This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/bChcbGdFNJLxkL6cWvlOuiphISs.roa File: bChcbGdFNJLxkL6cWvlOuiphISs.roa (raw, json) Hash identifier: +dNUc4mkY1Ks/wJrUAYjbgs9Kw+RWtpPfvShsAp4TVY= Subject key identifier: 6C:28:5C:6C:67:45:34:92:F1:90:BE:9C:5A:F9:4E:BA:2A:61:21:2B Certificate issuer: /CN=91188ca64c4670a6eb56b42a50a10588ad9647ee Certificate serial: 019B7F14188CA09EEEF9AF14DD1C2C14431F Authority key identifier: 91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/bChcbGdFNJLxkL6cWvlOuiphISs.roa Signing time: Fri 02 Jan 2026 14:19:41 +0000 ROA not before: Fri 02 Jan 2026 14:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43197 IP address blocks: 45.81.37.0/24 maxlen: 24 109.68.232.0/21 maxlen: 21 109.68.232.0/24 maxlen: 24 109.68.233.0/24 maxlen: 24 109.68.234.0/24 maxlen: 24 109.68.235.0/24 maxlen: 24 109.68.236.0/24 maxlen: 24 109.68.237.0/24 maxlen: 24 109.68.238.0/24 maxlen: 24 109.68.239.0/24 maxlen: 24 185.105.228.0/22 maxlen: 22 185.105.228.0/24 maxlen: 24 185.105.229.0/24 maxlen: 24 185.105.230.0/24 maxlen: 24 185.105.231.0/24 maxlen: 24 2a0b:6bc0::/32 maxlen: 32 2a0b:6bc0::/48 maxlen: 48 2a0b:6bc0:1::/48 maxlen: 48 2a0b:6bc0:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.mft rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:18:8c:a0:9e:ee:f9:af:14:dd:1c:2c:14:43:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91188ca64c4670a6eb56b42a50a10588ad9647ee Validity Not Before: Jan 2 14:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c285c6c67453492f190be9c5af94eba2a61212b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:24:7d:18:14:ba:9d:7f:81:7c:cd:e5:02:38: 59:21:85:56:3f:8b:e5:d0:97:eb:d9:fe:21:52:81: 97:7d:30:de:1b:57:32:dd:8a:82:8f:74:a4:22:98: f2:45:b7:99:dd:92:0f:58:05:64:26:df:b7:aa:bf: ef:11:cf:2b:10:37:88:71:6a:9e:1a:c7:d7:46:e1: 3f:38:48:03:70:4d:1a:2f:12:8f:c3:86:74:b9:6a: e2:2e:e5:ce:c9:7f:18:fa:66:e3:fd:e7:1e:3a:24: 3c:f8:38:a2:a7:b9:88:26:5c:6e:d2:a5:ef:95:f5: 70:9b:4e:88:81:76:31:25:3a:45:e2:b0:5a:21:c6: 82:c6:64:de:d6:1d:4f:75:72:b2:b3:12:cd:8e:1e: 50:bb:1d:1b:22:98:3f:1a:a8:3d:4b:2f:b6:5d:9f: 10:58:2a:29:fb:4f:68:ec:44:d8:a8:73:1b:70:c2: 9d:d4:9e:19:2b:5c:2b:85:cf:55:17:5f:d3:dd:de: 8a:35:e9:40:50:52:f2:e1:97:54:31:ba:6f:f7:b2: 8a:a4:fc:2b:40:47:e7:30:43:b2:92:20:c5:55:38: 22:06:b7:2a:f7:eb:8c:3d:94:c6:33:6a:22:78:6a: 57:4c:ed:e1:4c:eb:a8:7c:47:cf:a7:e5:ab:78:7a: 25:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:28:5C:6C:67:45:34:92:F1:90:BE:9C:5A:F9:4E:BA:2A:61:21:2B X509v3 Authority Key Identifier: keyid:91:18:8C:A6:4C:46:70:A6:EB:56:B4:2A:50:A1:05:88:AD:96:47:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRiMpkxGcKbrVrQqUKEFiK2WR-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/bChcbGdFNJLxkL6cWvlOuiphISs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/31d6c1-1146-4588-838d-147177b837de/1/kRiMpkxGcKbrVrQqUKEFiK2WR-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.37.0/24 109.68.232.0/21 185.105.228.0/22 IPv6: 2a0b:6bc0::/32 Signature Algorithm: sha256WithRSAEncryption 87:dc:30:2a:44:9e:60:2b:58:67:ca:e3:2a:0e:c2:3c:3a:28: d2:2a:e6:a6:c8:ba:19:e1:55:87:9a:22:ff:a9:74:e6:bc:e5: 2c:64:70:0f:03:23:b7:5a:ef:76:43:10:10:d4:32:fa:5c:3c: 0f:61:f6:f4:2e:e8:7a:72:bc:d4:af:46:a5:4b:da:63:55:48: 91:57:20:fd:91:b3:49:4a:95:a6:b7:34:a6:75:36:4d:76:4b: d1:c3:44:f7:70:25:b5:54:90:c3:8f:5a:bf:57:e0:49:71:bf: ee:b6:51:36:35:67:a5:8c:6b:13:1a:0f:3c:b7:87:8f:74:e7: b4:34:6f:0f:14:43:3a:b8:01:64:56:2d:43:ad:06:75:8f:34: 3f:e6:84:68:5b:76:4e:e5:ab:c3:2b:10:35:1d:4d:1e:18:bc: f6:2a:e8:c7:49:92:29:f9:da:e0:1d:4a:5a:c1:f1:c0:33:63: ea:6b:58:1e:d5:be:e3:00:c2:23:a5:02:40:64:e5:a9:60:47: e0:66:ea:9d:98:71:9f:98:6e:de:49:d7:91:b0:60:42:05:c1: eb:06:3c:70:be:2b:0d:92:01:3c:95:03:96:8a:aa:73:95:82: 9c:20:36:ed:09:e9:1c:51:8b:8b:ba:94:42:86:d1:a6:38:40: d8:4f:da:b9 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FBiMoJ7u+a8U3RwsFEMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxMTg4Y2E2NGM0NjcwYTZlYjU2YjQyYTUwYTEwNTg4YWQ5 NjQ3ZWUwHhcNMjYwMTAyMTQxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzI4NWM2YzY3NDUzNDkyZjE5MGJlOWM1YWY5NGViYTJhNjEyMTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyR9GBS6nX+BfM3lAjhZIYVWP4vl 0Jfr2f4hUoGXfTDeG1cy3YqCj3SkIpjyRbeZ3ZIPWAVkJt+3qr/vEc8rEDeIcWqe GsfXRuE/OEgDcE0aLxKPw4Z0uWriLuXOyX8Y+mbj/eceOiQ8+Diip7mIJlxu0qXv lfVwm06IgXYxJTpF4rBaIcaCxmTe1h1PdXKysxLNjh5Qux0bIpg/Gqg9Sy+2XZ8Q WCop+09o7ETYqHMbcMKd1J4ZK1wrhc9VF1/T3d6KNelAUFLy4ZdUMbpv97KKpPwr QEfnMEOykiDFVTgiBrcq9+uMPZTGM2oieGpXTO3hTOuofEfPp+WreHolNQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFGwoXGxnRTSS8ZC+nFr5TroqYSErMB8GA1UdIwQY MBaAFJEYjKZMRnCm61a0KlChBYitlkfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1JpTXBreEdjS2JyVnJRcVVLRUZpSzJXUi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQt MTQ3MTc3YjgzN2RlLzEvYkNoY2JHZEZOSkx4a0w2Y1d2bE91aXBoSVNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8zMWQ2YzEtMTE0Ni00NTg4LTgzOGQtMTQ3MTc3YjgzN2Rl LzEva1JpTXBreEdjS2JyVnJRcVVLRUZpSzJXUi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALVElAwQD bUToAwQCuWnkMA0EAgACMAcDBQAqC2vAMA0GCSqGSIb3DQEBCwUAA4IBAQCH3DAq RJ5gK1hnyuMqDsI8OijSKuamyLoZ4VWHmiL/qXTmvOUsZHAPAyO3Wu92QxAQ1DL6 XDwPYfb0Luh6crzUr0alS9pjVUiRVyD9kbNJSpWmtzSmdTZNdkvRw0T3cCW1VJDD j1q/V+BJcb/utlE2NWeljGsTGg88t4ePdOe0NG8PFEM6uAFkVi1DrQZ1jzQ/5oRo W3ZO5avDKxA1HU0eGLz2KujHSZIp+drgHUpawfHAM2Pqa1ge1b7jAMIjpQJAZOWp YEfgZuqdmHGfmG7eSdeRsGBCBcHrBjxwvisNkgE8lQOWiqpzlYKcIDbtCekcUYuL upRChtGmOEDYT9q5 -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:20 2026 by rpki-client