This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/bek0EGCQei4vOYeo1cw3OqhyNWo.roa File: bek0EGCQei4vOYeo1cw3OqhyNWo.roa (raw, json) Hash identifier: m6rdcoyVs1N3a8H7buHnpBQjMeyGoW4VObVUZcGs+7M= Subject key identifier: 6D:E9:34:10:60:90:7A:2E:2F:39:87:A8:D5:CC:37:3A:A8:72:35:6A Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a Certificate serial: 019B7FF26E688A863C5AE1AF315EBB87127B Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/bek0EGCQei4vOYeo1cw3OqhyNWo.roa Signing time: Fri 02 Jan 2026 18:22:32 +0000 ROA not before: Fri 02 Jan 2026 18:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8262 IP address blocks: 82.119.64.0/19 maxlen: 19 82.119.68.0/24 maxlen: 24 82.119.69.0/24 maxlen: 24 82.119.80.0/21 maxlen: 21 82.119.83.0/24 maxlen: 24 82.119.84.0/24 maxlen: 24 82.119.92.0/24 maxlen: 24 82.119.94.0/24 maxlen: 24 85.14.0.0/18 maxlen: 18 85.14.0.0/23 maxlen: 23 85.14.12.0/24 maxlen: 24 85.14.13.0/24 maxlen: 24 85.14.21.0/24 maxlen: 24 85.14.24.0/24 maxlen: 24 85.14.36.0/24 maxlen: 24 85.14.44.0/24 maxlen: 24 85.14.47.0/24 maxlen: 24 85.14.49.0/24 maxlen: 24 89.252.192.0/18 maxlen: 24 89.252.192.0/22 maxlen: 22 89.252.199.0/24 maxlen: 24 89.252.200.0/21 maxlen: 24 89.252.208.0/20 maxlen: 20 89.252.223.0/24 maxlen: 24 89.252.224.0/19 maxlen: 24 89.252.229.0/24 maxlen: 24 89.252.241.0/24 maxlen: 24 89.252.246.0/24 maxlen: 24 176.67.233.0/24 maxlen: 24 176.67.234.0/24 maxlen: 24 185.92.132.0/22 maxlen: 22 194.12.224.0/19 maxlen: 19 194.12.231.0/24 maxlen: 24 194.12.234.0/24 maxlen: 24 194.12.249.0/24 maxlen: 24 194.12.253.0/24 maxlen: 32 194.12.254.0/24 maxlen: 24 2001:1ae0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:6e:68:8a:86:3c:5a:e1:af:31:5e:bb:87:12:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a Validity Not Before: Jan 2 18:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6de9341060907a2e2f3987a8d5cc373aa872356a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ca:c2:6f:96:4d:cb:0d:81:b7:a5:ed:83:8a: 6f:7a:8c:51:7a:50:5b:f1:89:26:03:4f:9b:91:ba: 8c:61:f1:16:1f:ca:39:c3:fc:cd:c9:85:df:10:9f: 3e:4c:2f:da:a8:40:dd:c5:93:65:3e:6d:36:5a:54: 6c:51:0a:df:2e:75:25:58:75:8b:6d:1b:33:d2:71: 1c:ac:d9:63:f3:1e:20:c7:74:ed:6f:c9:f8:7a:51: 2d:4b:0f:5d:03:c1:77:dd:ad:6a:81:1c:2c:a7:0f: e2:68:57:f9:3e:ca:3b:f5:80:42:68:6a:7c:23:f6: 98:a3:f5:17:a4:d1:2b:e5:b4:86:c2:37:78:52:14: ac:47:d1:6a:98:47:7a:27:8e:c3:59:86:e7:eb:63: 6e:c8:1c:16:e0:21:e6:0d:17:06:01:42:fd:ec:38: c5:62:68:f6:39:70:a3:44:b8:78:5a:e2:77:90:e6: d3:62:17:e0:55:f8:a4:21:2f:74:1b:19:98:78:f9: d4:8a:33:11:4b:5c:f1:12:4a:0e:66:be:2b:5d:cf: 80:09:7f:14:76:eb:59:4c:b3:27:a4:e6:e0:03:5a: bb:e7:b8:80:6f:b4:7f:79:2c:19:c0:d9:76:50:92: 80:cb:0d:e5:1c:c8:d1:cf:95:43:46:df:74:87:f2: 44:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:E9:34:10:60:90:7A:2E:2F:39:87:A8:D5:CC:37:3A:A8:72:35:6A X509v3 Authority Key Identifier: keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/bek0EGCQei4vOYeo1cw3OqhyNWo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.64.0/19 85.14.0.0/18 89.252.192.0/18 176.67.233.0-176.67.234.255 185.92.132.0/22 194.12.224.0/19 IPv6: 2001:1ae0::/32 Signature Algorithm: sha256WithRSAEncryption 38:dd:65:96:e0:76:e7:99:88:32:ad:17:bf:88:b9:4f:20:66: 87:99:13:02:e6:99:b3:4f:99:75:9b:0d:cf:6b:81:e6:70:4c: d4:4c:6e:72:b7:10:e3:0b:63:54:c4:67:7f:1e:95:69:0c:74: 94:ae:c6:68:a0:b5:0f:0b:cb:15:57:e4:8b:f4:73:e4:a5:11: 36:1b:54:c0:72:69:1c:23:d2:25:05:30:ce:e3:2d:f3:94:66: dc:8e:86:25:28:8f:9d:bf:cf:18:0b:48:5b:3b:63:13:bf:58: 4b:c7:58:b5:ce:ea:da:70:0f:d4:5c:29:40:e6:8f:13:73:58: ee:bb:9d:cc:55:2d:76:f6:4d:8d:e9:19:5d:73:06:ba:fd:73: 91:5a:4d:c0:95:25:d6:40:8a:cb:fa:01:fd:42:2e:62:88:49: 5e:8b:22:68:fb:7b:8f:36:31:b0:93:d7:43:2b:56:ec:5d:6b: aa:18:e4:66:b0:6f:96:46:ae:a5:05:0b:1c:6f:bd:ee:ee:34: 4c:03:c4:46:22:6b:4c:f3:eb:60:e1:af:1e:07:df:d6:23:a3: cc:2a:c0:30:68:7b:99:ec:44:bd:01:52:09:bc:54:ae:cd:84: 59:f7:f0:6c:af:f3:71:81:23:92:54:1f:c8:d0:cd:a4:b8:29: 55:91:7b:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgISAZt/8m5oioY8WuGvMV67hxJ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMDRhNDA4MjFjNDE3NmNjNDJlMjU1ZWY2YzE3Mjc0NzNj M2YwMGEwHhcNMjYwMTAyMTgyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGU5MzQxMDYwOTA3YTJlMmYzOTg3YThkNWNjMzczYWE4NzIzNTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMrCb5ZNyw2Bt6Xtg4pveoxRelBb 8YkmA0+bkbqMYfEWH8o5w/zNyYXfEJ8+TC/aqEDdxZNlPm02WlRsUQrfLnUlWHWL bRsz0nEcrNlj8x4gx3Ttb8n4elEtSw9dA8F33a1qgRwspw/iaFf5Pso79YBCaGp8 I/aYo/UXpNEr5bSGwjd4UhSsR9FqmEd6J47DWYbn62NuyBwW4CHmDRcGAUL97DjF Ymj2OXCjRLh4WuJ3kObTYhfgVfikIS90GxmYePnUijMRS1zxEkoOZr4rXc+ACX8U dutZTLMnpObgA1q757iAb7R/eSwZwNl2UJKAyw3lHMjRz5VDRt90h/JEKwIDAQAB o4ICPjCCAjowHQYDVR0OBBYEFG3pNBBgkHouLzmHqNXMNzqocjVqMB8GA1UdIwQY MBaAFEEEpAghxBdsxC4lXvbBcnRzw/AKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMt YjI3ZDZlMjc4ZTE4LzEvYmVrMEVHQ1FlaTR2T1llbzFjdzNPcWh5TldvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS85Njk5NjItMTJkMy00MWIyLWFiNDMtYjI3ZDZlMjc4ZTE4 LzEvUVFTa0NDSEVGMnpFTGlWZTlzRnlkSFBEOEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAyBAIAATAsAwQFUndAAwQG VQ4AAwQGWfzAMAwDBACwQ+kDBACwQ+oDBAK5XIQDBAXCDOAwDQQCAAIwBwMFACAB GuAwDQYJKoZIhvcNAQELBQADggEBADjdZZbgdueZiDKtF7+IuU8gZoeZEwLmmbNP mXWbDc9rgeZwTNRMbnK3EOMLY1TEZ38elWkMdJSuxmigtQ8LyxVX5Iv0c+SlETYb VMByaRwj0iUFMM7jLfOUZtyOhiUoj52/zxgLSFs7YxO/WEvHWLXO6tpwD9RcKUDm jxNzWO67ncxVLXb2TY3pGV1zBrr9c5FaTcCVJdZAisv6Af1CLmKISV6LImj7e482 MbCT10MrVuxda6oY5Gawb5ZGrqUFCxxvve7uNEwDxEYia0zz62Dhrx4H39Yjo8wq wDBoe5nsRL0BUgm8VK7NhFn38Gyv83GBI5JUH8jQzaS4KVWRe2w= -----END CERTIFICATE-----Generated at Sun Jan 25 23:16:30 2026 by rpki-client