This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bFdqy8_0arKOFkhCfMXN1QG0Bo8.roa File: bFdqy8_0arKOFkhCfMXN1QG0Bo8.roa (raw, json) Hash identifier: XayCPvX81X1gkjXhlsJDBHBPR2Ee8YcomS/iEgqB34w= Subject key identifier: 6C:57:6A:CB:CF:F4:6A:B2:8E:16:48:42:7C:C5:CD:D5:01:B4:06:8F Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B7B36D9377F1784BA7A7C5CBBFB84E452 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bFdqy8_0arKOFkhCfMXN1QG0Bo8.roa Signing time: Thu 01 Jan 2026 20:19:10 +0000 ROA not before: Thu 01 Jan 2026 20:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 213.145.71.0/24 maxlen: 24 213.145.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 23:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d9:37:7f:17:84:ba:7a:7c:5c:bb:fb:84:e4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c576acbcff46ab28e1648427cc5cdd501b4068f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9b:ec:98:c8:bd:dc:87:27:49:03:ee:db:18: 0d:40:73:ea:39:a3:ef:ea:4e:dc:6a:97:ed:af:2d: 57:eb:0c:c5:fe:25:fe:7a:c5:5a:4d:08:1d:7c:1d: d7:69:4c:d2:92:23:80:82:1c:e6:a7:a2:37:2f:8a: 4d:94:5a:33:6c:bd:63:f5:88:95:01:59:be:35:f4: 98:70:df:53:d3:df:db:6d:c6:29:fb:43:43:48:3f: c5:71:4d:69:66:df:28:b3:20:ca:91:4e:3a:92:9d: 65:e9:b1:cd:f2:13:bb:f0:01:4c:8c:54:69:3a:28: b1:56:a7:1f:a7:e2:f3:f3:58:a7:dd:b7:c5:b8:bb: c6:40:0e:3f:38:dc:62:e9:04:be:45:2c:8a:8d:dd: 78:6d:e1:23:a8:e4:f6:9c:1d:81:e4:16:b1:9d:38: d6:55:95:99:23:03:f3:5f:09:f3:ef:c8:39:42:7c: e6:25:40:66:28:e1:d6:bf:75:37:5e:50:16:71:56: f1:5f:42:b8:81:73:e2:82:7a:78:07:fa:78:43:4e: f8:93:52:c5:8f:f9:68:53:cb:58:4d:1e:1a:4e:aa: 38:50:8e:9a:be:62:de:5d:55:30:d2:e4:06:8d:d8: f5:ca:ae:39:fb:a5:5c:91:b1:d1:2b:20:46:8f:04: 2f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:57:6A:CB:CF:F4:6A:B2:8E:16:48:42:7C:C5:CD:D5:01:B4:06:8F X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/bFdqy8_0arKOFkhCfMXN1QG0Bo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.71.0/24 213.145.74.0/24 Signature Algorithm: sha256WithRSAEncryption 82:a1:f9:2a:9d:7b:d9:b4:65:9d:6d:5e:99:a2:e0:43:fe:cd: 6d:5d:09:71:f4:42:7c:75:ab:ee:21:30:12:3a:33:c7:db:9c: ee:dc:3b:28:f6:78:2d:c0:d7:9b:a9:39:eb:ea:00:17:7f:9a: 32:12:f4:de:10:e2:cf:ab:0e:fa:bc:02:cd:f4:c5:e4:71:2e: 97:a6:d8:f1:67:83:8a:13:28:2d:05:a1:aa:76:41:83:c1:b1: d7:8a:1a:de:d2:ff:dd:29:85:73:ad:b5:67:d1:1e:d2:f7:e5: bb:d3:5c:c1:35:fd:55:de:4e:c8:d1:d7:44:80:d6:84:eb:80: 79:bf:28:b7:59:4d:e6:67:99:53:36:c0:f9:75:4b:dd:de:12: 3d:bc:5b:26:87:64:41:e7:a2:9b:f1:3a:51:09:91:a1:70:8d: b8:fa:d3:2c:12:18:fd:a4:49:39:c6:06:07:95:44:ba:60:5f: 53:43:2b:95:f1:73:30:7f:47:54:7e:8a:0c:1a:39:ce:eb:26: af:96:7c:9f:16:e7:8c:c9:39:5a:eb:a8:67:2a:4d:40:6c:d9: 73:e1:73:54:18:29:9f:fb:76:cc:cd:dc:cd:ab:68:a6:65:9a: 5a:17:54:0e:53:e7:00:66:c4:d4:16:f3:ad:86:14:57:d0:b4: e5:90:00:e0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Ntk3fxeEunp8XLv7hORSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzU3NmFjYmNmZjQ2YWIyOGUxNjQ4NDI3Y2M1Y2RkNTAxYjQwNjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpvsmMi93IcnSQPu2xgNQHPqOaPv 6k7capftry1X6wzF/iX+esVaTQgdfB3XaUzSkiOAghzmp6I3L4pNlFozbL1j9YiV AVm+NfSYcN9T09/bbcYp+0NDSD/FcU1pZt8osyDKkU46kp1l6bHN8hO78AFMjFRp OiixVqcfp+Lz81in3bfFuLvGQA4/ONxi6QS+RSyKjd14beEjqOT2nB2B5BaxnTjW VZWZIwPzXwnz78g5QnzmJUBmKOHWv3U3XlAWcVbxX0K4gXPignp4B/p4Q074k1LF j/loU8tYTR4aTqo4UI6avmLeXVUw0uQGjdj1yq45+6VckbHRKyBGjwQvpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGxXasvP9GqyjhZIQnzFzdUBtAaPMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvYkZkcXk4XzBhcktPRmtoQ2ZNWE4xUUcwQm84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1ZFHAwQA 1ZFKMA0GCSqGSIb3DQEBCwUAA4IBAQCCofkqnXvZtGWdbV6ZouBD/s1tXQlx9EJ8 davuITASOjPH25zu3Dso9ngtwNebqTnr6gAXf5oyEvTeEOLPqw76vALN9MXkcS6X ptjxZ4OKEygtBaGqdkGDwbHXihre0v/dKYVzrbVn0R7S9+W701zBNf1V3k7I0ddE gNaE64B5vyi3WU3mZ5lTNsD5dUvd3hI9vFsmh2RB56Kb8TpRCZGhcI24+tMsEhj9 pEk5xgYHlUS6YF9TQyuV8XMwf0dUfooMGjnO6yavlnyfFueMyTla66hnKk1AbNlz 4XNUGCmf+3bMzdzNq2imZZpaF1QOU+cAZsTUFvOthhRX0LTlkADg -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:42 2026 by rpki-client