This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/mf6I7uxDhGW8v7p2vvNbLI-maWQ.roa File: mf6I7uxDhGW8v7p2vvNbLI-maWQ.roa (raw, json) Hash identifier: sr/dXfSSlPIqMnWe8S1qR8pWu+O2s9TKt2RJh6kkvX4= Subject key identifier: 99:FE:88:EE:EC:43:84:65:BC:BF:BA:76:BE:F3:5B:2C:8F:A6:69:64 Certificate issuer: /CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0 Certificate serial: 019B7B36B9E70F118D082568A910EF4C05DB Authority key identifier: 6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/mf6I7uxDhGW8v7p2vvNbLI-maWQ.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39642 IP address blocks: 5.206.192.0/21 maxlen: 21 31.185.64.0/19 maxlen: 19 37.128.208.0/20 maxlen: 20 45.14.140.0/22 maxlen: 22 45.80.92.0/22 maxlen: 22 46.32.32.0/19 maxlen: 19 62.107.0.0/16 maxlen: 16 78.157.96.0/19 maxlen: 19 85.218.128.0/17 maxlen: 17 86.52.0.0/16 maxlen: 16 89.184.128.0/19 maxlen: 19 94.138.64.0/19 maxlen: 19 95.154.0.0/18 maxlen: 18 178.132.224.0/20 maxlen: 20 178.155.128.0/17 maxlen: 17 185.5.164.0/22 maxlen: 22 185.37.84.0/22 maxlen: 22 212.10.0.0/16 maxlen: 16 212.37.128.0/19 maxlen: 19 212.112.128.0/19 maxlen: 19 2a00:1b70::/29 maxlen: 32 2a02:2b98::/32 maxlen: 32 2a02:6940::/32 maxlen: 32 2a03:7400::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.mft rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b9:e7:0f:11:8d:08:25:68:a9:10:ef:4c:05:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfa4a1ffc749b1c4fa3b6da819b6dbb9ae885a0 Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99fe88eeec438465bcbfba76bef35b2c8fa66964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:53:63:4a:24:49:3e:b3:21:3b:4a:f4:98:9d: b3:46:8d:6b:0c:04:69:58:23:5d:01:6a:6f:c3:a1: 85:39:82:9b:5e:a7:89:47:da:e7:09:c0:b1:15:b0: 38:84:f4:f9:4f:bb:65:02:c8:38:e5:28:f5:27:db: d9:68:0f:4d:c2:e2:5a:4e:30:2f:be:83:47:49:cb: 6d:5c:2d:7e:f8:81:e7:ff:37:3d:bf:48:c8:83:a4: fa:a9:f7:9d:e6:58:ab:e8:26:e3:3e:b2:d4:49:47: d6:4a:c7:a6:99:56:03:1a:1a:8c:0e:ad:8c:0d:49: 41:bc:fc:8a:8d:ba:59:b1:96:60:d9:8a:96:cc:38: 7c:e5:63:ff:95:48:f1:ad:49:d6:ac:8a:bb:45:0c: 4f:c3:3a:12:dd:22:b1:9a:81:3f:24:d9:dd:b9:89: 12:e5:6a:75:d4:59:22:d0:45:80:3e:58:af:ca:6b: 5c:d0:86:82:d3:86:5f:c7:23:37:ea:ad:0a:97:9a: 0e:13:33:f0:6d:b7:dd:dd:c6:74:22:e0:05:15:9d: 96:a4:2c:05:b0:fc:16:57:05:97:c3:c1:1d:94:1a: 40:40:eb:97:58:b2:20:31:e9:eb:cf:b1:a8:c4:cd: 38:aa:d1:58:d9:f1:5e:8d:a9:d0:6f:a3:72:18:40: b2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FE:88:EE:EC:43:84:65:BC:BF:BA:76:BE:F3:5B:2C:8F:A6:69:64 X509v3 Authority Key Identifier: keyid:6D:FA:4A:1F:FC:74:9B:1C:4F:A3:B6:DA:81:9B:6D:BB:9A:E8:85:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfpKH_x0mxxPo7bagZttu5rohaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/mf6I7uxDhGW8v7p2vvNbLI-maWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/f2f1c5-866c-42b5-8b46-38669d1e2301/1/bfpKH_x0mxxPo7bagZttu5rohaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.206.192.0/21 31.185.64.0/19 37.128.208.0/20 45.14.140.0/22 45.80.92.0/22 46.32.32.0/19 62.107.0.0/16 78.157.96.0/19 85.218.128.0/17 86.52.0.0/16 89.184.128.0/19 94.138.64.0/19 95.154.0.0/18 178.132.224.0/20 178.155.128.0/17 185.5.164.0/22 185.37.84.0/22 212.10.0.0/16 212.37.128.0/19 212.112.128.0/19 IPv6: 2a00:1b70::/29 2a02:2b98::/32 2a02:6940::/32 2a03:7400::/29 Signature Algorithm: sha256WithRSAEncryption 2a:cc:7e:ac:ab:44:95:9b:fd:23:5f:d2:24:96:7d:9e:a4:23: c7:8c:08:05:ff:01:33:69:fc:78:87:6f:39:5c:ce:f1:a7:ef: 3e:9c:64:07:4c:8a:74:3f:8f:ca:79:9a:09:74:ed:ad:df:ec: a6:fa:1a:84:c1:47:56:0d:82:d1:ad:3b:95:5f:cd:00:19:3b: 2c:fb:99:00:be:5b:8a:c7:04:3d:36:3b:e9:73:ef:4a:01:69: 2e:08:f3:ff:47:b0:0a:2f:f8:0a:55:d5:37:de:36:d4:4c:2b: 65:de:0e:82:32:91:e7:52:b8:07:1d:53:77:7c:f9:24:29:52: f1:84:99:b0:b7:76:9c:99:f9:dd:1d:ee:dc:19:fa:d8:34:bb: af:af:f8:a5:1b:cf:37:8a:1d:5f:2d:e3:bb:ae:58:4d:c2:67: 3d:ba:6a:b9:f0:fa:ba:93:5d:d5:7f:1e:6c:96:90:fc:95:07: b2:23:f4:d4:c7:8c:8b:46:c2:05:28:a3:d5:09:fe:7a:8d:b3: 11:c1:59:ad:55:3f:1f:1c:29:78:0e:59:6b:23:9b:ed:f4:6b: 4c:8d:a3:99:87:58:45:bc:61:3d:28:d2:54:7a:e7:d6:63:b2: c6:87:24:f1:8a:43:83:99:da:8b:14:19:c0:63:35:f4:f3:a1: 03:7a:aa:14 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZt7NrnnDxGNCCVoqRDvTAXbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmE0YTFmZmM3NDliMWM0ZmEzYjZkYTgxOWI2ZGJiOWFl ODg1YTAwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWZlODhlZWVjNDM4NDY1YmNiZmJhNzZiZWYzNWIyYzhmYTY2OTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VNjSiRJPrMhO0r0mJ2zRo1rDARp WCNdAWpvw6GFOYKbXqeJR9rnCcCxFbA4hPT5T7tlAsg45Sj1J9vZaA9NwuJaTjAv voNHScttXC1++IHn/zc9v0jIg6T6qfed5lir6CbjPrLUSUfWSsemmVYDGhqMDq2M DUlBvPyKjbpZsZZg2YqWzDh85WP/lUjxrUnWrIq7RQxPwzoS3SKxmoE/JNnduYkS 5Wp11Fki0EWAPlivymtc0IaC04ZfxyM36q0Kl5oOEzPwbbfd3cZ0IuAFFZ2WpCwF sPwWVwWXw8EdlBpAQOuXWLIgMenrz7GoxM04qtFY2fFejanQb6NyGECyQQIDAQAB o4ICnzCCApswHQYDVR0OBBYEFJn+iO7sQ4RlvL+6dr7zWyyPpmlkMB8GA1UdIwQY MBaAFG36Sh/8dJscT6O22oGbbbua6IWgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYt Mzg2NjlkMWUyMzAxLzEvbWY2STd1eERoR1c4djdwMnZ2TmJMSS1tYVdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9mMmYxYzUtODY2Yy00MmI1LThiNDYtMzg2NjlkMWUyMzAx LzEvYmZwS0hfeDBteHhQbzdiYWdadHR1NXJvaGFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTB7BAIAATB1AwQDBc7A AwQFH7lAAwQEJYDQAwQCLQ6MAwQCLVBcAwQFLiAgAwMAPmsDBAVOnWADBAdV2oAD AwBWNAMEBVm4gAMEBV6KQAMEBl+aAAMEBLKE4AMEB7KbgAMEArkFpAMEArklVAMD ANQKAwQF1CWAAwQF1HCAMCIEAgACMBwDBQMqABtwAwUAKgIrmAMFACoCaUADBQMq A3QAMA0GCSqGSIb3DQEBCwUAA4IBAQAqzH6sq0SVm/0jX9Ikln2epCPHjAgF/wEz afx4h285XM7xp+8+nGQHTIp0P4/KeZoJdO2t3+ym+hqEwUdWDYLRrTuVX80AGTss +5kAvluKxwQ9Njvpc+9KAWkuCPP/R7AKL/gKVdU33jbUTCtl3g6CMpHnUrgHHVN3 fPkkKVLxhJmwt3acmfndHe7cGfrYNLuvr/ilG883ih1fLeO7rlhNwmc9umq58Pq6 k13Vfx5slpD8lQeyI/TUx4yLRsIFKKPVCf56jbMRwVmtVT8fHCl4DllrI5vt9GtM jaOZh1hFvGE9KNJUeufWY7LGhyTxikODmdqLFBnAYzX086EDeqoU -----END CERTIFICATE-----Generated at Tue Feb 10 00:13:24 2026 by rpki-client