This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/BM1RQxvvyIKBL8g4zBcWqJcB1Mo.roa File: BM1RQxvvyIKBL8g4zBcWqJcB1Mo.roa (raw, json) Hash identifier: CQKQvWkgdhGn8ReQSUuQBWNAnJvAr9pLNfF5vfp4cXU= Subject key identifier: 04:CD:51:43:1B:EF:C8:82:81:2F:C8:38:CC:17:16:A8:97:01:D4:CA Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019BE5367739CDE12E5CE1B8F52E37D2371F Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/BM1RQxvvyIKBL8g4zBcWqJcB1Mo.roa Signing time: Thu 22 Jan 2026 10:18:30 +0000 ROA not before: Thu 22 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 194.41.114.0/24 maxlen: 24 217.147.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:36:77:39:cd:e1:2e:5c:e1:b8:f5:2e:37:d2:37:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 22 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04cd51431befc882812fc838cc1716a89701d4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:87:eb:4e:c2:9d:dd:70:e4:b0:35:9e:92: 49:f2:e7:a1:50:3c:7f:49:4c:bf:9d:fa:ab:49:4d: c7:4e:ab:38:ae:8a:e2:31:75:78:15:a1:d2:ee:2e: e6:11:4a:23:06:d4:37:34:78:05:78:43:f2:5c:86: 9d:a0:5e:71:63:a6:2a:fc:60:78:53:8f:1a:90:60: 40:85:ba:08:cc:eb:b9:08:70:48:dc:07:80:37:c9: ff:4e:c6:ff:b5:04:fd:bb:3e:b2:d6:d2:77:7a:0f: c6:ce:d7:a9:73:9d:7e:f9:07:06:57:e8:6c:27:3a: ee:1f:e6:99:3a:2f:bc:7e:26:41:96:08:80:63:80: d9:6c:b2:b9:c9:72:ff:ab:35:1d:65:e3:9b:a4:bc: 80:91:f7:d6:02:50:f3:ec:0b:09:41:4d:b0:c1:a6: 60:ab:1a:d5:60:a7:ab:a8:e6:09:84:e1:b2:bf:b4: 24:d5:3a:43:09:70:26:f1:b2:7c:ff:74:ed:9d:8d: 1e:c4:93:de:85:ec:3c:93:c4:e7:22:22:f9:c2:bb: 8d:13:d6:2a:a6:39:e4:19:0c:26:63:3a:96:56:8d: a7:46:f7:e9:82:0f:cd:47:21:27:de:72:6b:bf:fe: 96:0d:cd:b2:5a:bf:dd:25:a6:90:16:ba:1c:89:8c: c3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:CD:51:43:1B:EF:C8:82:81:2F:C8:38:CC:17:16:A8:97:01:D4:CA X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/BM1RQxvvyIKBL8g4zBcWqJcB1Mo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.41.114.0/24 217.147.14.0/23 Signature Algorithm: sha256WithRSAEncryption 4f:e5:b7:59:fe:f3:40:2d:a5:cf:ce:a4:8d:02:47:a6:11:63: c4:aa:8b:ee:06:e1:04:cb:40:d5:09:8b:a4:32:af:05:3c:d1: 9d:d9:ca:5f:6a:9b:97:7d:26:95:7f:42:2c:91:6b:4e:1e:61: 1b:39:96:52:11:ad:95:d7:d8:40:d5:33:fe:60:86:17:eb:8e: 3f:97:d3:a9:60:d7:07:cc:ef:bb:d8:46:a7:4c:63:63:cd:e1: ab:2d:2a:0e:e4:1b:2a:3c:20:13:65:02:dc:52:1a:3d:ae:82: 7f:fc:0c:03:9b:9b:b8:6d:80:fa:8f:53:e5:35:e3:43:b7:63: 6f:d4:c4:f3:e8:11:af:6f:49:20:15:24:72:d1:3b:6e:78:57: c1:3d:eb:c4:fb:e1:3a:67:d4:92:1e:ec:f4:0f:19:ab:ab:10: da:f9:83:6e:0d:73:ae:31:3e:9a:15:39:bd:68:27:ea:36:a2: 42:1f:54:a6:e7:71:67:0e:80:f2:39:d3:e7:10:f5:cd:7a:7a: 40:21:15:81:28:df:52:c9:1e:ad:f6:4b:8f:cb:18:e8:6b:28: 66:18:74:c7:6a:76:79:ba:64:d9:90:44:e6:bf:b1:37:e2:08: 92:d8:0e:9f:09:d7:9c:15:bb:6a:06:e8:6a:c8:be:91:7b:0f: 00:64:87:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvlNnc5zeEuXOG49S430jcfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTIyMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGNkNTE0MzFiZWZjODgyODEyZmM4MzhjYzE3MTZhODk3MDFkNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX6H607Cnd1w5LA1npJJ8uehUDx/ SUy/nfqrSU3HTqs4roriMXV4FaHS7i7mEUojBtQ3NHgFeEPyXIadoF5xY6Yq/GB4 U48akGBAhboIzOu5CHBI3AeAN8n/Tsb/tQT9uz6y1tJ3eg/Gztepc51++QcGV+hs JzruH+aZOi+8fiZBlgiAY4DZbLK5yXL/qzUdZeObpLyAkffWAlDz7AsJQU2wwaZg qxrVYKerqOYJhOGyv7Qk1TpDCXAm8bJ8/3TtnY0exJPehew8k8TnIiL5wruNE9Yq pjnkGQwmYzqWVo2nRvfpgg/NRyEn3nJrv/6WDc2yWr/dJaaQFrociYzDDQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFATNUUMb78iCgS/IOMwXFqiXAdTKMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvQk0xUlF4dnZ5SUtCTDhnNHpCY1dxSmNCMU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwilyAwQB 2ZMOMA0GCSqGSIb3DQEBCwUAA4IBAQBP5bdZ/vNALaXPzqSNAkemEWPEqovuBuEE y0DVCYukMq8FPNGd2cpfapuXfSaVf0IskWtOHmEbOZZSEa2V19hA1TP+YIYX644/ l9OpYNcHzO+72EanTGNjzeGrLSoO5BsqPCATZQLcUho9roJ//AwDm5u4bYD6j1Pl NeNDt2Nv1MTz6BGvb0kgFSRy0TtueFfBPevE++E6Z9SSHuz0DxmrqxDa+YNuDXOu MT6aFTm9aCfqNqJCH1Sm53FnDoDyOdPnEPXNenpAIRWBKN9SyR6t9kuPyxjoayhm GHTHanZ5umTZkETmv7E34giS2A6fCdecFbtqBuhqyL6Rew8AZIcy -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:52 2026 by rpki-client