This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/bPwyaBbJqcQN7JQtu51i9S9uIaM.roa File: bPwyaBbJqcQN7JQtu51i9S9uIaM.roa (raw, json) Hash identifier: SC7PxmBSPghpd6hjRs92LdR0jqsFurZFEwEHVN8gVC0= Subject key identifier: 6C:FC:32:68:16:C9:A9:C4:0D:EC:94:2D:BB:9D:62:F5:2F:6E:21:A3 Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee Certificate serial: 019B7C7F079B311716F1EC85CB211215ABCA Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/bPwyaBbJqcQN7JQtu51i9S9uIaM.roa Signing time: Fri 02 Jan 2026 02:17:38 +0000 ROA not before: Fri 02 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198404 IP address blocks: 185.195.176.0/24 maxlen: 24 185.195.177.0/24 maxlen: 24 185.195.178.0/24 maxlen: 24 185.195.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:07:9b:31:17:16:f1:ec:85:cb:21:12:15:ab:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee Validity Not Before: Jan 2 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cfc326816c9a9c40dec942dbb9d62f52f6e21a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c5:99:92:2f:34:b8:47:c5:a7:2b:46:5d:71: ff:3f:01:93:a0:d2:bf:21:80:ce:f4:a2:33:0e:32: 3e:30:13:29:a6:94:6c:d2:14:41:3d:73:ce:62:03: 80:df:42:53:c4:34:59:99:dd:2e:2d:3a:77:4b:41: dd:33:e3:e5:c1:a1:60:09:2d:44:1a:96:e0:96:e4: 53:fb:49:05:c4:d1:9a:e4:03:a8:90:65:ef:a4:d8: e3:98:0b:23:b5:d0:bc:2d:a7:43:46:b2:3a:a6:fa: 07:4f:02:b1:60:a3:17:ae:19:5a:55:bf:35:05:96: 21:3d:49:f6:e0:17:a9:bd:b7:fd:5d:3c:57:7a:2f: 69:5c:b2:d3:e8:4a:31:48:b7:af:40:86:3c:ec:89: 15:43:15:31:66:82:fd:e2:eb:39:ad:78:18:21:94: f7:62:65:a8:ce:25:c5:08:c9:d8:d0:78:ab:18:a1: f2:c8:d6:29:a1:8a:88:3a:88:df:7c:67:72:b0:09: b7:46:72:41:4d:35:c4:9b:3b:89:3c:a4:2e:bc:d6: 02:1e:68:e3:5f:f3:7f:ce:42:da:12:d6:6c:98:15: e4:8a:35:8c:fd:58:0b:9d:81:44:2e:07:bb:54:3c: c7:b0:99:39:6a:cd:c3:b0:fb:92:33:d1:c4:e1:0c: 85:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FC:32:68:16:C9:A9:C4:0D:EC:94:2D:BB:9D:62:F5:2F:6E:21:A3 X509v3 Authority Key Identifier: keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/bPwyaBbJqcQN7JQtu51i9S9uIaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.195.176.0/22 Signature Algorithm: sha256WithRSAEncryption 97:4b:6c:e5:f7:52:fd:b2:eb:e8:ca:a4:88:d3:48:13:8c:fc: d3:59:96:d8:96:e5:93:2d:ef:61:42:5e:13:f1:e4:ea:a5:5d: 53:ea:dd:7c:bb:56:76:e8:6d:87:47:2c:57:54:78:1f:07:25: 8b:b0:07:25:95:f0:a4:4e:db:2e:f7:d8:0d:1d:99:c6:06:d7: 20:2b:35:4d:7b:d3:b5:4c:26:2d:fd:43:1e:60:56:61:98:10: 69:68:53:2b:6b:b3:22:82:a7:34:6c:12:90:ae:75:91:87:a0: ee:04:14:04:ba:06:46:88:c4:7d:30:be:f6:1b:b8:3f:a8:ff: 77:da:4e:f0:da:50:88:7f:95:31:a4:76:ca:0c:20:6e:ab:1b: a4:b5:44:c6:1f:07:ca:19:19:ea:db:bc:c2:5d:18:54:ec:d2: 77:ae:0d:c9:97:0b:cb:f6:e4:9d:11:3b:e1:d4:86:5b:7d:73: 88:65:84:ee:01:c9:16:47:ec:7b:85:62:b1:2e:3f:d2:f5:45: 9f:a3:cf:05:50:24:48:c5:17:82:79:39:8f:ef:f7:cf:55:85: 10:11:e6:ae:fc:af:0d:c8:62:59:73:76:e4:31:42:ae:0b:4b: d7:95:e1:8b:3d:8f:6c:5c:5f:79:7c:61:1e:bd:33:fb:9a:e7: 6d:40:8f:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fwebMRcW8eyFyyESFavKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiZWNlZjk0M2QzNGM4MGUwYTBmZDgxNDI2ZTYxMzZiMzE1 MDhmZWUwHhcNMjYwMTAyMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2ZjMzI2ODE2YzlhOWM0MGRlYzk0MmRiYjlkNjJmNTJmNmUyMWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8WZki80uEfFpytGXXH/PwGToNK/ IYDO9KIzDjI+MBMpppRs0hRBPXPOYgOA30JTxDRZmd0uLTp3S0HdM+PlwaFgCS1E GpbgluRT+0kFxNGa5AOokGXvpNjjmAsjtdC8LadDRrI6pvoHTwKxYKMXrhlaVb81 BZYhPUn24Bepvbf9XTxXei9pXLLT6EoxSLevQIY87IkVQxUxZoL94us5rXgYIZT3 YmWoziXFCMnY0HirGKHyyNYpoYqIOojffGdysAm3RnJBTTXEmzuJPKQuvNYCHmjj X/N/zkLaEtZsmBXkijWM/VgLnYFELge7VDzHsJk5as3DsPuSM9HE4QyFzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGz8MmgWyanEDeyULbudYvUvbiGjMB8GA1UdIwQY MBaAFCvs75Q9NMgOCg/YFCbmE2sxUI/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEt NDQ5MTI0YWNlMDI2LzEvYlB3eWFCYkpxY1FON0pRdHU1MWk5Uzl1SWFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lZmJhOTMtMjk3My00MjEzLWI2ZjEtNDQ5MTI0YWNlMDI2 LzEvSy16dmxEMDB5QTRLRDlnVUp1WVRhekZRai00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucOwMA0G CSqGSIb3DQEBCwUAA4IBAQCXS2zl91L9suvoyqSI00gTjPzTWZbYluWTLe9hQl4T 8eTqpV1T6t18u1Z26G2HRyxXVHgfByWLsAcllfCkTtsu99gNHZnGBtcgKzVNe9O1 TCYt/UMeYFZhmBBpaFMra7Migqc0bBKQrnWRh6DuBBQEugZGiMR9ML72G7g/qP93 2k7w2lCIf5UxpHbKDCBuqxuktUTGHwfKGRnq27zCXRhU7NJ3rg3JlwvL9uSdETvh 1IZbfXOIZYTuAckWR+x7hWKxLj/S9UWfo88FUCRIxReCeTmP7/fPVYUQEeau/K8N yGJZc3bkMUKuC0vXleGLPY9sXF95fGEevTP7mudtQI9N -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:21 2026 by rpki-client