This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/XdY1heAq8Pzt1pv1rPAx3x1EVuI.roa File: XdY1heAq8Pzt1pv1rPAx3x1EVuI.roa (raw, json) Hash identifier: 30n2Bw5522A46gw1W2HezcGrkjx97JHsFkbK0N2tgYE= Subject key identifier: 5D:D6:35:85:E0:2A:F0:FC:ED:D6:9B:F5:AC:F0:31:DF:1D:44:56:E2 Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0 Certificate serial: 019BC1C56964DF9E2610FB1FC1E4CB3735E4 Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/XdY1heAq8Pzt1pv1rPAx3x1EVuI.roa Signing time: Thu 15 Jan 2026 13:08:18 +0000 ROA not before: Thu 15 Jan 2026 13:08:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8273 IP address blocks: 31.193.232.0/21 maxlen: 21 91.144.192.0/18 maxlen: 18 128.0.8.0/21 maxlen: 21 185.10.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:c5:69:64:df:9e:26:10:fb:1f:c1:e4:cb:37:35:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0 Validity Not Before: Jan 15 13:08:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dd63585e02af0fcedd69bf5acf031df1d4456e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:e2:c7:c7:bf:15:c8:da:95:a5:75:4c:7e: 68:dd:b7:b1:be:63:a8:e8:53:45:38:40:0d:f5:c5: ed:bb:be:7d:9c:b8:50:11:d8:3d:ea:61:8e:b8:f1: 73:66:d3:f0:17:25:65:47:f7:5d:38:e5:20:3e:4c: ff:cb:d6:11:03:0b:86:4d:59:aa:81:47:ad:35:f2: 73:8d:05:3a:fa:e9:ce:6a:88:c1:fc:ba:28:df:cd: 5e:de:c5:49:e8:17:d9:bf:47:41:2c:28:fa:55:6f: 93:f6:c1:89:85:d8:b5:0f:dd:95:1a:32:6b:5b:85: 89:32:70:2a:81:70:93:72:4d:9d:c4:27:c4:77:0b: 5d:28:9c:cf:1f:9e:09:18:5b:52:27:10:08:d9:72: 13:93:ea:53:25:1e:4c:3a:02:d4:ff:e1:d2:8a:93: d1:b7:28:02:af:98:ee:47:a7:bb:95:da:1d:0d:5b: 94:30:a4:02:e9:9c:c9:a2:78:55:a3:e4:fe:d4:8a: b9:7f:d2:59:7d:4f:fe:03:a5:6b:65:e6:b8:ca:55: 03:2a:7b:1d:fc:d6:22:ff:d2:04:3f:15:7e:19:f9: b4:dd:49:3a:d8:19:47:22:ea:63:bd:74:83:d6:b6: 4b:c0:6c:45:30:23:66:62:2d:af:e3:2d:a2:98:d1: 42:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D6:35:85:E0:2A:F0:FC:ED:D6:9B:F5:AC:F0:31:DF:1D:44:56:E2 X509v3 Authority Key Identifier: keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/XdY1heAq8Pzt1pv1rPAx3x1EVuI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.193.232.0/21 91.144.192.0/18 128.0.8.0/21 185.10.212.0/22 Signature Algorithm: sha256WithRSAEncryption 2e:c8:a6:e9:b0:d0:33:19:e2:f6:43:21:4f:73:b9:47:f7:e0: f3:59:8e:a6:81:85:2d:32:97:08:74:db:d5:6f:48:4d:85:0d: c2:09:c7:08:92:bc:2e:c9:a8:b0:6d:71:6b:ef:c6:ed:83:87: 17:37:cc:1f:2d:51:be:da:14:59:b5:17:13:b5:df:5b:a7:34: ed:eb:41:28:ff:b9:cd:7b:12:19:35:5d:ec:ae:fe:e0:4b:ad: 81:33:a4:40:e3:6d:79:6d:0a:bc:56:6d:ab:7f:a8:a6:62:97: bf:60:81:40:0c:7b:7b:7d:86:18:b9:2f:cb:16:bf:24:6a:fe: c9:1e:38:15:56:29:db:79:a4:a1:45:9a:2b:84:7c:a4:83:aa: ad:aa:4f:6b:42:2f:33:8e:a5:a7:78:c7:31:ab:3c:66:ff:68: 64:99:65:08:3e:04:48:0e:2b:07:1e:ad:44:e7:45:6d:d8:75: fb:3c:6f:9b:64:43:17:22:8f:17:59:52:66:89:8a:21:12:c6: 12:e2:df:a1:12:88:c4:59:cd:1b:9f:90:f3:ea:6e:de:18:db: 7a:23:6e:a5:27:a4:e1:29:8c:62:e8:83:51:26:b4:de:f8:08: b6:84:2f:8a:9c:ec:4a:d5:5a:69:f7:18:f0:17:f4:b8:21:a0: 04:8d:57:37 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvBxWlk354mEPsfweTLNzXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmE0YTFmZmM3NDliMWM0ZmEzYjZkYTgxOWI2ZGJiOWFl ODg1YTAwHhcNMjYwMTE1MTMwODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGQ2MzU4NWUwMmFmMGZjZWRkNjliZjVhY2YwMzFkZjFkNDQ1NmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVXix8e/FcjalaV1TH5o3bexvmOo 6FNFOEAN9cXtu759nLhQEdg96mGOuPFzZtPwFyVlR/ddOOUgPkz/y9YRAwuGTVmq gUetNfJzjQU6+unOaojB/Loo381e3sVJ6BfZv0dBLCj6VW+T9sGJhdi1D92VGjJr W4WJMnAqgXCTck2dxCfEdwtdKJzPH54JGFtSJxAI2XITk+pTJR5MOgLU/+HSipPR tygCr5juR6e7ldodDVuUMKQC6ZzJonhVo+T+1Iq5f9JZfU/+A6VrZea4ylUDKnsd /NYi/9IEPxV+Gfm03Uk62BlHIupjvXSD1rZLwGxFMCNmYi2v4y2imNFCZwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFF3WNYXgKvD87dab9azwMd8dRFbiMB8GA1UdIwQY MBaAFG36Sh/8dJscT6O22oGbbbua6IWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYt Mzg2NjlkMWUyMzAxLzEvWGRZMWhlQXE4UHp0MXB2MXJQQXgzeDFFVnVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYtMzg2NjlkMWUyMzAx LzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDH8HoAwQG W5DAAwQDgAAIAwQCuQrUMA0GCSqGSIb3DQEBCwUAA4IBAQAuyKbpsNAzGeL2QyFP c7lH9+DzWY6mgYUtMpcIdNvVb0hNhQ3CCccIkrwuyaiwbXFr78btg4cXN8wfLVG+ 2hRZtRcTtd9bpzTt60Eo/7nNexIZNV3srv7gS62BM6RA4215bQq8Vm2rf6imYpe/ YIFADHt7fYYYuS/LFr8kav7JHjgVVinbeaShRZorhHykg6qtqk9rQi8zjqWneMcx qzxm/2hkmWUIPgRIDisHHq1E50Vt2HX7PG+bZEMXIo8XWVJmiYohEsYS4t+hEojE Wc0bn5Dz6m7eGNt6I26lJ6ThKYxi6INRJrTe+Ai2hC+KnOxK1Vpp9xjwF/S4IaAE jVc3 -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:49 2026 by rpki-client