This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa File: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (raw, json) Hash identifier: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4= Subject key identifier: 06:1D:15:85:70:AD:9D:54:EE:E8:D6:2E:67:86:B4:C4:0B:72:C6:70 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 019B7FF21752875144B275B1A2839AB9BB06 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa Signing time: Fri 02 Jan 2026 18:22:10 +0000 ROA not before: Fri 02 Jan 2026 18:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201920 IP address blocks: 194.183.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:17:52:87:51:44:b2:75:b1:a2:83:9a:b9:bb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Jan 2 18:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=061d158570ad9d54eee8d62e6786b4c40b72c670 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:92:b6:37:4c:81:a4:15:37:e7:e1:4f:67: e1:a0:b1:22:8d:4e:69:94:47:07:27:ca:f5:98:2c: b2:7f:51:6c:a3:15:44:28:1b:b8:79:8c:c6:8a:fb: a4:25:58:00:06:78:fc:87:be:6d:48:e3:39:f3:0b: e0:b2:d9:b6:f0:eb:2c:08:ee:96:c7:18:d0:20:0a: fe:fa:8c:63:ae:60:3d:a5:da:e2:47:8e:11:a5:b2: 2e:9b:46:f7:ca:df:5c:7f:a2:da:32:bc:32:8c:92: b6:f4:a4:06:43:92:6f:a7:85:84:f1:ce:ca:4f:dd: 7c:fe:13:54:77:64:3c:2e:5d:37:c7:a6:28:48:e3: 5e:c0:d1:de:63:91:87:18:17:76:a0:03:69:ed:75: 01:3c:df:32:01:f6:b3:b2:69:f1:12:e6:10:a4:a7: e8:35:a6:be:43:26:b7:bd:a7:e5:7c:ad:43:8d:92: 72:6b:9c:08:3b:7c:ee:71:62:2f:86:9d:e4:22:3f: 9a:fa:d7:f4:78:bc:ff:56:ef:54:ca:6d:df:97:27: d8:5b:da:38:e2:6f:85:e5:ef:9b:9b:63:c2:d0:04: 70:1c:4f:c5:f7:07:a3:ba:ee:9c:52:d3:35:27:d9: 4d:4f:a4:cc:a5:d0:b6:d3:8f:ee:3b:d5:7a:f0:ed: c0:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1D:15:85:70:AD:9D:54:EE:E8:D6:2E:67:86:B4:C4:0B:72:C6:70 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.183.186.0/24 Signature Algorithm: sha256WithRSAEncryption 76:d8:7a:b0:79:d9:e1:eb:e3:f4:5d:02:bc:2f:83:38:9b:22: 1f:04:10:4b:ec:2b:96:da:af:4e:c1:10:89:da:69:34:51:3c: 92:9b:cb:b3:44:7d:80:63:98:a8:56:4d:1a:90:fe:9d:ba:2c: 94:ba:aa:73:f7:0a:48:7e:02:93:38:36:53:1d:7b:b1:34:c8: b9:55:67:e3:99:3c:99:9c:0f:ee:4b:4a:52:d3:13:83:cd:bb: 49:57:3b:e2:55:0a:94:6a:2c:81:6f:2d:9c:34:eb:48:b1:ec: ee:a1:89:50:d2:16:8d:26:c4:4a:c8:c4:ad:80:17:f2:f6:1d: 36:52:65:c1:40:c4:4c:91:ff:28:0a:40:f7:04:9d:ca:45:53: 77:23:c5:20:94:79:e6:70:8e:46:81:3f:64:25:2b:bf:fa:f5: b6:e0:f9:a4:17:f0:14:de:be:28:8a:c4:b6:4a:87:f6:db:ae: cf:de:6a:ef:5b:db:ef:1e:56:dd:40:1e:e9:60:7c:0a:30:9a: fe:95:1c:39:31:6b:99:92:a0:b3:17:62:0f:14:15:81:0b:2c: 22:d2:6e:1a:2a:09:f0:ce:bd:a1:ec:99:3f:48:fb:85:58:75: 0e:94:4f:ad:e0:ee:4e:92:6f:81:e9:18:3b:3a:6a:fb:bd:9f: 6e:2b:f0:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8hdSh1FEsnWxooOaubsGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwMTAyMTgyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjFkMTU4NTcwYWQ5ZDU0ZWVlOGQ2MmU2Nzg2YjRjNDBiNzJjNjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1CStjdMgaQVN+fhT2fhoLEijU5p lEcHJ8r1mCyyf1FsoxVEKBu4eYzGivukJVgABnj8h75tSOM58wvgstm28OssCO6W xxjQIAr++oxjrmA9pdriR44RpbIum0b3yt9cf6LaMrwyjJK29KQGQ5Jvp4WE8c7K T918/hNUd2Q8Ll03x6YoSONewNHeY5GHGBd2oANp7XUBPN8yAfazsmnxEuYQpKfo Naa+Qya3vaflfK1DjZJya5wIO3zucWIvhp3kIj+a+tf0eLz/Vu9Uym3flyfYW9o4 4m+F5e+bm2PC0ARwHE/F9wejuu6cUtM1J9lNT6TMpdC204/uO9V68O3AnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAYdFYVwrZ1U7ujWLmeGtMQLcsZwMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvQmgwVmhYQ3RuVlR1Nk5ZdVo0YTB4QXR5eG5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwre6MA0G CSqGSIb3DQEBCwUAA4IBAQB22Hqwednh6+P0XQK8L4M4myIfBBBL7CuW2q9OwRCJ 2mk0UTySm8uzRH2AY5ioVk0akP6duiyUuqpz9wpIfgKTODZTHXuxNMi5VWfjmTyZ nA/uS0pS0xODzbtJVzviVQqUaiyBby2cNOtIsezuoYlQ0haNJsRKyMStgBfy9h02 UmXBQMRMkf8oCkD3BJ3KRVN3I8UglHnmcI5GgT9kJSu/+vW24PmkF/AU3r4oisS2 Sof2267P3mrvW9vvHlbdQB7pYHwKMJr+lRw5MWuZkqCzF2IPFBWBCywi0m4aKgnw zr2h7Jk/SPuFWHUOlE+t4O5Okm+B6Rg7Omr7vZ9uK/Aj -----END CERTIFICATE-----Generated at Sun Jan 25 10:32:33 2026 by rpki-client