This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/baXaAX1rxYa_2y57T1wari4SNRQ.roa File: baXaAX1rxYa_2y57T1wari4SNRQ.roa (raw, json) Hash identifier: Zn5x85hGWjwOTzCti/LCEZHhyAwdPWfVjbdllVnVtH0= Subject key identifier: 6D:A5:DA:01:7D:6B:C5:86:BF:DB:2E:7B:4F:5C:1A:AE:2E:12:35:14 Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090 Certificate serial: 019B7DC9C0B08154A9D6EBACC159B50654FC Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/baXaAX1rxYa_2y57T1wari4SNRQ.roa Signing time: Fri 02 Jan 2026 08:18:52 +0000 ROA not before: Fri 02 Jan 2026 08:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213221 IP address blocks: 178.236.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:c0:b0:81:54:a9:d6:eb:ac:c1:59:b5:06:54:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090 Validity Not Before: Jan 2 08:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6da5da017d6bc586bfdb2e7b4f5c1aae2e123514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:13:4b:ba:6d:3a:cf:ee:15:d3:f2:de:52: b6:c8:60:72:45:f2:28:a4:cc:74:f1:86:eb:03:4d: f9:fd:7e:48:54:59:c2:f7:e1:77:2c:09:21:93:5d: 1e:c0:67:2b:04:d1:f5:56:46:bd:f0:30:f4:0f:ba: 94:cf:35:1b:20:de:e2:87:c5:ea:92:70:84:1a:1f: 09:a9:04:8e:a9:e9:ab:ce:be:7f:7b:c9:6c:53:ce: b5:81:dc:63:e0:8e:d0:db:bf:f8:82:58:95:24:ae: 42:20:98:4c:c6:64:19:3b:24:21:54:ea:7e:6b:25: be:5e:a4:8b:c0:69:3a:25:1a:c6:f1:90:bb:07:c6: da:4d:8a:17:be:07:97:01:54:70:6f:ce:1f:09:4e: 2f:25:4a:80:96:ab:78:b1:23:73:45:00:32:bc:71: 19:21:46:ab:bd:18:bd:89:09:d8:f2:63:3f:0c:99: 40:57:35:85:93:04:c5:55:fc:6f:56:af:c8:42:9f: 1a:d8:b0:8d:63:59:30:83:df:00:ca:27:c9:46:f9: 00:66:f9:90:bb:b2:97:04:85:44:e4:e4:bf:59:cd: c6:46:73:b9:50:a0:c0:4f:6d:d7:92:3e:ff:8f:bb: 68:3f:31:aa:e4:af:67:2f:d5:00:e4:13:66:41:75: 47:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A5:DA:01:7D:6B:C5:86:BF:DB:2E:7B:4F:5C:1A:AE:2E:12:35:14 X509v3 Authority Key Identifier: keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/baXaAX1rxYa_2y57T1wari4SNRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.45.0/24 Signature Algorithm: sha256WithRSAEncryption 91:3d:9b:a2:41:cc:45:7f:57:53:bb:4a:d6:ba:32:88:7d:af: ce:cf:f8:81:ba:29:2e:d0:e4:e0:fa:74:29:1c:f4:64:c0:f4: af:66:96:e9:56:c7:e1:03:47:d3:50:9e:db:66:4e:df:3c:c9: 3d:e0:8d:7d:c2:3f:20:34:78:b5:4f:64:dc:ba:19:e4:c7:ab: 24:7d:41:52:c3:8f:fe:85:bf:41:f3:7a:6a:10:d0:89:ca:6d: 8a:f8:0f:c8:ef:73:71:c4:d8:5d:99:02:49:1a:29:5f:17:e8: ff:7a:7f:ac:d0:91:4f:c0:cb:b5:97:8d:9c:07:10:07:e0:d4: 76:45:21:8c:f7:4f:43:16:2a:61:a6:7b:b2:53:c3:6c:ba:c7: b9:ac:09:33:a7:80:dc:68:6e:55:29:90:e9:c6:11:04:13:dd: 67:22:67:49:29:f4:ac:61:aa:ba:d7:b2:57:3b:ac:77:69:1c: 48:39:17:4d:e8:be:32:c3:bb:d9:67:c1:5f:a5:a3:e3:b1:c1: b3:97:6f:a1:8c:7f:37:8a:6d:de:a3:dd:0a:ab:a4:85:c4:82: 3a:cd:cd:70:15:fb:f7:fd:c7:86:97:9d:c5:2e:66:51:9d:52: 46:d7:41:81:4b:67:a9:bb:e0:50:8c:4e:85:37:02:be:3d:61: f5:f8:63:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ycCwgVSp1uuswVm1BlT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzODJjYjEzZGRlMTI2NThjZGFjMThjYWNhZTkxZmJiZjVj NTgwOTAwHhcNMjYwMTAyMDgxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGE1ZGEwMTdkNmJjNTg2YmZkYjJlN2I0ZjVjMWFhZTJlMTIzNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA4TS7ptOs/uFdPy3lK2yGByRfIo pMx08YbrA035/X5IVFnC9+F3LAkhk10ewGcrBNH1Vka98DD0D7qUzzUbIN7ih8Xq knCEGh8JqQSOqemrzr5/e8lsU861gdxj4I7Q27/4gliVJK5CIJhMxmQZOyQhVOp+ ayW+XqSLwGk6JRrG8ZC7B8baTYoXvgeXAVRwb84fCU4vJUqAlqt4sSNzRQAyvHEZ IUarvRi9iQnY8mM/DJlAVzWFkwTFVfxvVq/IQp8a2LCNY1kwg98AyifJRvkAZvmQ u7KXBIVE5OS/Wc3GRnO5UKDAT23Xkj7/j7toPzGq5K9nL9UA5BNmQXVHrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG2l2gF9a8WGv9sue09cGq4uEjUUMB8GA1UdIwQY MBaAFPOCyxPd4SZYzawYysrpH7v1xYCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDIt OTcwNDI4OTFlYjk5LzEvYmFYYUFYMXJ4WWFfMnk1N1Qxd2FyaTRTTlJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDItOTcwNDI4OTFlYjk5 LzEvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuwtMA0G CSqGSIb3DQEBCwUAA4IBAQCRPZuiQcxFf1dTu0rWujKIfa/Oz/iBuiku0OTg+nQp HPRkwPSvZpbpVsfhA0fTUJ7bZk7fPMk94I19wj8gNHi1T2Tcuhnkx6skfUFSw4/+ hb9B83pqENCJym2K+A/I73NxxNhdmQJJGilfF+j/en+s0JFPwMu1l42cBxAH4NR2 RSGM909DFiphpnuyU8Nsuse5rAkzp4DcaG5VKZDpxhEEE91nImdJKfSsYaq617JX O6x3aRxIORdN6L4yw7vZZ8FfpaPjscGzl2+hjH83im3eo90Kq6SFxII6zc1wFfv3 /ceGl53FLmZRnVJG10GBS2epu+BQjE6FNwK+PWH1+GOE -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:34 2026 by rpki-client