This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/irmbqhZvbLwDaadAvsOuO73Fv60.roa File: irmbqhZvbLwDaadAvsOuO73Fv60.roa (raw, json) Hash identifier: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA= Subject key identifier: 8A:B9:9B:AA:16:6F:6C:BC:03:69:A7:40:BE:C3:AE:3B:BD:C5:BF:AD Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Certificate serial: 019B791063F5A879A2E2B2CFC996F050E09C Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/irmbqhZvbLwDaadAvsOuO73Fv60.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8290 IP address blocks: 185.77.144.0/22 maxlen: 22 195.28.128.0/19 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:63:f5:a8:79:a2:e2:b2:cf:c9:96:f0:50:e0:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ab99baa166f6cbc0369a740bec3ae3bbdc5bfad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:11:9e:21:76:5d:63:98:f8:67:be:45:b3:04: 48:98:82:43:eb:a6:61:84:07:b8:79:50:ea:44:0e: 50:a3:30:bd:e8:83:03:fa:14:ba:b4:ac:54:20:69: 26:49:b4:ba:31:65:9b:a6:3c:8b:8f:58:2c:9d:06: a4:a1:78:d1:74:e2:66:35:4a:92:6f:17:18:9d:9c: 14:19:8d:ad:d1:25:3b:5d:e9:40:dc:41:2e:0b:25: f5:0c:7f:da:9d:6e:ad:15:fc:c9:da:c0:a6:51:bb: b3:61:38:bf:1c:9c:5a:b1:93:ce:31:c1:36:64:2f: 22:6b:14:2b:ac:61:92:75:9f:26:ec:5e:29:5b:1e: 38:45:47:43:bd:52:cc:1a:24:7f:ef:d0:5c:23:7f: 0f:32:f6:cf:1d:19:a8:a2:38:c0:93:ca:bf:a0:8e: 73:fd:a5:80:99:24:5c:c8:73:90:fa:8b:40:6c:cc: fd:c2:8a:1f:dd:e9:cd:7e:65:22:58:63:28:1d:69: 9b:82:b3:1b:5e:2d:c8:d8:77:94:f5:ea:fd:48:dc: db:f8:29:4a:d2:28:47:bf:a0:75:fa:2a:1e:85:e8: bb:cb:c5:b8:b8:f4:d5:96:2e:56:14:22:42:0d:59: 7e:c2:f5:c2:72:27:74:7c:27:45:05:16:29:59:1b: 18:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B9:9B:AA:16:6F:6C:BC:03:69:A7:40:BE:C3:AE:3B:BD:C5:BF:AD X509v3 Authority Key Identifier: keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/irmbqhZvbLwDaadAvsOuO73Fv60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.77.144.0/22 195.28.128.0/19 Signature Algorithm: sha256WithRSAEncryption 4d:cd:df:14:fc:de:fa:5e:ad:ee:88:19:df:73:54:b9:96:60: 81:93:ae:4e:0f:35:a0:a2:82:e6:b8:43:9c:07:19:57:01:53: f5:41:cd:7c:15:04:fd:38:e5:1e:e3:41:3c:9f:e3:f7:21:20: 11:71:eb:88:b0:94:ea:00:4a:d4:53:18:4b:3d:99:0c:b6:e8: 47:12:37:72:9e:29:f0:f3:1f:68:82:3e:56:cf:39:46:53:03: ad:8e:e9:c2:5d:8c:34:ee:37:3f:1a:a8:6d:8e:8e:dc:28:c7: ac:77:62:11:a6:7f:0c:7b:66:3c:ee:93:8b:53:45:f0:4c:69: dc:28:f4:d8:4f:b2:35:c6:64:c1:49:14:fe:50:db:63:2e:b6: dc:4d:74:02:0c:d6:3c:e2:eb:b3:9b:a4:5e:05:af:3a:a7:db: 23:28:46:09:4a:bf:77:fc:63:8c:e7:07:9f:67:f0:4b:99:a8: 4d:c4:d5:94:9b:2a:77:33:da:68:9a:57:5c:30:a0:cf:68:f3: 4e:b6:63:a6:d7:73:81:98:88:26:62:27:18:3e:57:cd:04:71: 87:09:de:1c:63:9b:16:c2:57:db:75:cd:ad:3e:62:a5:b8:3a: 06:b9:f0:9c:3e:2f:a6:97:c0:89:2b:d5:56:62:1b:c0:67:cc: 2a:6b:a1:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EGP1qHmi4rLPyZbwUOCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4 MGQwN2QwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YWI5OWJhYTE2NmY2Y2JjMDM2OWE3NDBiZWMzYWUzYmJkYzViZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/BGeIXZdY5j4Z75FswRImIJD66Zh hAe4eVDqRA5QozC96IMD+hS6tKxUIGkmSbS6MWWbpjyLj1gsnQakoXjRdOJmNUqS bxcYnZwUGY2t0SU7XelA3EEuCyX1DH/anW6tFfzJ2sCmUbuzYTi/HJxasZPOMcE2 ZC8iaxQrrGGSdZ8m7F4pWx44RUdDvVLMGiR/79BcI38PMvbPHRmoojjAk8q/oI5z /aWAmSRcyHOQ+otAbMz9woof3enNfmUiWGMoHWmbgrMbXi3I2HeU9er9SNzb+ClK 0ihHv6B1+ioehei7y8W4uPTVli5WFCJCDVl+wvXCcid0fCdFBRYpWRsYyQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIq5m6oWb2y8A2mnQL7Drju9xb+tMB8GA1UdIwQY MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt NmU2ZThkOTMwM2U5LzEvaXJtYnFoWnZiTHdEYWFkQXZzT3VPNzNGdjYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5 LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuU2QAwQF wxyAMA0GCSqGSIb3DQEBCwUAA4IBAQBNzd8U/N76Xq3uiBnfc1S5lmCBk65ODzWg ooLmuEOcBxlXAVP1Qc18FQT9OOUe40E8n+P3ISARceuIsJTqAErUUxhLPZkMtuhH Ejdyninw8x9ogj5WzzlGUwOtjunCXYw07jc/Gqhtjo7cKMesd2IRpn8Me2Y87pOL U0XwTGncKPTYT7I1xmTBSRT+UNtjLrbcTXQCDNY84uuzm6ReBa86p9sjKEYJSr93 /GOM5wefZ/BLmahNxNWUmyp3M9pomldcMKDPaPNOtmOm13OBmIgmYicYPlfNBHGH Cd4cY5sWwlfbdc2tPmKluDoGufCcPi+ml8CJK9VWYhvAZ8wqa6Eo -----END CERTIFICATE-----Generated at Mon Jan 26 17:44:44 2026 by rpki-client