This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/FkBYBYI1w_8sdm78v5aJB0nOcFI.roa File: FkBYBYI1w_8sdm78v5aJB0nOcFI.roa (raw, json) Hash identifier: Fw6MQHjHYJDNyao+2q2Z1XBGBba4KG6qJIVCOw9sOiM= Subject key identifier: 16:40:58:05:82:35:C3:FF:2C:76:6E:FC:BF:96:89:07:49:CE:70:52 Certificate issuer: /CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Certificate serial: 019B797DF3C3EFF3B860F2594963F86BC103 Authority key identifier: 6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/FkBYBYI1w_8sdm78v5aJB0nOcFI.roa Signing time: Thu 01 Jan 2026 12:17:36 +0000 ROA not before: Thu 01 Jan 2026 12:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198913 IP address blocks: 31.220.147.0/24 maxlen: 24 46.243.120.0/21 maxlen: 21 46.243.121.0/24 maxlen: 24 46.243.122.0/24 maxlen: 24 46.243.123.0/24 maxlen: 24 46.243.124.0/24 maxlen: 24 46.243.125.0/24 maxlen: 24 46.243.126.0/24 maxlen: 24 46.243.127.0/24 maxlen: 24 185.132.24.0/22 maxlen: 22 185.132.24.0/24 maxlen: 24 185.132.25.0/24 maxlen: 24 185.132.26.0/24 maxlen: 24 185.132.27.0/24 maxlen: 24 185.173.228.0/22 maxlen: 22 185.173.228.0/24 maxlen: 24 185.173.229.0/24 maxlen: 24 185.173.230.0/24 maxlen: 24 185.173.231.0/24 maxlen: 24 217.19.13.0/24 maxlen: 24 2a03:d400::/32 maxlen: 32 2a03:d400:13::/48 maxlen: 48 2a03:d400:24::/48 maxlen: 48 2a03:d400:25::/48 maxlen: 48 2a03:d400:26::/48 maxlen: 48 2a03:d400:27::/48 maxlen: 48 2a03:d400:120::/48 maxlen: 48 2a03:d400:121::/48 maxlen: 48 2a03:d400:122::/48 maxlen: 48 2a03:d400:123::/48 maxlen: 48 2a03:d400:124::/48 maxlen: 48 2a03:d400:125::/48 maxlen: 48 2a03:d400:126::/48 maxlen: 48 2a03:d400:127::/48 maxlen: 48 2a03:d400:228::/48 maxlen: 48 2a03:d400:229::/48 maxlen: 48 2a03:d400:230::/48 maxlen: 48 2a03:d400:231::/48 maxlen: 48 2a03:d400:1337::/48 maxlen: 48 2a0b:6f00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.mft rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f3:c3:ef:f3:b8:60:f2:59:49:63:f8:6b:c1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e8b028d18274d21a7316aea3ccce9158b54f481 Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=164058058235c3ff2c766efcbf96890749ce7052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5b:af:25:c1:08:59:e0:da:4d:ff:cb:a2:18: 3f:b9:e4:8b:a7:23:d1:d4:42:67:e5:96:a8:61:cf: d5:86:e0:11:81:fb:9f:78:d5:5f:0f:37:44:9b:5e: 98:c8:50:78:dc:e6:8c:a9:c8:db:ea:2f:a0:e6:52: a2:0b:14:4e:49:f1:b9:41:85:95:89:e2:6f:69:81: 71:7e:56:46:83:fe:d0:44:7e:d7:61:b4:5f:01:92: 8a:88:bb:35:8c:17:1e:9f:4d:78:35:a2:81:59:fc: 5c:5b:38:be:78:47:30:84:13:6a:26:76:7f:ab:2f: b6:44:0b:bc:3b:2e:0b:74:24:f2:9a:3c:15:76:af: 64:c4:39:5e:7d:ec:e9:e0:ad:db:33:1d:4f:c7:d5: 9b:0c:16:0a:65:b6:96:94:10:37:a4:54:b6:af:4e: 1a:ef:ce:07:55:35:02:d3:a6:c5:bb:a7:23:7f:54: c5:6b:70:19:7c:25:ed:fe:b9:5b:b3:ba:bd:75:83: 44:67:f8:46:3b:00:7a:ae:4e:6b:eb:17:5f:e3:dc: 9f:d8:19:2b:4a:ec:fd:43:b2:b5:5e:59:3e:db:33: c5:d9:c6:12:c9:c8:c8:62:64:e8:9b:2f:b7:6a:03: b5:9e:d1:d2:4f:e9:9c:5e:42:8e:ad:ca:11:4f:51: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:40:58:05:82:35:C3:FF:2C:76:6E:FC:BF:96:89:07:49:CE:70:52 X509v3 Authority Key Identifier: keyid:6E:8B:02:8D:18:27:4D:21:A7:31:6A:EA:3C:CC:E9:15:8B:54:F4:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bosCjRgnTSGnMWrqPMzpFYtU9IE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/FkBYBYI1w_8sdm78v5aJB0nOcFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/096eaf-634b-4c49-b68e-c2c61518589f/1/bosCjRgnTSGnMWrqPMzpFYtU9IE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.220.147.0/24 46.243.120.0/21 185.132.24.0/22 185.173.228.0/22 217.19.13.0/24 IPv6: 2a03:d400::/32 2a0b:6f00::/29 Signature Algorithm: sha256WithRSAEncryption 27:ec:13:7b:3d:77:d2:3c:29:a4:b2:c5:09:25:d4:55:6f:43: b8:a3:7b:0b:c1:73:07:76:03:e8:f7:d6:d3:82:02:ef:4d:ea: 81:65:b0:a6:7a:25:4f:6a:ad:a0:d4:34:dd:e1:b2:64:05:fd: ba:f8:2c:3e:0c:3b:33:b1:b7:d2:50:d2:7c:65:5e:f3:0d:b9: 94:43:34:13:c0:a4:35:c5:ab:59:09:70:c7:98:ef:1e:32:b0: aa:95:ff:5c:36:54:9c:a0:46:d4:e2:6e:45:ee:f0:e4:42:73: ee:72:ad:9b:dc:27:d6:a5:ae:46:62:a6:25:f1:aa:3b:b2:78: 17:b2:6c:e1:f2:96:eb:bd:79:1e:5f:75:59:98:bc:be:db:39: da:b5:6f:95:10:f8:89:22:e5:dc:d5:ac:96:39:85:08:b1:5e: 9e:3b:4e:21:8e:d6:3c:71:13:62:bc:5c:c3:01:b3:c1:4f:b5: c3:e6:65:22:13:14:bd:d1:69:ce:13:f1:6b:70:e5:2f:bb:52: 89:8b:aa:80:c6:b0:c8:a6:0d:84:58:fd:7d:c0:01:c6:d1:5c: f9:10:a8:9b:1c:67:1e:b2:f2:b6:fc:5a:75:36:c5:ec:d6:5c: db:8d:b9:65:ff:e9:85:02:d0:da:14:cf:2f:63:2d:7f:cb:7c: 7d:37:dd:4f -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZt5ffPD7/O4YPJZSWP4a8EDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOGIwMjhkMTgyNzRkMjFhNzMxNmFlYTNjY2NlOTE1OGI1 NGY0ODEwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjQwNTgwNTgyMzVjM2ZmMmM3NjZlZmNiZjk2ODkwNzQ5Y2U3MDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1uvJcEIWeDaTf/Lohg/ueSLpyPR 1EJn5ZaoYc/VhuARgfufeNVfDzdEm16YyFB43OaMqcjb6i+g5lKiCxROSfG5QYWV ieJvaYFxflZGg/7QRH7XYbRfAZKKiLs1jBcen014NaKBWfxcWzi+eEcwhBNqJnZ/ qy+2RAu8Oy4LdCTymjwVdq9kxDlefezp4K3bMx1Px9WbDBYKZbaWlBA3pFS2r04a 784HVTUC06bFu6cjf1TFa3AZfCXt/rlbs7q9dYNEZ/hGOwB6rk5r6xdf49yf2Bkr Suz9Q7K1Xlk+2zPF2cYSycjIYmTomy+3agO1ntHST+mcXkKOrcoRT1HLhQIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFBZAWAWCNcP/LHZu/L+WiQdJznBSMB8GA1UdIwQY MBaAFG6LAo0YJ00hpzFq6jzM6RWLVPSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUt YzJjNjE1MTg1ODlmLzEvRmtCWUJZSTF3XzhzZG03OHY1YUpCMG5PY0ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8wOTZlYWYtNjM0Yi00YzQ5LWI2OGUtYzJjNjE1MTg1ODlm LzEvYm9zQ2pSZ25UU0duTVdycVBNenBGWXRVOUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQAH9yTAwQD LvN4AwQCuYQYAwQCua3kAwQA2RMNMBQEAgACMA4DBQAqA9QAAwUDKgtvADANBgkq hkiG9w0BAQsFAAOCAQEAJ+wTez130jwppLLFCSXUVW9DuKN7C8FzB3YD6PfW04IC 703qgWWwpnolT2qtoNQ03eGyZAX9uvgsPgw7M7G30lDSfGVe8w25lEM0E8CkNcWr WQlwx5jvHjKwqpX/XDZUnKBG1OJuRe7w5EJz7nKtm9wn1qWuRmKmJfGqO7J4F7Js 4fKW6715Hl91WZi8vts52rVvlRD4iSLl3NWsljmFCLFenjtOIY7WPHETYrxcwwGz wU+1w+ZlIhMUvdFpzhPxa3DlL7tSiYuqgMawyKYNhFj9fcABxtFc+RComxxnHrLy tvxadTbF7NZc2425Zf/phQLQ2hTPL2Mtf8t8fTfdTw== -----END CERTIFICATE-----Generated at Sun Jan 11 20:15:54 2026 by rpki-client