This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/b_FQIowpO51jT2CMNAWcA8o7aAA.roa File: b_FQIowpO51jT2CMNAWcA8o7aAA.roa (raw, json) Hash identifier: Gk/1ynRvxmNN+6N10vFZMRuT4XwP5PZ+IBz/5xje/1o= Subject key identifier: 6F:F1:50:22:8C:29:3B:9D:63:4F:60:8C:34:05:9C:03:CA:3B:68:00 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F14B5FE4411C9C3E3311CF4E5903EC8 Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/b_FQIowpO51jT2CMNAWcA8o7aAA.roa Signing time: Fri 02 Jan 2026 14:20:22 +0000 ROA not before: Fri 02 Jan 2026 14:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 55470 IP address blocks: 213.169.198.0/23 maxlen: 23 213.169.238.0/23 maxlen: 23 213.169.242.0/23 maxlen: 23 217.8.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:b5:fe:44:11:c9:c3:e3:31:1c:f4:e5:90:3e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ff150228c293b9d634f608c34059c03ca3b6800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:2b:21:ff:85:d4:84:ed:b5:5a:9e:23:da: b5:21:89:35:e0:19:bd:35:60:a7:1d:af:31:96:6f: 5c:d3:c1:15:31:59:06:e0:71:f2:8b:a5:3b:bb:24: 82:73:bf:3d:c5:cd:a9:78:1c:0a:f4:1b:1e:31:b7: 24:b0:0c:80:40:8e:06:65:85:f8:88:53:19:b9:03: 17:63:d8:9e:4e:3c:9b:ca:de:58:1e:b6:7e:df:99: 6d:e4:3b:93:78:6d:6d:d9:d9:ff:cc:8d:6d:cc:c8: 0a:2c:45:74:ca:c3:93:dc:ca:94:0b:f5:9c:bf:ad: 65:11:db:28:43:16:dd:14:19:7a:89:f6:d6:fd:49: 23:a4:a7:b1:17:ac:93:a3:4d:1e:58:3a:31:ee:4c: 54:a8:c5:d3:3c:7a:41:55:44:b2:f0:71:fa:4f:e6: 6d:51:ad:41:e0:f9:89:22:f0:f0:08:5f:03:42:b1: 5e:21:42:78:28:2a:5c:35:56:4a:43:1e:83:ff:e2: 8b:4b:52:c1:f1:cb:03:ce:19:10:ac:98:98:db:cc: a3:d7:50:a2:ff:a6:e4:29:4b:80:3a:c1:56:c8:59: 43:2d:9d:b3:e0:4a:81:f0:ba:e4:37:19:1e:28:36: 0f:6b:46:b2:d1:83:b7:a8:f4:ce:67:0c:b8:8b:65: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F1:50:22:8C:29:3B:9D:63:4F:60:8C:34:05:9C:03:CA:3B:68:00 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/b_FQIowpO51jT2CMNAWcA8o7aAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.169.198.0/23 213.169.238.0/23 213.169.242.0/23 217.8.220.0/23 Signature Algorithm: sha256WithRSAEncryption d1:04:fa:31:1c:cf:73:88:97:16:89:b0:a5:fb:eb:11:6a:1c: 1b:08:0a:f3:0b:5e:69:dc:7f:7c:dc:62:a0:c0:1c:08:d6:22: 49:de:f0:bc:fe:d4:7c:5b:e1:fb:9d:de:33:5c:db:92:6f:a2: cd:e8:f9:8b:15:ef:76:72:82:06:53:01:54:97:2b:99:0b:4f: 47:c9:d4:c7:c2:fd:70:5c:da:ee:3c:83:28:71:31:3b:06:24: 5a:b1:4e:e4:0a:b2:1d:2b:cd:2d:98:ef:e2:7d:a0:d0:20:d4: 48:5f:7e:77:d3:88:30:fb:04:77:33:80:a1:57:5a:42:8a:00: f2:c7:ea:2f:ad:49:c3:1d:7b:f9:87:bc:01:c4:2b:b7:35:b3: 02:c2:7a:30:df:c0:0c:22:a8:45:9d:0f:d2:f1:69:ae:31:94: 98:b8:b2:a1:71:6e:e1:84:1a:49:e4:35:be:4c:9e:68:44:a7: e3:b0:d4:c6:a3:b2:f1:db:d5:30:27:21:18:78:d5:8f:95:94: 4d:3e:7d:a2:1d:c1:f9:f5:1c:11:79:12:d6:67:33:1e:9a:30: 85:8c:0f:f3:f1:26:89:8f:77:7b:84:fa:b9:30:02:51:37:4a: c3:fa:eb:e1:9a:cb:eb:66:e1:a4:24:21:8f:36:13:0c:50:86: 0f:1d:5b:c4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FLX+RBHJw+MxHPTlkD7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmYxNTAyMjhjMjkzYjlkNjM0ZjYwOGMzNDA1OWMwM2NhM2I2ODAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi8rIf+F1ITttVqeI9q1IYk14Bm9 NWCnHa8xlm9c08EVMVkG4HHyi6U7uySCc789xc2peBwK9BseMbcksAyAQI4GZYX4 iFMZuQMXY9ieTjybyt5YHrZ+35lt5DuTeG1t2dn/zI1tzMgKLEV0ysOT3MqUC/Wc v61lEdsoQxbdFBl6ifbW/UkjpKexF6yTo00eWDox7kxUqMXTPHpBVUSy8HH6T+Zt Ua1B4PmJIvDwCF8DQrFeIUJ4KCpcNVZKQx6D/+KLS1LB8csDzhkQrJiY28yj11Ci /6bkKUuAOsFWyFlDLZ2z4EqB8LrkNxkeKDYPa0ay0YO3qPTOZwy4i2WTBQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFG/xUCKMKTudY09gjDQFnAPKO2gAMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvYl9GUUlvd3BPNTFqVDJDTU5BV2NBOG83YUFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQB1anGAwQB 1anuAwQB1anyAwQB2QjcMA0GCSqGSIb3DQEBCwUAA4IBAQDRBPoxHM9ziJcWibCl ++sRahwbCArzC15p3H983GKgwBwI1iJJ3vC8/tR8W+H7nd4zXNuSb6LN6PmLFe92 coIGUwFUlyuZC09HydTHwv1wXNruPIMocTE7BiRasU7kCrIdK80tmO/ifaDQINRI X35304gw+wR3M4ChV1pCigDyx+ovrUnDHXv5h7wBxCu3NbMCwnow38AMIqhFnQ/S 8WmuMZSYuLKhcW7hhBpJ5DW+TJ5oRKfjsNTGo7Lx29UwJyEYeNWPlZRNPn2iHcH5 9RwReRLWZzMemjCFjA/z8SaJj3d7hPq5MAJRN0rD+uvhmsvrZuGkJCGPNhMMUIYP HVvE -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:56 2026 by rpki-client