This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/br96nbfJfdxdq-LCA_KvHZNFqIk.roa File: br96nbfJfdxdq-LCA_KvHZNFqIk.roa (raw, json) Hash identifier: ZyqCkCl993Y1/5tl1GjhHrDKFvVu/SQ6o/9tpMFALfs= Subject key identifier: 6E:BF:7A:9D:B7:C9:7D:DC:5D:AB:E2:C2:03:F2:AF:1D:93:45:A8:89 Certificate issuer: /CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66 Certificate serial: 019B7A5B90C3A5413112389F21FE85C3CBAC Authority key identifier: AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/br96nbfJfdxdq-LCA_KvHZNFqIk.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204787 IP address blocks: 185.240.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.mft rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:90:c3:a5:41:31:12:38:9f:21:fe:85:c3:cb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afadf7c5f82dbc0b1dba3282862d53ec887d5c66 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ebf7a9db7c97ddc5dabe2c203f2af1d9345a889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:e7:12:cf:44:93:09:89:e5:3e:24:75:e2:85: 98:95:7a:36:4d:f5:82:b2:d1:cd:ef:e0:7f:cd:71: 9d:60:85:53:29:2a:37:b2:35:6d:74:0c:71:93:97: f7:0a:f0:36:49:f1:08:72:7a:21:f8:0e:3d:74:4b: bc:8b:a5:28:06:fa:84:25:1c:a2:bb:09:aa:b3:ef: 7c:58:3c:67:76:73:54:b2:ff:b1:1c:eb:42:15:66: db:95:2e:b2:71:8e:df:6b:9a:31:89:e0:02:b6:a5: 75:09:4a:01:dc:25:85:e4:17:16:04:c5:70:ea:ef: ee:91:86:63:79:74:61:98:80:22:aa:13:7c:a5:62: be:c5:89:ea:8e:e8:de:17:b0:6c:ff:f5:fc:86:0c: f7:06:0a:9b:52:49:a6:94:a8:65:13:c3:11:c1:d6: 8f:4d:8d:d7:eb:d2:aa:ee:d0:1b:39:08:af:17:f8: bb:c6:6c:ce:97:a7:7b:de:37:85:e6:6c:14:48:7d: 76:5a:f4:3b:4f:af:3d:85:e8:26:c5:41:a6:11:b9: f4:34:83:27:e9:d1:16:05:63:0e:6f:6f:37:a8:bd: 9f:c3:c7:ef:f6:a9:14:12:b3:db:da:66:b5:3f:95: cf:d9:19:6f:59:f5:3d:3a:50:69:0b:49:5d:92:52: f0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BF:7A:9D:B7:C9:7D:DC:5D:AB:E2:C2:03:F2:AF:1D:93:45:A8:89 X509v3 Authority Key Identifier: keyid:AF:AD:F7:C5:F8:2D:BC:0B:1D:BA:32:82:86:2D:53:EC:88:7D:5C:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r633xfgtvAsdujKChi1T7Ih9XGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/br96nbfJfdxdq-LCA_KvHZNFqIk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cd33d5-7bba-49e4-9ab0-78f6c804773d/1/r633xfgtvAsdujKChi1T7Ih9XGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.56.0/22 Signature Algorithm: sha256WithRSAEncryption a9:ba:f2:0c:b2:0e:1d:4d:fe:bd:6a:c4:1e:9c:1a:d7:36:b0: 72:bb:0f:db:e2:d1:86:fb:01:9a:f1:ca:31:96:87:3c:53:2d: a8:8d:2f:b5:03:3b:bd:cd:ac:fb:84:44:25:ae:a9:1d:f0:23: b8:94:d7:b8:07:99:0d:dd:23:ce:a4:6b:1c:49:04:08:96:3d: 5d:6a:9a:8e:5e:d9:89:e0:fe:45:64:64:fd:0e:e5:46:fc:9a: 9a:93:70:e9:af:6e:1c:8d:f1:00:82:31:05:d1:80:df:2b:8c: e1:b0:19:f4:f8:7d:a3:e0:d6:4f:fd:9f:86:55:da:8b:f8:fa: c4:e7:be:f6:e6:a4:f3:3d:c4:42:d7:e2:f2:a0:8a:36:56:e1: f6:ee:32:b0:87:56:97:92:35:ce:55:10:01:91:9f:ec:56:79: ad:44:05:2c:39:c5:56:99:60:3e:f4:48:47:43:f7:45:e7:73: 9d:0d:1d:85:0c:d7:1d:9a:8e:34:4a:f5:78:cd:15:06:dd:85: d2:60:a7:c3:97:65:5e:14:d0:ec:37:60:ca:c0:5e:06:c8:b2: 9f:4b:f7:cb:96:a2:6e:0e:38:5c:b2:1c:51:a2:7f:6b:9e:f2: a7:a9:06:c3:20:4d:65:1f:b0:ce:bc:f4:5c:78:60:ff:af:dc: 38:aa:38:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5DDpUExEjifIf6Fw8usMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmYWRmN2M1ZjgyZGJjMGIxZGJhMzI4Mjg2MmQ1M2VjODg3 ZDVjNjYwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWJmN2E5ZGI3Yzk3ZGRjNWRhYmUyYzIwM2YyYWYxZDkzNDVhODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuecSz0STCYnlPiR14oWYlXo2TfWC stHN7+B/zXGdYIVTKSo3sjVtdAxxk5f3CvA2SfEIcnoh+A49dEu8i6UoBvqEJRyi uwmqs+98WDxndnNUsv+xHOtCFWbblS6ycY7fa5oxieACtqV1CUoB3CWF5BcWBMVw 6u/ukYZjeXRhmIAiqhN8pWK+xYnqjujeF7Bs//X8hgz3BgqbUkmmlKhlE8MRwdaP TY3X69Kq7tAbOQivF/i7xmzOl6d73jeF5mwUSH12WvQ7T689hegmxUGmEbn0NIMn 6dEWBWMOb283qL2fw8fv9qkUErPb2ma1P5XP2RlvWfU9OlBpC0ldklLwpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG6/ep23yX3cXaviwgPyrx2TRaiJMB8GA1UdIwQY MBaAFK+t98X4LbwLHboygoYtU+yIfVxmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAt NzhmNmM4MDQ3NzNkLzEvYnI5Nm5iZkpmZHhkcS1MQ0FfS3ZIWk5GcUlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jZDMzZDUtN2JiYS00OWU0LTlhYjAtNzhmNmM4MDQ3NzNk LzEvcjYzM3hmZ3R2QXNkdWpLQ2hpMVQ3SWg5WEdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufA4MA0G CSqGSIb3DQEBCwUAA4IBAQCpuvIMsg4dTf69asQenBrXNrByuw/b4tGG+wGa8cox loc8Uy2ojS+1Azu9zaz7hEQlrqkd8CO4lNe4B5kN3SPOpGscSQQIlj1dapqOXtmJ 4P5FZGT9DuVG/Jqak3Dpr24cjfEAgjEF0YDfK4zhsBn0+H2j4NZP/Z+GVdqL+PrE 57725qTzPcRC1+LyoIo2VuH27jKwh1aXkjXOVRABkZ/sVnmtRAUsOcVWmWA+9EhH Q/dF53OdDR2FDNcdmo40SvV4zRUG3YXSYKfDl2VeFNDsN2DKwF4GyLKfS/fLlqJu DjhcshxRon9rnvKnqQbDIE1lH7DOvPRceGD/r9w4qjhn -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:41 2026 by rpki-client