This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/BRDlyqeJrmrBAcGjXwsME96B8FA.roa File: BRDlyqeJrmrBAcGjXwsME96B8FA.roa (raw, json) Hash identifier: jjDNz/Y1cZhGq2xfdDGq/oEMuXVbmPo8+lz5IqqCETc= Subject key identifier: 05:10:E5:CA:A7:89:AE:6A:C1:01:C1:A3:5F:0B:0C:13:DE:81:F0:50 Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559 Certificate serial: 019B7DCB1B6BCF76CC22442764CBE018A4D8 Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/BRDlyqeJrmrBAcGjXwsME96B8FA.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204548 IP address blocks: 2.59.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1b:6b:cf:76:cc:22:44:27:64:cb:e0:18:a4:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559 Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0510e5caa789ae6ac101c1a35f0b0c13de81f050 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:66:b4:b3:1c:1d:0a:3b:45:00:60:1b:ee:3f: 7e:0f:3d:a4:4a:39:2e:93:73:ed:68:90:84:6a:e3: 72:1a:5a:d4:7a:ba:8f:88:10:42:47:f5:14:83:2d: b5:25:12:a3:44:e3:c3:9d:cf:4f:9e:b1:5b:21:a1: 00:74:6f:68:c8:f7:0e:99:c9:82:bb:d5:71:4d:2a: af:c4:02:ca:f8:69:47:f1:16:48:71:0d:f3:67:02: 54:88:99:01:63:25:b9:ff:cc:b8:00:53:6b:3a:54: 84:a4:a2:02:81:99:c5:75:c2:ce:c8:d2:7f:b9:7a: d5:f7:30:4e:70:87:dc:58:b5:02:d0:02:80:62:49: b7:16:10:ef:9c:ee:62:c9:18:33:52:2d:4d:c4:93: fc:28:5c:bf:19:cf:e5:fe:f3:35:fe:11:af:b1:e5: ac:5e:ff:97:11:63:b1:51:af:71:23:17:e5:c3:63: d1:1c:c6:04:36:dc:07:3e:42:13:4b:9f:d3:65:83: 2f:2d:ec:2e:24:3d:40:43:3f:66:7b:a2:00:c8:4d: 9a:6a:e1:86:69:b1:c4:5a:79:23:a4:9a:f3:d9:a2: 46:99:d6:1b:76:37:55:fb:b4:4d:08:0b:23:fd:2a: 6f:39:6b:3d:d8:73:25:9f:c5:51:72:61:68:70:ef: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:10:E5:CA:A7:89:AE:6A:C1:01:C1:A3:5F:0B:0C:13:DE:81:F0:50 X509v3 Authority Key Identifier: keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/BRDlyqeJrmrBAcGjXwsME96B8FA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.118.0/24 Signature Algorithm: sha256WithRSAEncryption 50:4b:5c:a1:f7:f5:52:a2:94:3f:70:28:58:93:f0:c8:a7:b0: 39:70:af:71:05:7f:68:6c:e9:c7:d4:f4:79:ac:89:c9:36:6a: 64:31:fb:da:b6:92:60:5d:4e:e9:03:78:8a:4d:fc:28:7e:ae: 42:49:32:fe:c7:33:49:a1:ac:69:ab:97:bb:0d:13:1e:12:cd: e6:ab:94:43:b5:34:0b:e3:d2:d7:c9:97:83:97:24:f5:8f:43: 94:4d:c5:e3:86:ab:d4:64:7c:15:85:28:32:65:a4:b9:c5:60: f4:3e:da:85:8d:ec:84:b9:34:ff:8f:16:b6:86:e2:7f:ab:07: 79:87:a1:78:52:a7:b4:c5:c4:47:c8:d2:7a:af:66:09:50:18: 6c:4c:f4:af:8e:79:d2:29:56:8f:a5:71:e7:25:d7:9c:42:91: e7:86:82:7d:c0:69:f2:d6:49:b2:8c:3f:f2:5a:dc:93:a6:4c: 7f:ba:b0:f9:67:6f:9a:58:95:14:b4:d8:13:42:04:c6:a2:59: 55:11:ce:a4:cf:40:96:8d:54:38:17:54:56:1b:1a:95:a4:0b: 05:e1:d4:e2:49:da:58:7b:5f:cb:32:da:6b:18:76:cd:e9:b3: 34:07:42:c3:28:e0:3a:83:e2:b6:ac:5b:67:9b:99:4c:23:ec: be:43:f4:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxtrz3bMIkQnZMvgGKTYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwZmMyYzEyZWExNzAyMWJhOGFjZTA2MjE4OTdmMDg1NmRh YzI1NTkwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTEwZTVjYWE3ODlhZTZhYzEwMWMxYTM1ZjBiMGMxM2RlODFmMDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnma0sxwdCjtFAGAb7j9+Dz2kSjku k3PtaJCEauNyGlrUerqPiBBCR/UUgy21JRKjROPDnc9PnrFbIaEAdG9oyPcOmcmC u9VxTSqvxALK+GlH8RZIcQ3zZwJUiJkBYyW5/8y4AFNrOlSEpKICgZnFdcLOyNJ/ uXrV9zBOcIfcWLUC0AKAYkm3FhDvnO5iyRgzUi1NxJP8KFy/Gc/l/vM1/hGvseWs Xv+XEWOxUa9xIxflw2PRHMYENtwHPkITS5/TZYMvLewuJD1AQz9me6IAyE2aauGG abHEWnkjpJrz2aJGmdYbdjdV+7RNCAsj/SpvOWs92HMln8VRcmFocO9Y1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUQ5cqnia5qwQHBo18LDBPegfBQMB8GA1UdIwQY MBaAFJD8LBLqFwIbqKzgYhiX8IVtrCVZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85NTFiY2UtMjg1MC00OTQzLThmMDAt ZGIyYzU3ZjRlZjE2LzEvQlJEbHlxZUpybXJCQWNHalh3c01FOTZCOEZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85NTFiY2UtMjg1MC00OTQzLThmMDAtZGIyYzU3ZjRlZjE2 LzEva1B3c0V1b1hBaHVvck9CaUdKZndoVzJzSlZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjt2MA0G CSqGSIb3DQEBCwUAA4IBAQBQS1yh9/VSopQ/cChYk/DIp7A5cK9xBX9obOnH1PR5 rInJNmpkMfvatpJgXU7pA3iKTfwofq5CSTL+xzNJoaxpq5e7DRMeEs3mq5RDtTQL 49LXyZeDlyT1j0OUTcXjhqvUZHwVhSgyZaS5xWD0PtqFjeyEuTT/jxa2huJ/qwd5 h6F4Uqe0xcRHyNJ6r2YJUBhsTPSvjnnSKVaPpXHnJdecQpHnhoJ9wGny1kmyjD/y WtyTpkx/urD5Z2+aWJUUtNgTQgTGollVEc6kz0CWjVQ4F1RWGxqVpAsF4dTiSdpY e1/LMtprGHbN6bM0B0LDKOA6g+K2rFtnm5lMI+y+Q/RY -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:33 2026 by rpki-client