This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/bFzdMPznlOjSbXFpquaFvhugI8E.roa File: bFzdMPznlOjSbXFpquaFvhugI8E.roa (raw, json) Hash identifier: K3/O8FhhB6ddNanECmUzETBKUHzHCD/aSiUCGY1B2qk= Subject key identifier: 6C:5C:DD:30:FC:E7:94:E8:D2:6D:71:69:AA:E6:85:BE:1B:A0:23:C1 Certificate issuer: /CN=df59083faf5f02bba66809a1a2272eaf26e8a378 Certificate serial: 019B78A29E02E47549F1098BD829F4B7FC4D Authority key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/bFzdMPznlOjSbXFpquaFvhugI8E.roa Signing time: Thu 01 Jan 2026 08:18:01 +0000 ROA not before: Thu 01 Jan 2026 08:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8554 IP address blocks: 82.97.0.0/18 maxlen: 18 82.97.0.0/19 maxlen: 19 82.97.32.0/22 maxlen: 22 82.97.36.0/22 maxlen: 22 185.52.32.0/22 maxlen: 22 193.41.72.0/22 maxlen: 22 195.234.46.0/24 maxlen: 24 2001:1b38::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:9e:02:e4:75:49:f1:09:8b:d8:29:f4:b7:fc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df59083faf5f02bba66809a1a2272eaf26e8a378 Validity Not Before: Jan 1 08:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c5cdd30fce794e8d26d7169aae685be1ba023c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:55:9a:92:fc:05:3b:32:86:83:74:57:cd:a2: 6d:81:6d:62:be:d4:30:59:eb:be:8d:76:38:11:8f: c1:7a:99:4d:c9:6c:c7:6a:f9:ba:2b:3f:b8:1d:c9: 9d:ec:c9:a0:8a:45:2f:6e:24:f6:b4:b3:a3:12:90: f1:e6:e8:50:9a:65:ad:a5:b9:f3:62:be:d3:cd:0b: 1f:8b:f9:83:28:eb:f4:e3:c4:bf:a3:49:ab:3d:fa: e4:2c:a0:8f:03:47:6f:4c:dc:e6:81:b3:06:a8:85: a3:d9:18:ce:5a:d1:33:aa:16:a7:99:7e:5d:f8:8e: 69:0a:4a:72:61:45:c4:2d:f1:17:c2:b6:bb:3b:4e: d0:7f:52:5b:a2:b5:2d:e6:56:93:e0:3d:b7:a0:9b: ed:67:d5:c6:4d:89:9f:ea:63:a6:f1:6b:3c:74:43: 43:86:2f:3b:8f:bb:a7:f7:80:b3:ac:4d:07:94:ed: e5:93:30:47:03:b0:c9:51:f3:e7:8e:9f:71:7f:4f: 7b:41:f6:c9:4c:24:30:74:6f:ca:d0:8f:fc:a5:37: fa:c6:5e:91:67:a8:72:45:00:a1:73:80:63:11:1d: da:6b:6b:2a:e0:d3:4d:03:5c:ee:4a:40:94:83:8d: 30:c4:2f:35:0c:b1:97:c8:53:58:44:bd:11:49:ae: 68:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:5C:DD:30:FC:E7:94:E8:D2:6D:71:69:AA:E6:85:BE:1B:A0:23:C1 X509v3 Authority Key Identifier: keyid:DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/bFzdMPznlOjSbXFpquaFvhugI8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.97.0.0/18 185.52.32.0/22 193.41.72.0/22 195.234.46.0/24 IPv6: 2001:1b38::/32 Signature Algorithm: sha256WithRSAEncryption 35:f9:e8:c2:0c:b4:fc:32:48:e8:10:04:7d:0e:f7:73:79:a7: 23:32:f2:70:c5:ca:db:d8:ae:cd:07:e7:c4:ce:46:49:81:2c: 1e:e0:61:37:1e:69:68:38:43:3a:04:9c:47:16:89:b6:ca:84: f8:9b:a1:df:91:56:f9:c1:48:c2:4e:e7:58:9b:91:b9:ba:41: 0f:8b:0f:78:f1:8d:43:ae:57:af:52:21:e9:a3:25:4c:a1:fa: b0:24:82:33:e4:94:2a:39:d2:1e:4a:a9:b0:6d:be:f0:7e:12: 9c:99:aa:e5:5c:d5:f4:c3:c8:6a:58:54:1d:4f:1f:70:15:ae: 73:98:ea:f7:bd:6f:bc:16:9f:9c:ef:3a:3d:80:09:ef:6d:a4: e6:d8:0e:aa:5c:3f:f8:ba:cc:61:13:3b:f2:6f:33:16:34:39: d3:1b:9f:e8:29:8c:83:fb:e4:b2:ee:fb:34:1c:8e:ac:3f:99: c0:a4:de:d1:25:19:6c:6c:8b:b4:3d:10:2c:ea:d7:a7:6d:9f: 88:59:99:28:18:d7:ae:c0:f7:04:a7:26:79:05:13:01:78:70: 09:47:38:51:fd:09:88:fe:db:6a:2a:ad:5b:75:d3:8e:30:14: 36:90:e4:50:8d:4b:d4:4a:ad:33:bf:e8:6e:86:c9:6f:ac:6d: 53:eb:db:cc -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4op4C5HVJ8QmL2Cn0t/xNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNTkwODNmYWY1ZjAyYmJhNjY4MDlhMWEyMjcyZWFmMjZl OGEzNzgwHhcNMjYwMTAxMDgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzVjZGQzMGZjZTc5NGU4ZDI2ZDcxNjlhYWU2ODViZTFiYTAyM2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplWakvwFOzKGg3RXzaJtgW1ivtQw Weu+jXY4EY/BeplNyWzHavm6Kz+4Hcmd7MmgikUvbiT2tLOjEpDx5uhQmmWtpbnz Yr7TzQsfi/mDKOv048S/o0mrPfrkLKCPA0dvTNzmgbMGqIWj2RjOWtEzqhanmX5d +I5pCkpyYUXELfEXwra7O07Qf1JborUt5laT4D23oJvtZ9XGTYmf6mOm8Ws8dEND hi87j7un94CzrE0HlO3lkzBHA7DJUfPnjp9xf097QfbJTCQwdG/K0I/8pTf6xl6R Z6hyRQChc4BjER3aa2sq4NNNA1zuSkCUg40wxC81DLGXyFNYRL0RSa5oewIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFGxc3TD855To0m1xaarmhb4boCPBMB8GA1UdIwQY MBaAFN9ZCD+vXwK7pmgJoaInLq8m6KN4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8xZDNjZTUtYzdlZi00OWZmLTlkNGUt NTk2ZmRiYjBlZGQ5LzEvYkZ6ZE1Qem5sT2pTYlhGcHF1YUZ2aHVnSThFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi8xZDNjZTUtYzdlZi00OWZmLTlkNGUtNTk2ZmRiYjBlZGQ5 LzEvMzFrSVA2OWZBcnVtYUFtaG9pY3VyeWJvbzNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGUmEAAwQC uTQgAwQCwSlIAwQAw+ouMA0EAgACMAcDBQAgARs4MA0GCSqGSIb3DQEBCwUAA4IB AQA1+ejCDLT8MkjoEAR9DvdzeacjMvJwxcrb2K7NB+fEzkZJgSwe4GE3HmloOEM6 BJxHFom2yoT4m6HfkVb5wUjCTudYm5G5ukEPiw948Y1DrlevUiHpoyVMofqwJIIz 5JQqOdIeSqmwbb7wfhKcmarlXNX0w8hqWFQdTx9wFa5zmOr3vW+8Fp+c7zo9gAnv baTm2A6qXD/4usxhEzvybzMWNDnTG5/oKYyD++Sy7vs0HI6sP5nApN7RJRlsbIu0 PRAs6tenbZ+IWZkoGNeuwPcEpyZ5BRMBeHAJRzhR/QmI/ttqKq1bddOOMBQ2kORQ jUvUSq0zv+huhslvrG1T69vM -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:47 2026 by rpki-client