This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/pboVQ10OVYeGWBMHDVwDZVva2fk.roa File: pboVQ10OVYeGWBMHDVwDZVva2fk.roa (raw, json) Hash identifier: iFWLteNFz6o7RzB0SZPhCmPT1qzZnuVT432zm4INMFA= Subject key identifier: A5:BA:15:43:5D:0E:55:87:86:58:13:07:0D:5C:03:65:5B:DA:D9:F9 Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de Certificate serial: 019AF23BB1352E050878010EDD75E7D9A49D Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/pboVQ10OVYeGWBMHDVwDZVva2fk.roa Signing time: Sat 06 Dec 2025 05:56:29 +0000 ROA not before: Sat 06 Dec 2025 05:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 80.244.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3b:b1:35:2e:05:08:78:01:0e:dd:75:e7:d9:a4:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de Validity Not Before: Dec 6 05:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a5ba15435d0e5587865813070d5c03655bdad9f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:d5:a6:13:81:56:5f:88:81:c3:cc:52:83: fb:e8:cd:fb:96:4b:9a:fa:32:15:e7:bf:51:ba:70: 18:dd:13:4b:fa:00:b3:e8:36:cf:fe:e1:5b:32:f4: d3:e9:d9:9e:e8:a3:94:9d:96:8a:49:82:1d:41:b5: 1c:7f:39:96:83:4f:ac:62:90:62:a3:23:8a:01:29: 13:0d:67:8d:0c:7f:2e:b2:04:ba:3b:d1:06:e6:e6: af:e5:69:08:4c:c0:6e:16:de:2e:be:a4:69:1b:50: 36:4a:c0:8c:0a:2f:7e:bf:56:8e:c9:41:b9:90:2d: ce:90:92:45:4e:74:2f:cb:87:51:71:fb:18:b8:4b: 96:ec:c2:ee:dc:11:d9:a3:62:ca:44:ac:3f:1c:ee: 85:4d:6a:16:ac:94:a2:53:58:76:98:92:ba:a6:d1: a8:18:eb:3a:ce:9f:77:d7:8b:1c:8f:18:91:bf:a0: 1d:7a:2b:dd:31:a1:93:b7:02:e2:d0:40:d9:32:98: da:1f:6d:c5:29:c5:a3:a4:af:f9:3b:bf:48:8b:29: f1:b7:42:dd:a3:dd:fe:1e:bb:70:dd:e7:6d:ba:6d: 98:74:12:ed:dd:49:93:67:28:bf:4d:3b:0d:23:17: 70:0b:1b:af:21:de:95:bb:34:d9:90:d7:9d:2f:83: b8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BA:15:43:5D:0E:55:87:86:58:13:07:0D:5C:03:65:5B:DA:D9:F9 X509v3 Authority Key Identifier: keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/pboVQ10OVYeGWBMHDVwDZVva2fk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.13.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:b6:81:60:05:5e:88:01:f4:6f:eb:d7:38:84:18:1c:85:23: 93:34:86:70:36:9a:7a:b8:c2:38:d4:65:f4:60:fc:44:ab:65: 4c:3a:4a:8d:4a:0b:c0:48:35:6f:38:30:52:27:94:6e:7b:99: d6:a1:d9:c4:19:d5:c4:0a:d2:94:69:e3:8f:82:17:bb:7f:dc: dc:01:71:43:c6:52:f4:11:d0:38:3f:68:e0:c7:62:41:3a:ba: ca:cb:d8:a3:c9:93:c0:59:bb:b8:77:fb:ac:7f:39:63:9c:23: 33:37:9f:19:a9:e3:5b:d3:aa:a4:1a:85:c5:54:c4:29:11:0b: e9:25:ef:bb:e5:68:4b:de:b8:32:99:b2:89:80:ac:ca:82:10: 52:f7:17:ef:24:72:00:91:c1:31:d6:1b:46:a8:03:de:ab:a5: 5a:bd:7a:43:da:00:0b:b5:7b:5a:ba:58:ac:3c:3c:d4:45:f0: f6:35:5b:ab:39:b5:57:9a:f5:c1:3d:fb:a8:76:3c:7d:ea:20: 01:65:c5:00:00:f1:a9:6d:8f:e1:85:d6:54:9f:1b:de:dc:03: d3:e1:b1:e1:68:72:85:a2:65:e5:48:90:6b:96:c1:4e:66:cc: 90:7b:99:72:08:58:f9:ca:9d:44:11:a3:42:bf:95:e7:6e:e1: 5d:94:67:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZryO7E1LgUIeAEO3XXn2aSdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWM5NzEwNzYyNjNiZGRiMGVlY2Y1YmVhNjU3NGE0MDVi OTg1ZGUwHhcNMjUxMjA2MDU1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWJhMTU0MzVkMGU1NTg3ODY1ODEzMDcwZDVjMDM2NTViZGFkOWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLLVphOBVl+IgcPMUoP76M37lkua +jIV579RunAY3RNL+gCz6DbP/uFbMvTT6dme6KOUnZaKSYIdQbUcfzmWg0+sYpBi oyOKASkTDWeNDH8usgS6O9EG5uav5WkITMBuFt4uvqRpG1A2SsCMCi9+v1aOyUG5 kC3OkJJFTnQvy4dRcfsYuEuW7MLu3BHZo2LKRKw/HO6FTWoWrJSiU1h2mJK6ptGo GOs6zp9314scjxiRv6AdeivdMaGTtwLi0EDZMpjaH23FKcWjpK/5O79Iiynxt0Ld o93+Hrtw3edtum2YdBLt3UmTZyi/TTsNIxdwCxuvId6VuzTZkNedL4O4owIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKW6FUNdDlWHhlgTBw1cA2Vb2tn5MB8GA1UdIwQY MBaAFL+slxB2JjvdsO7PW+pldKQFuYXeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjZ5WEVIWW1POTJ3N3M5YjZtVjBwQVc1aGQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjc4MzctYmFhMC00MDg1LWFhMjMt ODAyM2Q5NDU0OTdhLzEvcGJvVlExME9WWWVHV0JNSERWd0RaVnZhMmZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNjc4MzctYmFhMC00MDg1LWFhMjMtODAyM2Q5NDU0OTdh LzEvdjZ5WEVIWW1POTJ3N3M5YjZtVjBwQVc1aGQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPQNMA0G CSqGSIb3DQEBCwUAA4IBAQCbtoFgBV6IAfRv69c4hBgchSOTNIZwNpp6uMI41GX0 YPxEq2VMOkqNSgvASDVvODBSJ5Rue5nWodnEGdXECtKUaeOPghe7f9zcAXFDxlL0 EdA4P2jgx2JBOrrKy9ijyZPAWbu4d/usfzljnCMzN58ZqeNb06qkGoXFVMQpEQvp Je+75WhL3rgymbKJgKzKghBS9xfvJHIAkcEx1htGqAPeq6VavXpD2gALtXtaulis PDzURfD2NVurObVXmvXBPfuodjx96iABZcUAAPGpbY/hhdZUnxve3APT4bHhaHKF omXlSJBrlsFOZsyQe5lyCFj5yp1EEaNCv5XnbuFdlGc/ -----END CERTIFICATE-----Generated at Sat Dec 6 17:59:02 2025 by rpki-client