This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/bRkSwf8NRWVejLcczgxRQujZiiI.roa File: bRkSwf8NRWVejLcczgxRQujZiiI.roa (raw, json) Hash identifier: rRMDR6wPR6p9vNbzt+qOkRn+t/aRFeKz/UfhkGTXG5M= Subject key identifier: 6D:19:12:C1:FF:0D:45:65:5E:8C:B7:1C:CE:0C:51:42:E8:D9:8A:22 Certificate issuer: /CN=e69e45a4481456148e2e00349d87aa57c56b24a0 Certificate serial: 019B77C6F9865EA35F669280D6B2C30FE994 Authority key identifier: E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/bRkSwf8NRWVejLcczgxRQujZiiI.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44894 IP address blocks: 89.21.76.0/24 maxlen: 24 89.21.77.0/24 maxlen: 24 91.193.128.0/22 maxlen: 22 91.193.128.0/23 maxlen: 23 91.193.128.0/24 maxlen: 24 91.193.129.0/24 maxlen: 24 91.193.130.0/23 maxlen: 23 91.193.130.0/24 maxlen: 24 91.193.131.0/24 maxlen: 24 91.203.60.0/22 maxlen: 22 91.203.60.0/23 maxlen: 23 91.203.60.0/24 maxlen: 24 91.203.61.0/24 maxlen: 24 91.203.62.0/23 maxlen: 23 91.203.62.0/24 maxlen: 24 91.203.63.0/24 maxlen: 24 193.150.49.0/24 maxlen: 24 194.107.230.0/23 maxlen: 23 194.107.230.0/24 maxlen: 24 194.107.231.0/24 maxlen: 24 194.110.2.0/23 maxlen: 23 194.110.2.0/24 maxlen: 24 194.110.3.0/24 maxlen: 24 194.150.104.0/23 maxlen: 23 194.150.104.0/24 maxlen: 24 194.150.105.0/24 maxlen: 24 194.150.106.0/24 maxlen: 24 2001:67c:2f2c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.mft rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f9:86:5e:a3:5f:66:92:80:d6:b2:c3:0f:e9:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e69e45a4481456148e2e00349d87aa57c56b24a0 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d1912c1ff0d45655e8cb71cce0c5142e8d98a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:92:66:ea:04:f4:1e:aa:90:76:36:f3:16:63: 49:fa:5a:24:f0:36:b0:c4:86:d5:76:a4:3d:a6:c7: 33:61:54:a7:8e:c3:f7:fc:5a:db:0b:fe:6d:e4:41: d5:6c:d3:0b:d9:b0:3a:39:49:c2:f9:f0:1f:b0:41: 38:7f:91:f9:75:07:39:78:ce:a0:b9:22:e3:c4:1b: 39:ee:ee:3b:38:e5:d5:62:5b:29:1e:f6:a0:0d:4e: fa:85:3d:0a:62:31:f3:68:0c:70:87:78:bd:59:6b: 60:18:d0:d2:fc:b1:ce:a9:b2:4a:90:97:78:0e:56: 44:40:8d:74:f1:14:92:1a:28:c8:67:49:de:5c:8b: f9:9d:20:97:16:cf:94:1a:b6:c8:51:5b:e5:1b:d9: 04:cb:98:8f:5e:17:02:44:7d:cd:de:df:46:bf:65: 47:fe:22:6a:1f:71:44:7e:6c:3e:fc:62:ba:1c:eb: 4f:fe:9e:3e:63:29:77:e0:a5:e1:e7:ec:49:fa:24: f0:10:dd:6c:1f:c7:39:2c:f0:ec:ac:41:fd:57:5e: 53:78:bd:b4:39:38:8d:ef:02:f7:27:55:b9:98:20: 2d:d2:8b:ab:5c:38:de:40:46:ea:19:37:bf:12:02: 1f:2b:dd:09:77:97:33:0a:ad:94:fe:11:2d:ee:f7: 81:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:19:12:C1:FF:0D:45:65:5E:8C:B7:1C:CE:0C:51:42:E8:D9:8A:22 X509v3 Authority Key Identifier: keyid:E6:9E:45:A4:48:14:56:14:8E:2E:00:34:9D:87:AA:57:C5:6B:24:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5p5FpEgUVhSOLgA0nYeqV8VrJKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/bRkSwf8NRWVejLcczgxRQujZiiI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/44d59e-dc7b-4d2c-ba45-4a91fabd8a8e/1/5p5FpEgUVhSOLgA0nYeqV8VrJKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.21.76.0/23 91.193.128.0/22 91.203.60.0/22 193.150.49.0/24 194.107.230.0/23 194.110.2.0/23 194.150.104.0-194.150.106.255 IPv6: 2001:67c:2f2c::/48 Signature Algorithm: sha256WithRSAEncryption 64:25:7b:bc:f3:80:07:72:12:4d:9e:c5:33:11:2f:85:cb:12: e6:70:8d:9d:5f:e7:a9:22:7c:e6:14:95:d8:29:65:45:a5:fc: 4a:22:78:b9:91:62:fd:b1:b4:14:45:20:c3:fd:81:b5:96:e1: ed:a2:a0:a4:d1:7c:6f:2b:3b:27:f6:d9:3b:5c:0c:6b:2d:c2: a8:b0:61:82:a9:a8:0c:04:8e:12:a4:ae:f7:b4:35:b6:ca:ac: 15:e1:37:63:bc:d0:14:cb:e3:44:c4:5a:a6:19:05:ec:be:92: e1:f2:3d:14:88:7a:10:ef:6d:1e:7b:e4:84:b4:08:f3:28:be: fd:f2:da:a4:dc:9c:63:19:6d:25:1e:f3:00:d9:8d:26:9e:bd: 9f:c6:30:57:24:77:99:c3:2e:72:71:a7:05:7f:40:40:9f:58: c3:bc:ef:9d:79:e3:f0:c0:75:92:f9:34:58:5e:2e:c1:74:bf: c5:ee:b9:03:c4:03:cf:06:e4:98:53:04:f7:f5:94:ad:ad:71: 41:9c:bd:02:82:98:62:15:8a:f9:63:ed:d4:6e:ac:11:c1:f2: 00:29:6c:ca:7e:bd:17:1b:63:fa:82:2b:bb:ec:ce:e0:2e:e2: 8c:a7:bc:4f:de:73:12:7e:11:81:1e:18:27:ec:fb:cc:2d:f5: fb:56:ea:85 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZt3xvmGXqNfZpKA1rLDD+mUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU2OWU0NWE0NDgxNDU2MTQ4ZTJlMDAzNDlkODdhYTU3YzU2 YjI0YTAwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDE5MTJjMWZmMGQ0NTY1NWU4Y2I3MWNjZTBjNTE0MmU4ZDk4YTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZJm6gT0HqqQdjbzFmNJ+lok8Daw xIbVdqQ9psczYVSnjsP3/FrbC/5t5EHVbNML2bA6OUnC+fAfsEE4f5H5dQc5eM6g uSLjxBs57u47OOXVYlspHvagDU76hT0KYjHzaAxwh3i9WWtgGNDS/LHOqbJKkJd4 DlZEQI108RSSGijIZ0neXIv5nSCXFs+UGrbIUVvlG9kEy5iPXhcCRH3N3t9Gv2VH /iJqH3FEfmw+/GK6HOtP/p4+Yyl34KXh5+xJ+iTwEN1sH8c5LPDsrEH9V15TeL20 OTiN7wL3J1W5mCAt0ourXDjeQEbqGTe/EgIfK90Jd5czCq2U/hEt7veBxQIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFG0ZEsH/DUVlXoy3HM4MUULo2YoiMB8GA1UdIwQY MBaAFOaeRaRIFFYUji4ANJ2HqlfFaySgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNXA1RnBFZ1VWaFNPTGdBMG5ZZXFWOFZySktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi80NGQ1OWUtZGM3Yi00ZDJjLWJhNDUt NGE5MWZhYmQ4YThlLzEvYlJrU3dmOE5SV1ZlakxjY3pneFJRdWpaaWlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi80NGQ1OWUtZGM3Yi00ZDJjLWJhNDUtNGE5MWZhYmQ4YThl LzEvNXA1RnBFZ1VWaFNPTGdBMG5ZZXFWOFZySktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA4BAIAATAyAwQBWRVMAwQC W8GAAwQCW8s8AwQAwZYxAwQBwmvmAwQBwm4CMAwDBAPClmgDBADClmowDwQCAAIw CQMHACABBnwvLDANBgkqhkiG9w0BAQsFAAOCAQEAZCV7vPOAB3ISTZ7FMxEvhcsS 5nCNnV/nqSJ85hSV2CllRaX8SiJ4uZFi/bG0FEUgw/2BtZbh7aKgpNF8bys7J/bZ O1wMay3CqLBhgqmoDASOEqSu97Q1tsqsFeE3Y7zQFMvjRMRaphkF7L6S4fI9FIh6 EO9tHnvkhLQI8yi+/fLapNycYxltJR7zANmNJp69n8YwVyR3mcMucnGnBX9AQJ9Y w7zvnXnj8MB1kvk0WF4uwXS/xe65A8QDzwbkmFME9/WUra1xQZy9AoKYYhWK+WPt 1G6sEcHyAClsyn69Fxtj+oIru+zO4C7ijKe8T95zEn4RgR4YJ+z7zC31+1bqhQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:39 2026 by rpki-client