This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa File: bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa (raw, json) Hash identifier: Zz0UmtBUzv4omIdkS3mEovbafENQWuqBsJq69kjW+GU= Subject key identifier: 6D:B7:DD:B0:37:27:24:8E:E5:F1:76:13:AB:60:A3:67:B1:97:91:A7 Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda Certificate serial: 019B7AC7ADE263BC59FE5D3EDA75BA9E2306 Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa Signing time: Thu 01 Jan 2026 18:17:45 +0000 ROA not before: Thu 01 Jan 2026 18:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203329 IP address blocks: 193.193.166.0/23 maxlen: 24 2001:67c:7e4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ad:e2:63:bc:59:fe:5d:3e:da:75:ba:9e:23:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda Validity Not Before: Jan 1 18:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6db7ddb03727248ee5f17613ab60a367b19791a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:26:b3:38:c3:92:e9:03:96:03:7b:2f:52: 47:74:db:57:a9:db:11:9b:9f:d6:99:e1:c4:d8:81: 83:b2:e2:da:28:f6:56:81:fb:cb:b0:7d:b1:7b:2a: 14:68:5e:79:16:18:d6:f5:e2:f7:b9:56:0d:a0:84: 42:5f:80:50:32:63:3d:48:b8:c5:2d:f8:f4:a1:dc: 18:b4:72:ab:b6:f9:ce:0d:7c:2c:58:b9:47:cd:2b: 0b:a1:db:35:25:32:50:63:33:ad:90:85:09:bd:9e: f0:6b:fb:fc:7b:72:bb:e6:82:31:e9:d9:da:81:9b: 2d:33:a3:20:0d:00:8f:1d:7e:c2:0a:23:a4:28:db: a9:5f:09:b6:b0:7a:dd:7e:71:f7:ca:49:7b:3b:15: 37:9c:a7:fb:8d:58:41:8c:17:e7:50:69:bb:d9:2f: 91:b8:2f:45:a0:54:37:10:88:26:0f:07:1a:ac:d5: 30:1b:4e:47:df:42:02:8b:99:39:7f:41:56:74:2c: 40:5a:a0:f4:6a:55:bb:be:59:ca:d9:ac:57:2f:9b: 68:d2:5b:55:a0:47:ae:58:09:65:0b:1b:f8:10:e8: a1:05:32:00:4c:15:3e:cd:b8:a6:9b:3c:3e:14:6c: 52:51:b3:b9:af:f2:ba:83:21:24:20:94:6e:cf:72: 8e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B7:DD:B0:37:27:24:8E:E5:F1:76:13:AB:60:A3:67:B1:97:91:A7 X509v3 Authority Key Identifier: keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.193.166.0/23 IPv6: 2001:67c:7e4::/48 Signature Algorithm: sha256WithRSAEncryption 2c:07:10:65:1c:cd:f0:eb:ad:b7:10:f3:88:7e:d1:95:06:42: 3e:74:e8:30:1e:4d:5a:8c:4c:b6:3c:06:28:9b:23:74:2e:82: 6d:a9:3a:33:4d:05:44:66:b8:f6:c6:17:dd:01:10:f5:91:d6: 07:6a:82:4c:ba:9d:5e:e5:17:5d:c5:9b:00:ca:00:32:52:26: eb:e0:68:43:70:78:2e:be:d4:54:b1:fd:37:08:2e:82:99:54: 57:31:86:0e:5e:8d:88:79:a3:2c:68:82:ed:b8:b1:79:18:33: 55:40:3e:df:73:b2:7d:b6:1a:2c:57:90:ae:f2:54:25:f8:17: 15:e8:69:09:18:4c:96:17:29:28:ef:fd:a3:a3:02:39:98:56: 41:d5:bc:80:dd:d2:8a:07:f1:08:6a:96:59:d8:f3:28:c5:d9: 77:c8:d6:82:d4:a7:b9:a2:80:89:e2:ec:7a:1c:1f:b8:02:52: 78:54:7e:25:bd:65:58:2d:d9:c6:0b:b9:84:33:e9:04:30:52: 78:7d:b4:a9:66:22:f7:ba:93:6d:a7:16:34:db:01:71:5b:7e: 4e:37:77:79:97:8c:97:fe:57:3a:6c:a8:bd:b0:0a:d1:7b:db: 4a:e5:12:0e:47:8e:54:e8:07:77:8e:e8:04:23:1a:32:c3:f4: 3d:d8:9c:fb -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6x63iY7xZ/l0+2nW6niMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjJiYmNkMWMyZDhkN2FkZjc0MWQ3MDRkOWRjNjRiOWU2 MTRmZGEwHhcNMjYwMTAxMTgxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGI3ZGRiMDM3MjcyNDhlZTVmMTc2MTNhYjYwYTM2N2IxOTc5MWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqAmszjDkukDlgN7L1JHdNtXqdsR m5/WmeHE2IGDsuLaKPZWgfvLsH2xeyoUaF55FhjW9eL3uVYNoIRCX4BQMmM9SLjF Lfj0odwYtHKrtvnODXwsWLlHzSsLods1JTJQYzOtkIUJvZ7wa/v8e3K75oIx6dna gZstM6MgDQCPHX7CCiOkKNupXwm2sHrdfnH3ykl7OxU3nKf7jVhBjBfnUGm72S+R uC9FoFQ3EIgmDwcarNUwG05H30ICi5k5f0FWdCxAWqD0alW7vlnK2axXL5to0ltV oEeuWAllCxv4EOihBTIATBU+zbimmzw+FGxSUbO5r/K6gyEkIJRuz3KOFwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG233bA3JySO5fF2E6tgo2exl5GnMB8GA1UdIwQY MBaAFA/yu80cLY1633QdcE2dxkueYU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMt NmFiMDU1NjhhZGUyLzEvYmJmZHNEY25KSTdsOFhZVHEyQ2paN0dYa2FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMtNmFiMDU1NjhhZGUy LzEvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBwcGmMA8E AgACMAkDBwAgAQZ8B+QwDQYJKoZIhvcNAQELBQADggEBACwHEGUczfDrrbcQ84h+ 0ZUGQj506DAeTVqMTLY8BiibI3Qugm2pOjNNBURmuPbGF90BEPWR1gdqgky6nV7l F13FmwDKADJSJuvgaENweC6+1FSx/TcILoKZVFcxhg5ejYh5oyxogu24sXkYM1VA Pt9zsn22GixXkK7yVCX4FxXoaQkYTJYXKSjv/aOjAjmYVkHVvIDd0ooH8QhqllnY 8yjF2XfI1oLUp7migIni7HocH7gCUnhUfiW9ZVgt2cYLuYQz6QQwUnh9tKlmIve6 k22nFjTbAXFbfk43d3mXjJf+VzpsqL2wCtF720rlEg5HjlToB3eO6AQjGjLD9D3Y nPs= -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:01 2026 by rpki-client