This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/bWrf5HBRWkC5tRtfjrT7kJyrpno.roa File: bWrf5HBRWkC5tRtfjrT7kJyrpno.roa (raw, json) Hash identifier: /I5eLM8VzNgvUAvbvfb6xY95ux9WGp/lCmpzrs9JDzo= Subject key identifier: 6D:6A:DF:E4:70:51:5A:40:B9:B5:1B:5F:8E:B4:FB:90:9C:AB:A6:7A Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10 Certificate serial: 019B7F84E2813CDF487738E83021F76B2D86 Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/bWrf5HBRWkC5tRtfjrT7kJyrpno.roa Signing time: Fri 02 Jan 2026 16:22:53 +0000 ROA not before: Fri 02 Jan 2026 16:22:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46450 IP address blocks: 83.137.157.0/24 maxlen: 24 88.209.205.0/24 maxlen: 24 92.52.217.0/24 maxlen: 24 92.52.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:e2:81:3c:df:48:77:38:e8:30:21:f7:6b:2d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10 Validity Not Before: Jan 2 16:22:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d6adfe470515a40b9b51b5f8eb4fb909caba67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f1:d3:fc:45:db:86:87:03:dd:3e:35:c1:ac: 38:f9:fc:6b:43:b0:6f:50:a8:d8:32:97:df:16:98: 2d:96:37:42:30:2d:cf:3c:92:75:9f:fe:8a:f6:48: 09:96:f7:e8:5d:50:20:8a:90:64:dd:29:04:7a:e4: 08:25:ff:ca:4a:b4:e4:00:97:3c:8b:47:57:d8:87: 12:8d:20:26:03:12:0e:31:00:29:1e:8a:31:4a:40: 74:ba:54:0c:ef:9d:35:5a:bd:f6:05:6f:99:a1:b9: 68:ad:a5:96:3f:37:d7:62:42:bc:a2:10:a6:96:a9: 66:66:c5:da:57:bb:fb:61:9a:06:df:52:49:bc:70: 0a:5e:cf:71:ff:71:18:86:90:f1:95:14:62:51:de: 3f:d1:cf:14:ca:d5:d0:a9:b8:06:fc:ce:df:cd:4f: ed:89:e1:d0:32:2e:ad:f8:b6:39:c4:cb:b2:ea:15: fd:01:b1:35:76:ce:d8:2e:fa:b2:cb:b3:bc:20:6a: 93:5f:a1:64:07:1e:da:53:36:83:56:8a:db:80:8c: f6:8c:b4:f1:25:86:40:a4:e5:db:76:fc:f3:2f:d3: 2c:69:54:a1:bd:16:39:96:1e:37:ea:15:ae:e8:a1: b0:4f:04:90:6e:25:9f:ae:80:0b:1f:23:cf:10:62: 7a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:6A:DF:E4:70:51:5A:40:B9:B5:1B:5F:8E:B4:FB:90:9C:AB:A6:7A X509v3 Authority Key Identifier: keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/bWrf5HBRWkC5tRtfjrT7kJyrpno.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.157.0/24 88.209.205.0/24 92.52.217.0-92.52.218.255 Signature Algorithm: sha256WithRSAEncryption b3:f0:46:5c:0a:aa:5a:78:93:d1:1c:61:6d:cd:73:6a:ad:89: bb:29:ee:ab:d0:aa:66:19:53:1a:de:37:74:07:43:be:d6:27: b7:d0:14:14:5f:d0:5a:49:60:30:cb:a6:54:62:81:3e:c6:4f: 2e:ba:35:9a:87:e5:db:b1:d8:ec:07:a3:a8:8c:9b:5c:65:c1: e0:bb:71:b2:6d:d3:d9:67:18:74:dd:c6:19:8c:a3:3b:ba:62: 68:e4:4c:cf:21:67:c7:94:45:18:f5:1d:a8:7a:f7:8b:9c:56: 08:a1:14:28:1f:b7:9b:87:a6:f1:69:e3:9d:28:26:6e:71:67: cd:6c:76:32:66:46:fe:43:1d:2c:64:1e:fc:67:f8:dd:7f:4d: 6e:84:50:72:a9:23:f5:c8:fc:4c:92:4f:be:2a:00:4f:cc:2d: dc:7f:bf:8b:ca:fe:b5:a5:af:ab:23:ca:88:a6:ea:21:1b:78: 66:1a:74:f9:5a:06:47:1c:5e:0a:2f:2f:65:0d:bb:a3:28:db: 13:63:d2:af:38:84:46:a6:01:3d:77:22:f8:90:a8:7b:08:90: c8:02:5b:8a:7d:26:ac:a5:f9:35:c1:d5:c9:2f:cd:b3:fe:3a: dc:b9:94:99:ed:20:af:df:ce:5f:1b:df:38:91:ba:6a:5f:d6: 3b:c0:c6:97 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt/hOKBPN9IdzjoMCH3ay2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx MWRhMTAwHhcNMjYwMTAyMTYyMjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDZhZGZlNDcwNTE1YTQwYjliNTFiNWY4ZWI0ZmI5MDljYWJhNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPHT/EXbhocD3T41waw4+fxrQ7Bv UKjYMpffFpgtljdCMC3PPJJ1n/6K9kgJlvfoXVAgipBk3SkEeuQIJf/KSrTkAJc8 i0dX2IcSjSAmAxIOMQApHooxSkB0ulQM7501Wr32BW+ZobloraWWPzfXYkK8ohCm lqlmZsXaV7v7YZoG31JJvHAKXs9x/3EYhpDxlRRiUd4/0c8UytXQqbgG/M7fzU/t ieHQMi6t+LY5xMuy6hX9AbE1ds7YLvqyy7O8IGqTX6FkBx7aUzaDVorbgIz2jLTx JYZApOXbdvzzL9MsaVShvRY5lh436hWu6KGwTwSQbiWfroALHyPPEGJ6HwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFG1q3+RwUVpAubUbX460+5Ccq6Z6MB8GA1UdIwQY MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt N2U0ZDZmNmY2ZTY2LzEvYldyZjVIQlJXa0M1dFJ0ZmpyVDdrSnlycG5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2 LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAU4mdAwQA WNHNMAwDBABcNNkDBABcNNowDQYJKoZIhvcNAQELBQADggEBALPwRlwKqlp4k9Ec YW3Nc2qtibsp7qvQqmYZUxreN3QHQ77WJ7fQFBRf0FpJYDDLplRigT7GTy66NZqH 5dux2OwHo6iMm1xlweC7cbJt09lnGHTdxhmMozu6YmjkTM8hZ8eURRj1Hah694uc VgihFCgft5uHpvFp450oJm5xZ81sdjJmRv5DHSxkHvxn+N1/TW6EUHKpI/XI/EyS T74qAE/MLdx/v4vK/rWlr6sjyoim6iEbeGYadPlaBkccXgovL2UNu6Mo2xNj0q84 hEamAT13IviQqHsIkMgCW4p9Jqyl+TXB1ckvzbP+Oty5lJntIK/fzl8b3ziRumpf 1jvAxpc= -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:04 2026 by rpki-client