This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3qi7v8ZvhR0sN2Lpe26A31pgO38.roa File: 3qi7v8ZvhR0sN2Lpe26A31pgO38.roa (raw, json) Hash identifier: EaoWOfKwWZ/Ms8GaZfNUTqARi1+xpMZOEhKbOQVcQpA= Subject key identifier: DE:A8:BB:BF:C6:6F:85:1D:2C:37:62:E9:7B:6E:80:DF:5A:60:3B:7F Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA49E8823F11C34BF8A694A8DE548C9 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3qi7v8ZvhR0sN2Lpe26A31pgO38.roa Signing time: Thu 01 Jan 2026 22:19:04 +0000 ROA not before: Thu 01 Jan 2026 22:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196695 IP address blocks: 5.183.154.0/24 maxlen: 24 45.89.230.0/24 maxlen: 24 213.226.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:9e:88:23:f1:1c:34:bf:8a:69:4a:8d:e5:48:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dea8bbbfc66f851d2c3762e97b6e80df5a603b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:aa:0d:d5:0d:5c:3c:a6:d0:b8:55:67:a3: 7b:b2:c2:c0:68:2e:68:56:b8:e6:39:18:ea:f8:1d: 77:a9:1b:08:93:15:9b:98:99:b1:6e:7f:8b:86:76: 5e:3c:28:c0:ec:d0:1f:1e:ac:2a:08:a5:b2:7f:b6: 12:a6:be:ae:c1:2a:7c:ba:8d:10:e1:20:1a:bf:dc: cc:54:6a:b8:3c:34:6a:65:a8:64:aa:c1:43:d6:10: 0f:fc:f5:78:11:f2:3c:8b:f6:b8:32:0c:fe:28:b3: 7b:69:2e:d5:a2:9d:32:dc:80:8e:a0:b7:22:c0:8e: 1d:fb:fc:71:55:68:f8:10:49:7f:0a:7a:d7:b7:1a: 1d:1a:22:de:3d:f9:89:17:82:71:5d:3d:87:5b:46: 3e:f5:e1:cb:7a:37:85:31:65:38:5e:84:f1:18:27: 7f:bd:dc:a1:23:54:12:54:f1:84:a1:99:04:24:96: 3d:29:25:a6:c3:5a:66:d8:16:60:81:29:d9:1c:ca: 41:ce:e3:d1:d9:06:b4:2a:dc:73:53:97:5f:33:e2: 48:f0:46:1f:60:43:6d:87:91:3a:f5:a8:c7:6b:f4: 68:7e:8a:1d:63:fd:99:7f:7d:a1:29:2e:d0:8a:eb: 9f:a5:8e:59:d9:97:34:fe:c8:56:1b:a3:7f:cf:41: aa:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:A8:BB:BF:C6:6F:85:1D:2C:37:62:E9:7B:6E:80:DF:5A:60:3B:7F X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/3qi7v8ZvhR0sN2Lpe26A31pgO38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.154.0/24 45.89.230.0/24 213.226.123.0/24 Signature Algorithm: sha256WithRSAEncryption 90:82:47:de:fe:07:a8:bb:f5:87:d7:e2:4b:48:56:40:6f:43: 43:c3:43:3c:0b:1c:34:ef:88:f1:a8:21:cd:b0:2a:93:6d:9b: d1:fc:f4:33:f7:25:97:04:fd:3a:1d:25:0e:c5:13:0e:6f:16: 5d:70:9a:79:c1:f2:63:45:1f:6e:50:b7:03:2e:af:94:cf:6d: 8b:6e:f8:a4:ca:28:94:2f:bb:de:d2:38:58:a1:74:e1:d9:f6: ac:b2:05:9c:67:bb:6c:1e:96:15:6e:cb:76:42:14:9b:26:df: b2:c7:4b:ac:c3:3e:4a:6d:c6:f6:fb:f4:b9:4f:d2:74:e4:33: 79:80:89:03:a4:76:91:2e:e6:dd:07:24:2e:bb:9c:bf:bc:b8: e6:ff:cb:c1:a3:ef:8f:e3:36:65:a6:ab:87:48:cf:77:f8:b2: f5:51:4d:3b:4f:9b:e8:90:d5:1b:e8:61:7d:10:4d:98:5e:cc: 18:da:4b:01:d5:cb:60:31:b3:82:48:3f:bd:3a:1f:01:da:39: 23:b2:ef:26:71:75:ef:af:18:72:98:c9:74:bf:e1:f9:45:64: a6:ca:fe:8f:48:3a:26:05:4e:4b:7e:bf:3a:08:86:ae:35:37: 42:c7:1a:a8:f3:d2:bd:cf:82:b4:02:23:49:fa:26:78:7a:b2: f2:8d:f2:2d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pJ6II/EcNL+KaUqN5UjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWE4YmJiZmM2NmY4NTFkMmMzNzYyZTk3YjZlODBkZjVhNjAzYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5eqDdUNXDym0LhVZ6N7ssLAaC5o VrjmORjq+B13qRsIkxWbmJmxbn+LhnZePCjA7NAfHqwqCKWyf7YSpr6uwSp8uo0Q 4SAav9zMVGq4PDRqZahkqsFD1hAP/PV4EfI8i/a4Mgz+KLN7aS7Vop0y3ICOoLci wI4d+/xxVWj4EEl/CnrXtxodGiLePfmJF4JxXT2HW0Y+9eHLejeFMWU4XoTxGCd/ vdyhI1QSVPGEoZkEJJY9KSWmw1pm2BZggSnZHMpBzuPR2Qa0KtxzU5dfM+JI8EYf YENth5E69ajHa/RofoodY/2Zf32hKS7QiuufpY5Z2Zc0/shWG6N/z0GqdQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFN6ou7/Gb4UdLDdi6XtugN9aYDt/MB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvM3FpN3Y4WnZoUjBzTjJMcGUyNkEzMXBnTzM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABbeaAwQA LVnmAwQA1eJ7MA0GCSqGSIb3DQEBCwUAA4IBAQCQgkfe/geou/WH1+JLSFZAb0ND w0M8Cxw074jxqCHNsCqTbZvR/PQz9yWXBP06HSUOxRMObxZdcJp5wfJjRR9uULcD Lq+Uz22LbvikyiiUL7ve0jhYoXTh2fassgWcZ7tsHpYVbst2QhSbJt+yx0uswz5K bcb2+/S5T9J05DN5gIkDpHaRLubdByQuu5y/vLjm/8vBo++P4zZlpquHSM93+LL1 UU07T5vokNUb6GF9EE2YXswY2ksB1ctgMbOCSD+9Oh8B2jkjsu8mcXXvrxhymMl0 v+H5RWSmyv6PSDomBU5Lfr86CIauNTdCxxqo89K9z4K0AiNJ+iZ4erLyjfIt -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:30 2026 by rpki-client