This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/pSiIaWRx2UGN4D5EcKFTNV-8gHw.roa File: pSiIaWRx2UGN4D5EcKFTNV-8gHw.roa (raw, json) Hash identifier: EWBZ2UHTAmxrD1L9UAKAHW/cTFQz9Hh3HcW2rFyIPpw= Subject key identifier: A5:28:88:69:64:71:D9:41:8D:E0:3E:44:70:A1:53:35:5F:BC:80:7C Certificate issuer: /CN=beed14bf4e46b13579583f97ff85910d103a53f8 Certificate serial: 019B7BA542E5CAB147372A2395B39A99B08C Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/pSiIaWRx2UGN4D5EcKFTNV-8gHw.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 143.225.0.0/16 maxlen: 16 192.55.101.0/24 maxlen: 24 192.132.34.0/24 maxlen: 24 192.133.28.0/24 maxlen: 24 192.135.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:42:e5:ca:b1:47:37:2a:23:95:b3:9a:99:b0:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8 Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a52888696471d9418de03e4470a153355fbc807c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:08:a4:7b:6d:74:86:c6:ef:19:c1:d4:c6:d0: 58:dc:9d:a9:d1:cb:6e:96:38:67:0d:71:28:69:e8: 93:e1:c8:9a:6b:b2:09:8e:e7:cc:ba:f6:e5:da:bc: b0:88:53:fa:2b:a0:4e:28:88:a1:6d:6e:f3:9f:ea: fd:f7:4e:9b:bd:2e:7d:c2:b0:b1:a7:39:d8:b7:e5: 71:24:5e:9b:2d:57:c0:b2:a1:6d:52:8a:76:65:ad: f5:96:5d:6a:d9:1b:3c:20:54:ed:ed:4b:99:34:6b: 5a:b1:86:53:bd:ba:a0:c3:52:45:c9:0a:cc:a9:8f: e6:2e:b6:3e:03:29:a5:d2:92:e4:41:1f:80:0a:0e: 11:8a:b4:82:29:60:4e:22:76:06:3c:ef:8c:66:f2: d0:28:b7:d5:04:11:79:fd:a1:4e:61:42:15:f6:6c: 66:1a:93:2f:10:21:5a:5e:ca:cd:01:97:3d:72:c2: 67:87:68:65:e0:91:0a:d2:b9:3b:47:dd:6e:8a:48: 8b:96:e8:a0:02:9a:b9:c6:28:0c:22:9b:bf:02:a0: c3:5e:9d:d6:1c:aa:f9:01:f0:59:5e:75:02:e8:a2: 96:f3:40:1e:6f:7d:42:98:95:c1:6b:ef:25:82:c7: 6f:44:fe:93:9e:f8:79:41:a5:8e:c3:22:0c:3a:04: 2d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:28:88:69:64:71:D9:41:8D:E0:3E:44:70:A1:53:35:5F:BC:80:7C X509v3 Authority Key Identifier: keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/pSiIaWRx2UGN4D5EcKFTNV-8gHw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.225.0.0/16 192.55.101.0/24 192.132.34.0/24 192.133.28.0/24 192.135.165.0/24 Signature Algorithm: sha256WithRSAEncryption a1:5a:2c:f1:d7:5a:1d:71:9f:b9:b6:a8:3e:7e:de:e2:83:5d: 7f:38:96:eb:a4:d5:e5:07:de:cd:51:e9:6b:0e:2b:4b:5d:7e: e6:09:d9:fd:a4:3e:05:d0:98:53:dc:c4:80:27:40:88:eb:4d: a5:db:59:86:ea:e0:54:81:7a:1e:64:df:2d:92:11:3e:99:fd: 2f:e7:54:e3:db:bb:e5:dc:5d:4e:ad:20:ce:05:ff:a1:d8:e7: 32:2f:e6:d4:d9:69:ea:ca:a0:49:4f:07:31:a8:73:02:3e:05: 17:b0:79:8b:63:d6:91:fd:0e:b2:29:df:e3:e4:3a:74:e7:69: 4d:66:bf:6c:2a:49:ac:7f:80:b1:42:3b:e4:32:6a:44:2b:d2: 48:e8:22:ce:86:e3:61:08:7a:49:7e:ef:04:70:0a:0a:ad:78: 8d:ff:7d:94:c5:6d:c4:05:ff:51:8b:e5:d3:9f:55:bf:ca:51: 93:36:89:f2:21:44:0d:6b:41:cd:fa:9c:f5:53:99:6a:67:3f: 5f:21:60:84:37:5e:ab:0f:82:e8:b0:fa:c6:fd:93:ba:0f:39: fb:00:32:8a:80:49:b7:dc:6a:6a:5c:4d:2b:44:43:6b:c6:69: 37:f6:85:6d:22:5c:06:48:07:00:e6:ee:15:0d:cc:0b:5e:dd: 9c:cc:92:7c -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7pULlyrFHNyojlbOambCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZWQxNGJmNGU0NmIxMzU3OTU4M2Y5N2ZmODU5MTBkMTAz YTUzZjgwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTI4ODg2OTY0NzFkOTQxOGRlMDNlNDQ3MGExNTMzNTVmYmM4MDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgike210hsbvGcHUxtBY3J2p0ctu ljhnDXEoaeiT4ciaa7IJjufMuvbl2rywiFP6K6BOKIihbW7zn+r9906bvS59wrCx pznYt+VxJF6bLVfAsqFtUop2Za31ll1q2Rs8IFTt7UuZNGtasYZTvbqgw1JFyQrM qY/mLrY+Ayml0pLkQR+ACg4RirSCKWBOInYGPO+MZvLQKLfVBBF5/aFOYUIV9mxm GpMvECFaXsrNAZc9csJnh2hl4JEK0rk7R91uikiLluigApq5xigMIpu/AqDDXp3W HKr5AfBZXnUC6KKW80Aeb31CmJXBa+8lgsdvRP6Tnvh5QaWOwyIMOgQthQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFKUoiGlkcdlBjeA+RHChUzVfvIB8MB8GA1UdIwQY MBaAFL7tFL9ORrE1eVg/l/+FkQ0QOlP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDIt NDgwMTE5OGU3NWNhLzEvcFNpSWFXUngyVUdONEQ1RWNLRlROVi04Z0h3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8wMDQ3YjctZjFlNi00MWE4LWE4ZDItNDgwMTE5OGU3NWNh LzEvdnUwVXYwNUdzVFY1V0QtWF80V1JEUkE2VV9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAjBAIAATAdAwMAj+EDBADA N2UDBADAhCIDBADAhRwDBADAh6UwDQYJKoZIhvcNAQELBQADggEBAKFaLPHXWh1x n7m2qD5+3uKDXX84luuk1eUH3s1R6WsOK0tdfuYJ2f2kPgXQmFPcxIAnQIjrTaXb WYbq4FSBeh5k3y2SET6Z/S/nVOPbu+XcXU6tIM4F/6HY5zIv5tTZaerKoElPBzGo cwI+BReweYtj1pH9DrIp3+PkOnTnaU1mv2wqSax/gLFCO+QyakQr0kjoIs6G42EI ekl+7wRwCgqteI3/fZTFbcQF/1GL5dOfVb/KUZM2ifIhRA1rQc36nPVTmWpnP18h YIQ3XqsPguiw+sb9k7oPOfsAMoqASbfcampcTStEQ2vGaTf2hW0iXAZIBwDm7hUN zAte3ZzMknw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:54 2026 by rpki-client