This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/BYhvuXfs7V4O3QnCgxjOVL2eIEQ.roa File: BYhvuXfs7V4O3QnCgxjOVL2eIEQ.roa (raw, json) Hash identifier: FG9ELswrpQTuU2z2psJkiTxCj+67oQK/bdIDfjTcUcM= Subject key identifier: 05:88:6F:B9:77:EC:ED:5E:0E:DD:09:C2:83:18:CE:54:BD:9E:20:44 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B954EF8E32F597F98AB9E6A4FABF61D73 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/BYhvuXfs7V4O3QnCgxjOVL2eIEQ.roa Signing time: Tue 06 Jan 2026 21:55:39 +0000 ROA not before: Tue 06 Jan 2026 21:55:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42881 IP address blocks: 195.88.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:95:4e:f8:e3:2f:59:7f:98:ab:9e:6a:4f:ab:f6:1d:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 6 21:55:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05886fb977eced5e0edd09c28318ce54bd9e2044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:44:66:76:20:44:44:ec:77:4c:56:cd:28:57: 04:f3:bb:04:b7:fd:92:7e:e2:b8:66:a0:ed:b9:eb: c3:1a:34:68:5b:83:4f:f5:ee:b5:aa:81:08:ff:07: eb:c2:2e:61:08:8a:5d:6a:6b:56:51:56:0e:84:63: 7a:fb:f5:0a:88:02:1d:fc:c1:f4:95:4f:49:a2:2c: 30:bf:ef:53:8b:2e:c2:be:6a:d8:c8:33:18:7e:5a: df:c2:81:06:06:57:17:82:60:18:ce:72:35:6d:cf: f8:27:aa:b8:0c:9e:27:34:f1:cc:4e:68:75:b7:9f: bd:10:ca:6c:c8:57:65:63:dc:89:2b:11:7e:25:17: 83:a7:18:cc:11:1a:ec:08:d1:70:c7:1d:bd:63:17: 22:cf:9f:fd:4b:65:c1:37:13:1c:b3:eb:68:71:eb: e2:ea:ba:62:79:e6:8f:15:59:32:ff:91:88:b9:4e: a9:57:97:d0:aa:54:77:e2:e1:fe:47:1d:a5:23:a1: 4e:59:4c:a2:f3:cf:d4:78:e0:33:74:8b:62:1f:aa: 92:fc:8b:63:1a:a0:85:44:78:12:82:bd:c7:7e:9b: 1e:2d:7e:4e:3e:36:70:16:8b:c7:99:ab:86:ee:de: 00:c0:6b:b1:f9:ac:6d:85:db:4f:a0:c2:6a:96:35: 7d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:88:6F:B9:77:EC:ED:5E:0E:DD:09:C2:83:18:CE:54:BD:9E:20:44 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/BYhvuXfs7V4O3QnCgxjOVL2eIEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.88.146.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:d0:11:cf:75:ca:ae:7f:8a:f9:63:a0:c3:07:9b:75:b6:91: be:d6:bc:7c:17:cf:ee:53:08:53:19:4a:20:65:11:eb:dc:52: ef:b8:17:43:a1:f1:94:d8:62:0f:de:92:88:18:82:ac:ff:c4: dc:a2:34:c3:63:67:49:d7:29:b2:6c:c6:b9:0d:68:f6:c8:f1: 0d:9d:9c:d5:a4:97:d2:6a:2b:77:f3:1c:7d:e1:1b:60:8e:03: b3:14:9f:9e:fd:ae:91:83:ba:25:6a:cf:af:e1:ed:3c:01:f7: bc:2f:92:50:87:aa:db:94:5f:8d:3d:5d:c9:10:53:e1:ff:ed: c7:f5:51:a2:5f:4d:b1:d6:38:a3:95:99:5c:12:42:f8:b4:30: 56:3b:dc:ca:52:c1:16:b6:4c:1c:8b:fa:a6:5c:d3:31:bf:18: 35:d4:a2:73:d3:76:72:c0:20:59:f5:a8:51:89:62:5b:c6:e9: ce:60:cf:09:fe:2e:34:fd:5a:38:c4:57:99:3d:79:26:ec:15: 28:8c:29:34:21:01:57:df:3e:4c:3e:f3:db:13:21:56:10:00: 3a:fe:ea:08:57:c7:e5:cd:f7:9a:82:1c:81:84:5d:0f:05:b7: b3:78:21:d8:10:25:9e:51:ea:7a:03:82:4d:b0:82:c6:8f:cf: ba:94:3e:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuVTvjjL1l/mKueak+r9h1zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTA2MjE1NTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTg4NmZiOTc3ZWNlZDVlMGVkZDA5YzI4MzE4Y2U1NGJkOWUyMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0RmdiBEROx3TFbNKFcE87sEt/2S fuK4ZqDtuevDGjRoW4NP9e61qoEI/wfrwi5hCIpdamtWUVYOhGN6+/UKiAId/MH0 lU9Joiwwv+9Tiy7CvmrYyDMYflrfwoEGBlcXgmAYznI1bc/4J6q4DJ4nNPHMTmh1 t5+9EMpsyFdlY9yJKxF+JReDpxjMERrsCNFwxx29Yxciz5/9S2XBNxMcs+tocevi 6rpieeaPFVky/5GIuU6pV5fQqlR34uH+Rx2lI6FOWUyi88/UeOAzdItiH6qS/Itj GqCFRHgSgr3HfpseLX5OPjZwFovHmauG7t4AwGux+axthdtPoMJqljV9tQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAWIb7l37O1eDt0JwoMYzlS9niBEMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvQllodnVYZnM3VjRPM1FuQ2d4ak9WTDJlSUVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw1iSMA0G CSqGSIb3DQEBCwUAA4IBAQAf0BHPdcquf4r5Y6DDB5t1tpG+1rx8F8/uUwhTGUog ZRHr3FLvuBdDofGU2GIP3pKIGIKs/8TcojTDY2dJ1ymybMa5DWj2yPENnZzVpJfS ait38xx94RtgjgOzFJ+e/a6Rg7olas+v4e08Afe8L5JQh6rblF+NPV3JEFPh/+3H 9VGiX02x1jijlZlcEkL4tDBWO9zKUsEWtkwci/qmXNMxvxg11KJz03ZywCBZ9ahR iWJbxunOYM8J/i40/Vo4xFeZPXkm7BUojCk0IQFX3z5MPvPbEyFWEAA6/uoIV8fl zfeaghyBhF0PBbezeCHYECWeUep6A4JNsILGj8+6lD6q -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:50 2026 by rpki-client