This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/bUNfA-Av4UmqF4BtunXlZ21q724.roa File: bUNfA-Av4UmqF4BtunXlZ21q724.roa (raw, json) Hash identifier: qQU2e8dztU2kTJC7bA4kqu6ev957L6OyeDRTaJouBzU= Subject key identifier: 6D:43:5F:03:E0:2F:E1:49:AA:17:80:6D:BA:75:E5:67:6D:6A:EF:6E Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123 Certificate serial: 019B78A32E4EAE069AB7DD9B7A8B015873E7 Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/bUNfA-Av4UmqF4BtunXlZ21q724.roa Signing time: Thu 01 Jan 2026 08:18:38 +0000 ROA not before: Thu 01 Jan 2026 08:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196914 IP address blocks: 84.47.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:2e:4e:ae:06:9a:b7:dd:9b:7a:8b:01:58:73:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123 Validity Not Before: Jan 1 08:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d435f03e02fe149aa17806dba75e5676d6aef6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:99:36:59:33:57:6f:57:8b:61:c2:e8:86:93: 64:f7:76:90:84:a8:b8:e7:c4:85:05:d3:93:3f:02: 5a:92:09:c4:98:68:e3:a5:10:e4:0f:f4:29:7d:1d: 7d:99:57:1e:a5:5b:65:e0:7b:4d:5e:0a:12:7f:ae: b1:64:b4:2d:1f:85:57:37:ab:c9:e7:2e:ac:da:29: 06:f1:3d:6e:94:ba:49:15:f2:63:ee:fa:dc:a7:42: 48:71:6b:a6:61:24:c6:61:84:fc:3c:4c:f0:62:90: c8:be:74:38:f0:45:db:96:7b:85:f1:8c:bf:9c:2d: cf:ea:c6:e2:dd:98:61:6d:d1:d6:e2:c1:dc:3e:02: f9:5f:23:65:e2:48:f1:d0:37:26:ce:72:14:bd:60: 9c:58:f0:df:82:44:e4:9b:bb:de:b5:98:3e:8d:db: 30:95:f3:71:7f:f1:19:24:6e:dc:d7:fd:71:0a:b6: 45:ac:0f:5a:9b:ba:6b:8a:b2:22:89:95:53:7c:41: 10:d2:81:5e:07:be:8c:78:08:07:51:89:e9:6b:35: 50:7e:6a:41:f5:8d:5e:e0:81:79:bc:37:9b:68:26: 54:aa:83:6b:c4:fa:8f:93:5b:5a:ac:05:82:0c:a6: ed:6b:2c:c4:64:97:05:fd:e5:b5:9a:99:7e:e9:69: 4b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:43:5F:03:E0:2F:E1:49:AA:17:80:6D:BA:75:E5:67:6D:6A:EF:6E X509v3 Authority Key Identifier: keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/bUNfA-Av4UmqF4BtunXlZ21q724.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.47.148.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:5d:4a:6e:47:d9:8d:0b:54:5d:4a:8a:41:02:c5:74:d3:c3: e3:a7:81:38:83:09:78:a6:5f:4b:1f:83:47:c9:92:01:4d:d7: 70:37:7d:1a:8b:2d:5c:46:38:9e:ae:16:73:6b:bc:bc:7a:f1: a9:bb:fc:58:ae:8d:d0:73:9e:19:98:d6:ff:1c:63:b1:1d:4d: cc:34:be:b9:c7:2f:f1:57:bd:57:14:2b:4a:89:33:6d:da:02: 4f:b9:2e:9d:31:4c:a8:6e:a1:51:6a:32:1d:46:ec:e0:e7:8f: 8a:32:10:90:c9:58:5f:b4:ea:70:18:59:15:b1:cf:5a:b7:de: 21:b4:ff:38:aa:f9:59:ca:57:5f:87:48:a0:06:1b:e5:a7:9c: 02:a6:2f:d5:b9:f6:2f:22:ca:d7:5e:83:c1:05:32:f3:f9:9c: 9a:c4:fe:f6:b0:7c:e1:ca:60:2c:99:87:22:83:4e:92:08:7e: 41:84:3d:87:11:80:cd:e0:2c:a1:fe:95:5c:4f:7c:70:25:8f: 84:9a:d3:3b:65:a0:b1:9d:7e:0e:d9:a7:ad:1c:11:e1:86:76: 4b:68:bb:2f:63:0c:31:26:ef:3a:12:17:f8:f6:35:79:6a:ed: ef:2a:15:ee:ac:ab:a4:ae:1f:bf:62:3c:5b:a8:69:34:e4:2f: 9b:59:ae:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oy5Orgaat92beosBWHPnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzgxODU1NGE1MTgwOGVlZmI4MjllYzc0NjVhMzIyMmYy NzAxMjMwHhcNMjYwMTAxMDgxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDQzNWYwM2UwMmZlMTQ5YWExNzgwNmRiYTc1ZTU2NzZkNmFlZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJk2WTNXb1eLYcLohpNk93aQhKi4 58SFBdOTPwJakgnEmGjjpRDkD/QpfR19mVcepVtl4HtNXgoSf66xZLQtH4VXN6vJ 5y6s2ikG8T1ulLpJFfJj7vrcp0JIcWumYSTGYYT8PEzwYpDIvnQ48EXblnuF8Yy/ nC3P6sbi3ZhhbdHW4sHcPgL5XyNl4kjx0DcmznIUvWCcWPDfgkTkm7vetZg+jdsw lfNxf/EZJG7c1/1xCrZFrA9am7prirIiiZVTfEEQ0oFeB76MeAgHUYnpazVQfmpB 9Y1e4IF5vDebaCZUqoNrxPqPk1tarAWCDKbtayzEZJcF/eW1mpl+6WlLVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG1DXwPgL+FJqheAbbp15Wdtau9uMB8GA1UdIwQY MBaAFI84GFVKUYCO77gp7HRloyIvJwEjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgt YmZiNGJhMzBlNDVhLzEvYlVOZkEtQXY0VW1xRjRCdHVuWGxaMjFxNzI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wOWRiYTQtMWM5My00OWQ2LTg4ODgtYmZiNGJhMzBlNDVh LzEvanpnWVZVcFJnSTd2dUNuc2RHV2pJaThuQVNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVC+UMA0G CSqGSIb3DQEBCwUAA4IBAQBaXUpuR9mNC1RdSopBAsV008Pjp4E4gwl4pl9LH4NH yZIBTddwN30aiy1cRjierhZza7y8evGpu/xYro3Qc54ZmNb/HGOxHU3MNL65xy/x V71XFCtKiTNt2gJPuS6dMUyobqFRajIdRuzg54+KMhCQyVhftOpwGFkVsc9at94h tP84qvlZyldfh0igBhvlp5wCpi/VufYvIsrXXoPBBTLz+ZyaxP72sHzhymAsmYci g06SCH5BhD2HEYDN4Cyh/pVcT3xwJY+EmtM7ZaCxnX4O2aetHBHhhnZLaLsvYwwx Ju86Ehf49jV5au3vKhXurKukrh+/YjxbqGk05C+bWa6b -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:03 2026 by rpki-client