This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/bUcBfMu_9o4dYCM9sDK4nJufEqY.roa File: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (raw, json) Hash identifier: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc= Subject key identifier: 6D:47:01:7C:CB:BF:F6:8E:1D:60:23:3D:B0:32:B8:9C:9B:9F:12:A6 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019B7E388C97FE6B2D372871221425C30C61 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/bUcBfMu_9o4dYCM9sDK4nJufEqY.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203530 IP address blocks: 94.198.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8c:97:fe:6b:2d:37:28:71:22:14:25:c3:0c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d47017ccbbff68e1d60233db032b89c9b9f12a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:67:77:6c:25:fb:85:e0:15:87:6b:32:b3:7e: 2f:24:81:57:83:9e:65:ec:7a:cc:3e:70:eb:e5:87: 99:b8:38:13:1d:10:3b:17:ae:4b:e8:7f:c3:33:5a: 4f:92:ac:19:a8:0e:99:94:34:ae:a8:33:58:58:0d: 96:6b:5a:2b:56:32:50:b0:58:57:16:20:c7:02:3c: ef:f1:76:01:e1:4c:a2:63:4f:c1:f0:ab:5c:d3:45: f6:f9:1d:f9:64:c8:e7:1b:19:49:be:cb:45:8e:0c: 44:22:af:4d:ee:11:6b:56:ef:3c:17:ed:59:73:1a: 3c:55:ce:84:de:77:f6:df:c2:0b:9e:3e:8e:cc:6b: 49:13:27:3d:88:8b:e3:55:35:98:75:77:5b:24:94: 01:01:b9:e7:86:fb:40:fa:1d:09:22:48:18:9d:73: ff:99:9b:4e:9a:5e:ed:de:66:b8:01:b6:33:4e:30: 59:27:ea:ce:9c:aa:2d:07:4d:51:ea:81:62:e5:32: 84:ff:01:c4:35:ca:d3:87:5d:72:65:a7:95:29:d2: 32:ce:05:c7:21:ee:9f:c3:04:11:9b:d2:c6:8d:1c: 75:fd:e0:d0:7c:7f:00:c3:4c:1f:d8:60:e0:d7:98: 44:af:f6:80:49:15:d8:61:3d:83:3a:ca:36:c8:0d: 8c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:47:01:7C:CB:BF:F6:8E:1D:60:23:3D:B0:32:B8:9C:9B:9F:12:A6 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/bUcBfMu_9o4dYCM9sDK4nJufEqY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.198.188.0/24 Signature Algorithm: sha256WithRSAEncryption b4:b0:3d:58:28:4f:6a:c2:c7:e9:2d:8d:a9:87:c1:46:33:1c: a5:d8:37:75:9a:ac:77:43:e8:82:6a:64:5a:f7:3f:67:f1:a9: 89:c7:74:2b:99:ff:99:a6:cb:d5:f6:a5:98:91:63:a1:98:15: 0b:db:6d:02:41:c3:58:3d:cf:f8:c7:8c:ee:ea:fd:ce:2d:40: 81:1a:30:e5:10:f3:3b:a2:65:42:46:f2:05:29:54:4b:00:68: 0a:c2:f1:c5:ce:f1:cf:78:df:6e:67:16:3d:df:1c:35:0d:d7: 73:ca:0f:1f:25:b7:b0:47:c2:68:25:8d:46:32:1e:c9:80:4f: a8:67:c6:16:c4:b2:36:c5:73:82:3a:1a:d7:a6:dc:6f:ea:07: 2e:b5:dc:31:55:9d:e1:85:0d:fb:07:a1:58:42:48:3d:44:5f: 87:6a:9b:61:6d:bb:c6:08:4c:37:fd:46:59:0e:58:e8:62:34: a9:12:04:15:56:54:07:96:22:e0:7c:0c:77:7c:d2:74:6b:17: 82:6c:f9:45:2d:6c:e3:68:77:6a:3f:46:b0:dc:9a:06:f7:5d: 63:a7:76:cd:68:f4:f7:e4:1f:a6:67:7b:86:5e:f6:53:f6:82: 90:bd:97:41:3f:98:a6:79:01:f8:64:98:a8:b5:33:bd:75:c5: a9:21:c5:3f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIyX/mstNyhxIhQlwwxhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDQ3MDE3Y2NiYmZmNjhlMWQ2MDIzM2RiMDMyYjg5YzliOWYxMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gd3bCX7heAVh2sys34vJIFXg55l 7HrMPnDr5YeZuDgTHRA7F65L6H/DM1pPkqwZqA6ZlDSuqDNYWA2Wa1orVjJQsFhX FiDHAjzv8XYB4UyiY0/B8Ktc00X2+R35ZMjnGxlJvstFjgxEIq9N7hFrVu88F+1Z cxo8Vc6E3nf238ILnj6OzGtJEyc9iIvjVTWYdXdbJJQBAbnnhvtA+h0JIkgYnXP/ mZtOml7t3ma4AbYzTjBZJ+rOnKotB01R6oFi5TKE/wHENcrTh11yZaeVKdIyzgXH Ie6fwwQRm9LGjRx1/eDQfH8Aw0wf2GDg15hEr/aASRXYYT2DOso2yA2MQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG1HAXzLv/aOHWAjPbAyuJybnxKmMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvYlVjQmZNdV85bzRkWUNNOXNESzRuSnVmRXFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXsa8MA0G CSqGSIb3DQEBCwUAA4IBAQC0sD1YKE9qwsfpLY2ph8FGMxyl2Dd1mqx3Q+iCamRa 9z9n8amJx3Qrmf+ZpsvV9qWYkWOhmBUL220CQcNYPc/4x4zu6v3OLUCBGjDlEPM7 omVCRvIFKVRLAGgKwvHFzvHPeN9uZxY93xw1Dddzyg8fJbewR8JoJY1GMh7JgE+o Z8YWxLI2xXOCOhrXptxv6gcutdwxVZ3hhQ37B6FYQkg9RF+HapthbbvGCEw3/UZZ DljoYjSpEgQVVlQHliLgfAx3fNJ0axeCbPlFLWzjaHdqP0aw3JoG911jp3bNaPT3 5B+mZ3uGXvZT9oKQvZdBP5imeQH4ZJiotTO9dcWpIcU/ -----END CERTIFICATE-----Generated at Mon Jan 26 05:44:33 2026 by rpki-client