This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/baEkayAg80jmYDBU-ExaHSLpuaI.roa File: baEkayAg80jmYDBU-ExaHSLpuaI.roa (raw, json) Hash identifier: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw= Subject key identifier: 6D:A1:24:6B:20:20:F3:48:E6:60:30:54:F8:4C:5A:1D:22:E9:B9:A2 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019B78A3364E7FBD2EB5522E822809C4F400 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/baEkayAg80jmYDBU-ExaHSLpuaI.roa Signing time: Thu 01 Jan 2026 08:18:40 +0000 ROA not before: Thu 01 Jan 2026 08:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211670 IP address blocks: 5.190.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:36:4e:7f:bd:2e:b5:52:2e:82:28:09:c4:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jan 1 08:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6da1246b2020f348e6603054f84c5a1d22e9b9a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:11:25:d6:2f:45:bc:9e:e2:8f:b2:f3:f2:29: ff:f7:d5:11:9b:98:c2:dd:dd:da:d5:bf:a1:2a:25: f3:ab:c0:af:1d:81:6b:55:d8:64:eb:aa:7a:20:48: f4:fa:6c:8c:62:1c:79:e5:5f:48:80:43:c2:ba:51: 47:cf:ad:76:b5:51:a4:9d:12:34:3b:de:ef:a7:9e: 96:b0:8f:b8:b0:2a:35:c9:48:17:7f:56:94:2f:7a: ff:12:a2:ec:5e:39:23:24:70:fc:0f:dc:b4:f5:2f: f6:f2:bc:39:94:6c:fe:b8:a4:a9:14:86:7b:6e:3d: c1:32:f1:c2:48:41:4d:1e:1a:e3:f2:6e:8a:69:d4: 38:5a:0b:00:70:8c:98:ab:74:7c:b2:76:38:f7:52: 3a:1f:a8:0e:63:b1:b4:4b:cd:e5:6d:3e:4f:17:f3: c1:6d:ce:ac:69:08:c4:95:20:a2:eb:18:af:f7:74: 8c:b7:a3:94:8b:b2:1c:8d:4b:a9:f5:47:7d:26:3f: 89:c3:b5:0f:65:5a:21:2f:f2:b4:ae:a9:75:1b:25: f1:14:c8:69:2e:f9:fb:8e:22:df:2f:17:82:2f:8a: 22:93:a5:29:01:a0:6f:5d:fc:16:70:94:46:16:69: fa:2e:c5:9e:1e:0f:6e:80:64:c7:47:6e:76:7c:92: 9e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A1:24:6B:20:20:F3:48:E6:60:30:54:F8:4C:5A:1D:22:E9:B9:A2 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/baEkayAg80jmYDBU-ExaHSLpuaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.190.211.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:ad:97:be:70:a8:1b:f3:f5:c3:3d:27:8d:ff:e9:0b:9c:b4: eb:d3:4e:aa:e7:21:ae:de:a3:e6:67:06:4b:3a:60:06:24:a4: 89:26:8f:fd:2f:f6:86:eb:88:c2:4c:37:e8:88:0e:3f:22:d1: 63:f4:89:94:47:a1:bc:6a:f4:f4:d8:2e:95:77:1f:08:63:b1: 5c:3f:72:56:d0:f2:3c:0a:57:9c:40:ac:39:d4:04:da:d2:76: 50:90:c4:81:f1:0e:dc:9d:85:0b:ad:25:f0:ed:aa:93:cf:98: d7:8d:a9:84:65:97:44:0d:9a:33:f1:e9:73:d3:e4:75:fb:8c: 94:85:13:ae:71:e9:18:55:f1:ae:5d:f4:00:fe:79:f6:06:c6: 08:67:f4:9d:68:6a:cd:81:92:0c:ac:6d:f5:f9:05:6d:55:d7: 94:5d:aa:1a:f0:87:4a:41:e6:72:2d:09:be:c6:ba:d2:2c:1e: d3:ba:14:2e:d9:ec:4b:23:d3:3c:1c:78:26:1d:95:c3:9c:c8: cd:ff:ff:ad:7b:c4:51:42:52:f0:6a:21:f4:3a:68:79:3e:dc: 05:96:ff:80:61:e6:16:29:b9:d8:02:0e:78:40:14:fa:96:01: 1c:65:47:7c:43:53:74:09:cd:fe:2d:b4:c1:1d:b7:1d:f9:4b: 5e:b1:83:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ozZOf70utVIugigJxPQAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwMTAxMDgxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGExMjQ2YjIwMjBmMzQ4ZTY2MDMwNTRmODRjNWExZDIyZTliOWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hEl1i9FvJ7ij7Lz8in/99URm5jC 3d3a1b+hKiXzq8CvHYFrVdhk66p6IEj0+myMYhx55V9IgEPCulFHz612tVGknRI0 O97vp56WsI+4sCo1yUgXf1aUL3r/EqLsXjkjJHD8D9y09S/28rw5lGz+uKSpFIZ7 bj3BMvHCSEFNHhrj8m6KadQ4WgsAcIyYq3R8snY491I6H6gOY7G0S83lbT5PF/PB bc6saQjElSCi6xiv93SMt6OUi7IcjUup9Ud9Jj+Jw7UPZVohL/K0rql1GyXxFMhp Lvn7jiLfLxeCL4oik6UpAaBvXfwWcJRGFmn6LsWeHg9ugGTHR252fJKe+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG2hJGsgIPNI5mAwVPhMWh0i6bmiMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYmFFa2F5QWc4MGptWURCVS1FeGFIU0xwdWFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABb7TMA0G CSqGSIb3DQEBCwUAA4IBAQBPrZe+cKgb8/XDPSeN/+kLnLTr006q5yGu3qPmZwZL OmAGJKSJJo/9L/aG64jCTDfoiA4/ItFj9ImUR6G8avT02C6Vdx8IY7FcP3JW0PI8 ClecQKw51ATa0nZQkMSB8Q7cnYULrSXw7aqTz5jXjamEZZdEDZoz8elz0+R1+4yU hROucekYVfGuXfQA/nn2BsYIZ/SdaGrNgZIMrG31+QVtVdeUXaoa8IdKQeZyLQm+ xrrSLB7TuhQu2exLI9M8HHgmHZXDnMjN//+te8RRQlLwaiH0Omh5PtwFlv+AYeYW KbnYAg54QBT6lgEcZUd8Q1N0Cc3+LbTBHbcd+UtesYMv -----END CERTIFICATE-----Generated at Mon Jan 26 07:27:50 2026 by rpki-client