This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/BcbpeOE1UIMLYcx9_xoYiBz5cII.roa File: BcbpeOE1UIMLYcx9_xoYiBz5cII.roa (raw, json) Hash identifier: C/EPAsh6T699gB8fYjC4QQRKH8QFpe67E9wrm8R7nkA= Subject key identifier: 05:C6:E9:78:E1:35:50:83:0B:61:CC:7D:FF:1A:18:88:1C:F9:70:82 Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e Certificate serial: 019B797E8A4AB68E11782880379464FE188D Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/BcbpeOE1UIMLYcx9_xoYiBz5cII.roa Signing time: Thu 01 Jan 2026 12:18:14 +0000 ROA not before: Thu 01 Jan 2026 12:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21040 IP address blocks: 37.203.248.0/21 maxlen: 21 37.203.248.0/22 maxlen: 22 37.203.252.0/22 maxlen: 22 84.20.56.0/21 maxlen: 21 84.20.56.0/22 maxlen: 22 84.20.60.0/22 maxlen: 22 109.94.162.0/24 maxlen: 24 109.205.200.0/21 maxlen: 21 109.205.200.0/24 maxlen: 24 109.205.201.0/24 maxlen: 24 109.205.202.0/24 maxlen: 24 109.205.203.0/24 maxlen: 24 109.205.204.0/22 maxlen: 22 185.19.120.0/22 maxlen: 22 185.19.120.0/23 maxlen: 23 185.19.122.0/23 maxlen: 23 185.71.16.0/22 maxlen: 22 185.71.16.0/23 maxlen: 23 185.71.18.0/23 maxlen: 23 185.71.112.0/22 maxlen: 22 185.71.112.0/23 maxlen: 23 185.71.114.0/23 maxlen: 23 185.178.120.0/22 maxlen: 22 185.178.120.0/23 maxlen: 23 213.196.128.0/18 maxlen: 18 213.196.128.0/24 maxlen: 24 213.196.129.0/24 maxlen: 24 213.196.130.0/24 maxlen: 24 213.196.131.0/24 maxlen: 24 213.196.132.0/24 maxlen: 24 213.196.133.0/24 maxlen: 24 213.196.135.0/24 maxlen: 24 213.196.136.0/24 maxlen: 24 213.196.137.0/24 maxlen: 24 213.196.138.0/24 maxlen: 24 213.196.140.0/24 maxlen: 24 213.196.141.0/24 maxlen: 24 213.196.142.0/24 maxlen: 24 213.196.143.0/24 maxlen: 24 213.196.144.0/24 maxlen: 24 213.196.145.0/24 maxlen: 24 213.196.146.0/24 maxlen: 24 213.196.147.0/24 maxlen: 24 213.196.151.0/24 maxlen: 24 213.196.152.0/24 maxlen: 24 213.196.153.0/24 maxlen: 24 213.196.154.0/24 maxlen: 24 213.196.155.0/24 maxlen: 24 213.196.156.0/24 maxlen: 24 213.196.158.0/24 maxlen: 24 213.196.159.0/24 maxlen: 24 213.196.160.0/24 maxlen: 24 213.196.161.0/24 maxlen: 24 213.196.162.0/24 maxlen: 24 213.196.174.0/23 maxlen: 23 213.196.184.0/22 maxlen: 22 213.196.188.0/22 maxlen: 22 2a02:24e8::/29 maxlen: 29 2a11:2780::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:8a:4a:b6:8e:11:78:28:80:37:94:64:fe:18:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e Validity Not Before: Jan 1 12:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05c6e978e13550830b61cc7dff1a18881cf97082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:5e:cd:17:fc:0e:65:32:19:9c:4c:a1:48: 9c:8c:21:c5:04:9a:eb:22:0d:37:fa:94:81:3e:84: 3f:70:99:4b:ff:b1:28:24:b1:b5:db:b0:44:6b:4b: 9d:d0:09:69:35:0b:38:c9:24:a5:6c:95:db:6d:5c: 5d:85:6c:8d:96:5d:fd:4f:07:7b:d4:ee:40:01:4f: 77:b5:e2:51:6a:d4:63:12:44:74:24:ae:8a:47:8f: c8:3f:05:01:53:0a:10:ae:47:91:46:70:64:01:84: 57:46:db:5a:ed:15:bb:b9:97:20:e1:bd:64:78:10: f1:f1:42:84:23:ea:cb:d3:7f:02:df:e0:34:7d:5f: f4:b9:7a:f3:bf:0d:08:3f:97:37:bc:f8:d1:dd:49: da:c1:a2:81:c3:de:75:94:2f:d4:0b:7a:38:4e:dc: c2:ba:f3:4a:09:68:19:b0:3d:1f:fa:bc:2f:5b:3f: 6a:55:79:ec:1a:74:e4:dd:e4:a5:6c:c0:e1:74:36: a8:82:9a:91:6a:69:74:5e:8e:8c:cf:5f:49:dc:41: 04:82:de:1b:34:89:9b:e8:69:1b:65:32:81:df:0b: 3e:cb:af:36:9d:54:34:2f:71:e8:ec:6d:58:a2:87: c5:f7:80:8a:e5:2d:ad:75:16:92:43:82:16:a1:b4: 61:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C6:E9:78:E1:35:50:83:0B:61:CC:7D:FF:1A:18:88:1C:F9:70:82 X509v3 Authority Key Identifier: keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/BcbpeOE1UIMLYcx9_xoYiBz5cII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.203.248.0/21 84.20.56.0/21 109.94.162.0/24 109.205.200.0/21 185.19.120.0/22 185.71.16.0/22 185.71.112.0/22 185.178.120.0/22 213.196.128.0/18 IPv6: 2a02:24e8::/29 2a11:2780::/29 Signature Algorithm: sha256WithRSAEncryption 2c:8a:4b:e1:71:8a:dc:79:dd:93:b4:10:95:1b:26:01:58:6a: 12:47:3e:10:c9:76:4c:88:06:29:41:39:9e:a4:56:62:67:b8: 9a:00:48:15:41:47:7c:68:63:d2:13:3e:f8:6f:8d:ab:a2:ef: 6d:f7:8a:da:3f:d9:54:71:5f:76:a1:6d:13:c4:96:96:d0:43: a0:d7:bf:de:e9:38:2b:49:98:57:9e:fc:7c:e8:e6:ed:d1:7f: b4:35:e3:a3:22:bf:97:b4:81:6f:8a:5f:a5:20:71:db:f4:c1: c6:4b:39:5a:a2:92:a2:fd:6a:9b:b5:08:35:91:88:96:2e:c3: 89:8f:3c:6f:89:f6:c8:ed:ad:c3:b9:c2:d5:9e:04:5c:a8:a7: e4:9d:56:65:c4:9b:0e:a7:23:4f:94:0a:2b:02:df:56:45:72: c7:f2:31:5d:e5:1f:5e:11:45:e6:c5:42:1e:3b:bf:ea:0b:99: 17:a6:23:72:28:41:e1:a5:8e:66:5e:80:d5:8c:a0:92:41:4e: 36:9b:c3:f6:91:9e:36:81:6d:a5:89:38:dc:c6:9c:c6:7b:75: 38:81:40:97:76:73:b3:2c:f4:62:2a:20:ec:cc:3f:3a:b3:c6: 5a:6b:13:c6:da:90:be:12:5e:f9:dc:cd:f2:af:4a:34:40:86: b0:46:c6:2e -----BEGIN CERTIFICATE----- MIIFQzCCBCugAwIBAgISAZt5fopKto4ReCiAN5Rk/hiNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOGMzM2E4YTYyMDFkNDBhNjAyMjBiZDYzOWI1ZDM1MjIx MjY3M2UwHhcNMjYwMTAxMTIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWM2ZTk3OGUxMzU1MDgzMGI2MWNjN2RmZjFhMTg4ODFjZjk3MDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEVezRf8DmUyGZxMoUicjCHFBJrr Ig03+pSBPoQ/cJlL/7EoJLG127BEa0ud0AlpNQs4ySSlbJXbbVxdhWyNll39Twd7 1O5AAU93teJRatRjEkR0JK6KR4/IPwUBUwoQrkeRRnBkAYRXRtta7RW7uZcg4b1k eBDx8UKEI+rL038C3+A0fV/0uXrzvw0IP5c3vPjR3UnawaKBw951lC/UC3o4TtzC uvNKCWgZsD0f+rwvWz9qVXnsGnTk3eSlbMDhdDaogpqRaml0Xo6Mz19J3EEEgt4b NImb6GkbZTKB3ws+y682nVQ0L3Ho7G1YoofF94CK5S2tdRaSQ4IWobRhwQIDAQAB o4ICTzCCAkswHQYDVR0OBBYEFAXG6XjhNVCDC2HMff8aGIgc+XCCMB8GA1UdIwQY MBaAFO+MM6imIB1ApgIgvWObXTUiEmc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMt ZTAxYmI0ODg2M2E5LzEvQmNicGVPRTFVSU1MWWN4OV94b1lpQno1Y0lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMtZTAxYmI0ODg2M2E5 LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGUGCCsGAQUFBwEHAQH/BFYwVDA8BAIAATA2AwQDJcv4AwQD VBQ4AwQAbV6iAwQDbc3IAwQCuRN4AwQCuUcQAwQCuUdwAwQCubJ4AwQG1cSAMBQE AgACMA4DBQMqAiToAwUDKhEngDANBgkqhkiG9w0BAQsFAAOCAQEALIpL4XGK3Hnd k7QQlRsmAVhqEkc+EMl2TIgGKUE5nqRWYme4mgBIFUFHfGhj0hM++G+Nq6LvbfeK 2j/ZVHFfdqFtE8SWltBDoNe/3uk4K0mYV578fOjm7dF/tDXjoyK/l7SBb4pfpSBx 2/TBxks5WqKSov1qm7UINZGIli7DiY88b4n2yO2tw7nC1Z4EXKin5J1WZcSbDqcj T5QKKwLfVkVyx/IxXeUfXhFF5sVCHju/6guZF6YjcihB4aWOZl6A1YygkkFONpvD 9pGeNoFtpYk43Macxnt1OIFAl3Zzsyz0Yiog7Mw/OrPGWmsTxtqQvhJe+dzN8q9K NECGsEbGLg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:43 2026 by rpki-client