This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/BDqHlt60SCUsG6m1jsuhJtjmd-g.roa File: BDqHlt60SCUsG6m1jsuhJtjmd-g.roa (raw, json) Hash identifier: qc0DKSPVeA1IXC/yas0jKMH1maqSIbQPdur6MCx7sBE= Subject key identifier: 04:3A:87:96:DE:B4:48:25:2C:1B:A9:B5:8E:CB:A1:26:D8:E6:77:E8 Certificate issuer: /CN=1c5c72ee422c61667e3056de6b3ffce034305175 Certificate serial: 019B7BA5073815C52E6B533E256ED149CE4A Authority key identifier: 1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/BDqHlt60SCUsG6m1jsuhJtjmd-g.roa Signing time: Thu 01 Jan 2026 22:19:30 +0000 ROA not before: Thu 01 Jan 2026 22:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210894 IP address blocks: 95.66.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.mft rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:07:38:15:c5:2e:6b:53:3e:25:6e:d1:49:ce:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c5c72ee422c61667e3056de6b3ffce034305175 Validity Not Before: Jan 1 22:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=043a8796deb448252c1ba9b58ecba126d8e677e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:63:b2:c4:91:8c:9b:ef:9f:70:9b:23:96:f9: ca:80:f5:55:cb:e2:62:11:75:d6:40:3f:9c:09:7b: 4b:4b:31:8f:f8:b7:07:68:e3:5c:9d:a2:f7:dd:7d: cd:cf:6d:53:b7:f7:ad:b1:d1:f3:ce:1e:dc:3b:35: 02:fd:72:90:72:0b:0e:10:99:73:d3:66:c9:de:ea: bf:b6:06:c9:f4:92:dd:4d:1b:c9:ff:00:31:21:02: 33:a4:32:bc:e8:5f:2c:81:04:a7:17:1f:2a:03:dc: fa:fa:37:86:58:ce:52:76:9a:5f:1a:99:38:e8:c2: 06:f8:dc:17:27:9c:38:d6:94:80:1c:13:eb:80:55: 33:ae:8e:6c:f3:3e:a3:72:58:35:38:5f:b1:db:88: 0b:4b:0d:ec:a0:3b:a9:9a:ed:bf:f3:44:38:89:20: 48:fa:df:24:77:da:47:b5:db:c5:a1:89:b0:a3:ff: fd:97:0a:40:a1:7b:1d:13:b7:f7:a2:f3:25:73:f8: b5:31:d2:65:7a:e0:7e:57:58:8a:f5:40:e7:c3:e6: 50:6c:76:00:7a:e7:1c:d9:ab:ad:3b:1f:ba:b6:95: 8e:3c:3d:18:a4:73:59:2b:08:e8:5a:00:c5:44:ac: c1:15:12:13:64:cc:c3:94:11:b4:4a:79:80:8b:4b: b5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3A:87:96:DE:B4:48:25:2C:1B:A9:B5:8E:CB:A1:26:D8:E6:77:E8 X509v3 Authority Key Identifier: keyid:1C:5C:72:EE:42:2C:61:66:7E:30:56:DE:6B:3F:FC:E0:34:30:51:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HFxy7kIsYWZ-MFbeaz_84DQwUXU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/BDqHlt60SCUsG6m1jsuhJtjmd-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e08d0e-ee4c-4ae1-9e0b-1278a42e092a/1/HFxy7kIsYWZ-MFbeaz_84DQwUXU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.66.198.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:ad:5c:8c:25:69:20:71:65:91:22:e5:1d:56:73:18:26:94: 53:fd:7e:19:cd:d1:93:f4:44:8c:2e:93:7d:39:8b:ed:d4:34: ee:00:f9:7d:80:a8:a5:d2:bd:ec:b2:e5:fa:8f:4e:1d:94:01: 2a:a6:b9:e7:ac:a7:b6:b1:22:a8:39:40:a6:f0:4c:9f:60:cc: e2:c0:5a:40:e7:b3:29:0a:3a:66:d0:3f:3a:66:6b:84:24:52: 4b:07:ea:db:45:19:b7:cf:ef:72:5a:1e:8f:c5:de:84:a5:6a: 48:64:58:43:11:7a:a3:63:d5:e3:5e:b8:2c:ca:98:bf:8b:a1: 24:db:ad:9a:34:10:57:31:2a:09:4f:85:47:ff:5e:3b:e0:5c: 1f:89:c5:4d:b5:c7:e5:82:7e:f8:d7:5a:a4:ae:6c:3e:ad:1c: de:47:b6:05:b9:be:4f:c2:56:14:a5:0f:ef:e6:80:b6:4d:e1: 01:ea:23:cf:36:93:0b:b5:4e:14:81:2e:22:b2:1c:bf:00:93: 49:7e:51:5a:39:6f:ef:98:ee:5d:01:87:4c:80:4c:f3:bf:f1: ad:da:ed:26:7b:17:4d:a9:54:65:fc:b2:f8:72:03:ea:d9:7e: e3:b4:4b:44:07:be:17:f5:cf:5f:b5:c3:05:d9:21:c0:4d:b8: 86:64:01:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pQc4FcUua1M+JW7RSc5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjNWM3MmVlNDIyYzYxNjY3ZTMwNTZkZTZiM2ZmY2UwMzQz MDUxNzUwHhcNMjYwMTAxMjIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDNhODc5NmRlYjQ0ODI1MmMxYmE5YjU4ZWNiYTEyNmQ4ZTY3N2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGOyxJGMm++fcJsjlvnKgPVVy+Ji EXXWQD+cCXtLSzGP+LcHaONcnaL33X3Nz21Tt/etsdHzzh7cOzUC/XKQcgsOEJlz 02bJ3uq/tgbJ9JLdTRvJ/wAxIQIzpDK86F8sgQSnFx8qA9z6+jeGWM5SdppfGpk4 6MIG+NwXJ5w41pSAHBPrgFUzro5s8z6jclg1OF+x24gLSw3soDupmu2/80Q4iSBI +t8kd9pHtdvFoYmwo//9lwpAoXsdE7f3ovMlc/i1MdJleuB+V1iK9UDnw+ZQbHYA eucc2autOx+6tpWOPD0YpHNZKwjoWgDFRKzBFRITZMzDlBG0SnmAi0u1cQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAQ6h5betEglLBuptY7LoSbY5nfoMB8GA1UdIwQY MBaAFBxccu5CLGFmfjBW3ms//OA0MFF1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGIt MTI3OGE0MmUwOTJhLzEvQkRxSGx0NjBTQ1VzRzZtMWpzdWhKdGptZC1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lMDhkMGUtZWU0Yy00YWUxLTllMGItMTI3OGE0MmUwOTJh LzEvSEZ4eTdrSXNZV1otTUZiZWF6Xzg0RFF3VVhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBX0LGMA0G CSqGSIb3DQEBCwUAA4IBAQCfrVyMJWkgcWWRIuUdVnMYJpRT/X4ZzdGT9ESMLpN9 OYvt1DTuAPl9gKil0r3ssuX6j04dlAEqprnnrKe2sSKoOUCm8EyfYMziwFpA57Mp Cjpm0D86ZmuEJFJLB+rbRRm3z+9yWh6Pxd6EpWpIZFhDEXqjY9XjXrgsypi/i6Ek 262aNBBXMSoJT4VH/1474FwficVNtcflgn7411qkrmw+rRzeR7YFub5PwlYUpQ/v 5oC2TeEB6iPPNpMLtU4UgS4ishy/AJNJflFaOW/vmO5dAYdMgEzzv/Gt2u0mexdN qVRl/LL4cgPq2X7jtEtEB74X9c9ftcMF2SHATbiGZAF1 -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:06 2026 by rpki-client