This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/brf91ENcAgUp0obWF-s4t0ccdXg.roa File: brf91ENcAgUp0obWF-s4t0ccdXg.roa (raw, json) Hash identifier: L3X4nsh8efFRGAeVZaXiM6ZqsZGp3bsgy9UCI0jKigw= Subject key identifier: 6E:B7:FD:D4:43:5C:02:05:29:D2:86:D6:17:EB:38:B7:47:1C:75:78 Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e Certificate serial: 019B7AC88148D232F3298E0171B4454B3B7F Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/brf91ENcAgUp0obWF-s4t0ccdXg.roa Signing time: Thu 01 Jan 2026 18:18:39 +0000 ROA not before: Thu 01 Jan 2026 18:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29156 IP address blocks: 147.29.0.0/17 maxlen: 17 147.29.128.0/20 maxlen: 20 147.29.144.0/22 maxlen: 22 147.29.148.0/23 maxlen: 23 147.29.152.0/21 maxlen: 21 147.29.160.0/19 maxlen: 19 147.29.192.0/18 maxlen: 18 152.95.0.0/16 maxlen: 16 2a01:5440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:81:48:d2:32:f3:29:8e:01:71:b4:45:4b:3b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e Validity Not Before: Jan 1 18:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6eb7fdd4435c020529d286d617eb38b7471c7578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9d:2e:ef:e4:9c:8a:50:ad:39:e4:11:5f:06: 0d:9d:b6:67:40:73:3c:4e:55:47:00:c4:8f:b4:3d: f8:d1:63:17:48:68:57:43:5c:94:b8:af:a4:e9:01: a3:c0:3c:f8:06:d4:5d:92:83:30:2f:f9:12:96:f8: 3c:55:98:e7:8f:0e:44:32:66:cb:63:f8:05:44:40: 66:23:b1:cb:84:8c:71:af:e4:ee:ad:8e:74:ad:61: 51:1e:1c:a7:0c:01:49:c4:9d:6a:3c:4b:c6:6b:c1: fa:ed:63:18:41:11:26:ec:7d:0a:58:ae:3c:94:29: c9:7c:5d:5e:c7:bb:a3:de:9b:22:f1:51:d2:a4:2b: 76:35:46:e3:33:4e:23:1a:5f:88:ff:07:c6:1c:30: 81:67:75:35:ef:de:ca:31:88:4a:3b:eb:6e:65:b9: dc:3b:ba:3e:93:6f:7d:d4:93:06:46:0a:20:c6:45: 0d:28:c2:bf:a2:e5:0d:d8:c2:ff:11:af:d2:09:ee: d1:d5:66:0d:85:3e:7f:5b:d7:ed:c5:3c:2f:fa:75: fd:8e:99:38:08:ff:c8:8b:19:67:a3:04:fa:53:a9: 92:63:f8:14:2e:25:05:4b:fe:ed:2d:21:10:53:e6: 15:59:21:43:58:f6:67:d7:44:7b:ca:a0:73:20:77: 58:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B7:FD:D4:43:5C:02:05:29:D2:86:D6:17:EB:38:B7:47:1C:75:78 X509v3 Authority Key Identifier: keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/brf91ENcAgUp0obWF-s4t0ccdXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.29.0.0-147.29.149.255 147.29.152.0-147.29.255.255 152.95.0.0/16 IPv6: 2a01:5440::/32 Signature Algorithm: sha256WithRSAEncryption ac:23:b4:23:c5:ff:24:40:22:82:5f:44:57:e3:15:4e:60:1e: f4:2f:00:64:22:47:1a:59:21:36:41:0a:cc:45:19:1c:54:91: 95:d4:d1:03:fe:aa:02:2a:f1:a9:d7:5e:a9:bb:5d:89:81:18: 87:9a:3d:51:64:cf:3e:04:32:80:fc:a2:30:83:24:31:2d:96: 47:be:61:5f:46:0e:70:67:21:b6:5e:b7:f6:1b:38:f6:8f:1a: 62:e7:a4:30:cf:eb:b6:f3:c6:2a:b7:48:b5:85:5b:15:dc:b1: cc:b8:db:90:2f:9e:35:2f:e8:3d:fd:f9:d9:7f:0b:c5:6e:6e: 3a:0b:03:ec:5c:f6:b2:e5:40:3d:b4:f3:c8:17:02:18:d0:0c: 17:c9:f6:f0:91:b4:b9:f2:43:72:ac:3b:85:11:3d:30:36:28: 1b:5c:c4:9e:2d:5c:27:47:05:d4:e8:b2:21:2b:59:5f:fd:9d: 86:e1:99:a1:60:81:b5:2b:58:71:ee:8f:26:6d:8b:7c:90:32: bd:a7:45:be:bb:83:c9:45:01:22:55:04:ad:0e:a1:53:12:7e: 8e:8b:e6:69:71:4f:b8:d8:0e:10:68:55:50:c9:8b:8a:05:1d: 3b:e5:87:34:dd:f5:11:c8:f1:05:d1:d6:11:33:cb:09:59:39: ea:0f:88:a4 -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt6yIFI0jLzKY4BcbRFSzt/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MmQ3Y2FjMWZmYjJjM2ZiZGUyODQ2MjViZjFhZjRjNmJh ZTZiMGUwHhcNMjYwMTAxMTgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWI3ZmRkNDQzNWMwMjA1MjlkMjg2ZDYxN2ViMzhiNzQ3MWM3NTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ0u7+ScilCtOeQRXwYNnbZnQHM8 TlVHAMSPtD340WMXSGhXQ1yUuK+k6QGjwDz4BtRdkoMwL/kSlvg8VZjnjw5EMmbL Y/gFREBmI7HLhIxxr+TurY50rWFRHhynDAFJxJ1qPEvGa8H67WMYQREm7H0KWK48 lCnJfF1ex7uj3psi8VHSpCt2NUbjM04jGl+I/wfGHDCBZ3U1797KMYhKO+tuZbnc O7o+k2991JMGRgogxkUNKMK/ouUN2ML/Ea/SCe7R1WYNhT5/W9ftxTwv+nX9jpk4 CP/IixlnowT6U6mSY/gULiUFS/7tLSEQU+YVWSFDWPZn10R7yqBzIHdYYwIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFG63/dRDXAIFKdKG1hfrOLdHHHV4MB8GA1UdIwQY MBaAFMYtfKwf+yw/veKEYlvxr0xrrmsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Y2Q1ZmMtNjBjYy00NWRlLWJkOGEt MTU0NGI0NGQ1OWNhLzEvYnJmOTFFTmNBZ1VwMG9iV0YtczR0MGNjZFhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi82Y2Q1ZmMtNjBjYy00NWRlLWJkOGEtMTU0NGI0NGQ1OWNh LzEveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAlBAIAATAfMAsDAwCTHQME AZMdlDALAwQDkx2YAwMBkxwDAwCYXzANBAIAAjAHAwUAKgFUQDANBgkqhkiG9w0B AQsFAAOCAQEArCO0I8X/JEAigl9EV+MVTmAe9C8AZCJHGlkhNkEKzEUZHFSRldTR A/6qAirxqddeqbtdiYEYh5o9UWTPPgQygPyiMIMkMS2WR75hX0YOcGchtl639hs4 9o8aYuekMM/rtvPGKrdItYVbFdyxzLjbkC+eNS/oPf352X8LxW5uOgsD7Fz2suVA PbTzyBcCGNAMF8n28JG0ufJDcqw7hRE9MDYoG1zEni1cJ0cF1OiyIStZX/2dhuGZ oWCBtStYce6PJm2LfJAyvadFvruDyUUBIlUErQ6hUxJ+jovmaXFPuNgOEGhVUMmL igUdO+WHNN31EcjxBdHWETPLCVk56g+IpA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:10:01 2026 by rpki-client