This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/bXn-IWCSHV6luRTQy8HJZLe_pJ4.roa File: bXn-IWCSHV6luRTQy8HJZLe_pJ4.roa (raw, json) Hash identifier: mFM8fPDKlogmsI5AE4bX3ek/ET4zQQFwwzKp3y4dESw= Subject key identifier: 6D:79:FE:21:60:92:1D:5E:A5:B9:14:D0:CB:C1:C9:64:B7:BF:A4:9E Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D163A49E35AB23A58BFF2E5EA0D0B Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/bXn-IWCSHV6luRTQy8HJZLe_pJ4.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16015 IP address blocks: 194.149.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:16:3a:49:e3:5a:b2:3a:58:bf:f2:e5:ea:0d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d79fe2160921d5ea5b914d0cbc1c964b7bfa49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e8:20:53:08:4e:51:ae:6f:e4:83:d0:08:59: c0:d2:b2:f0:11:ce:8e:d3:91:5e:7e:41:50:91:74: 8d:76:80:f3:96:86:15:2c:58:5c:f9:cc:1f:e1:e4: 73:9e:55:40:1d:46:b4:41:e5:50:f5:e2:45:8d:12: b3:be:b4:bd:71:ca:74:35:82:dd:82:3b:ec:a3:96: ab:0b:2b:de:b1:60:7a:1a:72:04:6b:ba:28:87:51: 59:d1:f3:3f:9a:c8:a4:cd:ea:d0:3d:29:54:51:00: 6c:5e:48:16:5d:b6:0f:0a:39:57:ea:75:28:7c:c2: 27:b4:23:f5:93:f7:25:2d:c0:e1:d4:ca:93:87:8b: 38:61:4c:43:58:68:74:09:1c:99:9e:d4:d9:00:85: f0:00:f5:2d:40:7e:57:8e:5d:65:6c:b3:d2:df:c3: ad:49:0e:51:3a:57:fe:41:f6:47:e6:7c:0a:6e:3d: fd:96:52:26:2b:a5:df:43:22:50:bf:77:98:62:a9: ca:92:cb:bb:43:68:fe:dc:a1:b7:53:a5:a1:93:9a: d3:16:f4:d7:1d:50:0e:d6:0d:2d:62:9e:88:7c:f5: 52:d6:14:71:e2:e3:a9:84:5d:04:30:b4:4a:3e:3b: d3:83:06:d6:1b:18:ab:d5:b0:2f:70:17:4b:1d:6a: 82:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:79:FE:21:60:92:1D:5E:A5:B9:14:D0:CB:C1:C9:64:B7:BF:A4:9E X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/bXn-IWCSHV6luRTQy8HJZLe_pJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.149.46.0/24 Signature Algorithm: sha256WithRSAEncryption 7c:6f:3b:1b:b6:03:3d:56:1a:36:1d:f8:be:51:12:31:87:08: 4a:8b:e7:d5:71:1a:84:7c:2f:66:f7:6c:32:df:76:09:ae:1e: 99:d0:8f:64:69:6a:96:5e:02:29:60:c2:f8:e3:68:c5:11:ef: d0:82:4f:ea:bf:4c:42:23:10:57:ec:8e:51:92:6f:0a:49:83: 36:29:ff:a6:58:39:d9:7f:7b:7a:5e:7c:23:ab:12:41:5b:70: 9b:ec:18:f8:89:c6:ee:44:30:f2:8d:be:04:a9:13:1b:df:58: 1e:c2:40:6a:cf:08:d6:a9:f8:92:d6:d9:93:d3:b3:be:73:d1: 56:15:90:fa:c7:f6:13:ac:3d:cc:60:5b:46:21:fa:38:12:fe: 92:b7:f9:97:36:04:06:4c:34:66:45:cd:5e:47:88:04:f7:ce: b0:49:d9:7a:73:a2:80:e8:d1:7e:0c:3e:a3:2a:a5:35:e0:cd: a9:09:d4:40:ae:9b:4c:57:bc:0a:76:3d:ad:59:f9:57:e1:e9: 39:2e:58:7b:fb:5a:02:91:ed:83:2e:8a:c2:5e:15:d3:00:1b: 3b:e5:38:30:a7:6c:4f:9d:b0:3c:9a:74:0f:fc:c7:d5:40:cb: 55:d2:62:a8:00:b6:87:bf:de:4e:ac:ec:fb:6a:8f:2d:be:1d: a3:e6:60:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRY6SeNasjpYv/Ll6g0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDc5ZmUyMTYwOTIxZDVlYTViOTE0ZDBjYmMxYzk2NGI3YmZhNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOggUwhOUa5v5IPQCFnA0rLwEc6O 05FefkFQkXSNdoDzloYVLFhc+cwf4eRznlVAHUa0QeVQ9eJFjRKzvrS9ccp0NYLd gjvso5arCyvesWB6GnIEa7ooh1FZ0fM/msikzerQPSlUUQBsXkgWXbYPCjlX6nUo fMIntCP1k/clLcDh1MqTh4s4YUxDWGh0CRyZntTZAIXwAPUtQH5Xjl1lbLPS38Ot SQ5ROlf+QfZH5nwKbj39llImK6XfQyJQv3eYYqnKksu7Q2j+3KG3U6Whk5rTFvTX HVAO1g0tYp6IfPVS1hRx4uOphF0EMLRKPjvTgwbWGxir1bAvcBdLHWqCbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG15/iFgkh1epbkU0MvByWS3v6SeMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvYlhuLUlXQ1NIVjZsdVJUUXk4SEpaTGVfcEo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpUuMA0G CSqGSIb3DQEBCwUAA4IBAQB8bzsbtgM9Vho2Hfi+URIxhwhKi+fVcRqEfC9m92wy 33YJrh6Z0I9kaWqWXgIpYML442jFEe/Qgk/qv0xCIxBX7I5Rkm8KSYM2Kf+mWDnZ f3t6XnwjqxJBW3Cb7Bj4icbuRDDyjb4EqRMb31gewkBqzwjWqfiS1tmT07O+c9FW FZD6x/YTrD3MYFtGIfo4Ev6St/mXNgQGTDRmRc1eR4gE986wSdl6c6KA6NF+DD6j KqU14M2pCdRArptMV7wKdj2tWflX4ek5Llh7+1oCke2DLorCXhXTABs75Tgwp2xP nbA8mnQP/MfVQMtV0mKoALaHv95OrOz7ao8tvh2j5mBW -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:10 2026 by rpki-client