This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/BCsvI1mqtMkrqM1Desz65UxbMeU.roa File: BCsvI1mqtMkrqM1Desz65UxbMeU.roa (raw, json) Hash identifier: oNMs5i3Xy1K3iMANMRawDJNBdjBrE5KXc5y/my453cw= Subject key identifier: 04:2B:2F:23:59:AA:B4:C9:2B:A8:CD:43:7A:CC:FA:E5:4C:5B:31:E5 Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Certificate serial: 019B79EBB835D0ACABAF58D4737451519C36 Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/BCsvI1mqtMkrqM1Desz65UxbMeU.roa Signing time: Thu 01 Jan 2026 14:17:29 +0000 ROA not before: Thu 01 Jan 2026 14:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56465 IP address blocks: 31.128.172.0/24 maxlen: 24 31.128.174.0/23 maxlen: 24 31.128.182.0/24 maxlen: 24 94.124.162.0/24 maxlen: 24 94.124.163.0/24 maxlen: 24 94.124.165.0/24 maxlen: 24 94.124.167.0/24 maxlen: 24 195.140.224.0/24 maxlen: 24 195.140.225.0/24 maxlen: 24 195.140.226.0/24 maxlen: 24 195.140.227.0/24 maxlen: 24 2a0c:29c1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:b8:35:d0:ac:ab:af:58:d4:73:74:51:51:9c:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Validity Not Before: Jan 1 14:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=042b2f2359aab4c92ba8cd437accfae54c5b31e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9b:b6:88:b2:00:10:73:64:1f:d5:dc:45:0a: bf:6c:40:f6:82:df:e3:3d:ab:bc:c1:ca:85:6b:f3: 6f:83:a3:65:0b:5c:e2:cf:76:f4:42:4c:81:ca:d2: ca:02:9f:81:74:aa:ca:9e:99:49:21:2a:68:26:71: 14:0b:9d:de:b5:7c:5f:49:af:1f:0e:eb:43:bb:70: 2f:b3:33:dd:b9:e6:bc:c5:4b:5a:60:a9:c1:eb:15: d9:c9:07:cb:f8:44:08:83:5a:5d:1c:c4:72:af:a3: 36:9b:9d:d4:4e:d5:28:cf:a4:8b:c0:a3:32:21:35: ff:b0:a1:9f:d0:df:67:c3:2c:cf:5b:6f:97:3e:2a: c5:fe:b9:a7:78:6d:25:3e:96:31:f2:43:cc:8d:aa: 29:84:6c:57:55:87:5d:bf:c3:a6:24:fe:29:6e:74: 6a:23:f9:09:cc:7e:aa:11:01:38:8b:43:cc:44:fd: d3:50:a0:0f:78:58:17:bf:02:ed:35:8d:dc:5a:fe: 82:35:d9:fe:64:ea:73:a1:ee:14:b9:20:11:a2:a4: 5a:2b:bd:88:8f:b5:f2:ce:05:87:0f:96:73:6e:4b: 66:15:ab:34:77:0c:54:9a:55:26:9d:d7:e6:25:71: 20:56:69:57:8d:73:3b:a8:94:3f:e8:c8:c1:bd:68: de:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2B:2F:23:59:AA:B4:C9:2B:A8:CD:43:7A:CC:FA:E5:4C:5B:31:E5 X509v3 Authority Key Identifier: keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/BCsvI1mqtMkrqM1Desz65UxbMeU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.128.172.0/24 31.128.174.0/23 31.128.182.0/24 94.124.162.0/23 94.124.165.0/24 94.124.167.0/24 195.140.224.0/22 IPv6: 2a0c:29c1::/32 Signature Algorithm: sha256WithRSAEncryption 92:24:eb:55:fe:21:50:5e:19:e3:81:5e:5b:bf:cf:18:b1:53: 43:66:96:74:d0:1e:38:4d:b9:b7:3e:e9:f0:95:1f:fc:9d:ce: 3b:53:38:b2:60:51:41:6f:f5:9e:34:c7:15:0c:44:e0:0d:e8: 9d:e7:30:aa:69:7c:13:16:29:40:6d:1a:c0:07:72:e2:9f:ce: eb:e7:8f:47:f7:ff:d9:9e:e3:17:13:00:f2:10:47:d2:7c:75: 56:f7:c1:a6:78:45:1b:37:89:e0:ea:92:2f:be:64:69:3b:59: c4:5f:b6:49:6b:00:07:ea:d5:4a:45:c2:8c:29:bd:3d:cb:ac: 87:5b:62:cf:28:b7:8b:72:e4:1c:f2:bc:e1:1c:d7:65:2f:93: c6:66:73:a2:16:02:96:e1:4e:ef:dd:ab:a1:31:7c:e7:64:37: d6:20:b6:db:65:9b:f2:cc:d9:1d:32:ab:b8:68:cb:fe:c8:38: 5d:ba:02:8f:82:b8:a7:2b:db:a7:d3:97:b8:81:ca:0a:07:ad: d2:39:3d:91:0c:fe:f8:6d:17:d2:e8:5a:bd:2d:c5:58:68:30: e1:18:71:33:52:9f:b3:1f:ac:f9:b2:b8:97:76:c4:64:ab:01: f8:3e:a4:ef:a2:2a:cf:07:54:7f:55:01:0b:a2:a4:0e:00:84: 62:ce:a0:95 -----BEGIN CERTIFICATE----- MIIFMDCCBBigAwIBAgISAZt567g10Kyrr1jUc3RRUZw2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl MTI5ODcwHhcNMjYwMTAxMTQxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDJiMmYyMzU5YWFiNGM5MmJhOGNkNDM3YWNjZmFlNTRjNWIzMWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpu2iLIAEHNkH9XcRQq/bED2gt/j Pau8wcqFa/Nvg6NlC1ziz3b0QkyBytLKAp+BdKrKnplJISpoJnEUC53etXxfSa8f DutDu3AvszPduea8xUtaYKnB6xXZyQfL+EQIg1pdHMRyr6M2m53UTtUoz6SLwKMy ITX/sKGf0N9nwyzPW2+XPirF/rmneG0lPpYx8kPMjaophGxXVYddv8OmJP4pbnRq I/kJzH6qEQE4i0PMRP3TUKAPeFgXvwLtNY3cWv6CNdn+ZOpzoe4UuSARoqRaK72I j7XyzgWHD5ZzbktmFas0dwxUmlUmndfmJXEgVmlXjXM7qJQ/6MjBvWjeUQIDAQAB o4ICPDCCAjgwHQYDVR0OBBYEFAQrLyNZqrTJK6jNQ3rM+uVMWzHlMB8GA1UdIwQY MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt NDYzMjJlMDJmMDhkLzEvQkNzdkkxbXF0TWtycU0xRGVzejY1VXhiTWVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTAwBAIAATAqAwQAH4CsAwQB H4CuAwQAH4C2AwQBXnyiAwQAXnylAwQAXnynAwQCw4zgMA0EAgACMAcDBQAqDCnB MA0GCSqGSIb3DQEBCwUAA4IBAQCSJOtV/iFQXhnjgV5bv88YsVNDZpZ00B44Tbm3 PunwlR/8nc47UziyYFFBb/WeNMcVDETgDeid5zCqaXwTFilAbRrAB3Lin87r549H 9//ZnuMXEwDyEEfSfHVW98GmeEUbN4ng6pIvvmRpO1nEX7ZJawAH6tVKRcKMKb09 y6yHW2LPKLeLcuQc8rzhHNdlL5PGZnOiFgKW4U7v3auhMXznZDfWILbbZZvyzNkd Mqu4aMv+yDhdugKPgrinK9un05e4gcoKB63SOT2RDP74bRfS6Fq9LcVYaDDhGHEz Up+zH6z5sriXdsRkqwH4PqTvoirPB1R/VQELoqQOAIRizqCV -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:40 2026 by rpki-client