This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa File: Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa (raw, json) Hash identifier: vFhA2KjCPdOcJsVjA7uGx7jrzbvsOL97jtv5aYxWqgs= Subject key identifier: 45:BF:0D:6E:14:C0:C5:D5:BC:42:8C:F1:D0:5D:21:31:EB:23:05:E4 Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af Certificate serial: 019B7C12CDFFC56E602E12F98C296233F0B8 Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa Signing time: Fri 02 Jan 2026 00:19:25 +0000 ROA not before: Fri 02 Jan 2026 00:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12912 IP address blocks: 193.91.1.0/24 maxlen: 24 193.91.6.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:cd:ff:c5:6e:60:2e:12:f9:8c:29:62:33:f0:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af Validity Not Before: Jan 2 00:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45bf0d6e14c0c5d5bc428cf1d05d2131eb2305e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8d:4c:d5:19:8b:7d:09:7e:dc:4f:7d:ea:ee: 5a:c5:b5:d5:3d:a8:8e:f7:51:ae:bc:34:ee:41:60: 08:22:15:62:dc:e2:73:d2:3f:f9:a4:32:ab:63:d3: 88:7e:1c:4f:c0:02:32:e8:0d:1a:d2:42:4f:e9:66: d6:0e:7a:dd:a8:52:64:3c:8c:31:44:37:2e:cc:1d: b3:96:3d:c1:c9:31:3c:27:ba:1d:01:1c:81:bb:9c: 2e:9e:6e:e4:f4:dc:85:98:6b:d1:8b:1c:4f:a7:1b: db:85:f5:f2:f2:51:17:88:62:71:39:0f:56:53:ee: 40:84:74:51:1c:15:15:0f:7f:d5:ba:69:e2:58:95: 01:03:82:86:67:01:5a:04:0e:41:10:af:a4:23:88: 22:d9:36:51:5d:de:20:ee:ec:f3:3c:92:25:62:19: 2e:c6:d8:8a:76:00:ec:69:13:9e:1a:3a:4d:e9:72: 9f:cc:5f:4a:af:ab:2b:50:e0:06:f6:3d:73:1b:2d: e8:25:45:7e:12:22:ee:2c:2b:80:53:b5:56:f2:3e: b6:fe:6b:51:ff:a9:73:f2:3c:a9:b3:87:ad:f2:3a: 04:50:c3:37:f9:5a:c2:c6:3c:92:89:ee:0e:e6:46: 6e:da:f8:fe:91:60:90:48:b4:8d:2a:8e:e9:e1:ed: fb:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BF:0D:6E:14:C0:C5:D5:BC:42:8C:F1:D0:5D:21:31:EB:23:05:E4 X509v3 Authority Key Identifier: keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/Rb8NbhTAxdW8Qozx0F0hMesjBeQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.91.1.0/24 193.91.6.0/23 Signature Algorithm: sha256WithRSAEncryption 27:fe:c1:fb:29:e7:8f:b6:92:15:1e:20:45:52:66:b8:50:59: d3:f7:08:4c:4b:cb:7d:b3:f6:4b:ee:16:e5:f1:39:29:05:16: 09:b9:75:aa:4a:0d:6e:4e:8d:38:33:a1:4a:f2:d1:4f:71:64: 8e:a6:7b:96:3f:d2:25:27:ff:4f:09:59:c7:0a:3f:bb:61:33: 28:89:a4:34:ab:a1:12:40:ec:7c:16:c8:0b:d9:eb:1c:89:c1: 9c:6d:40:a2:99:10:fb:d4:a4:c5:04:84:1a:aa:de:0e:c8:62: 3d:e3:86:1f:01:2d:66:ee:94:5e:d2:97:76:12:08:93:e0:d7: 66:67:cb:f9:a1:f0:ef:60:18:16:5f:cc:c7:f6:ab:6b:41:fb: 3d:36:18:4e:37:6a:91:c5:d9:f6:e4:b6:e9:c8:73:dc:19:16: 41:51:90:c3:9b:a9:6b:e9:ad:8c:fc:b2:f6:16:27:2e:bf:57: 12:03:d7:5e:1e:b2:ef:c5:01:d0:96:dd:0a:0b:0d:d6:ec:56: 54:0e:97:5a:c0:a0:13:80:5f:e0:f7:b3:fe:ee:11:3d:c0:bf: ed:b9:71:90:59:84:2b:33:8a:ca:df:2c:56:df:ad:77:c5:e3: 73:c1:8d:2b:6c:73:c0:d7:0b:20:60:0e:a9:2e:14:a1:d3:35: 6e:f3:2c:38 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Es3/xW5gLhL5jCliM/C4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0MDkxNjhmZGI1MmU5YjdkMWE3YTVlOGY1MThlZGZiYzJj M2Y5YWYwHhcNMjYwMTAyMDAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWJmMGQ2ZTE0YzBjNWQ1YmM0MjhjZjFkMDVkMjEzMWViMjMwNWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I1M1RmLfQl+3E996u5axbXVPaiO 91GuvDTuQWAIIhVi3OJz0j/5pDKrY9OIfhxPwAIy6A0a0kJP6WbWDnrdqFJkPIwx RDcuzB2zlj3ByTE8J7odARyBu5wunm7k9NyFmGvRixxPpxvbhfXy8lEXiGJxOQ9W U+5AhHRRHBUVD3/VumniWJUBA4KGZwFaBA5BEK+kI4gi2TZRXd4g7uzzPJIlYhku xtiKdgDsaROeGjpN6XKfzF9Kr6srUOAG9j1zGy3oJUV+EiLuLCuAU7VW8j62/mtR /6lz8jyps4et8joEUMM3+VrCxjySie4O5kZu2vj+kWCQSLSNKo7p4e37pQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEW/DW4UwMXVvEKM8dBdITHrIwXkMB8GA1UdIwQY MBaAFLQJFo/bUum30ael6PUY7fvCw/mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2Qt ZmE3MThhYzlkNzU4LzEvUmI4TmJoVEF4ZFc4UW96eDBGMGhNZXNqQmVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zNmJhOWQtMzNhZi00Y2YzLWEyN2QtZmE3MThhYzlkNzU4 LzEvdEFrV2o5dFM2YmZScDZYbzlSanQtOExELWE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwVsBAwQB wVsGMA0GCSqGSIb3DQEBCwUAA4IBAQAn/sH7KeePtpIVHiBFUma4UFnT9whMS8t9 s/ZL7hbl8TkpBRYJuXWqSg1uTo04M6FK8tFPcWSOpnuWP9IlJ/9PCVnHCj+7YTMo iaQ0q6ESQOx8FsgL2escicGcbUCimRD71KTFBIQaqt4OyGI944YfAS1m7pRe0pd2 EgiT4NdmZ8v5ofDvYBgWX8zH9qtrQfs9NhhON2qRxdn25LbpyHPcGRZBUZDDm6lr 6a2M/LL2Ficuv1cSA9deHrLvxQHQlt0KCw3W7FZUDpdawKATgF/g97P+7hE9wL/t uXGQWYQrM4rK3yxW3613xeNzwY0rbHPA1wsgYA6pLhSh0zVu8yw4 -----END CERTIFICATE-----Generated at Mon Jan 26 02:19:21 2026 by rpki-client