This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa File: BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa (raw, json) Hash identifier: UQ8CMhjpjjRCrwKSEiPQZMVJiMOKt9f34DLWWqnIsNo= Subject key identifier: 06:00:01:78:D9:11:3D:DD:17:73:1A:10:F5:F3:61:B9:3C:93:2E:E9 Certificate issuer: /CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Certificate serial: 019B77C71EEF3F33805702D1C3BD21ED5F04 Authority key identifier: 9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa Signing time: Thu 01 Jan 2026 04:18:16 +0000 ROA not before: Thu 01 Jan 2026 04:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43396 IP address blocks: 193.143.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.mft rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:1e:ef:3f:33:80:57:02:d1:c3:bd:21:ed:5f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a526a73ce8f9f62c14a11a2ea913ec273d58c46 Validity Not Before: Jan 1 04:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06000178d9113ddd17731a10f5f361b93c932ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6d:40:c8:26:18:29:bd:67:d4:f4:71:52:75: b7:a9:4e:95:2a:ab:f2:ca:c5:37:fa:c8:98:29:81: 13:f0:37:f8:5f:dd:d3:ba:48:74:8d:b0:8d:94:3c: ac:60:fa:7b:8a:c2:65:db:8d:52:7c:a0:5f:56:46: 7f:77:2b:a2:5e:65:79:b0:37:32:03:ba:0e:26:0e: 52:4c:e1:49:05:6f:d3:b4:64:d9:01:05:bc:d8:60: 44:8b:b4:58:75:e1:e7:e9:47:b5:0b:b7:c9:12:6b: b6:48:75:33:81:30:de:9a:0a:c0:72:d9:91:47:d8: 3c:b2:b8:4c:9e:b4:5e:68:2b:f3:c1:1e:a3:f1:db: 92:de:79:d7:bb:a8:36:c7:91:82:35:14:49:cf:80: 14:e1:4c:6e:8a:b0:f2:9a:06:65:d5:b7:cf:17:6c: b0:a5:40:e2:6c:97:69:e3:e1:ea:8f:3e:e5:be:8f: 48:87:8a:b9:b6:2b:c5:90:d3:68:44:78:09:e5:7a: 4a:f0:48:bc:5e:df:dc:0d:57:91:91:68:b7:cd:64: cf:b0:18:a8:ff:48:15:b8:93:3f:1d:ac:37:31:76: a0:27:d4:d6:34:6d:76:3a:b8:c0:26:98:16:5d:ea: ef:9d:d7:58:68:1c:e8:1c:2f:42:7c:62:d1:e4:3c: d1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:00:01:78:D9:11:3D:DD:17:73:1A:10:F5:F3:61:B9:3C:93:2E:E9 X509v3 Authority Key Identifier: keyid:9A:52:6A:73:CE:8F:9F:62:C1:4A:11:A2:EA:91:3E:C2:73:D5:8C:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlJqc86Pn2LBShGi6pE-wnPVjEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/BgABeNkRPd0XcxoQ9fNhuTyTLuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/6fcdca-d121-4391-9cfc-7d16b90dbe72/1/mlJqc86Pn2LBShGi6pE-wnPVjEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.143.119.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:08:18:22:d4:57:22:8c:64:83:e3:59:d1:86:a3:69:46:14: aa:79:7a:42:d8:ca:03:08:9e:db:35:fd:9e:0c:dc:ed:83:3e: 63:b2:56:50:68:6a:06:5f:28:c7:44:57:b8:75:13:c5:77:5b: 0c:b9:a5:69:3a:00:c5:a8:3a:c5:ca:5d:09:69:af:93:d2:a1: 21:6f:62:1f:83:b6:03:d2:4b:67:83:1d:7a:b8:92:5b:a3:44: a0:7d:86:7b:ef:bd:92:c2:44:76:9f:fe:8e:09:22:11:6e:a5: 9b:d6:f5:50:0d:15:ad:a3:d6:fa:6a:eb:35:ff:ae:71:c7:53: 50:43:d6:b4:5e:1e:12:21:a2:e7:24:eb:37:3e:a4:b3:6c:96: c8:22:43:96:52:25:ca:5b:af:0f:5b:e1:34:06:6a:8b:55:1b: 45:f2:75:4c:8c:13:69:11:ae:a5:84:e0:f9:9c:4d:9a:b5:2d: 12:77:d1:95:d0:00:e2:7a:c5:71:28:2c:a2:e0:04:be:0f:07: 66:62:5f:a4:38:7a:7e:cd:1e:da:50:69:cd:2d:b1:f8:2f:ac: b4:70:e3:be:03:e3:32:75:38:16:f7:1a:ee:01:db:06:27:06: 80:13:0f:05:2b:26:d1:6d:fb:fb:2f:82:25:de:7d:fc:a4:4d: e0:bc:ee:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xx7vPzOAVwLRw70h7V8EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhNTI2YTczY2U4ZjlmNjJjMTRhMTFhMmVhOTEzZWMyNzNk NThjNDYwHhcNMjYwMTAxMDQxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjAwMDE3OGQ5MTEzZGRkMTc3MzFhMTBmNWYzNjFiOTNjOTMyZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv21AyCYYKb1n1PRxUnW3qU6VKqvy ysU3+siYKYET8Df4X93Tukh0jbCNlDysYPp7isJl241SfKBfVkZ/dyuiXmV5sDcy A7oOJg5STOFJBW/TtGTZAQW82GBEi7RYdeHn6Ue1C7fJEmu2SHUzgTDemgrActmR R9g8srhMnrReaCvzwR6j8duS3nnXu6g2x5GCNRRJz4AU4UxuirDymgZl1bfPF2yw pUDibJdp4+Hqjz7lvo9Ih4q5tivFkNNoRHgJ5XpK8Ei8Xt/cDVeRkWi3zWTPsBio /0gVuJM/Haw3MXagJ9TWNG12OrjAJpgWXervnddYaBzoHC9CfGLR5DzRiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAYAAXjZET3dF3MaEPXzYbk8ky7pMB8GA1UdIwQY MBaAFJpSanPOj59iwUoRouqRPsJz1YxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMt N2QxNmI5MGRiZTcyLzEvQmdBQmVOa1JQZDBYY3hvUTlmTmh1VHlUTHVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi82ZmNkY2EtZDEyMS00MzkxLTljZmMtN2QxNmI5MGRiZTcy LzEvbWxKcWM4NlBuMkxCU2hHaTZwRS13blBWakVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY93MA0G CSqGSIb3DQEBCwUAA4IBAQB7CBgi1FcijGSD41nRhqNpRhSqeXpC2MoDCJ7bNf2e DNztgz5jslZQaGoGXyjHRFe4dRPFd1sMuaVpOgDFqDrFyl0Jaa+T0qEhb2Ifg7YD 0ktngx16uJJbo0SgfYZ7772SwkR2n/6OCSIRbqWb1vVQDRWto9b6aus1/65xx1NQ Q9a0Xh4SIaLnJOs3PqSzbJbIIkOWUiXKW68PW+E0BmqLVRtF8nVMjBNpEa6lhOD5 nE2atS0Sd9GV0ADiesVxKCyi4AS+DwdmYl+kOHp+zR7aUGnNLbH4L6y0cOO+A+My dTgW9xruAdsGJwaAEw8FKybRbfv7L4Il3n38pE3gvO59 -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:10 2026 by rpki-client