This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/bpIa_6QT4jOvr8TOIwvNvhew4dg.roa File: bpIa_6QT4jOvr8TOIwvNvhew4dg.roa (raw, json) Hash identifier: okk5Z1OnKJ0iOg84L9exCXciriDbnMhF7qnppEc2wAo= Subject key identifier: 6E:92:1A:FF:A4:13:E2:33:AF:AF:C4:CE:23:0B:CD:BE:17:B0:E1:D8 Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907 Certificate serial: 019B7C123BDB8249D5B0B6D8F4001846BD0A Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/bpIa_6QT4jOvr8TOIwvNvhew4dg.roa Signing time: Fri 02 Jan 2026 00:18:48 +0000 ROA not before: Fri 02 Jan 2026 00:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213309 IP address blocks: 193.140.143.0/24 maxlen: 24 193.255.92.0/24 maxlen: 24 193.255.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:3b:db:82:49:d5:b0:b6:d8:f4:00:18:46:bd:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907 Validity Not Before: Jan 2 00:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e921affa413e233afafc4ce230bcdbe17b0e1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f7:3d:6c:a6:4f:fc:1c:a2:ca:3e:3c:d3:8d: 0a:1b:7d:97:b5:55:76:6d:72:e0:fe:3f:a0:76:4c: 94:b5:2e:b7:31:33:5b:b7:2d:49:3d:b1:9e:8f:fa: fc:e5:06:bb:8f:4f:6f:88:d8:5f:3a:6d:9b:97:0a: 29:23:e5:09:bb:b8:b2:f8:9a:f6:95:16:98:53:67: 23:99:73:eb:34:ba:07:1c:a0:1b:63:b5:1d:fd:ee: 9a:f0:14:81:35:b9:31:f9:2a:40:aa:7b:f9:72:a2: 11:d9:31:bf:1c:fc:8d:7d:20:ce:64:df:97:3e:0e: 2d:76:71:72:8e:6c:58:43:27:81:dc:1a:fe:8c:6d: ed:b5:88:3d:5f:a8:5f:01:d2:5d:7c:6b:c8:34:cf: 62:df:06:61:cb:03:ee:79:37:ad:36:ad:75:55:f2: 80:fa:6f:6a:78:10:bf:36:93:7e:c1:97:1f:3c:43: 1e:4c:6e:dc:7b:c3:4d:5b:41:ba:58:50:e4:a5:d3: d5:89:62:f0:67:05:51:bc:09:9b:ce:43:91:f6:b7: 07:fd:00:f6:1a:25:ce:84:0f:7b:b7:aa:52:d8:04: 16:79:8e:c1:00:04:d7:77:52:e8:9f:ef:5c:b2:8d: 40:e1:ea:99:93:ba:13:4b:a7:56:97:90:a7:5e:9b: 33:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:92:1A:FF:A4:13:E2:33:AF:AF:C4:CE:23:0B:CD:BE:17:B0:E1:D8 X509v3 Authority Key Identifier: keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/bpIa_6QT4jOvr8TOIwvNvhew4dg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.140.143.0/24 193.255.92.0/24 193.255.175.0/24 Signature Algorithm: sha256WithRSAEncryption 12:91:3f:67:60:2c:dc:91:20:49:80:ea:15:25:2a:6c:28:0a: 29:41:a3:28:ff:56:5b:c6:a3:cf:52:32:e0:da:ad:89:6e:5e: 93:d5:49:46:8b:e8:86:f9:9b:3f:95:99:5e:04:12:c4:38:5a: 92:c1:0a:a3:f7:c1:c2:82:17:5f:b5:7c:e8:19:23:2a:8a:0b: 82:5b:bf:92:50:62:21:44:f5:ff:94:e8:9b:ac:c1:c5:bf:9f: eb:75:04:fe:d3:ab:ef:8c:48:49:ef:8b:26:0c:8a:0f:85:38: 55:72:65:bc:4d:68:6f:1f:6b:2e:3b:ec:3d:2c:47:ac:01:31: 1f:22:d0:4f:0e:89:c4:b4:4c:07:cd:49:0f:c4:2e:92:24:b4: 0a:1b:cd:09:80:9b:17:46:d2:f7:d6:e2:42:c1:4f:c6:25:64: 52:b6:aa:1a:00:a0:65:ef:75:96:ea:11:aa:75:71:62:9f:30: 7a:19:6d:31:b4:e7:86:71:cd:49:9a:61:ed:34:bc:d8:24:8c: 9b:8b:7c:24:a9:4b:c3:86:3c:17:74:a0:35:f4:9b:d1:2b:82: 5a:5d:72:79:86:88:28:58:e9:dc:3d:3d:31:22:7c:8a:64:f2: ce:27:ab:28:b6:54:be:aa:af:1e:a3:f1:b4:6c:4e:0c:41:63: 88:fc:ef:9c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8EjvbgknVsLbY9AAYRr0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh YWI5MDcwHhcNMjYwMTAyMDAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTkyMWFmZmE0MTNlMjMzYWZhZmM0Y2UyMzBiY2RiZTE3YjBlMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvc9bKZP/Byiyj48040KG32XtVV2 bXLg/j+gdkyUtS63MTNbty1JPbGej/r85Qa7j09viNhfOm2blwopI+UJu7iy+Jr2 lRaYU2cjmXPrNLoHHKAbY7Ud/e6a8BSBNbkx+SpAqnv5cqIR2TG/HPyNfSDOZN+X Pg4tdnFyjmxYQyeB3Br+jG3ttYg9X6hfAdJdfGvINM9i3wZhywPueTetNq11VfKA +m9qeBC/NpN+wZcfPEMeTG7ce8NNW0G6WFDkpdPViWLwZwVRvAmbzkOR9rcH/QD2 GiXOhA97t6pS2AQWeY7BAATXd1Lon+9cso1A4eqZk7oTS6dWl5CnXpszOQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG6SGv+kE+Izr6/EziMLzb4XsOHYMB8GA1UdIwQY MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt NTk2NzE5MjBmYjYwLzEvYnBJYV82UVQ0ak92cjhUT0l3dk52aGV3NGRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwYyPAwQA wf9cAwQAwf+vMA0GCSqGSIb3DQEBCwUAA4IBAQASkT9nYCzckSBJgOoVJSpsKAop QaMo/1ZbxqPPUjLg2q2Jbl6T1UlGi+iG+Zs/lZleBBLEOFqSwQqj98HCghdftXzo GSMqiguCW7+SUGIhRPX/lOibrMHFv5/rdQT+06vvjEhJ74smDIoPhThVcmW8TWhv H2suO+w9LEesATEfItBPDonEtEwHzUkPxC6SJLQKG80JgJsXRtL31uJCwU/GJWRS tqoaAKBl73WW6hGqdXFinzB6GW0xtOeGcc1JmmHtNLzYJIybi3wkqUvDhjwXdKA1 9JvRK4JaXXJ5hogoWOncPT0xInyKZPLOJ6sotlS+qq8eo/G0bE4MQWOI/O+c -----END CERTIFICATE-----Generated at Mon Jan 26 11:04:55 2026 by rpki-client