This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/bNGihk3TftyiQuIrhTcptDsg-yc.roa File: bNGihk3TftyiQuIrhTcptDsg-yc.roa (raw, json) Hash identifier: ihRAevNfvjcE/941xyu47E7ucBkaCCtVOZGixpsTOrg= Subject key identifier: 6C:D1:A2:86:4D:D3:7E:DC:A2:42:E2:2B:85:37:29:B4:3B:20:FB:27 Certificate issuer: /CN=884bf80e72f50f09bf563493ebdb11a34bba312d Certificate serial: 019B7EA593648D6C60274F7913B819A7F8AC Authority key identifier: 88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/bNGihk3TftyiQuIrhTcptDsg-yc.roa Signing time: Fri 02 Jan 2026 12:18:58 +0000 ROA not before: Fri 02 Jan 2026 12:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202486 IP address blocks: 5.183.180.0/24 maxlen: 24 5.183.181.0/24 maxlen: 24 5.183.182.0/24 maxlen: 24 5.183.183.0/24 maxlen: 24 92.118.92.0/24 maxlen: 24 92.118.93.0/24 maxlen: 24 92.118.94.0/24 maxlen: 24 92.118.95.0/24 maxlen: 24 193.25.188.0/24 maxlen: 24 193.25.189.0/24 maxlen: 24 193.25.210.0/24 maxlen: 24 193.25.211.0/24 maxlen: 24 193.161.212.0/24 maxlen: 24 193.161.213.0/24 maxlen: 24 193.161.214.0/24 maxlen: 24 193.161.215.0/24 maxlen: 24 194.76.220.0/23 maxlen: 24 194.76.220.0/24 maxlen: 24 194.76.221.0/24 maxlen: 24 194.76.236.0/23 maxlen: 24 194.76.236.0/24 maxlen: 24 194.76.237.0/24 maxlen: 24 2a0c:a0c0::/32 maxlen: 32 2a0c:a0c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.mft rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:93:64:8d:6c:60:27:4f:79:13:b8:19:a7:f8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=884bf80e72f50f09bf563493ebdb11a34bba312d Validity Not Before: Jan 2 12:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cd1a2864dd37edca242e22b853729b43b20fb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:45:16:91:f5:1d:84:3e:fc:27:71:90:d5: 22:ab:b7:0e:e7:a0:60:e7:6d:20:70:35:8b:b3:7a: 7b:fb:88:48:70:b5:5a:ea:25:99:f3:91:40:c8:26: c9:23:a0:e7:cb:35:99:24:dd:bb:f4:df:f3:2f:7a: 9d:81:37:c4:93:ae:70:86:d7:ab:75:3f:36:09:ff: 70:5b:81:31:68:c7:60:c0:ae:18:fd:b6:46:93:77: 3c:7e:aa:4d:17:56:2f:08:05:02:bd:12:97:63:2e: c6:27:71:71:61:fe:c0:6f:b0:6e:db:31:e9:42:1a: 6e:95:fe:36:58:06:d0:57:7e:ad:5c:7f:34:31:fa: dc:f4:db:ad:31:de:a0:71:d0:f7:5b:68:06:56:bd: c0:51:9b:dc:a5:40:3b:4b:73:05:be:45:a7:16:d5: 5e:e2:20:e3:43:ab:58:99:16:27:44:f3:12:d3:cb: 0e:eb:78:f7:79:8c:2b:c3:8d:b0:a2:5f:5b:24:9e: df:11:40:74:8b:af:73:6a:75:1e:69:57:5c:0b:b3: f8:2c:d0:9d:d2:74:d6:82:0a:61:8c:04:ba:a5:81: 86:18:eb:11:10:14:b2:c5:70:af:d9:aa:c8:0b:c6: 64:c7:b1:f8:96:0f:b5:79:f3:1d:3e:65:35:95:0d: 46:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:D1:A2:86:4D:D3:7E:DC:A2:42:E2:2B:85:37:29:B4:3B:20:FB:27 X509v3 Authority Key Identifier: keyid:88:4B:F8:0E:72:F5:0F:09:BF:56:34:93:EB:DB:11:A3:4B:BA:31:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEv4DnL1Dwm_VjST69sRo0u6MS0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/bNGihk3TftyiQuIrhTcptDsg-yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b12e4d-8a1a-4010-9a8b-36f9847ac35b/1/iEv4DnL1Dwm_VjST69sRo0u6MS0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.183.180.0/22 92.118.92.0/22 193.25.188.0/23 193.25.210.0/23 193.161.212.0/22 194.76.220.0/23 194.76.236.0/23 IPv6: 2a0c:a0c0::/31 Signature Algorithm: sha256WithRSAEncryption 64:e7:d4:0b:a8:84:7d:44:65:e6:72:1d:50:58:6f:7f:ea:5e: 9a:0a:90:54:a9:cf:01:84:b2:6a:22:c1:3b:99:c5:6d:93:b3: f1:d4:9d:f5:25:e5:e1:a8:89:bc:2d:cf:60:19:ae:85:96:f8: fd:03:06:cc:18:e9:f7:23:5e:af:64:02:4d:c7:3a:2f:a7:fa: 6e:24:c0:72:4d:7c:ef:5b:a4:7b:ca:ab:e3:4c:93:7d:1c:4d: 97:33:2f:d7:1f:b9:d0:da:b5:14:b5:a9:6a:12:eb:6d:e4:a8: a9:4a:37:dc:7c:d2:7e:20:99:c7:7e:01:53:a4:df:cc:4f:f8: 77:8f:4d:1a:25:2f:19:27:9d:ac:45:53:1f:70:1d:ac:11:00: aa:d3:31:48:16:71:f8:73:75:2d:4c:27:b6:75:17:04:ff:75: e1:0d:fe:9c:f4:5d:f3:6c:73:17:a7:e8:3a:f8:f2:1e:43:16: a5:fc:e9:91:2b:8d:1a:5e:c9:66:d4:dd:27:dd:a3:58:8c:c4: d0:5a:ba:20:65:8a:73:0a:32:5e:35:04:b1:63:80:94:42:92: 0e:e2:4d:91:14:bb:bc:aa:17:c9:95:90:3f:1b:24:58:fd:46: b5:0f:75:3f:47:6c:85:f8:10:fa:71:ee:43:d3:a8:d1:ef:60: b2:8e:d3:c6 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt+pZNkjWxgJ095E7gZp/isMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NGJmODBlNzJmNTBmMDliZjU2MzQ5M2ViZGIxMWEzNGJi YTMxMmQwHhcNMjYwMTAyMTIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2QxYTI4NjRkZDM3ZWRjYTI0MmUyMmI4NTM3MjliNDNiMjBmYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXxFFpH1HYQ+/CdxkNUiq7cO56Bg 520gcDWLs3p7+4hIcLVa6iWZ85FAyCbJI6DnyzWZJN279N/zL3qdgTfEk65whter dT82Cf9wW4ExaMdgwK4Y/bZGk3c8fqpNF1YvCAUCvRKXYy7GJ3FxYf7Ab7Bu2zHp Qhpulf42WAbQV36tXH80Mfrc9NutMd6gcdD3W2gGVr3AUZvcpUA7S3MFvkWnFtVe 4iDjQ6tYmRYnRPMS08sO63j3eYwrw42wol9bJJ7fEUB0i69zanUeaVdcC7P4LNCd 0nTWggphjAS6pYGGGOsREBSyxXCv2arIC8Zkx7H4lg+1efMdPmU1lQ1GHwIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFGzRooZN037cokLiK4U3KbQ7IPsnMB8GA1UdIwQY MBaAFIhL+A5y9Q8Jv1Y0k+vbEaNLujEtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUV2NERuTDFEd21fVmpTVDY5c1JvMHU2TVMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9iMTJlNGQtOGExYS00MDEwLTlhOGIt MzZmOTg0N2FjMzViLzEvYk5HaWhrM1RmdHlpUXVJcmhUY3B0RHNnLXljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9iMTJlNGQtOGExYS00MDEwLTlhOGItMzZmOTg0N2FjMzVi LzEvaUV2NERuTDFEd21fVmpTVDY5c1JvMHU2TVMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQCBbe0AwQC XHZcAwQBwRm8AwQBwRnSAwQCwaHUAwQBwkzcAwQBwkzsMA0EAgACMAcDBQEqDKDA MA0GCSqGSIb3DQEBCwUAA4IBAQBk59QLqIR9RGXmch1QWG9/6l6aCpBUqc8BhLJq IsE7mcVtk7Px1J31JeXhqIm8Lc9gGa6Flvj9AwbMGOn3I16vZAJNxzovp/puJMBy TXzvW6R7yqvjTJN9HE2XMy/XH7nQ2rUUtalqEutt5KipSjfcfNJ+IJnHfgFTpN/M T/h3j00aJS8ZJ52sRVMfcB2sEQCq0zFIFnH4c3UtTCe2dRcE/3XhDf6c9F3zbHMX p+g6+PIeQxal/OmRK40aXslm1N0n3aNYjMTQWrogZYpzCjJeNQSxY4CUQpIO4k2R FLu8qhfJlZA/GyRY/Ua1D3U/R2yF+BD6ce5D06jR72CyjtPG -----END CERTIFICATE-----Generated at Tue Feb 10 02:58:27 2026 by rpki-client