This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/04BGo9FtObILQBaft1sQoeQgCYo.roa File: 04BGo9FtObILQBaft1sQoeQgCYo.roa (raw, json) Hash identifier: Fwkz3jqMyP5AwHPobSf3siex/Tu6ZYcC4zjVdfIOsac= Subject key identifier: D3:80:46:A3:D1:6D:39:B2:0B:40:16:9F:B7:5B:10:A1:E4:20:09:8A Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477 Certificate serial: 019B7910263C5F2509C923032713F563BC13 Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/04BGo9FtObILQBaft1sQoeQgCYo.roa Signing time: Thu 01 Jan 2026 10:17:40 +0000 ROA not before: Thu 01 Jan 2026 10:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51263 IP address blocks: 62.56.176.0/20 maxlen: 20 168.86.192.0/19 maxlen: 19 178.251.176.0/21 maxlen: 21 178.251.176.0/24 maxlen: 24 178.251.177.0/24 maxlen: 24 178.251.178.0/24 maxlen: 24 178.251.179.0/24 maxlen: 24 178.251.180.0/24 maxlen: 24 178.251.181.0/24 maxlen: 24 178.251.182.0/24 maxlen: 24 178.251.183.0/24 maxlen: 24 185.25.56.0/22 maxlen: 22 213.244.200.0/21 maxlen: 21 2a03:e240::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 16:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:26:3c:5f:25:09:c9:23:03:27:13:f5:63:bc:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d38046a3d16d39b20b40169fb75b10a1e420098a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:d5:f6:eb:2d:a6:ce:34:ff:3f:4d:62:17: 9a:3c:19:6d:da:59:ad:bc:89:75:66:76:a9:bd:0c: 6d:42:43:71:9a:1a:51:45:e0:5e:b6:58:eb:51:28: 26:59:16:8d:d5:40:46:45:6d:fe:df:73:dd:8e:ff: 03:a6:b5:f7:40:2a:3f:7c:4e:62:48:b9:19:c5:01: 41:06:90:89:93:37:5e:4b:9f:3c:0a:81:81:65:0f: d1:1d:fe:02:09:83:ab:46:76:3a:34:16:23:26:e3: d2:00:9a:89:0c:02:6b:fa:51:5c:7f:a6:d4:a4:ec: 9b:0a:03:24:70:4e:41:d0:bf:98:c9:42:5a:f9:67: a2:31:7f:53:8a:bf:36:6a:70:d4:b1:85:95:87:9d: 62:2e:1b:6a:f3:1f:d2:06:8a:bf:c9:0b:a0:5c:15: a6:ae:15:db:21:bd:cb:ec:3c:b4:b5:23:18:0f:5b: 24:e9:2c:64:fb:9a:31:55:2f:36:04:62:d7:7a:ce: ec:0c:37:35:5e:6c:c2:f0:5f:89:d2:68:10:51:a4: 23:7d:a9:7a:cf:26:d9:b6:85:b6:40:fc:db:a6:7e: d2:79:b6:c9:c7:1f:64:f6:85:88:21:b3:09:3e:bf: d5:e3:5b:06:87:3d:93:4c:78:27:c9:61:f7:b0:83: d3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:80:46:A3:D1:6D:39:B2:0B:40:16:9F:B7:5B:10:A1:E4:20:09:8A X509v3 Authority Key Identifier: keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/04BGo9FtObILQBaft1sQoeQgCYo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.56.176.0/20 168.86.192.0/19 178.251.176.0/21 185.25.56.0/22 213.244.200.0/21 IPv6: 2a03:e240::/32 Signature Algorithm: sha256WithRSAEncryption 7b:eb:02:75:32:7a:d4:27:05:56:d8:10:7f:a7:20:a3:b1:fe: 79:57:81:8f:a0:37:a7:34:12:18:58:0b:b6:cc:98:e5:83:19: ea:3b:1a:da:27:73:32:b8:6f:00:f4:2b:52:40:1c:12:a4:8f: 72:31:cb:7c:4e:ca:1e:8b:27:4e:ee:cd:4e:71:df:57:88:f4: 98:ce:e3:0d:a8:9c:1b:0d:2c:4f:bc:01:68:7d:68:22:e8:cb: 29:8c:81:f9:8c:9d:05:4b:0e:a8:1c:90:5c:f2:aa:ee:f4:ca: fd:0e:24:19:ef:5f:a2:e6:d8:10:ed:0e:fd:61:5b:4f:5c:57: 95:5a:0e:de:7f:1a:f2:48:c8:f9:fc:a8:37:87:5c:91:cf:cd: 4b:b5:d0:9a:60:83:f8:76:4b:45:1e:03:03:e7:cb:d2:67:08: 06:3b:9f:ec:64:36:5c:a1:8c:3f:6b:79:f0:a0:0b:81:09:de: 2a:dd:40:10:25:74:dd:f0:87:9e:1d:05:83:3e:13:1a:95:1a: 45:c4:e7:80:a7:2a:67:4a:63:e0:23:5e:f8:ae:30:32:a9:39: 6d:cc:7a:63:6b:41:f8:15:f3:6b:da:f9:25:f8:ae:01:6e:6e: 6d:4d:03:f8:27:7c:e4:d5:30:7a:7b:21:f9:aa:87:4d:12:1c: 0c:37:6b:16 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5ECY8XyUJySMDJxP1Y7wTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyNTZkYjM0ODdiNGM1YmFjYjMwMDE3NzA1N2NmMzE3NGNm Nzc0NzcwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzgwNDZhM2QxNmQzOWIyMGI0MDE2OWZiNzViMTBhMWU0MjAwOThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6zV9ustps40/z9NYheaPBlt2lmt vIl1ZnapvQxtQkNxmhpRReBetljrUSgmWRaN1UBGRW3+33Pdjv8DprX3QCo/fE5i SLkZxQFBBpCJkzdeS588CoGBZQ/RHf4CCYOrRnY6NBYjJuPSAJqJDAJr+lFcf6bU pOybCgMkcE5B0L+YyUJa+WeiMX9Tir82anDUsYWVh51iLhtq8x/SBoq/yQugXBWm rhXbIb3L7Dy0tSMYD1sk6Sxk+5oxVS82BGLXes7sDDc1XmzC8F+J0mgQUaQjfal6 zybZtoW2QPzbpn7SebbJxx9k9oWIIbMJPr/V41sGhz2TTHgnyWH3sIPTxwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFNOARqPRbTmyC0AWn7dbEKHkIAmKMB8GA1UdIwQY MBaAFJJW2zSHtMW6yzABdwV88xdM93R3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUt MGY1MmVhNTIyOWZjLzEvMDRCR285RnRPYklMUUJhZnQxc1FvZVFnQ1lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83YjQ1YjktOTkwYi00NjE0LWE2NGUtMGY1MmVhNTIyOWZj LzEva2xiYk5JZTB4YnJMTUFGM0JYenpGMHozZEhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQEPjiwAwQF qFbAAwQDsvuwAwQCuRk4AwQD1fTIMA0EAgACMAcDBQAqA+JAMA0GCSqGSIb3DQEB CwUAA4IBAQB76wJ1MnrUJwVW2BB/pyCjsf55V4GPoDenNBIYWAu2zJjlgxnqOxra J3MyuG8A9CtSQBwSpI9yMct8TsoeiydO7s1Ocd9XiPSYzuMNqJwbDSxPvAFofWgi 6MspjIH5jJ0FSw6oHJBc8qru9Mr9DiQZ71+i5tgQ7Q79YVtPXFeVWg7efxrySMj5 /Kg3h1yRz81LtdCaYIP4dktFHgMD58vSZwgGO5/sZDZcoYw/a3nwoAuBCd4q3UAQ JXTd8IeeHQWDPhMalRpFxOeApypnSmPgI174rjAyqTltzHpja0H4FfNr2vkl+K4B bm5tTQP4J3zk1TB6eyH5qodNEhwMN2sW -----END CERTIFICATE-----Generated at Tue Feb 3 03:19:14 2026 by rpki-client