This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/BcaKc_qpZcw6gUkkrXQbt6m-3Nw.roa File: BcaKc_qpZcw6gUkkrXQbt6m-3Nw.roa (raw, json) Hash identifier: FCBImm07RTNhqFegiiS82dUG+xaTXFVxce08GQ6qTS0= Subject key identifier: 05:C6:8A:73:FA:A9:65:CC:3A:81:49:24:AD:74:1B:B7:A9:BE:DC:DC Certificate issuer: /CN=8e626c909eb4951154bcee8221e43951b4257624 Certificate serial: 019B7F1563D5F9AC38E26C6FCD9FE1080568 Authority key identifier: 8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/BcaKc_qpZcw6gUkkrXQbt6m-3Nw.roa Signing time: Fri 02 Jan 2026 14:21:06 +0000 ROA not before: Fri 02 Jan 2026 14:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 5.10.192.0/24 maxlen: 24 31.41.255.0/24 maxlen: 24 31.134.200.0/21 maxlen: 21 46.244.0.0/21 maxlen: 24 46.244.8.0/22 maxlen: 24 46.244.12.0/23 maxlen: 24 46.244.14.0/23 maxlen: 24 46.244.16.0/23 maxlen: 24 46.244.20.0/24 maxlen: 24 46.244.21.0/24 maxlen: 24 46.244.22.0/24 maxlen: 24 46.244.23.0/24 maxlen: 24 46.244.24.0/22 maxlen: 24 46.244.28.0/24 maxlen: 24 46.244.29.0/24 maxlen: 24 46.244.30.0/24 maxlen: 24 46.244.31.0/24 maxlen: 24 46.244.100.0/22 maxlen: 24 46.244.104.0/22 maxlen: 24 46.244.112.0/23 maxlen: 24 46.244.120.0/23 maxlen: 24 46.244.122.0/23 maxlen: 24 46.244.124.0/23 maxlen: 24 46.244.126.0/24 maxlen: 24 46.244.127.0/24 maxlen: 24 62.3.55.0/24 maxlen: 24 146.19.97.0/24 maxlen: 24 178.249.152.0/21 maxlen: 21 185.51.52.0/23 maxlen: 23 185.205.52.0/22 maxlen: 22 212.24.126.0/24 maxlen: 24 2a02:1668::/32 maxlen: 32 2a02:166a::/32 maxlen: 32 2a02:166b::/32 maxlen: 32 2a05:2900::/29 maxlen: 29 2a06:2600::/29 maxlen: 32 2a06:2600::/32 maxlen: 32 2a06:2602::/32 maxlen: 32 2a0a:e80::/29 maxlen: 29 2a0b:1c0::/29 maxlen: 29 2a0f:ba00::/29 maxlen: 29 2a13:800::/29 maxlen: 29 2a13:2c00::/29 maxlen: 29 2a13:3400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:63:d5:f9:ac:38:e2:6c:6f:cd:9f:e1:08:05:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e626c909eb4951154bcee8221e43951b4257624 Validity Not Before: Jan 2 14:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05c68a73faa965cc3a814924ad741bb7a9bedcdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:c2:9e:52:d7:a3:ef:9b:c6:4c:2e:e5:80: 03:78:88:d8:52:3e:de:35:f7:74:3c:35:1b:89:23: 78:ab:05:48:c3:b6:02:7c:3f:19:f4:b5:ce:45:9c: 21:8f:19:8e:44:76:81:3e:4f:70:d2:d4:3a:cf:d1: 36:f2:1b:07:db:71:15:e3:41:62:0f:84:66:dd:50: 33:f3:6d:c2:3c:95:32:ec:d3:a6:2b:83:7e:ec:8c: e6:ff:c5:9d:c6:09:a9:ce:38:de:5f:f1:74:9c:c6: 13:9a:47:ab:30:4a:83:8b:44:81:1e:5b:c2:90:bb: c6:ef:10:fe:36:c9:ea:63:3e:72:f8:e6:c6:70:41: 57:3a:6e:a6:4a:dd:de:f9:b1:d0:f2:9a:9b:42:33: 71:71:fe:29:06:01:ef:e3:47:a9:d4:60:ed:6c:a8: dd:57:f1:b8:1e:50:a6:15:07:43:bb:fd:9d:1a:bc: e8:c9:f8:70:7e:e6:a4:28:f0:c8:af:83:2a:97:4b: b4:13:d5:25:ed:aa:a3:9a:9e:ce:84:2f:44:2b:e0: 63:02:d8:b0:48:40:b6:ef:32:2c:ed:4a:31:7f:cf: 4a:51:29:2c:b5:13:89:b9:f5:c2:06:9e:a0:fc:d9: c4:76:65:7b:44:87:2d:a4:d2:c8:63:30:61:63:d6: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C6:8A:73:FA:A9:65:CC:3A:81:49:24:AD:74:1B:B7:A9:BE:DC:DC X509v3 Authority Key Identifier: keyid:8E:62:6C:90:9E:B4:95:11:54:BC:EE:82:21:E4:39:51:B4:25:76:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmJskJ60lRFUvO6CIeQ5UbQldiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/BcaKc_qpZcw6gUkkrXQbt6m-3Nw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fe4266-7f54-4fb3-b810-e97d1d0220af/1/jmJskJ60lRFUvO6CIeQ5UbQldiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.10.192.0/24 31.41.255.0/24 31.134.200.0/21 46.244.0.0-46.244.17.255 46.244.20.0-46.244.31.255 46.244.100.0-46.244.107.255 46.244.112.0/23 46.244.120.0/21 62.3.55.0/24 146.19.97.0/24 178.249.152.0/21 185.51.52.0/23 185.205.52.0/22 212.24.126.0/24 IPv6: 2a02:1668::/32 2a02:166a::/31 2a05:2900::/29 2a06:2600::/29 2a0a:e80::/29 2a0b:1c0::/29 2a0f:ba00::/29 2a13:800::/29 2a13:2c00::/29 2a13:3400::/29 Signature Algorithm: sha256WithRSAEncryption 7a:ae:77:35:16:3e:b3:4a:8c:a5:66:5d:52:7b:f2:f9:cd:8a: 27:2c:9e:89:d2:39:d7:a5:e8:48:82:97:ed:75:ee:01:29:fc: f1:5d:a3:23:f0:09:a2:3e:86:22:05:3e:82:f9:dd:b6:4c:d7: 8c:92:96:5c:da:78:5f:ea:99:17:d0:ae:c3:8c:b3:22:3b:d3: d4:63:57:2e:0a:ae:9f:ad:25:11:88:bf:5e:35:89:0d:5c:b2: 9c:09:1b:9c:52:4f:bc:0d:35:7c:4c:a2:ce:30:47:a2:3f:98: c0:d8:0f:13:27:95:c7:cb:f6:7e:a3:fc:0d:5f:fc:73:d7:00: 99:3f:f4:5e:10:4d:81:f0:75:9c:54:80:3f:79:ce:d0:42:56: 92:d7:39:71:ae:5b:be:d7:38:d9:10:58:61:4a:08:30:08:23: 1c:75:f3:1b:fd:5e:8a:d5:84:51:64:0c:fb:bb:d4:1e:20:9e: 5a:c1:1c:a1:72:ec:cc:ff:2a:7d:f9:3b:b3:9e:2c:05:f2:7c: c9:a0:f2:d8:b3:6f:dc:3e:92:25:90:d6:55:c9:9c:2d:dc:e7: 80:71:b9:be:c8:79:3b:79:8e:d3:28:f9:32:df:d1:ac:90:cd: f1:dc:94:9c:d4:d4:02:82:c7:9e:76:83:e9:c3:1b:aa:6e:53: 51:ab:9e:aa -----BEGIN CERTIFICATE----- MIIFszCCBJugAwIBAgISAZt/FWPV+aw44mxvzZ/hCAVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlNjI2YzkwOWViNDk1MTE1NGJjZWU4MjIxZTQzOTUxYjQy NTc2MjQwHhcNMjYwMTAyMTQyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWM2OGE3M2ZhYTk2NWNjM2E4MTQ5MjRhZDc0MWJiN2E5YmVkY2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQjCnlLXo++bxkwu5YADeIjYUj7e Nfd0PDUbiSN4qwVIw7YCfD8Z9LXORZwhjxmORHaBPk9w0tQ6z9E28hsH23EV40Fi D4Rm3VAz823CPJUy7NOmK4N+7Izm/8WdxgmpzjjeX/F0nMYTmkerMEqDi0SBHlvC kLvG7xD+NsnqYz5y+ObGcEFXOm6mSt3e+bHQ8pqbQjNxcf4pBgHv40ep1GDtbKjd V/G4HlCmFQdDu/2dGrzoyfhwfuakKPDIr4Mql0u0E9Ul7aqjmp7OhC9EK+BjAtiw SEC27zIs7Uoxf89KUSkstROJufXCBp6g/NnEdmV7RIctpNLIYzBhY9bJjQIDAQAB o4ICvzCCArswHQYDVR0OBBYEFAXGinP6qWXMOoFJJK10G7epvtzcMB8GA1UdIwQY MBaAFI5ibJCetJURVLzugiHkOVG0JXYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAt ZTk3ZDFkMDIyMGFmLzEvQmNhS2NfcXBaY3c2Z1Vra3JYUWJ0Nm0tM053LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZTQyNjYtN2Y1NC00ZmIzLWI4MTAtZTk3ZDFkMDIyMGFm LzEvam1Kc2tKNjBsUkZVdk82Q0llUTVVYlFsZGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHUBggrBgEFBQcBBwEB/wSBxDCBwTBxBAIAATBrAwQABQrA AwQAHyn/AwQDH4bIMAsDAwIu9AMEAS70EDAMAwQCLvQUAwQFLvQAMAwDBAIu9GQD BAIu9GgDBAEu9HADBAMu9HgDBAA+AzcDBACSE2EDBAOy+ZgDBAG5MzQDBAK5zTQD BADUGH4wTAQCAAIwRgMFACoCFmgDBQEqAhZqAwUDKgUpAAMFAyoGJgADBQMqCg6A AwUDKgsBwAMFAyoPugADBQMqEwgAAwUDKhMsAAMFAyoTNAAwDQYJKoZIhvcNAQEL BQADggEBAHqudzUWPrNKjKVmXVJ78vnNiicsnonSOdel6EiCl+117gEp/PFdoyPw CaI+hiIFPoL53bZM14ySllzaeF/qmRfQrsOMsyI709RjVy4Krp+tJRGIv141iQ1c spwJG5xST7wNNXxMos4wR6I/mMDYDxMnlcfL9n6j/A1f/HPXAJk/9F4QTYHwdZxU gD95ztBCVpLXOXGuW77XONkQWGFKCDAIIxx18xv9XorVhFFkDPu71B4gnlrBHKFy 7Mz/Kn35O7OeLAXyfMmg8tizb9w+kiWQ1lXJnC3c54Bxub7IeTt5jtMo+TLf0ayQ zfHclJzU1AKCx552g+nDG6puU1Grnqo= -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:30 2026 by rpki-client