This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/bC_IATjUaX3GuHAs5GVc1XQVCA4.roa File: bC_IATjUaX3GuHAs5GVc1XQVCA4.roa (raw, json) Hash identifier: Ms9YrZxRRU7ToESwLPKhWeeO7lFJzbICeoJW/69MHh0= Subject key identifier: 6C:2F:C8:01:38:D4:69:7D:C6:B8:70:2C:E4:65:5C:D5:74:15:08:0E Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045 Certificate serial: 019B7B3676A65F39E13B79E541932DBFE77D Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/bC_IATjUaX3GuHAs5GVc1XQVCA4.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198440 IP address blocks: 37.48.224.0/24 maxlen: 24 37.48.229.0/24 maxlen: 24 37.48.230.0/24 maxlen: 24 62.64.128.0/21 maxlen: 24 62.64.136.0/22 maxlen: 24 62.64.144.0/20 maxlen: 24 185.102.148.0/22 maxlen: 24 188.74.64.0/19 maxlen: 24 188.74.70.0/23 maxlen: 23 188.74.72.0/23 maxlen: 23 188.74.74.0/23 maxlen: 23 188.74.76.0/23 maxlen: 23 188.74.80.0/22 maxlen: 22 188.74.84.0/22 maxlen: 22 217.168.248.0/21 maxlen: 24 2a05:87c0::/29 maxlen: 48 2a05:87c3:1000::/36 maxlen: 36 2a05:87c3:2000::/36 maxlen: 36 2a05:87c3:3000::/36 maxlen: 36 2a05:87c3:7000::/36 maxlen: 36 2a05:87c3:8000::/36 maxlen: 36 2a05:87c3:9000::/36 maxlen: 36 2a05:87c7:1000::/36 maxlen: 36 2a05:87c7:2000::/36 maxlen: 36 2a05:87c7:3000::/36 maxlen: 36 2a05:87c7:7000::/36 maxlen: 36 2a05:87c7:8000::/36 maxlen: 36 2a05:87c7:9000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:76:a6:5f:39:e1:3b:79:e5:41:93:2d:bf:e7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c2fc80138d4697dc6b8702ce4655cd57415080e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:85:3c:5c:47:38:7e:7c:d5:c4:a6:b1:d5:e7: 21:93:c3:03:3b:ea:31:22:ae:9d:c3:b1:7a:66:b9: 68:c0:af:45:48:5e:27:0d:b9:da:2f:9f:25:e7:e8: b7:6b:0e:3c:11:0f:59:17:f9:45:12:1b:d2:be:eb: 2b:f1:97:d2:b5:ba:9c:5f:e5:5f:85:29:03:45:de: ac:14:a8:5b:6f:b8:35:cf:23:aa:77:6a:09:fa:50: fb:c4:93:55:e6:81:b9:c4:58:45:1b:9d:e9:0c:5c: 0a:5b:db:99:53:02:ed:cf:1b:60:f1:7a:8c:3a:f1: 0f:44:ef:97:42:d9:e7:a9:fe:06:de:e7:9a:60:c5: 2e:02:e6:49:e8:d1:49:cd:9e:53:1c:74:35:e8:35: 7c:2c:a9:8d:d9:eb:dc:6a:b8:f8:c3:5a:6d:ae:9d: 85:da:02:66:18:d5:45:91:49:ec:66:14:1c:4d:4b: 01:f7:c9:8d:98:fb:20:53:c8:5d:ab:43:c9:6c:f2: 53:ae:bd:e4:7e:f8:07:c5:42:0f:1e:6a:78:7e:77: 6b:3a:a4:f1:67:dd:93:f0:73:77:9c:f4:fa:73:a1: 29:37:52:59:d1:02:71:59:db:bf:cd:90:f5:d1:f7: d2:c1:e6:cd:f7:58:72:5d:a9:5b:5b:76:11:a7:ab: 43:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2F:C8:01:38:D4:69:7D:C6:B8:70:2C:E4:65:5C:D5:74:15:08:0E X509v3 Authority Key Identifier: keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/bC_IATjUaX3GuHAs5GVc1XQVCA4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.48.224.0/24 37.48.229.0-37.48.230.255 62.64.128.0-62.64.139.255 62.64.144.0/20 185.102.148.0/22 188.74.64.0/19 217.168.248.0/21 IPv6: 2a05:87c0::/29 Signature Algorithm: sha256WithRSAEncryption da:a8:ce:08:1f:8f:b9:d4:30:a6:01:da:a4:d7:51:aa:af:54: 9b:9d:cb:60:56:3b:5b:81:27:f0:a1:d0:e1:99:32:9d:10:e5: 20:91:aa:6d:fe:6d:67:c3:3a:9c:72:24:a0:2f:5f:df:a6:a2: 19:58:ae:21:f5:e4:c7:f9:be:9b:c8:13:d9:f5:e4:e0:ef:6e: c9:9c:f9:b5:1e:66:b5:9f:cf:8c:9f:ff:b9:55:cd:df:ed:b2: 77:20:1e:ed:6a:2b:df:a7:a2:2d:14:0c:cf:40:58:70:f8:70: 86:28:fc:fa:9e:32:01:2e:33:f0:da:b2:59:00:30:d5:08:19: 6b:c4:54:d7:c6:8c:b2:ed:92:2e:a2:8e:10:23:80:3c:da:32: 2c:94:df:21:68:1a:1c:c7:a4:de:36:1f:43:17:a2:29:eb:36: 14:01:31:35:08:96:d0:26:18:95:34:a2:24:a5:47:b9:0e:e3: 8a:a5:c9:c7:a4:29:c0:13:6b:83:4e:98:27:a9:b5:82:0b:d4: d1:2c:b9:2f:66:e5:5d:93:b4:6d:82:50:32:ff:68:38:62:f9: 8a:00:b1:6c:9a:d4:0a:8c:d0:98:fa:76:a9:c2:ca:bc:d5:c7: 16:ae:3e:5e:a4:5a:24:fb:6a:ae:0f:be:94:01:9e:d7:5b:02: 43:64:c4:f8 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt7NnamXznhO3nlQZMtv+d9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMTg2YTU2ZWE4NGMxM2M2Mjc2OGE5ZDE3YmFlMTMzY2Vk ZjEwNDUwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzJmYzgwMTM4ZDQ2OTdkYzZiODcwMmNlNDY1NWNkNTc0MTUwODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IU8XEc4fnzVxKax1echk8MDO+ox Iq6dw7F6ZrlowK9FSF4nDbnaL58l5+i3aw48EQ9ZF/lFEhvSvusr8ZfStbqcX+Vf hSkDRd6sFKhbb7g1zyOqd2oJ+lD7xJNV5oG5xFhFG53pDFwKW9uZUwLtzxtg8XqM OvEPRO+XQtnnqf4G3ueaYMUuAuZJ6NFJzZ5THHQ16DV8LKmN2evcarj4w1ptrp2F 2gJmGNVFkUnsZhQcTUsB98mNmPsgU8hdq0PJbPJTrr3kfvgHxUIPHmp4fndrOqTx Z92T8HN3nPT6c6EpN1JZ0QJxWdu/zZD10ffSwebN91hyXalbW3YRp6tDgQIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFGwvyAE41Gl9xrhwLORlXNV0FQgOMB8GA1UdIwQY MBaAFIwYalbqhME8YnaKnRe64TPO3xBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2Qt MjA5MmFmNjQ3MDcwLzEvYkNfSUFUalVhWDNHdUhBczVHVmMxWFFWQ0E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2QtMjA5MmFmNjQ3MDcw LzEvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBABAIAATA6AwQAJTDgMAwD BAAlMOUDBAAlMOYwDAMEBz5AgAMEAj5AiAMEBD5AkAMEArlmlAMEBbxKQAMEA9mo +DANBAIAAjAHAwUDKgWHwDANBgkqhkiG9w0BAQsFAAOCAQEA2qjOCB+PudQwpgHa pNdRqq9Um53LYFY7W4En8KHQ4ZkynRDlIJGqbf5tZ8M6nHIkoC9f36aiGViuIfXk x/m+m8gT2fXk4O9uyZz5tR5mtZ/PjJ//uVXN3+2ydyAe7Wor36eiLRQMz0BYcPhw hij8+p4yAS4z8NqyWQAw1QgZa8RU18aMsu2SLqKOECOAPNoyLJTfIWgaHMek3jYf QxeiKes2FAExNQiW0CYYlTSiJKVHuQ7jiqXJx6QpwBNrg06YJ6m1ggvU0Sy5L2bl XZO0bYJQMv9oOGL5igCxbJrUCozQmPp2qcLKvNXHFq4+XqRaJPtqrg++lAGe11sC Q2TE+A== -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:19 2026 by rpki-client