This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/BU1_bDFU6vflOkzUwIXSHb0FY3g.roa File: BU1_bDFU6vflOkzUwIXSHb0FY3g.roa (raw, json) Hash identifier: Cc5Z9uPct4eSTXCrQaUv8nKSh9r+kgrw5uVAV3eQfow= Subject key identifier: 05:4D:7F:6C:31:54:EA:F7:E5:3A:4C:D4:C0:85:D2:1D:BD:05:63:78 Certificate issuer: /CN=706d64134faa746293c0384edac0371950f3b224 Certificate serial: 019B7B36A6B92E7A4AB9AADFFF61369F562F Authority key identifier: 70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/BU1_bDFU6vflOkzUwIXSHb0FY3g.roa Signing time: Thu 01 Jan 2026 20:18:57 +0000 ROA not before: Thu 01 Jan 2026 20:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203231 IP address blocks: 193.218.160.0/20 maxlen: 20 193.218.160.0/24 maxlen: 24 193.218.161.0/24 maxlen: 24 2a0a:5180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:a6:b9:2e:7a:4a:b9:aa:df:ff:61:36:9f:56:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d64134faa746293c0384edac0371950f3b224 Validity Not Before: Jan 1 20:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=054d7f6c3154eaf7e53a4cd4c085d21dbd056378 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bc:0e:6f:33:a7:96:a2:3a:c9:37:f8:c3:d6: 37:ca:cb:a7:f4:5c:f2:24:8e:79:2d:e3:86:bf:56: ff:19:a9:47:2b:99:5b:84:49:ae:71:d3:4e:31:d6: a9:9d:08:1e:0e:7b:3b:71:08:37:be:ea:cb:4d:55: ac:95:8c:ca:76:70:04:c6:69:bc:99:df:a0:b3:b3: c6:21:4f:9d:c6:b0:4f:97:e5:f4:ce:1f:de:73:f8: a5:8f:48:bf:77:4b:4a:6b:4c:19:42:21:4a:aa:1a: c8:b9:cf:b7:ee:9a:35:c0:f1:73:0a:6f:ca:f1:4c: a7:16:6c:12:c6:d7:c7:cd:0a:12:c3:9b:aa:1f:f2: fa:64:51:4e:bb:0f:15:97:f5:f3:0b:bf:4f:93:e8: ef:ba:f9:58:74:1a:ed:79:08:bb:c1:63:6f:45:16: 44:02:19:11:5b:54:53:9b:24:f9:10:80:3f:c5:88: 4f:e2:6b:4b:f9:89:01:7d:60:a6:91:94:1e:cf:8d: 28:d5:d3:14:8f:dc:48:42:14:51:52:81:a7:31:d3: e2:b3:82:93:63:b9:d0:9b:69:bb:3d:fd:95:93:e6: 15:db:9c:d2:79:1b:48:d1:38:1a:a4:62:a6:b5:cc: 4a:b7:27:7a:22:ef:4d:08:96:0f:e9:61:3b:02:eb: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:4D:7F:6C:31:54:EA:F7:E5:3A:4C:D4:C0:85:D2:1D:BD:05:63:78 X509v3 Authority Key Identifier: keyid:70:6D:64:13:4F:AA:74:62:93:C0:38:4E:DA:C0:37:19:50:F3:B2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/BU1_bDFU6vflOkzUwIXSHb0FY3g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3298e3-9a50-4cfb-84e6-d137ade166d1/1/cG1kE0-qdGKTwDhO2sA3GVDzsiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.218.160.0/20 IPv6: 2a0a:5180::/29 Signature Algorithm: sha256WithRSAEncryption 2e:88:c1:de:83:c4:d4:7d:84:f0:d6:46:69:f6:68:61:49:f4: bd:3a:b3:cf:c9:1e:b5:c7:99:00:53:b1:85:cf:7a:d7:30:6f: 3c:16:6f:9c:89:7e:f8:ea:e7:34:db:ff:ed:d4:06:6c:9f:46: fa:e1:e5:d2:4f:ab:b9:17:70:9b:a7:4a:08:fe:55:6e:0b:e0: 9e:27:85:1f:c5:3b:0c:8e:98:c4:a8:3b:10:ee:be:96:53:40: 0d:28:fe:ef:d0:83:ed:1d:8b:f1:81:03:06:04:9c:ad:c8:4e: 86:59:63:2a:a1:a0:db:25:80:6b:39:c6:8a:36:c4:86:43:cf: d2:10:1b:12:e6:79:c3:bf:8c:ff:4e:23:27:6f:66:f2:c8:17: f2:e2:2a:15:8b:6e:e7:92:81:38:9f:bb:ba:6a:65:cc:7a:d0: a6:70:90:6b:4f:1a:d6:7f:07:11:b7:62:3d:25:ca:a8:4a:2a: 48:70:d5:0c:73:24:63:25:4c:36:d3:d0:70:41:f5:10:81:bb: ec:65:ae:1e:c0:ee:f0:f3:be:d9:70:56:d0:72:ef:d8:bf:b9: 9e:96:a1:a2:5f:a2:c9:85:c8:a3:80:62:83:2a:ae:36:fa:cc: 0f:93:18:b8:0a:e1:5a:9c:0e:c1:f0:90:ce:07:eb:ef:d2:b0: 5b:2e:55:58 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7Nqa5LnpKuarf/2E2n1YvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQ2NDEzNGZhYTc0NjI5M2MwMzg0ZWRhYzAzNzE5NTBm M2IyMjQwHhcNMjYwMTAxMjAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTRkN2Y2YzMxNTRlYWY3ZTUzYTRjZDRjMDg1ZDIxZGJkMDU2Mzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprwObzOnlqI6yTf4w9Y3ysun9Fzy JI55LeOGv1b/GalHK5lbhEmucdNOMdapnQgeDns7cQg3vurLTVWslYzKdnAExmm8 md+gs7PGIU+dxrBPl+X0zh/ec/ilj0i/d0tKa0wZQiFKqhrIuc+37po1wPFzCm/K 8UynFmwSxtfHzQoSw5uqH/L6ZFFOuw8Vl/XzC79Pk+jvuvlYdBrteQi7wWNvRRZE AhkRW1RTmyT5EIA/xYhP4mtL+YkBfWCmkZQez40o1dMUj9xIQhRRUoGnMdPis4KT Y7nQm2m7Pf2Vk+YV25zSeRtI0TgapGKmtcxKtyd6Iu9NCJYP6WE7Autg1QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAVNf2wxVOr35TpM1MCF0h29BWN4MB8GA1UdIwQY MBaAFHBtZBNPqnRik8A4TtrANxlQ87IkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYt ZDEzN2FkZTE2NmQxLzEvQlUxX2JERlU2dmZsT2t6VXdJWFNIYjBGWTNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8zMjk4ZTMtOWE1MC00Y2ZiLTg0ZTYtZDEzN2FkZTE2NmQx LzEvY0cxa0UwLXFkR0tUd0RoTzJzQTNHVkR6c2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEwdqgMA0E AgACMAcDBQMqClGAMA0GCSqGSIb3DQEBCwUAA4IBAQAuiMHeg8TUfYTw1kZp9mhh SfS9OrPPyR61x5kAU7GFz3rXMG88Fm+ciX746uc02//t1AZsn0b64eXST6u5F3Cb p0oI/lVuC+CeJ4UfxTsMjpjEqDsQ7r6WU0ANKP7v0IPtHYvxgQMGBJytyE6GWWMq oaDbJYBrOcaKNsSGQ8/SEBsS5nnDv4z/TiMnb2byyBfy4ioVi27nkoE4n7u6amXM etCmcJBrTxrWfwcRt2I9JcqoSipIcNUMcyRjJUw209BwQfUQgbvsZa4ewO7w877Z cFbQcu/Yv7melqGiX6LJhcijgGKDKq42+swPkxi4CuFanA7B8JDOB+vv0rBbLlVY -----END CERTIFICATE-----Generated at Sun Jan 25 16:17:42 2026 by rpki-client