This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/0Q2ZDhlYXlhZ-Frxgj-xgW0EHa0.roa File: 0Q2ZDhlYXlhZ-Frxgj-xgW0EHa0.roa (raw, json) Hash identifier: 0gmvw8A6bQZ9ir/CJYmtz3ioddyiOq8E5vJFtCG6T3c= Subject key identifier: D1:0D:99:0E:19:58:5E:58:59:F8:5A:F1:82:3F:B1:81:6D:04:1D:AD Certificate issuer: /CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf Certificate serial: 019B78A26D0F74F8687818C7BB8CD03DF4FE Authority key identifier: 6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/0Q2ZDhlYXlhZ-Frxgj-xgW0EHa0.roa Signing time: Thu 01 Jan 2026 08:17:49 +0000 ROA not before: Thu 01 Jan 2026 08:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60924 IP address blocks: 146.71.94.0/23 maxlen: 24 146.71.94.0/24 maxlen: 24 146.71.95.0/24 maxlen: 24 185.23.196.0/22 maxlen: 24 185.23.196.0/24 maxlen: 24 185.23.197.0/24 maxlen: 24 185.23.198.0/24 maxlen: 24 185.23.199.0/24 maxlen: 24 185.92.128.0/22 maxlen: 24 185.92.128.0/24 maxlen: 24 185.92.129.0/24 maxlen: 24 185.92.130.0/24 maxlen: 24 185.92.131.0/24 maxlen: 24 185.177.184.0/22 maxlen: 24 185.177.184.0/24 maxlen: 24 185.177.185.0/24 maxlen: 24 185.177.186.0/24 maxlen: 24 185.177.187.0/24 maxlen: 24 2a04:2600::/29 maxlen: 64 2a05:f1c0::/29 maxlen: 64 2a0a:4380::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.mft rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:6d:0f:74:f8:68:78:18:c7:bb:8c:d0:3d:f4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e6bcd1ee0415312babada96a5b4c7351bbca6bf Validity Not Before: Jan 1 08:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d10d990e19585e5859f85af1823fb1816d041dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:a7:33:81:86:26:cd:56:10:fb:e4:45:5c: 21:79:e7:e2:32:f6:66:a5:41:c8:a1:0a:0e:5b:51: cd:ca:30:3a:e1:52:9e:1b:6e:44:85:09:b0:11:da: d2:5c:f0:0f:b0:d1:17:73:9c:e4:ff:fe:4f:2d:74: 7b:94:12:5c:e3:df:63:56:0a:be:9b:6f:c0:e2:12: 16:5c:60:64:01:c1:bb:3a:ec:a6:c3:84:29:54:0e: 75:c3:07:f1:d9:bf:a1:24:70:f7:ca:6a:49:f3:cd: 11:77:ff:c4:1f:36:2b:a4:f5:d8:cd:71:cd:c1:b0: 56:85:6f:a7:94:f7:0c:84:7b:bd:0c:6b:8c:2f:51: 12:d2:22:7e:bc:af:87:22:ab:1c:f4:b2:b0:42:be: 47:b5:cc:f6:45:c9:56:bb:f0:f0:af:59:d3:f3:76: b4:8c:6d:37:4b:29:76:5c:b3:eb:e4:40:e8:fc:82: e8:39:97:e5:20:d8:41:9c:71:57:3c:17:b0:b4:80: c2:bd:c4:e6:83:93:16:4c:37:30:70:47:b0:bd:3a: 00:3f:36:26:24:ff:12:9e:14:01:4e:27:f4:a1:58: 34:3e:bc:5e:81:fd:be:a9:df:64:b7:1a:34:b2:5f: 02:54:c5:bc:2c:c5:27:87:ca:bf:b9:21:49:48:38: bb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:0D:99:0E:19:58:5E:58:59:F8:5A:F1:82:3F:B1:81:6D:04:1D:AD X509v3 Authority Key Identifier: keyid:6E:6B:CD:1E:E0:41:53:12:BA:BA:DA:96:A5:B4:C7:35:1B:BC:A6:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmvNHuBBUxK6utqWpbTHNRu8pr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/0Q2ZDhlYXlhZ-Frxgj-xgW0EHa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/827332-0a02-423f-b07f-05290becdc61/1/bmvNHuBBUxK6utqWpbTHNRu8pr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.71.94.0/23 185.23.196.0/22 185.92.128.0/22 185.177.184.0/22 IPv6: 2a04:2600::/29 2a05:f1c0::/29 2a0a:4380::/29 Signature Algorithm: sha256WithRSAEncryption 4d:d5:cf:90:ee:d2:0b:b4:6d:16:57:14:d8:a3:6b:7e:e5:06: ff:e6:dc:39:dd:06:d6:b6:ac:69:a4:3e:81:53:a3:34:ed:44: 0f:20:ff:c8:63:87:02:c4:86:11:eb:ca:d7:6d:56:de:55:b2: b5:a9:ce:f1:0a:57:46:5d:0d:0b:ed:44:39:52:1f:43:77:72: 41:87:f5:4d:9d:ca:92:44:96:70:19:fd:c9:05:6a:8e:de:54: 19:d8:1e:4f:93:d6:6b:c2:1d:7f:ae:94:76:55:56:79:b0:59: 32:b5:1e:fe:54:65:2e:1f:28:d1:73:a6:d7:36:5e:56:3c:3d: ef:aa:55:e5:42:34:6d:4c:6c:29:cb:5b:3e:6b:1c:ed:f9:9e: a7:c5:2e:59:a5:9f:4c:1c:dd:06:e0:02:f5:06:0c:32:c5:5b: ef:ff:26:02:47:11:0c:4d:a6:e1:03:e6:e4:17:12:9f:1a:a4: 0d:09:49:69:43:8b:b9:f1:a8:5f:d4:50:57:80:b1:91:f7:bf: 75:07:f7:7a:a9:88:ab:35:ea:07:fa:54:54:6d:5f:24:7a:dc: cc:59:93:d8:c1:51:11:b5:53:53:1f:f9:6e:cb:b2:ac:4a:06: 14:39:84:77:2f:2c:2e:84:89:30:73:cd:7c:cd:22:8b:89:1d: 09:cd:7e:62 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgISAZt4om0PdPhoeBjHu4zQPfT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNmJjZDFlZTA0MTUzMTJiYWJhZGE5NmE1YjRjNzM1MWJi Y2E2YmYwHhcNMjYwMTAxMDgxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTBkOTkwZTE5NTg1ZTU4NTlmODVhZjE4MjNmYjE4MTZkMDQxZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAGnM4GGJs1WEPvkRVwheefiMvZm pUHIoQoOW1HNyjA64VKeG25EhQmwEdrSXPAPsNEXc5zk//5PLXR7lBJc499jVgq+ m2/A4hIWXGBkAcG7Ouymw4QpVA51wwfx2b+hJHD3ympJ880Rd//EHzYrpPXYzXHN wbBWhW+nlPcMhHu9DGuML1ES0iJ+vK+HIqsc9LKwQr5Htcz2RclWu/Dwr1nT83a0 jG03Syl2XLPr5EDo/ILoOZflINhBnHFXPBewtIDCvcTmg5MWTDcwcEewvToAPzYm JP8SnhQBTif0oVg0Prxegf2+qd9ktxo0sl8CVMW8LMUnh8q/uSFJSDi7pQIDAQAB o4ICODCCAjQwHQYDVR0OBBYEFNENmQ4ZWF5YWfha8YI/sYFtBB2tMB8GA1UdIwQY MBaAFG5rzR7gQVMSurralqW0xzUbvKa/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2Yt MDUyOTBiZWNkYzYxLzEvMFEyWkRobFlYbGhaLUZyeGdqLXhnVzBFSGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy84MjczMzItMGEwMi00MjNmLWIwN2YtMDUyOTBiZWNkYzYx LzEvYm12Tkh1QkJVeEs2dXRxV3BiVEhOUnU4cHI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAeBAIAATAYAwQBkkdeAwQC uRfEAwQCuVyAAwQCubG4MBsEAgACMBUDBQMqBCYAAwUDKgXxwAMFAyoKQ4AwDQYJ KoZIhvcNAQELBQADggEBAE3Vz5Du0gu0bRZXFNija37lBv/m3DndBta2rGmkPoFT ozTtRA8g/8hjhwLEhhHrytdtVt5VsrWpzvEKV0ZdDQvtRDlSH0N3ckGH9U2dypJE lnAZ/ckFao7eVBnYHk+T1mvCHX+ulHZVVnmwWTK1Hv5UZS4fKNFzptc2XlY8Pe+q VeVCNG1MbCnLWz5rHO35nqfFLlmln0wc3QbgAvUGDDLFW+//JgJHEQxNpuED5uQX Ep8apA0JSWlDi7nxqF/UUFeAsZH3v3UH93qpiKs16gf6VFRtXyR63MxZk9jBURG1 U1Mf+W7LsqxKBhQ5hHcvLC6EiTBzzXzNIouJHQnNfmI= -----END CERTIFICATE-----Generated at Mon Feb 9 20:11:15 2026 by rpki-client