This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/a64DqNHBKDLRnRdZg0hgsItT--A.roa File: a64DqNHBKDLRnRdZg0hgsItT--A.roa (raw, json) Hash identifier: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA= Subject key identifier: 6B:AE:03:A8:D1:C1:28:32:D1:9D:17:59:83:48:60:B0:8B:53:FB:E0 Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019B7D5D00F52B5CEBAC0E1CB0C94ADFF913 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/a64DqNHBKDLRnRdZg0hgsItT--A.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202984 IP address blocks: 92.63.199.0/24 maxlen: 24 92.63.203.0/24 maxlen: 24 185.176.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:00:f5:2b:5c:eb:ac:0e:1c:b0:c9:4a:df:f9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bae03a8d1c12832d19d1759834860b08b53fbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4e:7f:ec:72:e0:95:52:52:ce:e4:ba:6f:a7: ce:52:5d:cb:6a:74:1c:8d:e5:14:5f:ae:5a:0d:e4: 1a:ae:bc:54:5a:50:3a:db:29:d7:19:4a:49:80:70: 45:33:bc:3e:37:44:68:62:ae:50:e9:d5:78:11:cf: 5c:04:70:e3:92:8a:bf:05:96:38:ad:c0:40:0e:4b: 9a:4e:c7:11:a8:33:bd:f4:67:c1:d2:35:0c:d9:aa: ff:46:f0:d8:1a:b2:2e:40:67:6c:2e:75:3e:93:e2: 38:21:77:c3:a8:67:c2:95:0e:b1:85:fa:27:1d:04: 1e:48:2a:38:66:f9:b1:4a:66:fe:c1:2a:44:1f:35: 6c:03:3e:ed:99:89:80:fa:91:dc:74:03:08:99:20: 37:47:25:74:68:dd:9f:cb:79:57:df:9a:7b:0b:ae: 5f:74:4e:a8:0d:46:d3:7e:19:54:bc:fa:ab:de:87: da:f7:65:45:e9:d9:4a:a9:12:01:76:86:a3:bf:87: a7:7b:8b:3a:9d:e8:fe:22:06:e8:80:69:09:ef:bb: f7:71:78:bc:2b:cf:43:b1:b7:6c:d8:e5:14:69:45: 1b:54:fe:6f:31:d4:c8:3c:15:82:cb:84:a1:db:09: 61:9c:80:46:61:11:fb:18:31:e5:49:3a:4c:0a:2e: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:AE:03:A8:D1:C1:28:32:D1:9D:17:59:83:48:60:B0:8B:53:FB:E0 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/a64DqNHBKDLRnRdZg0hgsItT--A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.63.199.0/24 92.63.203.0/24 185.176.25.0/24 Signature Algorithm: sha256WithRSAEncryption 83:c8:82:0a:46:be:f9:fd:34:5f:33:91:19:cf:cc:29:fb:66: bc:44:32:d8:2e:d7:e3:51:76:ea:c0:53:0d:ed:56:d8:a5:93: 13:7a:89:01:c3:f3:c3:84:ff:2c:59:de:b9:9a:3a:d3:d6:c2: 19:f4:c8:0b:4e:7f:2e:18:a7:7f:1d:75:2e:84:f4:65:2e:e8: 63:f8:57:e5:56:0f:f5:af:24:ea:54:52:99:d5:4f:90:9b:33: a7:a0:e9:2a:96:1a:23:86:fe:6a:59:37:9b:47:19:f6:a3:60: c3:7c:0d:d2:28:70:20:0a:88:5a:98:23:1b:01:33:dc:7c:32: 17:32:78:ac:90:df:b3:eb:db:08:58:49:04:26:20:4b:d9:d1: 02:88:9f:42:19:04:bd:94:34:6c:75:7a:8a:28:25:0b:bc:4a: f8:34:1e:61:38:cc:e4:d7:5c:18:52:cc:a5:16:76:13:40:16: 3c:bf:1a:36:f7:b2:f5:0f:ab:c1:c7:5f:a1:25:b6:a3:24:a2: aa:2d:3d:81:61:42:8a:e5:07:c1:92:c9:89:d4:83:93:1f:53: c0:d4:b5:3f:b0:ef:32:86:d8:cc:1d:1f:18:92:d5:96:37:1c: db:91:19:ef:35:22:3f:1a:bf:f6:2f:f9:6d:e6:39:8d:bc:5d: fb:77:d9:10 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XQD1K1zrrA4csMlK3/kTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmFlMDNhOGQxYzEyODMyZDE5ZDE3NTk4MzQ4NjBiMDhiNTNmYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k5/7HLglVJSzuS6b6fOUl3LanQc jeUUX65aDeQarrxUWlA62ynXGUpJgHBFM7w+N0RoYq5Q6dV4Ec9cBHDjkoq/BZY4 rcBADkuaTscRqDO99GfB0jUM2ar/RvDYGrIuQGdsLnU+k+I4IXfDqGfClQ6xhfon HQQeSCo4ZvmxSmb+wSpEHzVsAz7tmYmA+pHcdAMImSA3RyV0aN2fy3lX35p7C65f dE6oDUbTfhlUvPqr3ofa92VF6dlKqRIBdoajv4ene4s6nej+IgbogGkJ77v3cXi8 K89Dsbds2OUUaUUbVP5vMdTIPBWCy4Sh2wlhnIBGYRH7GDHlSTpMCi4hwwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGuuA6jRwSgy0Z0XWYNIYLCLU/vgMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvYTY0RHFOSEJLRExSblJkWmcwaGdzSXRULS1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXD/HAwQA XD/LAwQAubAZMA0GCSqGSIb3DQEBCwUAA4IBAQCDyIIKRr75/TRfM5EZz8wp+2a8 RDLYLtfjUXbqwFMN7VbYpZMTeokBw/PDhP8sWd65mjrT1sIZ9MgLTn8uGKd/HXUu hPRlLuhj+FflVg/1ryTqVFKZ1U+QmzOnoOkqlhojhv5qWTebRxn2o2DDfA3SKHAg CohamCMbATPcfDIXMniskN+z69sIWEkEJiBL2dECiJ9CGQS9lDRsdXqKKCULvEr4 NB5hOMzk11wYUsylFnYTQBY8vxo297L1D6vBx1+hJbajJKKqLT2BYUKK5QfBksmJ 1IOTH1PA1LU/sO8yhtjMHR8YktWWNxzbkRnvNSI/Gr/2L/lt5jmNvF37d9kQ -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:20 2026 by rpki-client