This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/bFT_Z4_-ysHNs5WuSzbJw1AU8jo.roa File: bFT_Z4_-ysHNs5WuSzbJw1AU8jo.roa (raw, json) Hash identifier: KsQGBoDh+Ca9uE3jShzCM613jUL/H5/LE3nQG31F4hQ= Subject key identifier: 6C:54:FF:67:8F:FE:CA:C1:CD:B3:95:AE:4B:36:C9:C3:50:14:F2:3A Certificate issuer: /CN=30c409613fea0a2b442ce112e9cbdb485e01188f Certificate serial: 019B79ED2866ABC05A220281CDBB60717BE4 Authority key identifier: 30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/bFT_Z4_-ysHNs5WuSzbJw1AU8jo.roa Signing time: Thu 01 Jan 2026 14:19:04 +0000 ROA not before: Thu 01 Jan 2026 14:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209314 IP address blocks: 148.81.11.0/24 maxlen: 24 148.81.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.mft rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:28:66:ab:c0:5a:22:02:81:cd:bb:60:71:7b:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30c409613fea0a2b442ce112e9cbdb485e01188f Validity Not Before: Jan 1 14:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c54ff678ffecac1cdb395ae4b36c9c35014f23a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:50:a3:f7:6c:1d:9b:18:22:38:9e:ff:ff:7a: af:c5:2d:ff:76:2a:43:23:d6:f8:b7:66:44:f5:ea: aa:dc:b7:a9:3f:23:e1:3b:6e:0b:3b:1f:f2:2e:ba: b0:12:c6:22:85:74:3b:eb:4b:3e:27:4d:4d:ad:66: 6f:eb:94:c1:01:16:56:8a:40:13:70:9f:30:1b:77: 82:72:44:1f:03:e5:85:26:67:66:cd:f0:04:63:e1: b1:f2:83:9f:08:9e:82:70:c6:5c:62:70:80:ee:c5: b9:c4:6b:34:f8:bf:7d:0e:89:83:b6:a4:44:7d:24: f5:8c:e5:de:ab:9f:c3:4f:3f:e2:d0:89:a8:69:72: 7f:9c:9d:37:af:8d:06:e9:57:f4:34:67:66:89:7d: db:7f:73:2c:48:7c:a6:4b:48:22:04:90:c9:90:1a: a5:84:2f:f5:62:41:80:a1:0f:c7:65:e4:2a:99:3c: d0:2d:de:e1:ea:e1:20:df:d4:b2:c1:ca:b0:9a:2c: 40:83:1c:9c:7a:f9:d5:a2:15:74:a6:4a:5b:0f:c4: 93:e2:4d:ad:ca:04:f2:e6:d8:53:55:32:fb:d5:1c: 6e:16:8e:91:f3:bc:b3:ee:3f:c0:03:29:dd:c6:83: 59:9d:53:92:e3:17:97:cb:47:17:e0:b3:16:fe:09: 6e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:54:FF:67:8F:FE:CA:C1:CD:B3:95:AE:4B:36:C9:C3:50:14:F2:3A X509v3 Authority Key Identifier: keyid:30:C4:09:61:3F:EA:0A:2B:44:2C:E1:12:E9:CB:DB:48:5E:01:18:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MMQJYT_qCitELOES6cvbSF4BGI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/bFT_Z4_-ysHNs5WuSzbJw1AU8jo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b78fb5-afca-4db7-8886-c0671bf4cf3e/1/MMQJYT_qCitELOES6cvbSF4BGI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 148.81.11.0-148.81.12.255 Signature Algorithm: sha256WithRSAEncryption 33:50:d1:03:63:e6:3c:16:1f:c7:85:fd:c6:9e:f4:16:d7:96: 5e:8f:a2:62:48:43:e6:2a:dd:83:d7:de:48:5c:8a:2f:18:11: ba:b8:a9:dc:8f:9f:76:62:05:ba:d0:2a:53:a1:3c:99:af:80: 41:f4:00:85:b5:d8:b9:e2:a6:b1:ac:17:e4:65:38:1d:af:23: ea:7f:dd:53:fd:61:a5:6a:63:37:dc:e3:68:06:6d:fe:77:bd: 89:58:6a:56:93:80:69:bb:0d:95:0f:a6:c8:4c:e9:e8:41:8d: 2e:bd:97:77:b6:65:8a:72:ac:fd:aa:81:82:ee:b4:cd:99:99: 19:a7:80:49:a7:23:f3:c4:c8:e7:d7:ed:5b:6f:5b:03:29:fb: 6d:59:47:23:17:33:07:29:09:80:ec:93:50:08:00:f3:44:d8: c0:f9:9f:8f:02:cb:94:d8:76:87:13:59:66:f3:2c:5e:48:96: cd:be:c5:05:9b:ee:72:5b:9d:bf:16:4b:bd:82:dd:bd:65:b8: 28:65:86:f0:77:c8:9c:5c:30:95:86:6f:bf:76:94:6f:cc:08: 0f:91:f6:71:27:b7:6e:1a:ce:3a:a7:f3:d9:c8:d0:5f:4a:60: 49:0b:9c:1d:ca:b1:df:9b:04:ed:80:41:74:0e:98:0f:f7:80: d5:b5:26:bc -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt57Shmq8BaIgKBzbtgcXvkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYzQwOTYxM2ZlYTBhMmI0NDJjZTExMmU5Y2JkYjQ4NWUw MTE4OGYwHhcNMjYwMTAxMTQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzU0ZmY2NzhmZmVjYWMxY2RiMzk1YWU0YjM2YzljMzUwMTRmMjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Cj92wdmxgiOJ7//3qvxS3/dipD I9b4t2ZE9eqq3LepPyPhO24LOx/yLrqwEsYihXQ760s+J01NrWZv65TBARZWikAT cJ8wG3eCckQfA+WFJmdmzfAEY+Gx8oOfCJ6CcMZcYnCA7sW5xGs0+L99DomDtqRE fST1jOXeq5/DTz/i0ImoaXJ/nJ03r40G6Vf0NGdmiX3bf3MsSHymS0giBJDJkBql hC/1YkGAoQ/HZeQqmTzQLd7h6uEg39SywcqwmixAgxycevnVohV0pkpbD8ST4k2t ygTy5thTVTL71RxuFo6R87yz7j/AAyndxoNZnVOS4xeXy0cX4LMW/gluAwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFGxU/2eP/srBzbOVrks2ycNQFPI6MB8GA1UdIwQY MBaAFDDECWE/6gorRCzhEunL20heARiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYt YzA2NzFiZjRjZjNlLzEvYkZUX1o0Xy15c0hOczVXdVN6Ykp3MUFVOGpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iNzhmYjUtYWZjYS00ZGI3LTg4ODYtYzA2NzFiZjRjZjNl LzEvTU1RSllUX3FDaXRFTE9FUzZjdmJTRjRCR0k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACUUQsD BACUUQwwDQYJKoZIhvcNAQELBQADggEBADNQ0QNj5jwWH8eF/cae9BbXll6PomJI Q+Yq3YPX3khcii8YEbq4qdyPn3ZiBbrQKlOhPJmvgEH0AIW12LniprGsF+RlOB2v I+p/3VP9YaVqYzfc42gGbf53vYlYalaTgGm7DZUPpshM6ehBjS69l3e2ZYpyrP2q gYLutM2ZmRmngEmnI/PEyOfX7VtvWwMp+21ZRyMXMwcpCYDsk1AIAPNE2MD5n48C y5TYdocTWWbzLF5Ils2+xQWb7nJbnb8WS72C3b1luChlhvB3yJxcMJWGb792lG/M CA+R9nEnt24azjqn89nI0F9KYEkLnB3Ksd+bBO2AQXQOmA/3gNW1Jrw= -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:02 2026 by rpki-client