This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/_BnlDW0yMenZgGVAmuqxZ3GnNuo.roa File: _BnlDW0yMenZgGVAmuqxZ3GnNuo.roa (raw, json) Hash identifier: 7rAqk38Xj2YUz4ZyKSekZT3B86MBmL3C6PiQyPZP8+g= Subject key identifier: FC:19:E5:0D:6D:32:31:E9:D9:80:65:40:9A:EA:B1:67:71:A7:36:EA Certificate issuer: /CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f Certificate serial: 019B7EA6512077110840A7FB1FEC3693204D Authority key identifier: AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/_BnlDW0yMenZgGVAmuqxZ3GnNuo.roa Signing time: Fri 02 Jan 2026 12:19:47 +0000 ROA not before: Fri 02 Jan 2026 12:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201072 IP address blocks: 193.57.185.0/24 maxlen: 24 193.57.186.0/24 maxlen: 24 193.57.187.0/24 maxlen: 24 193.57.188.0/24 maxlen: 24 193.57.189.0/24 maxlen: 24 193.57.190.0/24 maxlen: 24 193.57.199.0/24 maxlen: 24 193.57.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.mft rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:51:20:77:11:08:40:a7:fb:1f:ec:36:93:20:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc2de820e02f3c3f86e5b8c9c49ddc49325123f Validity Not Before: Jan 2 12:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fc19e50d6d3231e9d98065409aeab16771a736ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:df:73:9f:f7:4c:4f:8c:d2:ad:83:e1:bd:50: e4:01:aa:d1:a4:b2:db:20:2c:1e:11:60:61:83:1f: 7a:e1:ca:c1:67:47:b0:0f:fd:ae:88:86:bd:c4:d1: 3b:30:ea:59:6d:f2:58:8e:a8:c9:2f:77:ef:e7:d8: f7:49:19:59:b7:dc:54:1e:b1:7a:98:5f:f8:e5:17: f2:45:45:a7:d1:21:81:71:d7:00:5a:f8:6b:41:de: a1:23:0a:3f:3d:2e:66:cc:11:b6:4a:2c:a5:ac:af: 65:81:4b:87:56:35:74:34:b0:a9:af:d0:d9:50:5a: 56:61:e2:18:11:d5:46:2a:84:ad:44:0e:57:82:a4: a9:09:cd:4b:61:3b:56:1c:04:2b:63:c1:37:3f:e0: f6:bb:76:57:a0:bc:36:85:7b:04:e0:72:f6:c5:2f: e7:d8:fe:99:20:f8:c9:bc:bf:95:de:8a:28:dd:35: 21:ac:76:51:ba:bd:87:73:44:37:e7:78:74:c4:31: de:5a:2a:5e:e8:81:d7:95:1a:47:a0:07:18:9f:1a: 7e:94:82:62:32:6d:07:36:bd:b5:da:62:bf:2a:0a: 2a:bd:0c:fb:38:84:c8:9b:00:25:22:f9:21:af:47: 01:da:95:19:57:98:32:a6:d5:93:c7:a6:9e:dc:b4: 8f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:19:E5:0D:6D:32:31:E9:D9:80:65:40:9A:EA:B1:67:71:A7:36:EA X509v3 Authority Key Identifier: keyid:AB:C2:DE:82:0E:02:F3:C3:F8:6E:5B:8C:9C:49:DD:C4:93:25:12:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8Legg4C88P4bluMnEndxJMlEj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/_BnlDW0yMenZgGVAmuqxZ3GnNuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/56748e-c297-4de7-8e96-89783317ea29/1/q8Legg4C88P4bluMnEndxJMlEj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.185.0-193.57.190.255 193.57.199.0/24 193.57.204.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:a2:1f:f8:89:d7:59:92:82:f4:aa:70:b4:22:d8:08:f5:8d: e3:62:0a:94:b9:80:17:fd:28:2d:96:72:1e:7e:ac:12:26:8f: e9:0c:98:64:df:15:ac:5a:07:0b:2e:88:74:cc:dd:5a:52:18: b0:30:c7:07:57:2f:94:41:03:de:5c:74:24:cf:5e:a0:17:d9: c3:39:25:41:75:2a:85:10:2c:e8:9b:bc:5d:6a:8f:7d:33:72: ba:c6:27:c2:da:3a:12:6f:43:87:11:34:e0:6b:d1:5c:7d:c9: 63:d7:5b:65:44:47:54:0e:43:cb:2c:b0:02:08:09:d5:46:a9: 55:42:42:98:0f:34:6b:f9:a9:54:56:c6:07:e6:f7:9b:a3:bd: 53:b4:2b:54:e3:fe:2b:42:13:3a:4b:99:ee:b7:31:dd:6b:3d: 84:d1:e2:86:84:88:54:7a:cf:7c:85:4f:0c:1d:65:55:3b:1a: 07:e7:5e:58:b7:58:b6:c2:c8:98:5e:45:ed:fb:f9:cd:45:f6: c5:77:a4:50:16:cf:ab:44:1a:bf:95:40:0c:d1:ab:86:a3:c3: 69:20:7b:23:d6:4e:95:9a:07:77:14:76:27:2b:2c:81:24:91: a6:50:af:87:59:d2:f9:99:2b:c7:91:9f:2a:25:fc:d6:c7:51: 5c:fc:9d:af -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+plEgdxEIQKf7H+w2kyBNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzJkZTgyMGUwMmYzYzNmODZlNWI4YzljNDlkZGM0OTMy NTEyM2YwHhcNMjYwMTAyMTIxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYzE5ZTUwZDZkMzIzMWU5ZDk4MDY1NDA5YWVhYjE2NzcxYTczNmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApN9zn/dMT4zSrYPhvVDkAarRpLLb ICweEWBhgx964crBZ0ewD/2uiIa9xNE7MOpZbfJYjqjJL3fv59j3SRlZt9xUHrF6 mF/45RfyRUWn0SGBcdcAWvhrQd6hIwo/PS5mzBG2SiylrK9lgUuHVjV0NLCpr9DZ UFpWYeIYEdVGKoStRA5XgqSpCc1LYTtWHAQrY8E3P+D2u3ZXoLw2hXsE4HL2xS/n 2P6ZIPjJvL+V3ooo3TUhrHZRur2Hc0Q353h0xDHeWipe6IHXlRpHoAcYnxp+lIJi Mm0HNr212mK/KgoqvQz7OITImwAlIvkhr0cB2pUZV5gyptWTx6ae3LSPwQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFPwZ5Q1tMjHp2YBlQJrqsWdxpzbqMB8GA1UdIwQY MBaAFKvC3oIOAvPD+G5bjJxJ3cSTJRI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYt ODk3ODMzMTdlYTI5LzEvX0JubERXMHlNZW5aZ0dWQW11cXhaM0duTnVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS81Njc0OGUtYzI5Ny00ZGU3LThlOTYtODk3ODMzMTdlYTI5 LzEvcThMZWdnNEM4OFA0Ymx1TW5FbmR4Sk1sRWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADBObkD BADBOb4DBADBOccDBADBOcwwDQYJKoZIhvcNAQELBQADggEBAIqiH/iJ11mSgvSq cLQi2Aj1jeNiCpS5gBf9KC2Wch5+rBImj+kMmGTfFaxaBwsuiHTM3VpSGLAwxwdX L5RBA95cdCTPXqAX2cM5JUF1KoUQLOibvF1qj30zcrrGJ8LaOhJvQ4cRNOBr0Vx9 yWPXW2VER1QOQ8sssAIICdVGqVVCQpgPNGv5qVRWxgfm95ujvVO0K1Tj/itCEzpL me63Md1rPYTR4oaEiFR6z3yFTwwdZVU7GgfnXli3WLbCyJheRe37+c1F9sV3pFAW z6tEGr+VQAzRq4ajw2kgeyPWTpWaB3cUdicrLIEkkaZQr4dZ0vmZK8eRnyol/NbH UVz8na8= -----END CERTIFICATE-----Generated at Tue Feb 10 00:01:38 2026 by rpki-client