This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa File: ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa (raw, json) Hash identifier: K+MZAh6Qr7nnvD9WoHZdULSDa2rCr8sl1Vr//Yn6JfU= Subject key identifier: 02:9C:C1:07:C4:10:2C:C2:3F:C6:C3:B8:F0:99:B7:8F:14:57:BA:12 Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1 Certificate serial: 019B7B35A252C8A6119D98CFDC5740A2D3E5 Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa Signing time: Thu 01 Jan 2026 20:17:51 +0000 ROA not before: Thu 01 Jan 2026 20:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8614 IP address blocks: 193.239.64.0/24 maxlen: 24 193.239.65.0/24 maxlen: 24 193.239.66.0/24 maxlen: 24 193.239.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a2:52:c8:a6:11:9d:98:cf:dc:57:40:a2:d3:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546de326de9522bd296bed482385c9769258d8f1 Validity Not Before: Jan 1 20:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=029cc107c4102cc23fc6c3b8f099b78f1457ba12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:fa:13:5e:fa:3d:3b:c2:aa:7f:b7:2c:c7: 87:cd:8e:25:8b:9a:80:07:21:f1:93:2f:22:0b:1a: ae:93:9e:10:00:23:62:b2:83:97:00:87:b4:b3:dc: ca:d1:df:45:00:76:56:57:0a:91:a8:a5:82:94:67: 0b:09:0d:e9:c4:38:07:be:69:20:ab:1d:91:66:e5: dd:91:59:1d:8a:e4:16:f8:83:ea:f2:b4:65:e5:c7: c8:e0:41:87:3e:2d:41:0d:60:9d:74:46:04:8d:61: e4:f5:bb:da:dd:71:68:0b:5a:72:d7:e3:32:d7:6d: 2f:b4:31:fa:98:0b:5b:c0:0a:75:49:41:60:0c:28: f1:ea:19:31:9f:c6:0e:bd:2d:78:58:79:37:54:70: 4e:6e:ea:b5:f2:ce:86:0b:fa:1c:1c:0b:c4:09:9f: 47:a8:94:71:64:d8:27:74:b7:2f:6b:be:6c:67:f1: b6:82:eb:1d:f4:44:f1:0d:71:2f:c9:5c:2f:e4:60: cb:26:94:ab:60:ed:a1:56:05:b4:39:e4:8d:99:69: 2d:84:93:b5:e7:26:f9:2c:3d:53:f7:66:11:64:54: d3:db:34:85:8f:23:ae:22:87:e8:e7:76:87:af:04: 0f:ea:85:57:7a:b8:6d:15:00:03:17:ef:81:2b:39: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:9C:C1:07:C4:10:2C:C2:3F:C6:C3:B8:F0:99:B7:8F:14:57:BA:12 X509v3 Authority Key Identifier: keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.64.0/22 Signature Algorithm: sha256WithRSAEncryption 09:71:0f:67:48:99:be:67:aa:41:30:66:65:f6:be:e7:77:ce: 38:b9:38:55:71:3f:f3:bd:d2:1e:62:24:0b:4c:82:40:f8:13: 7b:5d:68:d1:cf:1b:64:f1:82:26:52:3c:04:07:a4:b1:ae:bc: 3e:dc:64:f5:d0:2a:73:4f:b1:5f:d0:8f:b3:a3:03:e3:ee:02: 0c:52:30:a7:ca:bc:d7:d6:ad:7a:a4:a5:94:02:4a:04:cb:d1: 37:fb:7b:f1:dd:7f:7e:cf:15:b1:86:01:96:79:2c:30:a0:33: 1e:a7:c6:84:dd:3f:66:98:39:05:77:1e:74:cf:3e:e7:15:fe: 80:4f:3e:95:e9:dd:dd:21:08:64:3c:a2:67:38:8f:6d:be:09: a8:ce:4d:50:ab:9b:08:8b:cf:a6:e5:de:58:d1:2d:2e:01:bb: c0:35:ba:af:d6:21:0a:85:5d:1c:38:c7:dc:b7:71:d2:7e:2b: ce:cd:40:77:f0:d0:7e:e8:05:96:e0:4f:9a:90:2d:61:64:ae: 4c:41:28:fe:b5:01:09:ab:af:8f:b8:05:0c:a3:2b:31:e6:5c: ae:6a:a8:7d:1f:4a:90:67:af:4c:2d:b4:37:6e:86:9e:61:63: a1:87:95:f1:1f:41:b4:1b:87:c2:df:d0:c0:10:8e:2a:57:69: 50:d8:42:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NaJSyKYRnZjP3FdAotPlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NmRlMzI2ZGU5NTIyYmQyOTZiZWQ0ODIzODVjOTc2OTI1 OGQ4ZjEwHhcNMjYwMTAxMjAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjljYzEwN2M0MTAyY2MyM2ZjNmMzYjhmMDk5Yjc4ZjE0NTdiYTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcj6E176PTvCqn+3LMeHzY4li5qA ByHxky8iCxquk54QACNisoOXAIe0s9zK0d9FAHZWVwqRqKWClGcLCQ3pxDgHvmkg qx2RZuXdkVkdiuQW+IPq8rRl5cfI4EGHPi1BDWCddEYEjWHk9bva3XFoC1py1+My 120vtDH6mAtbwAp1SUFgDCjx6hkxn8YOvS14WHk3VHBObuq18s6GC/ocHAvECZ9H qJRxZNgndLcva75sZ/G2gusd9ETxDXEvyVwv5GDLJpSrYO2hVgW0OeSNmWkthJO1 5yb5LD1T92YRZFTT2zSFjyOuIofo53aHrwQP6oVXerhtFQADF++BKzko+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAKcwQfEECzCP8bDuPCZt48UV7oSMB8GA1UdIwQY MBaAFFRt4ybelSK9KWvtSCOFyXaSWNjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEt NDkzNzYwMWM4ZmVhLzEvQXB6QkI4UVFMTUlfeHNPNDhKbTNqeFJYdWhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEtNDkzNzYwMWM4ZmVh LzEvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwe9AMA0G CSqGSIb3DQEBCwUAA4IBAQAJcQ9nSJm+Z6pBMGZl9r7nd844uThVcT/zvdIeYiQL TIJA+BN7XWjRzxtk8YImUjwEB6Sxrrw+3GT10CpzT7Ff0I+zowPj7gIMUjCnyrzX 1q16pKWUAkoEy9E3+3vx3X9+zxWxhgGWeSwwoDMep8aE3T9mmDkFdx50zz7nFf6A Tz6V6d3dIQhkPKJnOI9tvgmozk1Qq5sIi8+m5d5Y0S0uAbvANbqv1iEKhV0cOMfc t3HSfivOzUB38NB+6AWW4E+akC1hZK5MQSj+tQEJq6+PuAUMoysx5lyuaqh9H0qQ Z69MLbQ3boaeYWOhh5XxH0G0G4fC39DAEI4qV2lQ2EI3 -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:32 2026 by rpki-client