This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/1-BUCojs1oWaXAaxy03s5Db9MiJk.roa File: 1-BUCojs1oWaXAaxy03s5Db9MiJk.roa (raw, json) Hash identifier: tiMBJlRoBCDWpjG2YxYym9l9MTTcSiD5be7NjPI5OEw= Subject key identifier: F8:15:02:A2:3B:35:A1:66:97:01:AC:72:D3:7B:39:0D:BF:4C:88:99 Certificate issuer: /CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Certificate serial: 019B7DCA09521B20D1D7435FD70B35BE3118 Authority key identifier: D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/1-BUCojs1oWaXAaxy03s5Db9MiJk.roa Signing time: Fri 02 Jan 2026 08:19:11 +0000 ROA not before: Fri 02 Jan 2026 08:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2852 IP address blocks: 147.228.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.mft rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:09:52:1b:20:d1:d7:43:5f:d7:0b:35:be:31:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d18a56d6a14e6763fc7733a8a5f9431db7568cb5 Validity Not Before: Jan 2 08:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f81502a23b35a1669701ac72d37b390dbf4c8899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1f:04:90:9c:88:4f:1a:87:a3:28:bd:49:26: 5b:0c:33:3b:17:f6:0c:ad:fe:7f:0d:34:9c:80:3d: 09:15:03:56:61:a8:92:4b:5e:c7:73:e9:e7:a5:2b: d4:5d:f9:f3:6c:c0:ab:29:4a:b7:76:d7:97:1c:d9: 03:a5:94:05:ba:39:7e:17:da:4e:3c:ff:61:79:89: 52:3a:3a:72:4b:24:fa:c9:be:2b:79:04:a9:84:45: 31:45:66:6d:c7:d4:0b:fb:f6:75:5d:55:28:56:46: ee:c7:c6:f6:1f:37:77:0b:a9:c2:19:68:15:ab:bb: d8:3a:fd:49:ee:af:34:44:77:ed:5d:11:98:03:f0: bf:cf:8b:f8:36:6f:1d:eb:10:87:91:85:6b:1f:3d: 06:2b:a8:4f:2a:dd:1f:16:6f:63:77:da:83:60:d6: 2d:6a:59:9c:ee:61:53:31:8d:a9:d5:39:a1:3c:8f: e6:8d:a0:3a:1c:c7:62:ef:3b:67:89:fb:37:3c:92: af:18:fe:61:4f:6d:28:64:01:de:f8:7d:e9:27:75: d0:f8:92:73:71:31:cf:08:d1:b3:e6:6a:73:2b:9d: 07:50:37:54:6c:3c:60:82:77:53:4f:d3:12:c1:02: 1c:25:55:e3:af:f1:09:98:e6:5e:ae:fd:da:42:8b: 35:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:15:02:A2:3B:35:A1:66:97:01:AC:72:D3:7B:39:0D:BF:4C:88:99 X509v3 Authority Key Identifier: keyid:D1:8A:56:D6:A1:4E:67:63:FC:77:33:A8:A5:F9:43:1D:B7:56:8C:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YpW1qFOZ2P8dzOopflDHbdWjLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/1-BUCojs1oWaXAaxy03s5Db9MiJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f2ec53-223b-4b3b-9d20-ceec5a739c72/1/0YpW1qFOZ2P8dzOopflDHbdWjLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.228.0.0/16 Signature Algorithm: sha256WithRSAEncryption 35:bf:d5:6a:ef:ce:fb:f4:fc:a2:d0:f0:19:81:39:e3:63:be: a1:f7:07:17:4e:07:92:63:4d:03:4e:da:fb:bd:30:c9:14:c6: fb:dd:61:55:2a:5f:9e:a6:92:92:7d:59:3f:2a:50:c1:fa:f1: a7:7b:ff:57:1e:ce:db:44:e1:1d:27:f6:c6:e2:b1:22:e8:eb: 71:5a:34:38:33:7b:1b:eb:1d:00:7c:f6:59:a1:6b:3c:38:2f: b6:24:0f:5a:5e:d6:a3:7e:e0:81:d4:5a:e6:8b:cb:4f:83:61: 9f:85:46:c9:be:33:77:f0:e2:37:59:fe:b3:48:60:eb:5c:d8: 05:76:72:3d:b7:f6:b6:bf:70:93:8c:75:48:47:0c:57:1b:27: 5b:1a:fc:08:0c:bc:66:7d:7c:91:e5:75:72:70:a0:b9:75:29: a5:35:42:25:94:ca:a6:fb:8e:8c:de:39:ad:6f:ce:33:ce:a5: d2:76:b0:d9:12:0d:f5:26:41:29:80:09:18:c0:e7:d4:c4:54: 45:a2:ff:8a:ec:a2:21:ca:61:f9:65:f0:62:3c:f4:0d:fa:53: 20:ac:9e:32:8d:2b:9b:b2:b4:c9:6d:de:12:43:e1:7a:26:72: 80:57:8a:6b:d4:6e:c1:70:a8:9c:d0:38:79:89:aa:9a:24:5a: 70:16:4d:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yglSGyDR10Nf1ws1vjEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOGE1NmQ2YTE0ZTY3NjNmYzc3MzNhOGE1Zjk0MzFkYjc1 NjhjYjUwHhcNMjYwMTAyMDgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODE1MDJhMjNiMzVhMTY2OTcwMWFjNzJkMzdiMzkwZGJmNGM4ODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArh8EkJyITxqHoyi9SSZbDDM7F/YM rf5/DTScgD0JFQNWYaiSS17Hc+nnpSvUXfnzbMCrKUq3dteXHNkDpZQFujl+F9pO PP9heYlSOjpySyT6yb4reQSphEUxRWZtx9QL+/Z1XVUoVkbux8b2Hzd3C6nCGWgV q7vYOv1J7q80RHftXRGYA/C/z4v4Nm8d6xCHkYVrHz0GK6hPKt0fFm9jd9qDYNYt almc7mFTMY2p1TmhPI/mjaA6HMdi7ztnifs3PJKvGP5hT20oZAHe+H3pJ3XQ+JJz cTHPCNGz5mpzK50HUDdUbDxggndTT9MSwQIcJVXjr/EJmOZerv3aQos1rwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPgVAqI7NaFmlwGsctN7OQ2/TIiZMB8GA1UdIwQY MBaAFNGKVtahTmdj/HczqKX5Qx23Voy1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlwVzFxRk9aMlA4ZHpPb3BmbERIYmRXakxVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mMmVjNTMtMjIzYi00YjNiLTlkMjAt Y2VlYzVhNzM5YzcyLzEvMS1CVUNvanMxb1dhWEFheHkwM3M1RGI5TWlKay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjQvZjJlYzUzLTIyM2ItNGIzYi05ZDIwLWNlZWM1YTczOWM3 Mi8xLzBZcFcxcUZPWjJQOGR6T29wZmxESGJkV2pMVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAJPkMA0G CSqGSIb3DQEBCwUAA4IBAQA1v9Vq78779Pyi0PAZgTnjY76h9wcXTgeSY00DTtr7 vTDJFMb73WFVKl+eppKSfVk/KlDB+vGne/9XHs7bROEdJ/bG4rEi6OtxWjQ4M3sb 6x0AfPZZoWs8OC+2JA9aXtajfuCB1Frmi8tPg2GfhUbJvjN38OI3Wf6zSGDrXNgF dnI9t/a2v3CTjHVIRwxXGydbGvwIDLxmfXyR5XVycKC5dSmlNUIllMqm+46M3jmt b84zzqXSdrDZEg31JkEpgAkYwOfUxFRFov+K7KIhymH5ZfBiPPQN+lMgrJ4yjSub srTJbd4SQ+F6JnKAV4pr1G7BcKic0Dh5iaqaJFpwFk14 -----END CERTIFICATE-----Generated at Mon Jan 26 09:22:48 2026 by rpki-client