This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/B43PKu9zFU7-_KCXTuxzDe93OU0.roa File: B43PKu9zFU7-_KCXTuxzDe93OU0.roa (raw, json) Hash identifier: friYQXieb4/RtWvPCW9C35Zt9vuRnu7Qsl+CY5jbJEs= Subject key identifier: 07:8D:CF:2A:EF:73:15:4E:FE:FC:A0:97:4E:EC:73:0D:EF:77:39:4D Certificate issuer: /CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Certificate serial: 019B79ED35BE89501D4B707244787DC0080C Authority key identifier: E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/B43PKu9zFU7-_KCXTuxzDe93OU0.roa Signing time: Thu 01 Jan 2026 14:19:07 +0000 ROA not before: Thu 01 Jan 2026 14:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1759 IP address blocks: 192.126.63.0/24 maxlen: 24 192.126.64.0/24 maxlen: 24 194.188.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.mft rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:35:be:89:50:1d:4b:70:72:44:78:7d:c0:08:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0dee1b06ba24a676213f976a4b50c129dcb2b73 Validity Not Before: Jan 1 14:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=078dcf2aef73154efefca0974eec730def77394d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:a5:59:46:fd:e7:96:2b:9f:5d:1f:43:b7: de:b2:69:4a:32:14:b0:9e:54:4d:45:d4:80:75:96: 80:d4:25:17:bb:57:d1:03:98:08:94:7c:24:9a:e2: 86:5b:50:fc:91:87:0b:8d:24:4d:fc:2c:3d:92:49: c8:29:f5:d9:81:95:6a:70:e1:3a:97:85:bf:f2:d3: 29:34:51:fc:7c:32:e8:24:24:f7:f0:5a:76:c5:21: da:44:39:66:91:84:5c:a6:a9:27:24:ac:b5:09:06: 0e:76:c5:bb:c6:27:6b:51:37:25:9a:af:32:4a:08: 19:ce:01:46:ae:4c:b9:89:0d:04:43:fd:d2:e6:ff: 78:04:11:18:11:bc:bd:fc:39:7e:7d:8e:6b:64:50: bd:e8:2b:af:b8:4a:c1:a8:77:69:32:68:67:eb:ab: 08:1e:8d:7e:c1:26:c5:67:99:08:3a:21:44:2a:03: 3f:a8:30:b0:34:77:1a:1d:a6:f5:55:c4:98:23:2a: 22:12:92:de:31:70:d8:56:45:c4:85:cb:80:b2:e8: 2b:48:85:1d:c3:66:01:62:bb:ee:38:d9:25:04:56: 9a:53:36:75:e2:87:ce:b9:f1:01:13:15:d4:b9:10: f7:44:30:e2:f0:0d:d4:cd:22:13:ae:97:2a:04:1f: 69:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:8D:CF:2A:EF:73:15:4E:FE:FC:A0:97:4E:EC:73:0D:EF:77:39:4D X509v3 Authority Key Identifier: keyid:E0:DE:E1:B0:6B:A2:4A:67:62:13:F9:76:A4:B5:0C:12:9D:CB:2B:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N7hsGuiSmdiE_l2pLUMEp3LK3M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/B43PKu9zFU7-_KCXTuxzDe93OU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c22dc9-c7ba-4156-a79c-15e90bf87fab/1/4N7hsGuiSmdiE_l2pLUMEp3LK3M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.126.63.0-192.126.64.255 194.188.145.0/24 Signature Algorithm: sha256WithRSAEncryption 24:e1:de:75:7f:a7:8c:6c:e6:4c:7c:90:68:c6:43:15:6a:93: 30:8e:6b:95:ab:eb:de:60:67:db:f5:cc:36:84:7e:d4:d1:f2: a3:e9:e7:70:53:55:78:b9:96:ff:6b:c7:04:81:53:6c:e3:e6: 16:37:88:96:a3:0c:63:74:21:d5:c9:a0:03:98:38:f4:0c:a2: fd:ee:f9:87:7b:a9:d3:00:e4:d0:dc:99:8f:f6:2d:e8:e6:1f: 4b:30:84:08:6a:f7:ae:14:30:ca:d9:a9:73:38:a6:bb:6f:fe: 78:a0:1b:34:8b:76:80:4e:60:cd:f8:2a:3e:a3:8b:b0:7d:d8: d2:79:80:23:0c:25:3e:b1:27:43:5b:33:2a:18:25:ac:00:f6: 23:13:14:85:80:60:d0:17:a3:46:01:33:d8:5b:38:6b:88:9e: e6:b6:92:e3:5e:02:b2:1f:72:b2:95:8c:c8:8c:c6:46:ee:6c: c0:a7:3c:a7:2e:5e:af:63:57:d9:17:9c:5e:58:fc:3f:8b:78: 9d:b0:66:ad:87:0d:2b:0a:c7:2f:69:61:b5:47:01:42:11:3a: f9:72:f7:9a:09:21:b2:97:20:e3:db:65:ae:b1:09:52:93:aa: df:99:8f:0d:f0:b1:f7:fa:69:3e:cb:2c:4c:81:9e:a8:93:13: c4:01:da:ac -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt57TW+iVAdS3ByRHh9wAgMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwZGVlMWIwNmJhMjRhNjc2MjEzZjk3NmE0YjUwYzEyOWRj YjJiNzMwHhcNMjYwMTAxMTQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzhkY2YyYWVmNzMxNTRlZmVmY2EwOTc0ZWVjNzMwZGVmNzczOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx2lWUb955Yrn10fQ7fesmlKMhSw nlRNRdSAdZaA1CUXu1fRA5gIlHwkmuKGW1D8kYcLjSRN/Cw9kknIKfXZgZVqcOE6 l4W/8tMpNFH8fDLoJCT38Fp2xSHaRDlmkYRcpqknJKy1CQYOdsW7xidrUTclmq8y SggZzgFGrky5iQ0EQ/3S5v94BBEYEby9/Dl+fY5rZFC96CuvuErBqHdpMmhn66sI Ho1+wSbFZ5kIOiFEKgM/qDCwNHcaHab1VcSYIyoiEpLeMXDYVkXEhcuAsugrSIUd w2YBYrvuONklBFaaUzZ14ofOufEBExXUuRD3RDDi8A3UzSITrpcqBB9pyQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFAeNzyrvcxVO/vygl07scw3vdzlNMB8GA1UdIwQY MBaAFODe4bBrokpnYhP5dqS1DBKdyytzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMt MTVlOTBiZjg3ZmFiLzEvQjQzUEt1OXpGVTctX0tDWFR1eHpEZTkzT1UwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9jMjJkYzktYzdiYS00MTU2LWE3OWMtMTVlOTBiZjg3ZmFi LzEvNE43aHNHdWlTbWRpRV9sMnBMVU1FcDNMSzNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBADAfj8D BADAfkADBADCvJEwDQYJKoZIhvcNAQELBQADggEBACTh3nV/p4xs5kx8kGjGQxVq kzCOa5Wr695gZ9v1zDaEftTR8qPp53BTVXi5lv9rxwSBU2zj5hY3iJajDGN0IdXJ oAOYOPQMov3u+Yd7qdMA5NDcmY/2LejmH0swhAhq964UMMrZqXM4prtv/nigGzSL doBOYM34Kj6ji7B92NJ5gCMMJT6xJ0NbMyoYJawA9iMTFIWAYNAXo0YBM9hbOGuI nua2kuNeArIfcrKVjMiMxkbubMCnPKcuXq9jV9kXnF5Y/D+LeJ2wZq2HDSsKxy9p YbVHAUIROvly95oJIbKXIOPbZa6xCVKTqt+Zjw3wsff6aT7LLEyBnqiTE8QB2qw= -----END CERTIFICATE-----Generated at Sun Jan 25 19:37:27 2026 by rpki-client