This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/Br3g91W4evf2A8FX4-nPHSqH7Oc.roa File: Br3g91W4evf2A8FX4-nPHSqH7Oc.roa (raw, json) Hash identifier: gTgHpNU+s78J1A+sPr7pjfV/Fs0kKMeRldiNIgByjo4= Subject key identifier: 06:BD:E0:F7:55:B8:7A:F7:F6:03:C1:57:E3:E9:CF:1D:2A:87:EC:E7 Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390 Certificate serial: 019B78A35DAFCC8CCA46C19EE8107596E514 Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/Br3g91W4evf2A8FX4-nPHSqH7Oc.roa Signing time: Thu 01 Jan 2026 08:18:50 +0000 ROA not before: Thu 01 Jan 2026 08:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211309 IP address blocks: 46.227.152.0/21 maxlen: 21 81.88.64.0/21 maxlen: 21 81.95.80.0/20 maxlen: 20 82.148.168.0/21 maxlen: 21 82.148.176.0/20 maxlen: 20 84.48.64.0/18 maxlen: 24 89.207.136.0/21 maxlen: 21 109.169.112.0/21 maxlen: 21 178.174.112.0/20 maxlen: 20 185.176.244.0/23 maxlen: 23 185.176.244.0/24 maxlen: 24 185.176.245.0/24 maxlen: 24 185.178.4.0/22 maxlen: 22 185.190.36.0/24 maxlen: 24 193.168.156.0/22 maxlen: 22 212.89.96.0/19 maxlen: 19 2a0a:2780::/31 maxlen: 31 2a0a:2780::/32 maxlen: 32 2a0a:2781::/32 maxlen: 32 2a10:d640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5d:af:cc:8c:ca:46:c1:9e:e8:10:75:96:e5:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390 Validity Not Before: Jan 1 08:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06bde0f755b87af7f603c157e3e9cf1d2a87ece7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:25:da:07:14:b3:a0:f4:8e:62:ea:8d:af:77: 3a:10:c3:d2:0e:d3:3d:5c:53:22:ad:34:b0:30:d4: 48:52:16:62:5b:7f:2b:b5:70:f4:b9:95:10:42:59: e4:6b:4e:c1:be:c4:e9:12:22:e6:9a:03:94:01:a4: f4:9f:f7:8f:52:95:0c:8c:64:b7:4b:75:d7:bc:a1: ca:25:fc:37:28:1e:1c:d4:78:4e:6f:c6:03:0d:51: 52:2a:13:7a:2e:71:c6:0e:ef:58:dc:c9:70:1f:cb: b7:9c:0f:23:49:0e:f5:c3:c6:8b:ab:3b:56:11:b5: 2e:02:c1:44:ac:10:0d:29:7d:c4:d9:b8:d8:74:fc: 95:f0:04:c6:59:09:35:40:4b:76:dd:94:83:99:42: 11:8f:ea:be:43:f3:db:c3:4e:57:86:86:ef:cd:74: df:1a:c3:bb:fa:6f:6a:01:e2:ff:17:e7:76:a1:fd: 65:2c:a0:78:4e:34:07:0e:80:21:df:0b:14:50:a4: be:74:a0:9b:81:2b:e3:14:37:3e:92:37:f3:65:79: 95:21:47:01:ba:78:93:e2:71:4d:19:ec:08:43:e0: 85:7d:1e:12:bd:37:86:6b:f0:f9:2b:3d:8a:93:a1: 44:d8:21:23:de:b4:cd:c5:cf:8a:10:37:0b:ed:cf: b7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:BD:E0:F7:55:B8:7A:F7:F6:03:C1:57:E3:E9:CF:1D:2A:87:EC:E7 X509v3 Authority Key Identifier: keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/Br3g91W4evf2A8FX4-nPHSqH7Oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.152.0/21 81.88.64.0/21 81.95.80.0/20 82.148.168.0-82.148.191.255 84.48.64.0/18 89.207.136.0/21 109.169.112.0/21 178.174.112.0/20 185.176.244.0/23 185.178.4.0/22 185.190.36.0/24 193.168.156.0/22 212.89.96.0/19 IPv6: 2a0a:2780::/31 2a10:d640::/29 Signature Algorithm: sha256WithRSAEncryption 14:ea:1c:e9:3a:a0:fb:f9:8b:0a:34:40:80:1e:0d:0a:73:7c: a9:90:34:59:6e:e2:71:dd:7f:c0:2e:af:c2:44:ee:0e:83:78: fb:7d:56:bf:1d:42:48:30:e9:4c:4f:29:37:69:40:54:ea:c1: 86:80:5f:8c:d2:c9:a0:e6:2a:2b:41:de:cc:a2:83:2b:c9:70: 92:82:d5:e2:08:f4:b8:b6:7a:f7:1b:25:74:61:27:a5:d5:a1: c4:f3:97:83:ad:05:e5:63:e7:44:a6:d4:c3:34:8a:d9:06:f0: 73:73:99:37:f0:25:ab:1c:05:4f:0a:cb:bf:b0:33:76:57:d7: 97:dc:93:7d:37:a7:6d:f1:a7:fb:da:92:9e:dc:a8:0f:ad:da: c7:52:ad:75:c2:63:e9:2d:87:f7:5e:24:43:3c:ea:74:07:fb: 2a:e2:cc:9e:fe:38:62:7d:02:f6:a1:f2:7e:b8:0c:e6:d0:4b: bf:a2:ca:fb:33:5a:8c:66:ce:4a:e4:46:ee:99:66:5f:f7:7c: 54:17:fb:62:03:25:3f:f2:2f:8a:bf:f9:ed:56:b5:ac:d4:95: 78:63:64:c9:01:11:35:68:8c:90:bc:a7:fe:8e:6b:22:3f:a1: fe:6b:34:21:70:36:9e:eb:5e:da:9c:44:8e:c2:c1:09:ae:c2: 43:ce:aa:80 -----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgISAZt4o12vzIzKRsGe6BB1luUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmODIwOGIxMjljNTNlODdjM2YwZDBlZDFiY2E4NTczMDE0 MGYzOTAwHhcNMjYwMTAxMDgxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmJkZTBmNzU1Yjg3YWY3ZjYwM2MxNTdlM2U5Y2YxZDJhODdlY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiXaBxSzoPSOYuqNr3c6EMPSDtM9 XFMirTSwMNRIUhZiW38rtXD0uZUQQlnka07BvsTpEiLmmgOUAaT0n/ePUpUMjGS3 S3XXvKHKJfw3KB4c1HhOb8YDDVFSKhN6LnHGDu9Y3MlwH8u3nA8jSQ71w8aLqztW EbUuAsFErBANKX3E2bjYdPyV8ATGWQk1QEt23ZSDmUIRj+q+Q/Pbw05XhobvzXTf GsO7+m9qAeL/F+d2of1lLKB4TjQHDoAh3wsUUKS+dKCbgSvjFDc+kjfzZXmVIUcB uniT4nFNGewIQ+CFfR4SvTeGa/D5Kz2Kk6FE2CEj3rTNxc+KEDcL7c+3wQIDAQAB o4ICcDCCAmwwHQYDVR0OBBYEFAa94PdVuHr39gPBV+Ppzx0qh+znMB8GA1UdIwQY MBaAFP+CCLEpxT6Hw/DQ7RvKhXMBQPOQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMt NDAxNTNjNWQwYTQ3LzEvQnIzZzkxVzRldmYyQThGWDQtblBIU3FIN09jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS85NjgwYzctNTdkNy00OWM2LThiNjMtNDAxNTNjNWQwYTQ3 LzEvXzRJSXNTbkZQb2ZEOE5EdEc4cUZjd0ZBODVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwXAQCAAEwVgMEAy7jmAME A1FYQAMEBFFfUDAMAwQDUpSoAwQGUpSAAwQGVDBAAwQDWc+IAwQDbalwAwQEsq5w AwQBubD0AwQCubIEAwQAub4kAwQCwaicAwQF1FlgMBQEAgACMA4DBQEqCieAAwUD KhDWQDANBgkqhkiG9w0BAQsFAAOCAQEAFOoc6Tqg+/mLCjRAgB4NCnN8qZA0WW7i cd1/wC6vwkTuDoN4+31Wvx1CSDDpTE8pN2lAVOrBhoBfjNLJoOYqK0HezKKDK8lw koLV4gj0uLZ69xsldGEnpdWhxPOXg60F5WPnRKbUwzSK2Qbwc3OZN/AlqxwFTwrL v7AzdlfXl9yTfTenbfGn+9qSntyoD63ax1KtdcJj6S2H914kQzzqdAf7KuLMnv44 Yn0C9qHyfrgM5tBLv6LK+zNajGbOSuRG7plmX/d8VBf7YgMlP/Ivir/57Va1rNSV eGNkyQERNWiMkLyn/o5rIj+h/ms0IXA2nute2pxEjsLBCa7CQ86qgA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:22 2026 by rpki-client