This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa File: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (raw, json) Hash identifier: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8= Subject key identifier: 04:09:A7:B2:A6:B5:63:75:F0:02:15:88:05:D8:3F:AE:52:22:C1:04 Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Certificate serial: 019B791064AC6870E0C8FA1BD2C3ACCACE36 Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8778 IP address blocks: 193.93.74.0/24 maxlen: 24 195.28.64.0/19 maxlen: 19 195.80.160.0/19 maxlen: 19 2a02:dd8::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:64:ac:68:70:e0:c8:fa:1b:d2:c3:ac:ca:ce:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0409a7b2a6b56375f002158805d83fae5222c104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2b:22:74:cf:7c:79:60:55:63:90:65:6e:a1: 58:92:b9:ce:a4:36:10:83:2b:99:5c:06:66:0a:1a: 05:13:93:f1:7c:03:76:a6:26:7a:ee:5f:8c:18:b8: c2:21:39:f4:94:ac:c4:43:99:bd:5a:e4:4f:33:d4: 62:05:18:2a:19:26:e2:ff:2e:5b:9a:c0:0e:b2:11: 5b:95:86:bc:e6:08:1b:4e:4a:5a:ce:98:7c:fe:05: 95:64:ff:71:83:bd:e6:e8:d5:41:a7:96:91:e6:eb: b2:e7:ee:bc:cd:51:e7:32:fc:af:12:4c:07:63:4d: c1:41:c2:bd:27:77:0e:74:9f:1e:05:83:6d:2e:45: 99:2f:34:0a:df:d1:ed:2c:52:e4:76:ab:76:5d:b2: 75:59:3b:81:18:b1:fa:3c:0e:c7:2c:98:f2:8e:38: f9:59:44:9a:5a:0f:4d:98:66:fe:9c:ec:07:90:c3: e6:5e:8b:7d:6c:01:2b:ba:2a:48:f9:4c:a0:11:81: e7:10:27:09:2c:6d:bf:65:6c:01:89:40:f8:60:64: 6c:7c:f1:2b:91:e8:97:15:9b:fb:f7:2f:8a:af:8b: eb:99:38:12:33:00:ba:0d:cd:4d:b4:0c:2d:57:18: 3a:6f:01:b7:ee:5f:ba:97:51:82:7e:cf:3a:66:55: 9b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:09:A7:B2:A6:B5:63:75:F0:02:15:88:05:D8:3F:AE:52:22:C1:04 X509v3 Authority Key Identifier: keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.93.74.0/24 195.28.64.0/19 195.80.160.0/19 IPv6: 2a02:dd8::/29 Signature Algorithm: sha256WithRSAEncryption 82:d1:90:55:9d:22:94:e5:53:15:76:50:c1:4b:54:cb:6e:7e: eb:6a:ac:3c:07:d2:26:f0:64:6f:b9:a5:1f:6e:1c:96:d0:69: 95:86:60:52:d5:e4:46:0d:d2:9a:80:b1:23:2f:1b:ba:1e:d1: 68:37:a0:8c:b1:99:08:d4:88:2a:d0:51:80:36:0e:50:bc:81: 62:83:7f:2e:75:25:13:38:4f:82:c9:31:16:80:9e:a5:17:5b: 3b:a9:36:0d:aa:16:2e:f2:27:ef:2f:6f:64:c1:de:d7:70:71: 05:5b:bf:a4:e8:6a:b4:48:c4:a6:c8:f2:1f:e7:27:8a:a5:a4: a8:f9:80:45:55:14:1f:00:be:d7:7d:d7:20:95:6b:cd:c8:61: 34:b8:63:33:a5:70:7c:8f:f1:96:54:02:09:8f:95:27:75:5e: f1:4e:40:93:3c:29:c5:b6:45:c4:a7:7f:6b:84:c2:d1:96:20: f0:aa:24:39:ca:ca:56:02:76:27:f5:77:f4:f2:57:44:8d:db: 06:7f:18:66:bf:4e:47:6b:a2:d4:0c:7b:1d:fe:dd:7f:46:bb: 04:6b:16:99:a3:42:90:4d:ba:bc:1e:5c:07:6f:f5:bc:11:31: 6d:3b:a7:93:ae:f9:d0:7d:97:2a:68:be:38:fd:f4:61:3a:d6: 75:38:db:93 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5EGSsaHDgyPob0sOsys42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4 MGQwN2QwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDA5YTdiMmE2YjU2Mzc1ZjAwMjE1ODgwNWQ4M2ZhZTUyMjJjMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CsidM98eWBVY5BlbqFYkrnOpDYQ gyuZXAZmChoFE5PxfAN2piZ67l+MGLjCITn0lKzEQ5m9WuRPM9RiBRgqGSbi/y5b msAOshFblYa85ggbTkpazph8/gWVZP9xg73m6NVBp5aR5uuy5+68zVHnMvyvEkwH Y03BQcK9J3cOdJ8eBYNtLkWZLzQK39HtLFLkdqt2XbJ1WTuBGLH6PA7HLJjyjjj5 WUSaWg9NmGb+nOwHkMPmXot9bAEruipI+UygEYHnECcJLG2/ZWwBiUD4YGRsfPEr keiXFZv79y+Kr4vrmTgSMwC6Dc1NtAwtVxg6bwG37l+6l1GCfs86ZlWb6QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFAQJp7KmtWN18AIViAXYP65SIsEEMB8GA1UdIwQY MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt NmU2ZThkOTMwM2U5LzEvQkFtbnNxYTFZM1h3QWhXSUJkZ19ybElpd1FRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5 LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAwV1KAwQF wxxAAwQFw1CgMA0EAgACMAcDBQMqAg3YMA0GCSqGSIb3DQEBCwUAA4IBAQCC0ZBV nSKU5VMVdlDBS1TLbn7raqw8B9Im8GRvuaUfbhyW0GmVhmBS1eRGDdKagLEjLxu6 HtFoN6CMsZkI1Igq0FGANg5QvIFig38udSUTOE+CyTEWgJ6lF1s7qTYNqhYu8ifv L29kwd7XcHEFW7+k6Gq0SMSmyPIf5yeKpaSo+YBFVRQfAL7XfdcglWvNyGE0uGMz pXB8j/GWVAIJj5UndV7xTkCTPCnFtkXEp39rhMLRliDwqiQ5yspWAnYn9Xf08ldE jdsGfxhmv05Ha6LUDHsd/t1/RrsEaxaZo0KQTbq8HlwHb/W8ETFtO6eTrvnQfZcq aL44/fRhOtZ1ONuT -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:44 2026 by rpki-client