This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bFgU2Mat9zBeqs-KV_uul5KBKlA.roa File: bFgU2Mat9zBeqs-KV_uul5KBKlA.roa (raw, json) Hash identifier: T1WxTbilSlOD43RSaAPucjY0WsebAY/m3nCWO3lAFkM= Subject key identifier: 6C:58:14:D8:C6:AD:F7:30:5E:AA:CF:8A:57:FB:AE:97:92:81:2A:50 Certificate issuer: /CN=6cb272da1d8126b51719e5a3456880adfa889ca3 Certificate serial: 019B79112AB035FB40581A4B6A743C0EF1B1 Authority key identifier: 6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bFgU2Mat9zBeqs-KV_uul5KBKlA.roa Signing time: Thu 01 Jan 2026 10:18:46 +0000 ROA not before: Thu 01 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1930 IP address blocks: 192.84.13.0/24 maxlen: 24 192.84.15.0/24 maxlen: 24 192.92.144.0/24 maxlen: 24 192.138.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.mft rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2a:b0:35:fb:40:58:1a:4b:6a:74:3c:0e:f1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb272da1d8126b51719e5a3456880adfa889ca3 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c5814d8c6adf7305eaacf8a57fbae9792812a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a3:29:01:ea:21:81:b8:7a:7d:5d:ec:b4:c9: 07:9f:31:7d:49:da:4d:35:c8:68:5d:34:b8:53:39: b3:93:57:c7:cf:95:11:73:6c:2f:bb:9c:cc:53:20: ce:f2:0f:bf:7a:77:cc:32:86:f5:22:69:68:eb:af: f6:85:6b:a6:4f:5d:f6:e4:dd:44:df:67:b3:29:5f: 83:07:27:d5:75:85:11:6a:ff:09:38:c5:34:82:45: 43:18:11:af:4b:d1:3d:bc:ef:ae:c5:f6:06:61:a4: fc:17:52:29:a9:ea:a1:3b:a1:2e:2a:dd:9b:47:42: 42:8b:1a:5b:d0:bd:dc:34:6a:27:9c:a0:96:8c:12: fb:32:fb:65:47:d2:4c:50:d3:0a:19:37:9b:79:0b: 8d:f0:a5:cc:ed:12:2f:b0:42:e9:e1:fc:5e:01:83: ed:dc:36:1f:7d:f6:3b:2c:b9:29:57:04:43:2b:96: 83:4e:13:f5:cf:c6:22:75:77:4b:9a:f0:ff:05:6b: 9d:3e:bd:55:ea:00:b0:f3:a9:bd:ae:f6:7d:e5:6b: 2b:63:c1:f3:3b:a6:89:65:44:41:94:fb:1d:ac:f2: 62:53:e5:2b:06:a4:a8:3d:59:b6:2f:4a:82:9e:6a: b7:55:32:32:4e:5f:c0:76:e7:5b:f9:87:61:86:04: 75:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:58:14:D8:C6:AD:F7:30:5E:AA:CF:8A:57:FB:AE:97:92:81:2A:50 X509v3 Authority Key Identifier: keyid:6C:B2:72:DA:1D:81:26:B5:17:19:E5:A3:45:68:80:AD:FA:88:9C:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLJy2h2BJrUXGeWjRWiArfqInKM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bFgU2Mat9zBeqs-KV_uul5KBKlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/a3c5a2-5149-4186-b309-cfdcb57b5e1d/1/bLJy2h2BJrUXGeWjRWiArfqInKM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.84.13.0/24 192.84.15.0/24 192.92.144.0/24 192.138.204.0/24 Signature Algorithm: sha256WithRSAEncryption 14:52:6a:f9:c1:49:eb:6d:f0:52:b8:ba:5d:81:78:c5:0c:30: 97:11:d3:96:21:69:7f:ff:ea:8e:2f:8d:9f:eb:ef:fc:8c:4e: ee:41:14:8b:f6:6d:21:7b:02:09:57:af:0c:a6:bd:91:ae:da: 53:84:cb:d6:72:e6:d8:31:f2:ba:5d:73:d8:a8:ef:67:7b:da: 0d:34:87:b6:ca:07:70:bb:8f:46:16:dc:4b:a2:ee:06:01:eb: cb:23:be:d2:cd:f5:b3:b2:73:18:69:45:54:af:2d:e8:a3:cc: 6f:03:ee:2d:b5:a8:e8:f2:1b:ba:08:d8:2d:c2:97:4d:6e:c7: db:eb:86:92:e5:d8:90:ff:8a:69:95:1f:bb:17:3f:b2:90:b4: 51:cc:59:7f:02:58:1a:67:2a:e5:a0:0d:d8:49:71:76:4f:72: 42:10:df:13:5f:a7:99:11:d6:88:a1:36:e9:a1:d0:6f:02:79: 55:67:97:1b:30:a7:5d:43:2c:bb:b0:cc:ad:ba:d0:c9:59:0b: 93:a5:ef:8d:50:be:51:55:92:4e:28:de:28:d1:67:4b:d4:19: f7:73:9e:e1:f1:db:d1:e8:e7:cc:11:dc:03:b7:b2:92:d5:31: 2c:8d:11:61:03:a2:d2:32:5d:c7:db:d7:b6:51:78:f8:52:5a: 8e:4e:35:fe -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5ESqwNftAWBpLanQ8DvGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjI3MmRhMWQ4MTI2YjUxNzE5ZTVhMzQ1Njg4MGFkZmE4 ODljYTMwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzU4MTRkOGM2YWRmNzMwNWVhYWNmOGE1N2ZiYWU5NzkyODEyYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaMpAeohgbh6fV3stMkHnzF9SdpN NchoXTS4Uzmzk1fHz5URc2wvu5zMUyDO8g+/enfMMob1Imlo66/2hWumT1325N1E 32ezKV+DByfVdYURav8JOMU0gkVDGBGvS9E9vO+uxfYGYaT8F1IpqeqhO6EuKt2b R0JCixpb0L3cNGonnKCWjBL7MvtlR9JMUNMKGTebeQuN8KXM7RIvsELp4fxeAYPt 3DYfffY7LLkpVwRDK5aDThP1z8YidXdLmvD/BWudPr1V6gCw86m9rvZ95WsrY8Hz O6aJZURBlPsdrPJiU+UrBqSoPVm2L0qCnmq3VTIyTl/Adudb+YdhhgR1bQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGxYFNjGrfcwXqrPilf7rpeSgSpQMB8GA1UdIwQY MBaAFGyyctodgSa1Fxnlo0VogK36iJyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDkt Y2ZkY2I1N2I1ZTFkLzEvYkZnVTJNYXQ5ekJlcXMtS1ZfdXVsNUtCS2xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hM2M1YTItNTE0OS00MTg2LWIzMDktY2ZkY2I1N2I1ZTFk LzEvYkxKeTJoMkJKclVYR2VXalJXaUFyZnFJbktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwFQNAwQA wFQPAwQAwFyQAwQAwIrMMA0GCSqGSIb3DQEBCwUAA4IBAQAUUmr5wUnrbfBSuLpd gXjFDDCXEdOWIWl//+qOL42f6+/8jE7uQRSL9m0hewIJV68Mpr2RrtpThMvWcubY MfK6XXPYqO9ne9oNNIe2ygdwu49GFtxLou4GAevLI77SzfWzsnMYaUVUry3oo8xv A+4ttajo8hu6CNgtwpdNbsfb64aS5diQ/4pplR+7Fz+ykLRRzFl/AlgaZyrloA3Y SXF2T3JCEN8TX6eZEdaIoTbpodBvAnlVZ5cbMKddQyy7sMytutDJWQuTpe+NUL5R VZJOKN4o0WdL1Bn3c57h8dvR6OfMEdwDt7KS1TEsjRFhA6LSMl3H29e2UXj4UlqO TjX+ -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:57 2026 by rpki-client