This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa File: Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa (raw, json) Hash identifier: WR8ZmHp+6ZanBZA6Ty89Up4dRZVpCdfJ23KhCqCS8TI= Subject key identifier: 06:BE:9F:AB:FD:69:D2:C3:A2:2A:52:35:0D:1C:11:FC:46:DF:5B:61 Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614 Certificate serial: 019B7A5AD60D084303004785C19B68A177A8 Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198018 IP address blocks: 185.177.129.0/24 maxlen: 24 185.177.131.0/24 maxlen: 24 194.153.186.0/24 maxlen: 24 2a0b:1300::/34 maxlen: 34 2a0b:1300:8000::/48 maxlen: 48 2a0b:1301::/34 maxlen: 34 2a0b:1301:4000::/34 maxlen: 34 2a0b:1301:8000::/48 maxlen: 48 2a0b:1301:8001::/48 maxlen: 48 2a0b:1306::/48 maxlen: 48 2a0b:1306:1::/48 maxlen: 48 2a0b:1306:2::/48 maxlen: 48 2a0b:1306:4::/48 maxlen: 48 2a0b:1306:6::/48 maxlen: 48 2a0b:1306:7::/48 maxlen: 48 2a0b:1306:8::/48 maxlen: 48 2a0b:1306:c::/48 maxlen: 48 2a0b:1306:400::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d6:0d:08:43:03:00:47:85:c1:9b:68:a1:77:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06be9fabfd69d2c3a22a52350d1c11fc46df5b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:04:17:6d:03:c7:56:8b:82:fb:c3:78:29: cb:72:46:27:19:d9:bb:20:1c:9e:70:8f:40:b5:99: 0f:d4:a2:b8:bf:a5:21:f1:e5:01:eb:f4:ec:1f:01: b7:47:1c:a3:03:a2:be:61:44:13:2d:c0:e4:34:86: 5a:87:07:bf:13:bb:8d:f4:a1:a2:45:a8:a7:c6:fe: 48:0e:62:37:90:26:55:d0:79:5e:69:29:d5:d5:4f: 7d:50:61:b6:38:3b:01:0c:68:58:23:df:7b:6b:c5: 05:c8:8c:78:72:37:3f:81:db:22:04:26:92:4b:d9: c8:b6:e0:a9:2a:dc:ed:59:67:02:02:a1:a6:65:50: a8:98:5a:9f:c0:3b:66:29:e5:e4:15:dc:9f:db:f0: 75:68:ea:80:c1:24:5a:b9:e6:0d:c8:df:f7:75:ca: 3c:fd:b7:31:f4:e9:bf:6d:a6:34:3e:79:26:39:65: 87:be:85:0c:03:fd:66:55:bd:d3:ff:b2:69:14:15: 83:8d:48:b2:73:43:56:e1:f5:9f:a2:df:08:e2:e1: c3:20:38:4e:62:73:83:7e:8f:2f:f8:c4:18:df:d1: fb:d3:de:53:88:e2:73:57:c0:5a:43:9c:9c:62:e5: a9:85:99:e3:65:ed:19:a0:aa:f5:b7:ed:b0:ed:16: 0c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BE:9F:AB:FD:69:D2:C3:A2:2A:52:35:0D:1C:11:FC:46:DF:5B:61 X509v3 Authority Key Identifier: keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.177.129.0/24 185.177.131.0/24 194.153.186.0/24 IPv6: 2a0b:1300::/34 2a0b:1300:8000::/48 2a0b:1301::-2a0b:1301:8001:ffff:ffff:ffff:ffff:ffff 2a0b:1306::-2a0b:1306:2:ffff:ffff:ffff:ffff:ffff 2a0b:1306:4::/48 2a0b:1306:6::-2a0b:1306:8:ffff:ffff:ffff:ffff:ffff 2a0b:1306:c::/48 2a0b:1306:400::/48 Signature Algorithm: sha256WithRSAEncryption 24:4c:72:4e:fa:c9:35:96:cb:a0:f5:91:ee:c2:3e:4a:69:67: b6:59:5e:fb:46:ea:02:ae:95:cc:0f:f4:b8:00:d7:67:17:c6: 1e:d5:b7:27:3b:43:a9:23:a5:d8:20:77:26:ee:43:4f:b5:aa: f7:82:ae:fc:f4:29:6f:49:f9:54:1d:77:2a:8f:5a:f0:e2:a6: 31:b1:2d:1b:6a:8d:05:6b:07:6c:34:6a:ea:2b:12:db:2c:d2: b0:ff:77:df:c3:d6:7c:a8:a5:ea:cd:c0:ef:a9:93:c9:c7:dd: 19:f6:78:7a:18:34:99:06:d2:56:93:94:12:2c:ed:21:e3:84: d1:81:79:da:cf:05:2f:56:d6:05:2e:93:dc:62:c6:e8:f3:d7: 76:f5:7d:cd:08:16:34:98:8a:c4:87:6c:9d:69:41:96:14:85: 5b:db:94:80:c4:20:11:36:fe:29:ad:f9:7e:95:66:23:0a:8c: 6a:23:a9:cc:8a:fe:17:76:58:04:5d:11:06:bf:8f:f7:0d:3a: e7:06:ea:d0:1c:9f:1d:8d:0a:f1:45:c6:e8:2a:1d:92:4c:e3: c0:5e:cb:6f:46:b8:a7:b7:0a:88:10:fa:ec:df:0c:e9:d5:bd: 39:71:52:c5:54:7f:f7:d2:7d:6e:b4:e8:7a:90:59:4c:a8:c4: 7c:42:8c:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgISAZt6WtYNCEMDAEeFwZtooXeoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez ZDg2MTQwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmJlOWZhYmZkNjlkMmMzYTIyYTUyMzUwZDFjMTFmYzQ2ZGY1YjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva4EF20Dx1aLgvvDeCnLckYnGdm7 IByecI9AtZkP1KK4v6Uh8eUB6/TsHwG3RxyjA6K+YUQTLcDkNIZahwe/E7uN9KGi Rainxv5IDmI3kCZV0HleaSnV1U99UGG2ODsBDGhYI997a8UFyIx4cjc/gdsiBCaS S9nItuCpKtztWWcCAqGmZVComFqfwDtmKeXkFdyf2/B1aOqAwSRaueYNyN/3dco8 /bcx9Om/baY0PnkmOWWHvoUMA/1mVb3T/7JpFBWDjUiyc0NW4fWfot8I4uHDIDhO YnODfo8v+MQY39H7095TiOJzV8BaQ5ycYuWphZnjZe0ZoKr1t+2w7RYMcwIDAQAB o4IChDCCAoAwHQYDVR0OBBYEFAa+n6v9adLDoipSNQ0cEfxG31thMB8GA1UdIwQY MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct YmMwZTUxMWMyMGNlLzEvQnI2ZnFfMXAwc09pS2xJMURSd1JfRWJmVzJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDctYmMwZTUxMWMyMGNl LzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGZBggrBgEFBQcBBwEB/wSBiTCBhjAYBAIAATASAwQAubGB AwQAubGDAwQAwpm6MGoEAgACMGQDBgYqCxMAAAMHACoLEwCAADAQAwUAKgsTAQMH ASoLEwGAADAQAwUBKgsTBgMHACoLEwYAAgMHACoLEwYABDASAwcBKgsTBgAGAwcA KgsTBgAIAwcAKgsTBgAMAwcAKgsTBgQAMA0GCSqGSIb3DQEBCwUAA4IBAQAkTHJO +sk1lsug9ZHuwj5KaWe2WV77RuoCrpXMD/S4ANdnF8Ye1bcnO0OpI6XYIHcm7kNP tar3gq789ClvSflUHXcqj1rw4qYxsS0bao0FawdsNGrqKxLbLNKw/3ffw9Z8qKXq zcDvqZPJx90Z9nh6GDSZBtJWk5QSLO0h44TRgXnazwUvVtYFLpPcYsbo89d29X3N CBY0mIrEh2ydaUGWFIVb25SAxCARNv4prfl+lWYjCoxqI6nMiv4XdlgEXREGv4/3 DTrnBurQHJ8djQrxRcboKh2STOPAXstvRrintwqIEPrs3wzp1b05cVLFVH/30n1u tOh6kFlMqMR8QozL -----END CERTIFICATE-----Generated at Sun Jan 25 09:40:15 2026 by rpki-client