This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/b2J3Kq_VVh1EG8v7M57JsnhxRys.roa File: b2J3Kq_VVh1EG8v7M57JsnhxRys.roa (raw, json) Hash identifier: D7SHysw2y1TUjvU83TjW8wSMTeBnb6/uD11HZxz6yFQ= Subject key identifier: 6F:62:77:2A:AF:D5:56:1D:44:1B:CB:FB:33:9E:C9:B2:78:71:47:2B Certificate issuer: /CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Certificate serial: 019B77C6FB34DE1FFE75DF6CA7F234F422BC Authority key identifier: A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/b2J3Kq_VVh1EG8v7M57JsnhxRys.roa Signing time: Thu 01 Jan 2026 04:18:07 +0000 ROA not before: Thu 01 Jan 2026 04:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29396 IP address blocks: 82.148.192.0/19 maxlen: 24 84.53.64.0/18 maxlen: 24 90.145.0.0/16 maxlen: 24 91.194.8.0/23 maxlen: 24 185.41.144.0/22 maxlen: 24 2a01:5620::/29 maxlen: 48 2a02:120::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.mft rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fb:34:de:1f:fe:75:df:6c:a7:f2:34:f4:22:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a86580e18ad6ff8dc942be883c16de8b731f9605 Validity Not Before: Jan 1 04:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f62772aafd5561d441bcbfb339ec9b27871472b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a9:8f:8f:1a:3f:3c:79:fb:f4:b8:c4:cf:69: 72:6d:4c:ff:b2:11:23:db:3f:35:d0:87:bf:47:6b: 8a:48:a7:eb:10:a2:28:01:00:45:9e:03:77:2e:3f: 6b:60:45:f8:ed:dc:43:e0:71:7c:e9:01:5f:07:52: ca:57:dd:1e:77:f9:33:94:62:4b:ef:87:1b:a8:bf: fc:81:61:75:96:f7:fb:30:e3:a2:42:bf:92:9f:2a: b7:96:38:13:4f:e9:84:78:d6:dc:6d:51:ba:8e:89: a7:3f:f3:b1:81:d8:63:a1:fa:d7:27:4a:2e:1a:63: 45:de:03:25:ed:24:f0:c1:1e:58:65:8d:e3:12:31: 64:a8:a2:ed:74:2c:46:ae:f9:2a:13:86:0f:f1:37: f8:e3:1c:52:5c:4b:fa:24:35:d8:86:43:a5:1b:f4: ac:78:6b:6d:5f:c6:2a:ef:71:fd:39:52:51:03:61: 77:92:ed:7c:d8:fa:d8:24:c0:b2:50:2d:5f:c0:63: 42:fd:a2:bd:71:8a:52:43:2b:98:32:28:8e:9b:76: a4:1b:5f:ea:9d:8e:d1:5e:a1:24:5d:2c:04:2c:b8: 58:f5:ff:6b:b1:a5:be:3b:54:5f:63:22:e0:9c:db: e5:d1:77:d5:5d:8a:e4:8d:df:cd:79:d8:f7:21:c9: b3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:62:77:2A:AF:D5:56:1D:44:1B:CB:FB:33:9E:C9:B2:78:71:47:2B X509v3 Authority Key Identifier: keyid:A8:65:80:E1:8A:D6:FF:8D:C9:42:BE:88:3C:16:DE:8B:73:1F:96:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGWA4YrW_43JQr6IPBbei3MflgU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/b2J3Kq_VVh1EG8v7M57JsnhxRys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e29dce-a174-4b77-89aa-236e92fc6a59/1/qGWA4YrW_43JQr6IPBbei3MflgU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.148.192.0/19 84.53.64.0/18 90.145.0.0/16 91.194.8.0/23 185.41.144.0/22 IPv6: 2a01:5620::/29 2a02:120::/29 Signature Algorithm: sha256WithRSAEncryption 0f:83:2a:a0:39:d2:f5:ff:68:5c:6f:a3:9b:cc:41:32:99:f8: fe:52:5d:c4:72:bb:5b:e7:d0:60:ec:54:5b:bc:e2:16:d9:b9: 93:ee:ee:85:c2:cb:32:6b:e6:8b:2f:b5:18:e8:19:bf:7b:73: 80:3d:b3:44:a5:5a:f7:5c:08:7d:1a:7e:e7:41:95:d8:73:94: 7f:99:e6:51:73:01:f3:69:1e:29:de:b6:51:5a:e5:04:17:23: c5:03:2e:02:08:06:66:d5:d9:fc:5e:c0:c4:be:7f:85:bf:5b: c2:4f:58:9a:0b:9d:f0:5a:0e:c2:3a:df:8b:66:d3:ad:85:00: 93:bb:7d:60:cb:35:96:6a:99:33:a1:22:9a:21:66:5e:60:88: ba:89:fa:42:01:38:ae:4c:63:09:20:58:a6:e9:f4:d6:dc:01: 5f:30:f8:fb:4a:9a:6c:13:04:09:06:c8:d7:90:0a:89:eb:f4: 1a:a0:77:f3:5d:72:d5:1f:c8:4b:7f:35:88:89:b7:e9:0e:22: 33:e5:13:58:ad:8b:6c:18:42:ca:a6:c4:cc:c7:d2:10:94:cf: 76:df:a6:1c:65:0c:6b:10:56:48:01:12:97:b0:fe:7d:7e:c9: 27:01:b8:ac:e5:33:5b:e4:b0:fb:f4:ff:8c:e9:09:30:ec:d7: fd:5f:a6:24 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt3xvs03h/+dd9sp/I09CK8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NjU4MGUxOGFkNmZmOGRjOTQyYmU4ODNjMTZkZThiNzMx Zjk2MDUwHhcNMjYwMTAxMDQxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjYyNzcyYWFmZDU1NjFkNDQxYmNiZmIzMzllYzliMjc4NzE0NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuamPjxo/PHn79LjEz2lybUz/shEj 2z810Ie/R2uKSKfrEKIoAQBFngN3Lj9rYEX47dxD4HF86QFfB1LKV90ed/kzlGJL 74cbqL/8gWF1lvf7MOOiQr+Snyq3ljgTT+mEeNbcbVG6jomnP/OxgdhjofrXJ0ou GmNF3gMl7STwwR5YZY3jEjFkqKLtdCxGrvkqE4YP8Tf44xxSXEv6JDXYhkOlG/Ss eGttX8Yq73H9OVJRA2F3ku182PrYJMCyUC1fwGNC/aK9cYpSQyuYMiiOm3akG1/q nY7RXqEkXSwELLhY9f9rsaW+O1RfYyLgnNvl0XfVXYrkjd/Nedj3IcmzcwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFG9idyqv1VYdRBvL+zOeybJ4cUcrMB8GA1UdIwQY MBaAFKhlgOGK1v+NyUK+iDwW3otzH5YFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEt MjM2ZTkyZmM2YTU5LzEvYjJKM0txX1ZWaDFFRzh2N001N0pzbmh4UnlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9lMjlkY2UtYTE3NC00Yjc3LTg5YWEtMjM2ZTkyZmM2YTU5 LzEvcUdXQTRZcldfNDNKUXI2SVBCYmVpM01mbGdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAjBAIAATAdAwQFUpTAAwQG VDVAAwMAWpEDBAFbwggDBAK5KZAwFAQCAAIwDgMFAyoBViADBQMqAgEgMA0GCSqG SIb3DQEBCwUAA4IBAQAPgyqgOdL1/2hcb6ObzEEymfj+Ul3Ecrtb59Bg7FRbvOIW 2bmT7u6Fwssya+aLL7UY6Bm/e3OAPbNEpVr3XAh9Gn7nQZXYc5R/meZRcwHzaR4p 3rZRWuUEFyPFAy4CCAZm1dn8XsDEvn+Fv1vCT1iaC53wWg7COt+LZtOthQCTu31g yzWWapkzoSKaIWZeYIi6ifpCATiuTGMJIFim6fTW3AFfMPj7SppsEwQJBsjXkAqJ 6/QaoHfzXXLVH8hLfzWIibfpDiIz5RNYrYtsGELKpsTMx9IQlM9236YcZQxrEFZI ARKXsP59fsknAbis5TNb5LD79P+M6Qkw7Nf9X6Yk -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:12 2026 by rpki-client