This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa File: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (raw, json) Hash identifier: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4= Subject key identifier: 6C:2C:45:D5:82:1C:66:83:7B:71:EA:B5:94:02:65:A3:86:F6:38:96 Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019B7C12BFE13F72C20D28A4A9A17677992E Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197497 IP address blocks: 83.139.46.0/24 maxlen: 24 83.139.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bf:e1:3f:72:c2:0d:28:a4:a9:a1:76:77:99:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c2c45d5821c66837b71eab5940265a386f63896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:5a:7c:18:1b:2b:37:cb:7d:25:40:2f:37: 2e:ea:98:d7:98:ce:4c:7a:d7:a5:27:76:92:de:18: e5:9b:cc:ae:41:75:a7:87:0b:bf:9f:7c:d9:95:e3: b1:a1:c3:57:5a:46:36:f4:10:d9:b9:7a:54:61:44: 69:8c:09:65:4b:fa:dc:ec:2d:d1:95:e7:20:4e:a5: 6e:8f:07:04:86:73:28:85:a1:c3:a6:a7:70:56:e5: e9:6c:08:94:44:e4:c7:0c:df:05:0d:dd:19:54:12: 5a:e2:4b:b9:65:e8:81:d3:b6:61:b5:de:6a:02:b2: 8d:b6:b9:2d:b8:87:b9:f9:37:47:8c:b8:91:6c:c1: ff:3a:73:2b:2b:7b:4a:ed:0d:ff:ea:59:4a:3a:d4: f5:f4:c3:27:1d:3c:a5:3d:8d:d2:1f:af:2d:ce:50: 71:25:32:6f:ca:e9:4e:5e:15:8b:2c:08:e9:cf:32: e9:a3:aa:eb:1c:1b:f1:26:2f:6b:0b:f7:b5:7e:41: 3c:c4:a4:86:77:8f:97:5a:93:d8:16:2d:71:0d:2e: 5f:e4:2c:9d:b3:3a:bc:08:d7:96:03:f8:2b:97:ee: 16:b5:bf:7d:34:54:09:5c:e8:2d:e4:d5:cd:a5:d1: c1:50:d9:28:bd:eb:75:89:d8:cc:cd:0a:e4:ca:17: 8f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2C:45:D5:82:1C:66:83:7B:71:EA:B5:94:02:65:A3:86:F6:38:96 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.139.46.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:a8:9b:27:c2:9a:ae:fd:fe:1b:6d:1c:34:98:1e:f2:b6:dd: 75:83:10:72:15:66:c6:0a:29:e9:2f:02:77:47:7e:9f:d6:c9: 88:78:25:73:b0:30:da:d5:50:89:af:b1:27:b7:84:12:18:8b: ad:f2:29:e9:b1:0f:a6:7d:2b:f3:06:b6:8c:d0:79:2a:a0:63: e0:68:42:6c:20:5b:a3:51:1a:49:9b:94:26:97:b8:91:b5:e2: 20:7f:0c:e8:8d:16:da:bd:34:46:1e:bd:65:67:86:17:1d:34: bd:ad:5b:ae:0a:b4:0e:59:56:c7:1a:38:3e:e0:ce:26:2c:bc: 7a:7a:2e:2a:48:9b:45:14:3c:ec:58:50:79:70:db:7b:5b:7f: 23:8f:b7:ee:2a:3b:a1:4f:2f:1c:f5:d3:d3:93:02:cc:12:42: 94:7b:96:ca:38:43:56:c1:51:99:22:ab:83:0a:d0:f0:87:89: 70:07:f7:91:a7:44:e5:8d:65:fb:4a:15:60:13:b0:b0:ea:a9: 33:b7:c8:30:b4:48:60:e8:d3:f6:0c:bf:dd:25:d1:9b:1a:76: 27:81:f8:ab:9c:1d:19:e0:1c:68:c3:4f:54:05:82:b0:a2:2f: 8b:77:d6:12:73:6a:bd:75:cb:d3:da:e1:05:2f:61:17:c4:a6: b0:7e:b2:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Er/hP3LCDSikqaF2d5kuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzJjNDVkNTgyMWM2NjgzN2I3MWVhYjU5NDAyNjVhMzg2ZjYzODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1npafBgbKzfLfSVALzcu6pjXmM5M etelJ3aS3hjlm8yuQXWnhwu/n3zZleOxocNXWkY29BDZuXpUYURpjAllS/rc7C3R lecgTqVujwcEhnMohaHDpqdwVuXpbAiUROTHDN8FDd0ZVBJa4ku5ZeiB07Zhtd5q ArKNtrktuIe5+TdHjLiRbMH/OnMrK3tK7Q3/6llKOtT19MMnHTylPY3SH68tzlBx JTJvyulOXhWLLAjpzzLpo6rrHBvxJi9rC/e1fkE8xKSGd4+XWpPYFi1xDS5f5Cyd szq8CNeWA/grl+4Wtb99NFQJXOgt5NXNpdHBUNkovet1idjMzQrkyhePgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGwsRdWCHGaDe3HqtZQCZaOG9jiWMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvYkN4RjFZSWNab043Y2VxMWxBSmxvNGIyT0pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU4suMA0G CSqGSIb3DQEBCwUAA4IBAQBKqJsnwpqu/f4bbRw0mB7ytt11gxByFWbGCinpLwJ3 R36f1smIeCVzsDDa1VCJr7Ent4QSGIut8inpsQ+mfSvzBraM0HkqoGPgaEJsIFuj URpJm5Qml7iRteIgfwzojRbavTRGHr1lZ4YXHTS9rVuuCrQOWVbHGjg+4M4mLLx6 ei4qSJtFFDzsWFB5cNt7W38jj7fuKjuhTy8c9dPTkwLMEkKUe5bKOENWwVGZIquD CtDwh4lwB/eRp0TljWX7ShVgE7Cw6qkzt8gwtEhg6NP2DL/dJdGbGnYngfirnB0Z 4Bxow09UBYKwoi+Ld9YSc2q9dcvT2uEFL2EXxKawfrJX -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:47 2026 by rpki-client