b4:76:d7:e5:34:a9:2e:34:2e:90:b7:f3:a5:f1: 9e:bb:b6:09:6d:6e:35:f1:6c:9c:bd:34:76:72:bd: 60:fa:fb:87:84:cf:37:95:f5:16:ce:35:7f:75:b4: 89:75:2c:5d:b6:94:43:22:44:fb:ca:1b:52:90:41: 02:a5:d5:ce:fc:59:af:c9:ae:12:c5:2d:e1:67:42: ef:b1:9e:0f:4b:b0:75:15:35:d4:dc:3b:ff:c8:a1: 2b:19:2f:c1:ba:56:5a:3b:25:d2:fe:48:da:35:f4: 7e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:92:EB:48:B7:11:1E:E4:AB:27:9A:80:ED:8B:38:6E:E8:76:68:29 X509v3 Authority Key Identifier: keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/C5LrSLcRHuSrJ5qA7Ys4buh2aCk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.252.112.0/21 185.39.200.0/22 IPv6: 2a00:d740::/29 Signature Algorithm: sha256WithRSAEncryption 77:0a:24:ba:fc:06:a3:3f:75:f0:c8:26:c1:5b:a5:9b:84:6d: 53:e3:99:5c:96:ea:24:df:72:98:90:b8:92:60:18:81:e2:da: 03:a8:7f:c6:38:b9:6c:91:a6:43:96:96:f7:e0:de:96:56:6e: cb:68:ef:c0:65:7a:47:c5:9d:20:5c:c5:82:4f:43:34:44:dd: 15:00:f8:86:80:74:a6:ed:87:14:26:f2:a0:24:a1:2e:3d:50: df:0b:32:a8:5b:85:49:5e:00:f4:a3:cb:d8:2f:59:99:e8:c0: b2:a0:e9:90:92:fe:c5:3d:cd:53:f6:8b:e4:05:42:89:8d:10: 16:c5:29:0f:f2:00:5a:c3:99:25:1c:dd:2a:5f:4d:5a:e8:80: b1:36:a8:8c:94:5b:0a:19:61:87:00:08:fe:a1:80:13:e1:c3: b7:33:35:78:c0:72:99:4f:58:2e:21:29:8a:11:e5:1b:81:65: 6a:7e:6f:d6:92:42:6d:89:9d:27:94:62:e0:8e:b0:7b:1f:31: ae:2c:49:19:92:1e:b6:ec:1f:e2:cf:5d:92:58:c5:7a:39:01: 0d:92:d9:1a:07:21:06:bb:77:15:01:9c:37:af:ad:02:5f:5b: 68:5d:f8:8d:ca:ca:81:8f:51:1a:b1:71:c4:15:17:6a:a7:e1: a5:16:60:6b -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XPaDYilrYkQdDCxp08SiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOWM4MGNiZTVkNTc5NzIzNDVmNWZhNWViYTM1Yzg2ODg5 ZTU1Y2EwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjkyZWI0OGI3MTExZWU0YWIyNzlhODBlZDhiMzg2ZWU4NzY2ODI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNfkLRC4ehZZZr7mesKhf6inLg/h f13ghgLPwW1rdMj3NUfUs4JODIO3Sx5cusmx5GDkpBsLn8IKN4H2g44h6dYBsVjr mfavyPnmCoFxRS69nx67O7W0nfK5OQ+AZ6c/nh0Osfn8TSxdJQpVjtEC4aaiukso AfzylmKzQnY1oTXC8AEYzMM7T5pqQ3jzJBkp7u4ulAIMtHbX5TSpLjQukLfzpfGe u7YJbW418WycvTR2cr1g+vuHhM83lfUWzjV/dbSJdSxdtpRDIkT7yhtSkEECpdXO /Fmvya4SxS3hZ0LvsZ4PS7B1FTXU3Dv/yKErGS/BulZaOyXS/kjaNfR+eQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAuS60i3ER7kqyeagO2LOG7odmgpMB8GA1UdIwQY MBaAFL2cgMvl1XlyNF9fpeujXIaInlXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQt NjBlN2U0NTM5OWU2LzEvQzVMclNMY1JIdVNySjVxQTdZczRidWgyYUNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9iZGNiYzQtNjNiNy00YWU1LTg2ODQtNjBlN2U0NTM5OWU2 LzEvdlp5QXktWFZlWEkwWDEtbDY2TmNob2llVmNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJfxwAwQC uSfIMA0EAgACMAcDBQMqANdAMA0GCSqGSIb3DQEBCwUAA4IBAQB3CiS6/AajP3Xw yCbBW6WbhG1T45lcluok33KYkLiSYBiB4toDqH/GOLlskaZDlpb34N6WVm7LaO/A ZXpHxZ0gXMWCT0M0RN0VAPiGgHSm7YcUJvKgJKEuPVDfCzKoW4VJXgD0o8vYL1mZ 6MCyoOmQkv7FPc1T9ovkBUKJjRAWxSkP8gBaw5klHN0qX01a6ICxNqiMlFsKGWGH AAj+oYAT4cO3MzV4wHKZT1guISmKEeUbgWVqfm/WkkJtiZ0nlGLgjrB7HzGuLEkZ kh627B/iz12SWMV6OQENktkaByEGu3cVAZw3r60CX1toXfiNysqBj1EasXHEFRdq p+GlFmBr -----END CERTIFICATE-----Generated at Mon Feb 9 21:24:20 2026 by rpki-client