This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/bPn6Pnrnq_fR0whtvig8NC0wE0s.roa File: bPn6Pnrnq_fR0whtvig8NC0wE0s.roa (raw, json) Hash identifier: h+p2mlfebNvV+IBAlzDzoCLea72ZuA/UCOZBu/ku9aE= Subject key identifier: 6C:F9:FA:3E:7A:E7:AB:F7:D1:D3:08:6D:BE:28:3C:34:2D:30:13:4B Certificate issuer: /CN=7e1167886da81524431bbf2efb0572914b686ebc Certificate serial: 019B7DCAD3322F2136B33B823B2A84249E0E Authority key identifier: 7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/bPn6Pnrnq_fR0whtvig8NC0wE0s.roa Signing time: Fri 02 Jan 2026 08:20:02 +0000 ROA not before: Fri 02 Jan 2026 08:20:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203 IP address blocks: 195.160.148.0/24 maxlen: 24 195.160.149.0/24 maxlen: 24 212.39.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.mft rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:d3:32:2f:21:36:b3:3b:82:3b:2a:84:24:9e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e1167886da81524431bbf2efb0572914b686ebc Validity Not Before: Jan 2 08:20:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cf9fa3e7ae7abf7d1d3086dbe283c342d30134b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5a:7e:12:a1:ca:6b:cf:07:2c:bc:03:21:15: 66:58:e1:d6:57:03:f7:a5:36:1a:3d:0b:cb:e3:92: c0:7c:39:e8:f5:64:c9:6c:09:33:49:1e:26:45:af: 53:0d:11:a1:6f:31:14:9f:17:8d:dd:35:2c:a5:ba: c8:86:52:74:38:86:46:f8:2f:da:93:8b:d2:01:fb: bb:80:bc:98:c7:3c:6a:9c:8b:cd:d6:16:14:16:e9: cb:f2:9c:27:0c:ae:c4:16:6a:77:99:bc:68:25:e3: 91:45:fd:a2:df:82:04:75:2e:52:db:69:86:24:f2: 53:b3:21:1a:08:52:e3:38:6f:d5:6f:5d:7f:32:e1: 3a:1e:95:5a:54:cc:ee:ee:a6:90:c8:0d:f0:02:3e: 09:4b:7d:6f:70:36:14:c5:aa:93:08:e5:9c:06:76: 1c:c7:35:a3:6b:c4:12:c7:4a:8f:8c:4b:2c:a9:1f: bf:28:e8:d7:f6:b4:75:3f:85:29:1d:63:38:23:81: 4b:c0:84:63:13:ea:86:14:a7:24:09:d6:a8:6f:f7: ea:f9:46:bd:d3:3b:06:0d:04:bc:62:36:6d:81:b2: cd:7f:89:18:77:ee:76:e5:96:38:05:13:51:70:8d: 3d:2a:86:93:48:58:ca:95:eb:d1:32:53:8b:45:2f: 4c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F9:FA:3E:7A:E7:AB:F7:D1:D3:08:6D:BE:28:3C:34:2D:30:13:4B X509v3 Authority Key Identifier: keyid:7E:11:67:88:6D:A8:15:24:43:1B:BF:2E:FB:05:72:91:4B:68:6E:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhFniG2oFSRDG78u-wVykUtobrw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/bPn6Pnrnq_fR0whtvig8NC0wE0s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f92cd7-646c-441b-ae46-9b282c643256/1/fhFniG2oFSRDG78u-wVykUtobrw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.160.148.0/23 212.39.229.0/24 Signature Algorithm: sha256WithRSAEncryption 85:ab:3e:e4:8b:9c:05:e6:93:b5:e8:d5:66:ed:5c:88:26:32: 71:9a:51:13:46:88:01:1c:ed:78:13:31:53:b4:96:8e:9a:00: 02:f6:7e:32:b9:c8:82:4c:69:fa:37:db:eb:38:3b:f3:89:8c: 5a:36:93:3a:77:7d:e5:ea:1e:00:45:69:8f:c8:b6:28:69:17: e3:5b:78:de:47:6c:c0:de:fd:26:aa:5a:8b:8f:fe:eb:c7:d3: ea:9b:23:53:87:76:9c:d6:72:89:2f:6f:be:4e:85:f8:31:49: 92:78:b3:b3:ff:ff:35:02:fb:63:cb:f6:c1:aa:4c:f2:c1:ea: b9:65:10:c1:79:8a:aa:33:8f:4c:e2:ed:0e:ff:ff:30:20:3d: 28:d4:36:ce:10:35:52:a4:97:2b:1b:4f:50:18:62:92:45:75: c4:fc:fd:6c:01:a1:d8:37:1f:3a:ae:e3:3b:aa:cf:21:ae:67: db:b3:19:b9:17:09:ed:98:ba:ca:ea:01:7c:10:4b:29:86:15: d5:cf:53:d1:12:8f:fb:b4:ce:1a:03:a7:72:83:1c:31:b8:2d: 21:9b:80:ac:25:0a:ac:13:3a:8e:f2:27:51:70:a4:f2:ad:dd: 31:c9:e5:b8:e3:ba:6f:37:4d:45:c0:63:19:2d:ef:ec:5c:2f: be:40:0d:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9ytMyLyE2szuCOyqEJJ4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMTE2Nzg4NmRhODE1MjQ0MzFiYmYyZWZiMDU3MjkxNGI2 ODZlYmMwHhcNMjYwMTAyMDgyMDAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2Y5ZmEzZTdhZTdhYmY3ZDFkMzA4NmRiZTI4M2MzNDJkMzAxMzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVp+EqHKa88HLLwDIRVmWOHWVwP3 pTYaPQvL45LAfDno9WTJbAkzSR4mRa9TDRGhbzEUnxeN3TUspbrIhlJ0OIZG+C/a k4vSAfu7gLyYxzxqnIvN1hYUFunL8pwnDK7EFmp3mbxoJeORRf2i34IEdS5S22mG JPJTsyEaCFLjOG/Vb11/MuE6HpVaVMzu7qaQyA3wAj4JS31vcDYUxaqTCOWcBnYc xzWja8QSx0qPjEssqR+/KOjX9rR1P4UpHWM4I4FLwIRjE+qGFKckCdaob/fq+Ua9 0zsGDQS8YjZtgbLNf4kYd+525ZY4BRNRcI09KoaTSFjKlevRMlOLRS9MMQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGz5+j5656v30dMIbb4oPDQtMBNLMB8GA1UdIwQY MBaAFH4RZ4htqBUkQxu/LvsFcpFLaG68MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYt OWIyODJjNjQzMjU2LzEvYlBuNlBucm5xX2ZSMHdodHZpZzhOQzB3RTBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9mOTJjZDctNjQ2Yy00NDFiLWFlNDYtOWIyODJjNjQzMjU2 LzEvZmhGbmlHMm9GU1JERzc4dS13VnlrVXRvYnJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBw6CUAwQA 1CflMA0GCSqGSIb3DQEBCwUAA4IBAQCFqz7ki5wF5pO16NVm7VyIJjJxmlETRogB HO14EzFTtJaOmgAC9n4yuciCTGn6N9vrODvziYxaNpM6d33l6h4ARWmPyLYoaRfj W3jeR2zA3v0mqlqLj/7rx9PqmyNTh3ac1nKJL2++ToX4MUmSeLOz//81Avtjy/bB qkzyweq5ZRDBeYqqM49M4u0O//8wID0o1DbOEDVSpJcrG09QGGKSRXXE/P1sAaHY Nx86ruM7qs8hrmfbsxm5FwntmLrK6gF8EEsphhXVz1PREo/7tM4aA6dygxwxuC0h m4CsJQqsEzqO8idRcKTyrd0xyeW447pvN01FwGMZLe/sXC++QA1g -----END CERTIFICATE-----Generated at Thu Jan 22 09:48:43 2026 by rpki-client