This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/bQJIzpgstJ6tgK975t_kJvHhfnE.roa File: bQJIzpgstJ6tgK975t_kJvHhfnE.roa (raw, json) Hash identifier: YZ8X60mNl9Zz2ZurQqorVTzia/8zSz3Bam727LiZpFA= Subject key identifier: 6D:02:48:CE:98:2C:B4:9E:AD:80:AF:7B:E6:DF:E4:26:F1:E1:7E:71 Certificate issuer: /CN=0e91de17437a0025fd1ede10f710f17a3080b3ab Certificate serial: 019B7F818800FF7F2CF063B7BFCA8E37F7B5 Authority key identifier: 0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/bQJIzpgstJ6tgK975t_kJvHhfnE.roa Signing time: Fri 02 Jan 2026 16:19:13 +0000 ROA not before: Fri 02 Jan 2026 16:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211462 IP address blocks: 185.207.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.mft rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:88:00:ff:7f:2c:f0:63:b7:bf:ca:8e:37:f7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e91de17437a0025fd1ede10f710f17a3080b3ab Validity Not Before: Jan 2 16:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d0248ce982cb49ead80af7be6dfe426f1e17e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a4:fa:9f:51:48:a1:85:54:1f:18:d3:bd:e6: 55:7c:7c:6f:4d:95:5e:ce:3f:ce:66:a5:74:56:be: 3d:a7:cb:b1:26:42:c6:4f:a6:d6:a2:4b:6e:dd:60: 21:4f:87:b7:10:1c:17:f3:25:bc:e0:cd:07:5c:89: ee:52:1a:6a:56:af:61:4c:fe:d9:0c:fc:14:06:98: 36:b9:42:39:81:4f:d9:6f:92:d5:21:af:70:77:11: 7b:a0:80:fd:3d:9c:85:16:51:89:7c:b8:9d:18:0b: 9a:4d:fd:31:65:09:b7:34:15:8d:74:06:87:d2:30: b0:36:66:ff:77:b5:2d:aa:a6:0c:65:d6:e4:84:c3: f6:d6:60:61:94:db:0b:40:70:40:bf:3c:16:ca:4e: 41:ac:2c:11:9b:92:32:32:da:ff:2a:8c:6d:ba:d7: d2:2b:8d:d4:6b:8d:d8:97:06:1d:60:91:c3:09:c9: 6c:23:95:d0:fd:0b:e2:7f:a3:e0:72:d6:72:88:ec: a7:1e:e3:98:d5:7e:58:3c:fd:d0:73:d7:90:03:5b: f5:f1:51:2c:94:91:5f:4d:8f:42:f8:74:9a:cf:50: 47:be:ce:50:bf:d9:b9:11:14:d6:97:05:08:64:bb: 71:bc:da:d3:a3:fd:9c:2a:6e:cc:09:ba:55:b6:3f: cd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:02:48:CE:98:2C:B4:9E:AD:80:AF:7B:E6:DF:E4:26:F1:E1:7E:71 X509v3 Authority Key Identifier: keyid:0E:91:DE:17:43:7A:00:25:FD:1E:DE:10:F7:10:F1:7A:30:80:B3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/bQJIzpgstJ6tgK975t_kJvHhfnE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/baef57-c484-4523-b14e-88ebbf99780b/1/DpHeF0N6ACX9Ht4Q9xDxejCAs6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.125.0/24 Signature Algorithm: sha256WithRSAEncryption 28:c5:a3:16:f0:da:df:34:6f:be:f1:ae:28:b3:1a:96:8b:a4: 3f:50:3f:40:2e:f5:ef:8e:d6:94:14:a5:dd:1b:4e:32:6a:77: 0c:c8:7e:8b:20:71:a9:aa:a2:47:5e:8c:1d:bf:45:cb:c8:bd: 45:49:a6:e3:97:1c:30:06:41:a9:0a:cc:51:fc:72:d9:81:0b: f0:80:b8:08:70:87:e9:53:73:fa:a4:ff:a2:31:5d:58:51:5c: dc:ef:a2:45:70:37:c6:0e:db:24:83:9c:4d:1d:fb:60:e2:0a: 7b:00:72:61:be:2c:6c:17:99:5c:be:81:3c:5b:df:7e:84:1a: c6:60:04:bc:55:6b:5b:6c:85:3d:f4:ae:ad:ed:b8:6e:1a:b4: 2b:1a:98:d2:3c:b8:83:f6:79:72:48:1e:2d:98:d3:cf:f6:6d: ff:93:ed:50:59:c8:a1:97:f8:b0:0e:a9:fc:64:5f:5e:42:8f: e2:d0:9b:1f:29:d7:4e:9b:95:3c:e3:b2:b6:6c:7d:d4:15:c7: bf:db:a6:da:96:11:2c:b5:83:d0:dd:9a:49:44:23:97:8e:2d: 82:63:bd:e8:16:7c:76:b9:03:57:f8:b8:8a:4d:02:10:07:2d: 44:cb:93:a1:60:43:d1:c1:c8:3a:09:5d:7b:f8:c0:88:d8:0d: 02:80:89:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gYgA/38s8GO3v8qON/e1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOTFkZTE3NDM3YTAwMjVmZDFlZGUxMGY3MTBmMTdhMzA4 MGIzYWIwHhcNMjYwMTAyMTYxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDAyNDhjZTk4MmNiNDllYWQ4MGFmN2JlNmRmZTQyNmYxZTE3ZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaT6n1FIoYVUHxjTveZVfHxvTZVe zj/OZqV0Vr49p8uxJkLGT6bWoktu3WAhT4e3EBwX8yW84M0HXInuUhpqVq9hTP7Z DPwUBpg2uUI5gU/Zb5LVIa9wdxF7oID9PZyFFlGJfLidGAuaTf0xZQm3NBWNdAaH 0jCwNmb/d7UtqqYMZdbkhMP21mBhlNsLQHBAvzwWyk5BrCwRm5IyMtr/KoxtutfS K43Ua43YlwYdYJHDCclsI5XQ/Qvif6PgctZyiOynHuOY1X5YPP3Qc9eQA1v18VEs lJFfTY9C+HSaz1BHvs5Qv9m5ERTWlwUIZLtxvNrTo/2cKm7MCbpVtj/NwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG0CSM6YLLSerYCve+bf5Cbx4X5xMB8GA1UdIwQY MBaAFA6R3hdDegAl/R7eEPcQ8XowgLOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUt ODhlYmJmOTk3ODBiLzEvYlFKSXpwZ3N0SjZ0Z0s5NzV0X2tKdkhoZm5FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9iYWVmNTctYzQ4NC00NTIzLWIxNGUtODhlYmJmOTk3ODBi LzEvRHBIZUYwTjZBQ1g5SHQ0UTl4RHhlakNBczZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc99MA0G CSqGSIb3DQEBCwUAA4IBAQAoxaMW8NrfNG++8a4osxqWi6Q/UD9ALvXvjtaUFKXd G04yancMyH6LIHGpqqJHXowdv0XLyL1FSabjlxwwBkGpCsxR/HLZgQvwgLgIcIfp U3P6pP+iMV1YUVzc76JFcDfGDtskg5xNHftg4gp7AHJhvixsF5lcvoE8W99+hBrG YAS8VWtbbIU99K6t7bhuGrQrGpjSPLiD9nlySB4tmNPP9m3/k+1QWcihl/iwDqn8 ZF9eQo/i0JsfKddOm5U847K2bH3UFce/26balhEstYPQ3ZpJRCOXji2CY73oFnx2 uQNX+LiKTQIQBy1Ey5OhYEPRwcg6CV17+MCI2A0CgIme -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:22 2026 by rpki-client