This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/pANXzrraCHYVkzSawo9c9dlj6zU.roa File: pANXzrraCHYVkzSawo9c9dlj6zU.roa (raw, json) Hash identifier: YNqSGiASHtu5lxBy3NZ+tm1+05tOP+o9p4uo5cI8CMs= Subject key identifier: A4:03:57:CE:BA:DA:08:76:15:93:34:9A:C2:8F:5C:F5:D9:63:EB:35 Certificate issuer: /CN=6dbc20a736ffc1319efde4db63137c8783c6b350 Certificate serial: 019B7A5AC45FA87742DCBA8DB3AE911034E3 Authority key identifier: 6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/pANXzrraCHYVkzSawo9c9dlj6zU.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47123 IP address blocks: 93.94.248.0/24 maxlen: 24 93.94.249.0/24 maxlen: 24 93.94.250.0/24 maxlen: 24 93.94.251.0/24 maxlen: 24 93.94.252.0/23 maxlen: 23 93.94.254.0/24 maxlen: 24 93.94.255.0/24 maxlen: 24 185.44.192.0/24 maxlen: 24 185.44.193.0/24 maxlen: 24 185.44.194.0/24 maxlen: 24 185.44.195.0/24 maxlen: 24 195.155.64.0/24 maxlen: 24 195.155.65.0/24 maxlen: 24 195.155.66.0/24 maxlen: 24 195.155.67.0/24 maxlen: 24 195.155.68.0/24 maxlen: 24 195.155.69.0/24 maxlen: 24 195.155.70.0/24 maxlen: 24 195.155.71.0/24 maxlen: 24 195.155.72.0/24 maxlen: 24 195.155.73.0/24 maxlen: 24 195.155.74.0/24 maxlen: 24 195.155.75.0/24 maxlen: 24 195.155.76.0/24 maxlen: 24 195.155.77.0/24 maxlen: 24 195.155.78.0/24 maxlen: 24 195.155.79.0/24 maxlen: 24 195.155.80.0/24 maxlen: 24 195.155.81.0/24 maxlen: 24 195.155.82.0/24 maxlen: 24 195.155.83.0/24 maxlen: 24 195.155.84.0/24 maxlen: 24 195.155.85.0/24 maxlen: 24 195.155.86.0/24 maxlen: 24 195.155.87.0/24 maxlen: 24 195.155.88.0/24 maxlen: 24 195.155.89.0/24 maxlen: 24 195.155.90.0/24 maxlen: 24 195.155.91.0/24 maxlen: 24 195.155.92.0/24 maxlen: 24 195.155.93.0/24 maxlen: 24 195.155.94.0/24 maxlen: 24 195.155.95.0/24 maxlen: 24 2a04:c0::/32 maxlen: 32 2a04:c1::/32 maxlen: 32 2a04:c2::/32 maxlen: 32 2a04:c3::/32 maxlen: 32 2a04:c4::/32 maxlen: 32 2a04:c5::/32 maxlen: 32 2a04:c6::/32 maxlen: 32 2a04:c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.mft rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c4:5f:a8:77:42:dc:ba:8d:b3:ae:91:10:34:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbc20a736ffc1319efde4db63137c8783c6b350 Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a40357cebada08761593349ac28f5cf5d963eb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:42:77:d4:33:ce:9d:8f:25:b8:ce:59:bc:9e: 77:27:95:d0:c0:48:4a:09:62:b0:31:a0:81:bd:5a: b2:01:b3:ed:d6:4d:f2:7f:21:ef:29:cf:dd:f4:dc: 8f:3b:f6:9a:80:fb:05:da:4b:53:7b:c7:d2:f8:82: 2f:94:c5:9c:6f:01:d8:bb:3b:ea:52:69:00:86:aa: cb:61:e4:81:91:8e:0f:79:a9:43:10:eb:16:19:40: c1:c8:d1:10:5b:d1:af:dc:f0:2a:48:e2:3f:8e:d1: 83:3e:fc:91:1e:17:ac:4e:ba:95:24:3b:2b:dc:9f: ac:69:98:1c:2d:45:7d:22:d3:83:e8:3b:c1:3c:89: 3d:83:b3:36:23:ac:46:80:83:dd:9a:db:a3:51:98: a8:5d:84:17:77:ef:f2:3c:b3:31:fe:b3:16:c8:06: 87:0c:ea:a5:25:9f:7e:2a:f5:9f:c8:3b:f9:31:31: 5e:27:b4:a5:fb:80:89:1f:ba:fa:65:80:04:6e:25: ff:55:46:76:24:fd:fc:c5:f3:d5:46:3a:56:8c:5c: b4:db:3b:5f:76:2d:8a:48:a9:43:b0:e9:f5:5a:05: 82:18:81:39:76:d2:e0:76:d7:98:5a:7b:98:1c:fd: 63:63:7a:e4:20:03:c8:0a:7d:d1:d2:7b:64:41:ea: 12:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:03:57:CE:BA:DA:08:76:15:93:34:9A:C2:8F:5C:F5:D9:63:EB:35 X509v3 Authority Key Identifier: keyid:6D:BC:20:A7:36:FF:C1:31:9E:FD:E4:DB:63:13:7C:87:83:C6:B3:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bbwgpzb_wTGe_eTbYxN8h4PGs1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/pANXzrraCHYVkzSawo9c9dlj6zU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/898101-78ac-4a03-b3f9-a54ec0d68fa8/1/bbwgpzb_wTGe_eTbYxN8h4PGs1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.94.248.0/21 185.44.192.0/22 195.155.64.0/19 IPv6: 2a04:c0::/29 Signature Algorithm: sha256WithRSAEncryption 3a:5f:56:83:bf:e5:1d:3b:93:1a:6c:c1:27:4d:23:66:13:37: 9f:7c:6f:f2:ac:c7:a1:2f:02:3d:b7:79:6e:ce:05:97:3f:5c: 11:73:8f:da:7b:9e:4c:ef:7b:39:28:b3:af:cc:c0:55:36:ab: e5:b2:65:8f:ec:28:cb:06:12:75:e7:fc:5b:48:c5:83:c6:38: 07:9e:37:ba:43:3b:03:f6:1c:2c:93:d7:d7:9b:2e:fb:21:df: be:1c:1a:c7:0d:cd:d6:2c:22:01:6a:38:5e:1f:34:a6:86:2d: 91:0b:0d:cf:a6:6d:32:2d:17:1e:43:a3:b9:46:3c:38:f7:9f: b2:2e:9f:be:3e:9b:91:a6:0d:fb:b2:01:52:e9:ad:46:8d:53: d1:4b:ae:83:c6:58:c7:56:92:59:98:f7:7e:f5:74:84:43:4a: da:47:bf:e5:40:1b:2f:07:61:20:e6:12:a9:34:bd:b3:e0:26: d7:1c:e4:6e:c4:a7:74:88:d1:cc:ff:66:01:0e:92:92:16:d4: 54:cf:82:46:b2:7f:3c:44:1a:25:c6:70:56:20:21:24:ae:36: fb:a8:7d:33:9a:5c:40:dc:4c:be:d3:4b:9a:dc:61:73:36:73: 05:d1:9e:16:74:32:66:10:37:02:71:c8:54:f9:56:0b:78:1b: c4:24:c9:2c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6WsRfqHdC3LqNs66REDTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmMyMGE3MzZmZmMxMzE5ZWZkZTRkYjYzMTM3Yzg3ODNj NmIzNTAwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDAzNTdjZWJhZGEwODc2MTU5MzM0OWFjMjhmNWNmNWQ5NjNlYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkJ31DPOnY8luM5ZvJ53J5XQwEhK CWKwMaCBvVqyAbPt1k3yfyHvKc/d9NyPO/aagPsF2ktTe8fS+IIvlMWcbwHYuzvq UmkAhqrLYeSBkY4PealDEOsWGUDByNEQW9Gv3PAqSOI/jtGDPvyRHhesTrqVJDsr 3J+saZgcLUV9ItOD6DvBPIk9g7M2I6xGgIPdmtujUZioXYQXd+/yPLMx/rMWyAaH DOqlJZ9+KvWfyDv5MTFeJ7Sl+4CJH7r6ZYAEbiX/VUZ2JP38xfPVRjpWjFy02ztf di2KSKlDsOn1WgWCGIE5dtLgdteYWnuYHP1jY3rkIAPICn3R0ntkQeoStwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFKQDV8662gh2FZM0msKPXPXZY+s1MB8GA1UdIwQY MBaAFG28IKc2/8Exnv3k22MTfIeDxrNQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjkt YTU0ZWMwZDY4ZmE4LzEvcEFOWHpycmFDSFlWa3pTYXdvOWM5ZGxqNnpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny84OTgxMDEtNzhhYy00YTAzLWIzZjktYTU0ZWMwZDY4ZmE4 LzEvYmJ3Z3B6Yl93VEdlX2VUYll4TjhoNFBHczFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXV74AwQC uSzAAwQFw5tAMA0EAgACMAcDBQMqBADAMA0GCSqGSIb3DQEBCwUAA4IBAQA6X1aD v+UdO5MabMEnTSNmEzeffG/yrMehLwI9t3luzgWXP1wRc4/ae55M73s5KLOvzMBV NqvlsmWP7CjLBhJ15/xbSMWDxjgHnje6QzsD9hwsk9fXmy77Id++HBrHDc3WLCIB ajheHzSmhi2RCw3Ppm0yLRceQ6O5Rjw495+yLp++PpuRpg37sgFS6a1GjVPRS66D xljHVpJZmPd+9XSEQ0raR7/lQBsvB2Eg5hKpNL2z4CbXHORuxKd0iNHM/2YBDpKS FtRUz4JGsn88RBolxnBWICEkrjb7qH0zmlxA3Ey+00ua3GFzNnMF0Z4WdDJmEDcC cchU+VYLeBvEJMks -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:12 2026 by rpki-client