This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/bbUvQcBL8PFNw2iTLVczp7F8xLg.roa File: bbUvQcBL8PFNw2iTLVczp7F8xLg.roa (raw, json) Hash identifier: roBeIpW3t+PPAB0V8G5Pbdujfwh3PQz2ybcfRM5Trps= Subject key identifier: 6D:B5:2F:41:C0:4B:F0:F1:4D:C3:68:93:2D:57:33:A7:B1:7C:C4:B8 Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162 Certificate serial: 019B7B36395B437C4BF2619ECFA39B0F58A6 Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/bbUvQcBL8PFNw2iTLVczp7F8xLg.roa Signing time: Thu 01 Jan 2026 20:18:29 +0000 ROA not before: Thu 01 Jan 2026 20:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12986 IP address blocks: 193.26.27.0/24 maxlen: 24 194.153.128.0/24 maxlen: 24 2001:67c:218c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:39:5b:43:7c:4b:f2:61:9e:cf:a3:9b:0f:58:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd92eae9e11699e4ce710580519776c300296162 Validity Not Before: Jan 1 20:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6db52f41c04bf0f14dc368932d5733a7b17cc4b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:e8:5e:ca:9f:ae:00:94:42:66:8a:5e:90: 51:2d:ea:3e:38:23:00:49:c6:4a:05:58:c2:0f:d3: eb:a8:55:c9:ca:c9:e9:dd:ff:95:0f:82:0e:8c:2c: ee:51:04:f1:0c:88:f7:5d:48:7a:ac:3b:97:f2:06: 93:89:bf:4c:9b:9e:36:7a:17:83:f7:95:1a:1b:9f: c0:81:16:a9:38:b7:7f:69:4e:ce:a7:c9:ff:91:73: 9e:ea:2d:a6:4a:e7:23:96:84:a4:01:9e:86:72:83: 96:68:e3:ce:b3:59:25:27:49:03:a5:62:fa:b5:b3: 09:13:6f:6b:bf:8f:56:41:09:29:57:6b:9d:f8:1b: 56:32:80:2a:d5:42:0d:1c:b0:b2:2a:36:30:19:80: 05:10:ba:8d:37:53:9e:31:53:90:4e:d1:2f:e5:3f: 88:c7:f1:59:c3:bc:62:fd:1a:94:15:66:fb:53:5f: 71:9c:8e:6e:1f:94:ee:58:c4:30:e1:f7:54:a9:05: b2:27:13:4e:6c:e3:20:5d:40:7d:ff:c5:22:e4:47: 08:b3:78:47:ed:5b:24:c8:c1:f2:92:77:9e:55:8e: e1:26:25:46:bd:43:2a:db:7f:a5:58:3c:38:61:e2: a4:2a:df:f5:14:22:b5:3d:34:56:6b:b8:a3:25:24: 10:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B5:2F:41:C0:4B:F0:F1:4D:C3:68:93:2D:57:33:A7:B1:7C:C4:B8 X509v3 Authority Key Identifier: keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/bbUvQcBL8PFNw2iTLVczp7F8xLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.26.27.0/24 194.153.128.0/24 IPv6: 2001:67c:218c::/48 Signature Algorithm: sha256WithRSAEncryption 22:df:80:d0:d3:cd:ca:d8:de:d2:6d:b4:ed:89:2a:80:69:54: 69:62:fe:8e:3b:b4:a3:99:05:f0:48:33:c3:89:b2:2e:7a:56: be:61:37:d2:5c:f1:4e:d8:a2:41:f5:3a:dd:bb:81:fb:69:cc: 63:a6:a9:f5:e7:8d:89:f6:4e:4a:99:ff:df:c1:ba:b0:f7:b3: 5b:d9:80:4b:be:79:81:a7:14:4b:3c:68:32:2e:3a:03:cb:9c: a1:5d:5e:cc:ed:a7:c4:cf:9b:6f:db:2e:a8:5f:f0:77:2f:c6: df:47:ee:fa:f1:9b:bd:12:12:6e:02:24:15:57:e5:87:44:e2: eb:bf:17:d5:e3:09:5b:ad:b8:9d:79:19:be:fe:7f:9f:87:b4: a2:ce:fb:06:8d:13:7b:f4:53:0b:2b:23:08:8c:c1:b0:a3:a9: 98:6e:6e:45:69:83:36:b1:b4:63:90:80:1e:f7:97:a6:93:92: 28:c5:f7:4b:a4:a7:10:4f:9b:57:95:12:71:62:9d:41:66:8a: 65:21:29:6b:12:7c:d2:80:d1:36:47:a7:49:58:46:0c:36:1f: 66:6b:9f:c3:49:60:9f:15:71:d6:9a:7e:88:61:07:5a:e4:8e: 38:d0:75:a2:01:ce:72:17:60:82:40:85:34:4c:92:77:58:fb: ac:9a:64:20 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7NjlbQ3xL8mGez6ObD1imMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTJlYWU5ZTExNjk5ZTRjZTcxMDU4MDUxOTc3NmMzMDAy OTYxNjIwHhcNMjYwMTAxMjAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGI1MmY0MWMwNGJmMGYxNGRjMzY4OTMyZDU3MzNhN2IxN2NjNGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RfoXsqfrgCUQmaKXpBRLeo+OCMA ScZKBVjCD9PrqFXJysnp3f+VD4IOjCzuUQTxDIj3XUh6rDuX8gaTib9Mm542eheD 95UaG5/AgRapOLd/aU7Op8n/kXOe6i2mSucjloSkAZ6GcoOWaOPOs1klJ0kDpWL6 tbMJE29rv49WQQkpV2ud+BtWMoAq1UINHLCyKjYwGYAFELqNN1OeMVOQTtEv5T+I x/FZw7xi/RqUFWb7U19xnI5uH5TuWMQw4fdUqQWyJxNObOMgXUB9/8Ui5EcIs3hH 7VskyMHykneeVY7hJiVGvUMq23+lWDw4YeKkKt/1FCK1PTRWa7ijJSQQMQIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFG21L0HAS/DxTcNoky1XM6exfMS4MB8GA1UdIwQY MBaAFL2S6unhFpnkznEFgFGXdsMAKWFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2Qt YzhhOWNhYTNiYmU5LzEvYmJVdlFjQkw4UEZOdzJpVExWY3pwN0Y4eExnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2QtYzhhOWNhYTNiYmU5 LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwRobAwQA wpmAMA8EAgACMAkDBwAgAQZ8IYwwDQYJKoZIhvcNAQELBQADggEBACLfgNDTzcrY 3tJttO2JKoBpVGli/o47tKOZBfBIM8OJsi56Vr5hN9Jc8U7YokH1Ot27gftpzGOm qfXnjYn2TkqZ/9/BurD3s1vZgEu+eYGnFEs8aDIuOgPLnKFdXsztp8TPm2/bLqhf 8Hcvxt9H7vrxm70SEm4CJBVX5YdE4uu/F9XjCVutuJ15Gb7+f5+HtKLO+waNE3v0 UwsrIwiMwbCjqZhubkVpgzaxtGOQgB73l6aTkijF90ukpxBPm1eVEnFinUFmimUh KWsSfNKA0TZHp0lYRgw2H2Zrn8NJYJ8VcdaafohhB1rkjjjQdaIBznIXYIJAhTRM kndY+6yaZCA= -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:43 2026 by rpki-client