This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa File: bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa (raw, json) Hash identifier: r7Sj8QDfOv47ukm7JPjkhOqWA6IS83uFm5HbMPx38z8= Subject key identifier: 6D:F8:6D:39:F6:E6:45:A5:0A:D3:36:AF:47:A4:70:05:77:88:43:EC Certificate issuer: /CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4 Certificate serial: 019B7B36656B1A74DEB701B1550E8EC87771 Authority key identifier: F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa Signing time: Thu 01 Jan 2026 20:18:41 +0000 ROA not before: Thu 01 Jan 2026 20:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7979 IP address blocks: 164.138.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.mft rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:65:6b:1a:74:de:b7:01:b1:55:0e:8e:c8:77:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f05a17dd3beb8dc848fbe7629061d6080141e7d4 Validity Not Before: Jan 1 20:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6df86d39f6e645a50ad336af47a47005778843ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7c:57:22:28:ba:ea:2c:fb:8c:f1:1d:af:60: 89:e0:e6:c0:5a:35:c9:ea:a2:5c:2b:8c:e7:e8:c2: bb:07:9f:a3:62:56:a6:9c:44:64:f4:fb:de:24:5c: 6e:f5:5d:4d:d7:95:3b:58:32:33:81:eb:95:e7:3e: 9f:d8:c2:7c:c2:be:e8:79:32:56:9f:19:d0:05:91: 1d:cf:74:4c:f9:d4:88:6c:f7:5e:9e:a1:d8:25:ad: c0:5e:0d:65:e2:56:e6:80:03:44:1c:8d:80:28:3a: 79:0f:41:d9:62:dc:84:4f:df:5c:32:5a:91:50:bd: d1:7b:cb:e7:bf:65:25:93:e6:e7:28:ea:80:98:01: 3c:b8:7d:d7:a7:f8:be:3b:5f:3a:fb:ed:f7:0c:97: fb:b6:65:93:b2:33:cd:4f:64:45:40:b2:89:0a:93: 15:b0:a7:88:a4:b1:0c:f2:f6:c6:23:eb:39:1c:f5: 24:7d:08:bd:99:82:28:34:bd:f0:10:d6:4b:7e:33: 5d:b6:ac:2f:e4:13:e0:aa:30:37:a6:5a:6a:e5:19: 68:1d:1d:5a:a1:fc:af:3e:f5:83:b1:1c:6f:c3:ae: 02:4c:0f:9c:b4:ca:f0:28:b3:8a:81:74:a9:45:54: f2:a4:6c:b5:e2:d0:8a:91:18:82:f6:60:92:fe:e5: 7e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F8:6D:39:F6:E6:45:A5:0A:D3:36:AF:47:A4:70:05:77:88:43:EC X509v3 Authority Key Identifier: keyid:F0:5A:17:DD:3B:EB:8D:C8:48:FB:E7:62:90:61:D6:08:01:41:E7:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FoX3TvrjchI--dikGHWCAFB59Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/bfhtOfbmRaUK0zavR6RwBXeIQ-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/2b2cdf-2ee5-4689-863b-3d13e9776ff7/1/8FoX3TvrjchI--dikGHWCAFB59Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.138.99.0/24 Signature Algorithm: sha256WithRSAEncryption b8:06:30:ae:e9:db:ca:a7:71:db:05:e0:3d:a8:7a:79:e8:33: 25:26:25:4f:0a:ea:19:56:99:e8:89:ea:81:5c:d0:77:c1:9c: da:1a:99:f5:e6:01:19:32:54:9a:53:5e:d1:f9:8f:f1:ff:ab: f5:81:56:df:38:d4:ff:6d:5d:aa:b5:3c:be:b0:c5:ee:59:c3: 5a:9f:45:37:c8:9d:da:ca:a9:22:94:64:d3:ba:c9:2a:96:4e: 5f:36:f9:a7:71:74:de:0f:fa:79:fa:d4:4c:86:72:94:c7:f4: 07:94:76:d9:a4:a0:2e:cc:b7:e9:33:7b:fc:b2:f4:85:ce:d2: 0d:42:35:de:0d:f6:d5:d2:7a:56:c1:46:b6:d5:ff:06:0e:bf: 2d:1c:79:42:8a:ac:de:69:54:aa:59:10:55:77:58:a1:7d:76: 04:f5:bc:44:2e:c8:3b:2e:59:b0:0d:0d:28:dd:70:a4:3d:2e: d9:32:ef:90:57:05:29:01:1f:d1:6d:7f:f6:ea:58:b3:f7:32: 44:ca:ea:64:74:66:93:e4:de:c6:22:e5:9e:09:1d:26:be:c5: 7c:85:73:18:7c:0d:18:fe:d1:82:a3:09:2e:75:3c:a2:e0:02: cc:ab:98:b3:9f:4e:00:4c:45:53:06:0d:92:5c:4f:78:08:8e: 7f:1a:bc:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NmVrGnTetwGxVQ6OyHdxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNWExN2RkM2JlYjhkYzg0OGZiZTc2MjkwNjFkNjA4MDE0 MWU3ZDQwHhcNMjYwMTAxMjAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGY4NmQzOWY2ZTY0NWE1MGFkMzM2YWY0N2E0NzAwNTc3ODg0M2VjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXxXIii66iz7jPEdr2CJ4ObAWjXJ 6qJcK4zn6MK7B5+jYlamnERk9PveJFxu9V1N15U7WDIzgeuV5z6f2MJ8wr7oeTJW nxnQBZEdz3RM+dSIbPdenqHYJa3AXg1l4lbmgANEHI2AKDp5D0HZYtyET99cMlqR UL3Re8vnv2Ulk+bnKOqAmAE8uH3Xp/i+O186++33DJf7tmWTsjPNT2RFQLKJCpMV sKeIpLEM8vbGI+s5HPUkfQi9mYIoNL3wENZLfjNdtqwv5BPgqjA3plpq5RloHR1a ofyvPvWDsRxvw64CTA+ctMrwKLOKgXSpRVTypGy14tCKkRiC9mCS/uV+qQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG34bTn25kWlCtM2r0ekcAV3iEPsMB8GA1UdIwQY MBaAFPBaF907643ISPvnYpBh1ggBQefUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8yYjJjZGYtMmVlNS00Njg5LTg2M2It M2QxM2U5Nzc2ZmY3LzEvYmZodE9mYm1SYVVLMHphdlI2UndCWGVJUS13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8yYjJjZGYtMmVlNS00Njg5LTg2M2ItM2QxM2U5Nzc2ZmY3 LzEvOEZvWDNUdnJqY2hJLS1kaWtHSFdDQUZCNTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApIpjMA0G CSqGSIb3DQEBCwUAA4IBAQC4BjCu6dvKp3HbBeA9qHp56DMlJiVPCuoZVpnoieqB XNB3wZzaGpn15gEZMlSaU17R+Y/x/6v1gVbfONT/bV2qtTy+sMXuWcNan0U3yJ3a yqkilGTTuskqlk5fNvmncXTeD/p5+tRMhnKUx/QHlHbZpKAuzLfpM3v8svSFztIN QjXeDfbV0npWwUa21f8GDr8tHHlCiqzeaVSqWRBVd1ihfXYE9bxELsg7LlmwDQ0o 3XCkPS7ZMu+QVwUpAR/RbX/26liz9zJEyupkdGaT5N7GIuWeCR0mvsV8hXMYfA0Y /tGCowkudTyi4ALMq5izn04ATEVTBg2SXE94CI5/Grwi -----END CERTIFICATE-----Generated at Sun Jan 25 11:41:43 2026 by rpki-client