This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/bzrcQBxEeP7e5GO2MYeV49qfPAs.roa File: bzrcQBxEeP7e5GO2MYeV49qfPAs.roa (raw, json) Hash identifier: tGZRFOsNmFJrPLjmDFrmBqj0q5Dc7e6pTygfQeaYSyo= Subject key identifier: 6F:3A:DC:40:1C:44:78:FE:DE:E4:63:B6:31:87:95:E3:DA:9F:3C:0B Certificate issuer: /CN=71175c0835271818bbd38d6ded7f95abbc55744f Certificate serial: 019B9D8BF2C1B08BA299A048EC5AEF879158 Authority key identifier: 71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/bzrcQBxEeP7e5GO2MYeV49qfPAs.roa Signing time: Thu 08 Jan 2026 12:19:13 +0000 ROA not before: Thu 08 Jan 2026 12:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43171 IP address blocks: 46.175.224.0/20 maxlen: 20 91.221.172.0/23 maxlen: 23 185.59.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.mft rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9d:8b:f2:c1:b0:8b:a2:99:a0:48:ec:5a:ef:87:91:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71175c0835271818bbd38d6ded7f95abbc55744f Validity Not Before: Jan 8 12:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f3adc401c4478fedee463b6318795e3da9f3c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:79:2b:4d:bc:e2:da:72:91:87:0d:3b:8d:29: c5:10:8d:db:bb:b0:23:3d:eb:1e:30:4a:86:e2:b3: 60:64:91:4f:d1:a1:03:ee:20:a4:cd:fc:58:1e:85: 68:0c:6a:30:c9:5a:3d:d1:40:5b:04:7b:2b:00:46: 70:78:89:a5:7b:a2:4c:9f:b1:4c:08:f8:4d:3a:7d: 92:00:b3:52:34:13:17:d1:92:fb:dd:8d:1e:e0:a5: dd:5f:9b:63:66:fa:2c:9f:77:c2:2c:e1:95:d6:47: 0c:ce:1b:70:0a:00:b8:f2:37:c3:4e:da:f8:d5:e1: 65:de:2e:8d:6c:e8:95:ba:13:b9:9e:be:b5:03:29: 05:47:aa:99:e1:c2:2c:c9:d3:2e:33:d1:2a:29:d1: ef:35:7b:ae:7c:12:de:f2:56:00:67:ba:7d:ec:28: db:67:31:2a:d9:04:43:b0:2a:66:00:a7:78:e6:c5: 6d:77:0a:24:54:06:b3:af:4e:a5:18:41:0c:1b:c9: 84:38:86:da:8f:65:25:27:1d:54:99:65:1e:80:4d: 6e:5c:c9:e5:7f:08:f6:da:aa:d1:64:09:8e:ef:99: 6d:37:36:55:67:31:e9:7f:df:4b:84:79:13:a9:36: ad:08:68:3c:0f:9c:97:f7:91:69:08:b5:8b:1c:b6: 38:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:3A:DC:40:1C:44:78:FE:DE:E4:63:B6:31:87:95:E3:DA:9F:3C:0B X509v3 Authority Key Identifier: keyid:71:17:5C:08:35:27:18:18:BB:D3:8D:6D:ED:7F:95:AB:BC:55:74:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRdcCDUnGBi7041t7X-Vq7xVdE8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/bzrcQBxEeP7e5GO2MYeV49qfPAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9d544a-229d-476a-b02f-1942e089f0b0/1/cRdcCDUnGBi7041t7X-Vq7xVdE8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.224.0/20 91.221.172.0/23 185.59.108.0/22 Signature Algorithm: sha256WithRSAEncryption 87:78:9e:9a:d0:00:6b:04:57:7e:c9:9e:cf:52:ad:d8:9b:a7: a1:3b:26:50:1b:9f:17:6f:87:30:d9:53:61:30:2d:26:54:a5: 5b:25:7d:3c:56:92:20:44:df:7b:e4:8c:91:a3:db:91:b8:21: 8d:24:4f:62:ee:cb:37:a3:70:b0:6c:52:a8:c1:b1:b3:1e:a6: 90:80:82:72:1b:d8:ea:f7:ca:8f:5c:43:fc:55:59:33:20:e4: c8:c9:a4:54:54:28:c1:84:bd:c6:bd:76:02:75:b6:f5:99:fd: 25:9c:6e:1f:1d:61:2c:f3:92:85:18:fe:ec:65:3d:b0:6b:44: 80:a8:7c:94:18:9a:e3:67:39:37:1f:e6:c8:cf:d4:18:3d:66: ae:e7:06:38:80:95:89:c4:5c:e6:58:75:d7:48:74:04:aa:a6: 42:b0:89:8c:b7:e6:a9:76:1e:94:e9:6c:3e:c3:73:13:f1:f5: fd:0e:93:1a:52:a3:52:3f:ca:9e:a4:82:85:ba:57:2e:ba:1b: ed:e7:29:57:5b:63:02:10:34:bf:4a:89:88:9f:37:33:9f:02: 40:8d:d3:75:3e:e9:9e:d9:b2:2f:2b:91:7a:12:98:44:81:63: 12:19:62:c2:f5:27:85:db:a0:3e:d1:c1:f6:91:10:d8:90:4c: 28:cf:d4:b1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZudi/LBsIuimaBI7Frvh5FYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTc1YzA4MzUyNzE4MThiYmQzOGQ2ZGVkN2Y5NWFiYmM1 NTc0NGYwHhcNMjYwMTA4MTIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjNhZGM0MDFjNDQ3OGZlZGVlNDYzYjYzMTg3OTVlM2RhOWYzYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnkrTbzi2nKRhw07jSnFEI3bu7Aj PeseMEqG4rNgZJFP0aED7iCkzfxYHoVoDGowyVo90UBbBHsrAEZweImle6JMn7FM CPhNOn2SALNSNBMX0ZL73Y0e4KXdX5tjZvosn3fCLOGV1kcMzhtwCgC48jfDTtr4 1eFl3i6NbOiVuhO5nr61AykFR6qZ4cIsydMuM9EqKdHvNXuufBLe8lYAZ7p97Cjb ZzEq2QRDsCpmAKd45sVtdwokVAazr06lGEEMG8mEOIbaj2UlJx1UmWUegE1uXMnl fwj22qrRZAmO75ltNzZVZzHpf99LhHkTqTatCGg8D5yX95FpCLWLHLY4/QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG863EAcRHj+3uRjtjGHlePanzwLMB8GA1UdIwQY MBaAFHEXXAg1JxgYu9ONbe1/lau8VXRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYt MTk0MmUwODlmMGIwLzEvYnpyY1FCeEVlUDdlNUdPMk1ZZVY0OXFmUEFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85ZDU0NGEtMjI5ZC00NzZhLWIwMmYtMTk0MmUwODlmMGIw LzEvY1JkY0NEVW5HQmk3MDQxdDdYLVZxN3hWZEU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQELq/gAwQB W92sAwQCuTtsMA0GCSqGSIb3DQEBCwUAA4IBAQCHeJ6a0ABrBFd+yZ7PUq3Ym6eh OyZQG58Xb4cw2VNhMC0mVKVbJX08VpIgRN975IyRo9uRuCGNJE9i7ss3o3CwbFKo wbGzHqaQgIJyG9jq98qPXEP8VVkzIOTIyaRUVCjBhL3GvXYCdbb1mf0lnG4fHWEs 85KFGP7sZT2wa0SAqHyUGJrjZzk3H+bIz9QYPWau5wY4gJWJxFzmWHXXSHQEqqZC sImMt+apdh6U6Ww+w3MT8fX9DpMaUqNSP8qepIKFulcuuhvt5ylXW2MCEDS/SomI nzcznwJAjdN1Pume2bIvK5F6EphEgWMSGWLC9SeF26A+0cH2kRDYkEwoz9Sx -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:19 2026 by rpki-client