This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/B-ipl06RCWSyO8XBJ-hwnFvouQw.roa File: B-ipl06RCWSyO8XBJ-hwnFvouQw.roa (raw, json) Hash identifier: EFSXhuwpta/o/xO0QXVlB1N99rMSOx3Z+qLKerNeRok= Subject key identifier: 07:E8:A9:97:4E:91:09:64:B2:3B:C5:C1:27:E8:70:9C:5B:E8:B9:0C Certificate issuer: /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34 Certificate serial: 019B7B35DF08DC82232936EE5DCC3B35B03A Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/B-ipl06RCWSyO8XBJ-hwnFvouQw.roa Signing time: Thu 01 Jan 2026 20:18:06 +0000 ROA not before: Thu 01 Jan 2026 20:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64241 IP address blocks: 193.57.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:df:08:dc:82:23:29:36:ee:5d:cc:3b:35:b0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34 Validity Not Before: Jan 1 20:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07e8a9974e910964b23bc5c127e8709c5be8b90c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:aa:69:fa:79:9f:9f:33:48:59:2d:16:52:36: 21:45:22:c6:3f:da:aa:18:bd:85:b1:4d:a1:1e:6b: 44:9c:c6:59:e0:99:dd:0f:dd:f1:8d:cb:f5:f3:45: 4b:1a:50:0e:e8:ad:7f:97:d8:bc:ec:f5:a2:94:a8: 52:6a:83:83:75:0b:c2:5f:27:51:1f:b0:0b:0b:d2: 45:a1:00:78:50:8c:1c:b6:ad:3f:24:94:0c:f3:72: 0c:fb:4c:68:c9:73:9e:7a:ae:72:e7:d6:0a:c1:b0: 57:dc:cf:0f:22:fa:46:33:c9:93:d0:78:cc:9b:2b: 03:b1:b7:fe:e0:71:53:ef:73:55:33:ed:3a:8c:ac: ef:d8:d5:42:13:53:09:1b:4a:b1:9b:91:16:9c:52: db:b0:0c:a7:5c:55:ed:83:40:88:b9:86:79:10:30: b1:8d:8b:dc:1f:08:f6:4f:3a:d3:1c:7b:d4:13:2c: 1f:ea:d1:39:c2:2c:60:dc:99:ce:96:d4:b6:f3:ae: b9:66:eb:e7:1f:50:53:d8:3a:c5:32:f5:e3:9f:f8: 0e:d3:98:0e:a7:65:f3:73:b1:e5:9c:29:c9:ec:ea: 38:6a:ac:02:e6:15:7e:22:f2:43:e9:07:f4:cb:85: 24:41:7f:e4:61:06:a1:99:28:47:b4:86:fa:da:46: c0:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E8:A9:97:4E:91:09:64:B2:3B:C5:C1:27:E8:70:9C:5B:E8:B9:0C X509v3 Authority Key Identifier: keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/B-ipl06RCWSyO8XBJ-hwnFvouQw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.173.0/24 Signature Algorithm: sha256WithRSAEncryption 49:32:68:25:3c:f7:98:be:19:78:e3:d7:43:1d:6d:e0:d9:6a: 59:3f:30:16:d6:36:4b:03:f6:3e:b3:24:d5:8f:06:2b:0e:98: 67:af:77:a5:99:b1:43:a5:88:b9:04:f0:d7:47:a8:4b:48:33: 9a:59:0b:7d:13:17:6d:d2:79:24:e0:bf:25:21:c7:5c:41:16: a4:a5:f5:6e:50:21:af:c2:64:84:b3:9d:e7:46:77:24:80:15: 67:1f:b6:54:12:10:48:45:b7:46:b6:28:05:a6:48:e1:36:da: c2:b6:24:6a:da:6c:13:62:ca:3a:2c:5e:cc:59:cf:a7:7b:3e: aa:4a:d8:13:06:10:e8:00:43:67:fd:55:7c:3c:f9:b5:02:1d: 80:01:a6:9d:0a:4d:fb:72:3c:98:30:d1:cd:a6:46:85:ce:44: 53:14:6a:76:65:46:87:05:8b:c8:74:48:13:d7:e8:5a:ca:98: ec:d2:30:ca:4d:ce:a6:a5:e7:e2:c7:54:2f:a3:44:c3:71:c2: a3:37:38:cf:be:ee:36:b1:fb:d5:f4:fd:ae:c6:e1:be:53:48: 63:b0:e0:37:03:2d:a0:09:cc:ee:fb:7b:3d:2c:b0:65:cb:b2: 20:92:fb:99:24:f3:b7:e9:72:1f:39:c9:54:70:a8:9d:82:cc: a8:08:70:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nd8I3IIjKTbuXcw7NbA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViY2Q0MGQxMGI1NmYzYjUzMmZhMGRmZDAxZDgxN2VmOTNk YTFhMzQwHhcNMjYwMTAxMjAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2U4YTk5NzRlOTEwOTY0YjIzYmM1YzEyN2U4NzA5YzViZThiOTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKpp+nmfnzNIWS0WUjYhRSLGP9qq GL2FsU2hHmtEnMZZ4JndD93xjcv180VLGlAO6K1/l9i87PWilKhSaoODdQvCXydR H7ALC9JFoQB4UIwctq0/JJQM83IM+0xoyXOeeq5y59YKwbBX3M8PIvpGM8mT0HjM mysDsbf+4HFT73NVM+06jKzv2NVCE1MJG0qxm5EWnFLbsAynXFXtg0CIuYZ5EDCx jYvcHwj2TzrTHHvUEywf6tE5wixg3JnOltS28665ZuvnH1BT2DrFMvXjn/gO05gO p2Xzc7HlnCnJ7Oo4aqwC5hV+IvJD6Qf0y4UkQX/kYQahmShHtIb62kbA9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAfoqZdOkQlksjvFwSfocJxb6LkMMB8GA1UdIwQY MBaAFFvNQNELVvO1MvoN/QHYF++T2ho0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iZmY3NTgtNGI4My00NzNkLWIwNzIt YTJjZTFjYzhiODdmLzEvQi1pcGwwNlJDV1N5TzhYQkotaHduRnZvdVF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9iZmY3NTgtNGI4My00NzNkLWIwNzItYTJjZTFjYzhiODdm LzEvVzgxQTBRdFc4N1V5LWczOUFkZ1g3NVBhR2pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTmtMA0G CSqGSIb3DQEBCwUAA4IBAQBJMmglPPeYvhl449dDHW3g2WpZPzAW1jZLA/Y+syTV jwYrDphnr3elmbFDpYi5BPDXR6hLSDOaWQt9Exdt0nkk4L8lIcdcQRakpfVuUCGv wmSEs53nRnckgBVnH7ZUEhBIRbdGtigFpkjhNtrCtiRq2mwTYso6LF7MWc+nez6q StgTBhDoAENn/VV8PPm1Ah2AAaadCk37cjyYMNHNpkaFzkRTFGp2ZUaHBYvIdEgT 1+haypjs0jDKTc6mpefix1Qvo0TDccKjNzjPvu42sfvV9P2uxuG+U0hjsOA3Ay2g Cczu+3s9LLBly7IgkvuZJPO36XIfOclUcKidgsyoCHCH -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:37 2026 by rpki-client