This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/K7kf19E8RqOIuQDE1HXceZnfBS4.roa File: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (raw, json) Hash identifier: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ= Subject key identifier: 2B:B9:1F:D7:D1:3C:46:A3:88:B9:00:C4:D4:75:DC:79:99:DF:05:2E Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86 Certificate serial: 019B7911131A2A2B99D7D010B0BF2AB2EEE9 Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/K7kf19E8RqOIuQDE1HXceZnfBS4.roa Signing time: Thu 01 Jan 2026 10:18:40 +0000 ROA not before: Thu 01 Jan 2026 10:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47286 IP address blocks: 31.129.192.0/19 maxlen: 24 31.129.192.0/23 maxlen: 23 31.129.196.0/22 maxlen: 22 31.129.200.0/21 maxlen: 21 31.129.208.0/22 maxlen: 22 31.129.212.0/22 maxlen: 22 31.129.216.0/22 maxlen: 22 31.129.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:13:1a:2a:2b:99:d7:d0:10:b0:bf:2a:b2:ee:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0632542221caef6448cc545214e000071bd56b86 Validity Not Before: Jan 1 10:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2bb91fd7d13c46a388b900c4d475dc7999df052e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:37:f0:d4:29:c0:28:43:cb:cb:db:e7:54:35: 49:be:77:57:9c:6f:28:a7:4b:a3:a1:55:86:84:12: 5a:97:b7:9b:f2:f7:85:5a:38:d2:65:b1:4e:c9:2e: a9:47:1e:92:fc:52:ce:87:9c:25:8a:d2:e8:b9:01: a9:af:eb:9f:35:fc:e3:d1:16:1a:ad:32:4d:84:c8: 49:8b:8a:bd:90:5f:44:8f:92:d8:9d:c6:bf:3f:66: a9:84:85:b3:3c:c5:52:d6:0b:dc:b9:31:8c:28:36: b6:e3:89:8f:c5:8f:d3:09:57:0c:cc:ac:51:15:20: 99:42:7c:0a:6c:a9:5d:2b:9e:52:b0:9f:d5:01:6b: 56:68:14:5e:30:27:ed:b6:46:69:86:dc:07:1f:38: dd:d0:88:2b:4a:81:60:a1:aa:86:54:ef:49:01:96: 35:ec:44:1f:bf:e4:1b:cc:c3:b5:17:67:d8:cf:02: b5:0a:e6:5b:21:47:61:b7:14:7c:a3:b6:52:11:b5: ce:fd:f7:ce:05:3e:6f:06:ae:42:97:34:04:57:4f: 3a:4b:58:c1:c0:33:1e:18:82:86:57:65:3c:c3:af: db:dd:d2:7c:b3:53:6b:22:d5:d0:76:1e:76:35:e7: 90:3a:57:a3:9b:f2:81:82:1a:90:5f:79:31:7c:cc: 41:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:B9:1F:D7:D1:3C:46:A3:88:B9:00:C4:D4:75:DC:79:99:DF:05:2E X509v3 Authority Key Identifier: keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/K7kf19E8RqOIuQDE1HXceZnfBS4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.192.0/19 Signature Algorithm: sha256WithRSAEncryption 54:db:0b:86:31:fb:65:eb:85:e6:f9:ce:5e:a9:63:e6:9f:f3: 9d:81:99:b3:a4:cf:73:03:a9:38:53:62:da:9b:14:c6:76:4c: 38:07:54:c1:9d:1c:5a:96:50:85:41:f2:77:34:b1:57:27:d6: e3:96:44:a5:3c:24:ae:6d:f4:1d:cc:23:e8:1f:d6:cf:ed:a0: 19:ec:88:14:33:d5:1f:74:51:f0:3e:44:df:2a:dd:91:7d:b1: 98:f8:5f:cb:26:f4:fc:f9:1c:0f:81:29:46:1e:f4:ba:e2:20: fd:43:b8:75:30:cb:7b:79:05:e4:23:98:81:f3:ea:a8:1e:f0: d4:05:f0:87:37:02:6b:0a:41:3e:e7:3d:9d:5a:66:84:73:17: a1:ae:d1:38:0d:e4:59:d4:59:c7:91:c4:33:cd:c3:d5:03:4a: 94:c5:76:37:94:f7:c7:b0:62:0a:be:5c:07:80:2c:49:fb:ca: 68:d3:77:57:1a:b1:09:f3:9e:3c:2d:70:4f:72:7e:ea:ae:16: 60:68:e2:9e:ae:65:b9:00:3c:a8:8a:df:88:e6:ff:1e:f2:0d: ed:16:d6:65:b9:75:ef:51:c9:ac:f7:4d:29:4f:44:34:ab:fd: 79:0e:b4:8d:37:58:27:26:83:f6:c5:44:35:76:43:de:4a:fc: 41:b3:c9:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ERMaKiuZ19AQsL8qsu7pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzI1NDIyMjFjYWVmNjQ0OGNjNTQ1MjE0ZTAwMDA3MWJk NTZiODYwHhcNMjYwMTAxMTAxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmI5MWZkN2QxM2M0NmEzODhiOTAwYzRkNDc1ZGM3OTk5ZGYwNTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTfw1CnAKEPLy9vnVDVJvndXnG8o p0ujoVWGhBJal7eb8veFWjjSZbFOyS6pRx6S/FLOh5wlitLouQGpr+ufNfzj0RYa rTJNhMhJi4q9kF9Ej5LYnca/P2aphIWzPMVS1gvcuTGMKDa244mPxY/TCVcMzKxR FSCZQnwKbKldK55SsJ/VAWtWaBReMCfttkZphtwHHzjd0IgrSoFgoaqGVO9JAZY1 7EQfv+QbzMO1F2fYzwK1CuZbIUdhtxR8o7ZSEbXO/ffOBT5vBq5ClzQEV086S1jB wDMeGIKGV2U8w6/b3dJ8s1NrItXQdh52NeeQOlejm/KBghqQX3kxfMxB8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCu5H9fRPEajiLkAxNR13HmZ3wUuMB8GA1UdIwQY MBaAFAYyVCIhyu9kSMxUUhTgAAcb1WuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQt YWZkM2JmNmJjNThjLzEvSzdrZjE5RThScU9JdVFERTFIWGNlWm5mQlM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQtYWZkM2JmNmJjNThj LzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFH4HAMA0G CSqGSIb3DQEBCwUAA4IBAQBU2wuGMftl64Xm+c5eqWPmn/OdgZmzpM9zA6k4U2La mxTGdkw4B1TBnRxallCFQfJ3NLFXJ9bjlkSlPCSubfQdzCPoH9bP7aAZ7IgUM9Uf dFHwPkTfKt2RfbGY+F/LJvT8+RwPgSlGHvS64iD9Q7h1MMt7eQXkI5iB8+qoHvDU BfCHNwJrCkE+5z2dWmaEcxehrtE4DeRZ1FnHkcQzzcPVA0qUxXY3lPfHsGIKvlwH gCxJ+8po03dXGrEJ8548LXBPcn7qrhZgaOKermW5ADyoit+I5v8e8g3tFtZluXXv Ucms900pT0Q0q/15DrSNN1gnJoP2xUQ1dkPeSvxBs8ma -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:44 2026 by rpki-client