This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/bsAUJqT82uygfIT_yoGEMk4m0EY.roa File: bsAUJqT82uygfIT_yoGEMk4m0EY.roa (raw, json) Hash identifier: MzJzFvCooXSnxfioMsBjoFnTRbQIMTZe4aChVxje5Qo= Subject key identifier: 6E:C0:14:26:A4:FC:DA:EC:A0:7C:84:FF:CA:81:84:32:4E:26:D0:46 Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00 Certificate serial: 019B78A30B2B790F756D16ADE908CBDC6598 Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/bsAUJqT82uygfIT_yoGEMk4m0EY.roa Signing time: Thu 01 Jan 2026 08:18:29 +0000 ROA not before: Thu 01 Jan 2026 08:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201841 IP address blocks: 195.146.135.0/24 maxlen: 24 195.146.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:0b:2b:79:0f:75:6d:16:ad:e9:08:cb:dc:65:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00 Validity Not Before: Jan 1 08:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ec01426a4fcdaeca07c84ffca8184324e26d046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f8:47:5d:10:af:49:c1:da:75:f4:24:42:70: a3:54:79:af:9f:7d:80:9d:47:9b:ed:7d:ea:99:ab: 14:35:64:ed:9c:f6:aa:3c:bd:c5:c3:2b:07:40:c0: 74:ac:7f:51:f9:23:e7:83:5c:17:79:77:b7:06:49: cd:bd:c2:f1:59:30:c4:0e:2c:f6:47:ef:6e:ae:5d: f8:5e:ea:6e:08:bd:5b:77:6f:09:18:4b:93:d3:65: 08:39:6f:7d:79:ea:34:52:6c:94:5f:38:fe:52:f8: bf:68:30:1e:0a:52:1b:a1:e9:0a:16:b6:d8:be:8f: 45:e5:6e:e4:74:93:dc:08:08:a8:f6:c0:ec:12:46: 88:0c:21:1b:24:1c:65:9e:c3:54:57:ab:04:e7:55: 1c:0d:eb:6b:dc:e9:9f:e2:91:de:11:71:42:5c:dc: c1:96:f0:a5:1c:7f:86:f5:8a:d2:90:cf:d5:02:0b: fd:81:e2:a4:ff:57:cd:5b:43:92:df:21:3c:d7:ca: 76:eb:87:2e:84:18:33:7d:16:bc:d6:43:90:4a:bf: 5d:2b:a2:33:1f:1c:c8:f0:0f:c4:3f:dc:9c:80:fc: c5:45:6c:4b:a5:f9:18:0f:e8:24:50:0a:f1:76:ff: 85:f6:8f:c3:10:a6:c7:6e:25:5f:36:51:e9:e0:57: fc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C0:14:26:A4:FC:DA:EC:A0:7C:84:FF:CA:81:84:32:4E:26:D0:46 X509v3 Authority Key Identifier: keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/bsAUJqT82uygfIT_yoGEMk4m0EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.146.135.0/24 195.146.144.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:2b:b9:73:1e:cb:d3:9c:49:6c:4f:bd:b5:cd:62:30:e1:0c: a0:2e:9d:18:38:c3:2c:94:a7:72:8c:22:53:7a:52:e2:80:97: d0:65:79:aa:e2:65:73:d5:77:a4:fd:63:fd:8f:0a:48:05:41: 8a:93:ca:ab:e6:29:a4:39:ed:66:f3:37:da:76:ba:8a:d0:56: ae:0a:b3:09:7b:f8:bd:85:c6:dc:25:56:47:b6:28:73:c0:2b: 29:3c:12:53:fa:93:5c:d8:7a:71:6b:2a:eb:fb:9a:19:7f:13: 61:28:1b:53:c9:12:de:25:cc:ae:8a:32:16:1b:c2:b4:c2:6d: be:b5:6b:84:75:dd:9e:4b:75:3d:97:d0:30:56:cd:84:3c:c0: 27:53:a3:5c:88:67:56:04:a6:fb:0b:94:16:7a:6e:d8:22:05: c9:bb:cd:ed:af:38:d5:94:61:92:c1:75:32:21:e5:4f:c6:82: 89:d1:03:3f:40:39:05:55:b5:71:2b:37:99:fc:69:2a:18:cd: 92:78:bd:01:e6:b7:54:fe:37:c3:7b:0f:6b:c1:35:f5:ad:21: 22:c2:a0:81:6c:0b:97:38:ed:2e:b9:e0:1a:0d:cf:e6:87:b3: 84:9a:8f:af:95:72:95:8e:1b:76:12:72:c1:b8:b7:75:1e:ad: 61:de:1f:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4owsreQ91bRat6QjL3GWYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNTY0NmY3ZDhhZmMwYTkzM2ZiMzMzMzNmMzcwMTNkODNh MDRkMDAwHhcNMjYwMTAxMDgxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWMwMTQyNmE0ZmNkYWVjYTA3Yzg0ZmZjYTgxODQzMjRlMjZkMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfhHXRCvScHadfQkQnCjVHmvn32A nUeb7X3qmasUNWTtnPaqPL3FwysHQMB0rH9R+SPng1wXeXe3BknNvcLxWTDEDiz2 R+9url34XupuCL1bd28JGEuT02UIOW99eeo0UmyUXzj+Uvi/aDAeClIboekKFrbY vo9F5W7kdJPcCAio9sDsEkaIDCEbJBxlnsNUV6sE51UcDetr3Omf4pHeEXFCXNzB lvClHH+G9YrSkM/VAgv9geKk/1fNW0OS3yE818p264cuhBgzfRa81kOQSr9dK6Iz HxzI8A/EP9ycgPzFRWxLpfkYD+gkUArxdv+F9o/DEKbHbiVfNlHp4Ff8wwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG7AFCak/NrsoHyE/8qBhDJOJtBGMB8GA1UdIwQY MBaAFJ9WRvfYr8CpM/szMz83AT2DoE0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUt N2QzMmNhMDY1YjY2LzEvYnNBVUpxVDgydXlnZklUX3lvR0VNazRtMEVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUtN2QzMmNhMDY1YjY2 LzEvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAw5KHAwQA w5KQMA0GCSqGSIb3DQEBCwUAA4IBAQAuK7lzHsvTnElsT721zWIw4QygLp0YOMMs lKdyjCJTelLigJfQZXmq4mVz1Xek/WP9jwpIBUGKk8qr5imkOe1m8zfadrqK0Fau CrMJe/i9hcbcJVZHtihzwCspPBJT+pNc2Hpxayrr+5oZfxNhKBtTyRLeJcyuijIW G8K0wm2+tWuEdd2eS3U9l9AwVs2EPMAnU6NciGdWBKb7C5QWem7YIgXJu83trzjV lGGSwXUyIeVPxoKJ0QM/QDkFVbVxKzeZ/GkqGM2SeL0B5rdU/jfDew9rwTX1rSEi wqCBbAuXOO0uueAaDc/mh7OEmo+vlXKVjht2EnLBuLd1Hq1h3h95 -----END CERTIFICATE-----Generated at Mon Jan 26 17:45:37 2026 by rpki-client