This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/RbQOKPPCGMpyM4K5C4AKNXpnbds.roa File: RbQOKPPCGMpyM4K5C4AKNXpnbds.roa (raw, json) Hash identifier: Gf2GIsuTgxftxzUXHkquqSxcD5pOA/yKwpoQBnJXO2Y= Subject key identifier: 45:B4:0E:28:F3:C2:18:CA:72:33:82:B9:0B:80:0A:35:7A:67:6D:DB Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Certificate serial: 019B7834C01DEEAA30DDCC82741F29A3FDB1 Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/RbQOKPPCGMpyM4K5C4AKNXpnbds.roa Signing time: Thu 01 Jan 2026 06:18:01 +0000 ROA not before: Thu 01 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50464 IP address blocks: 195.191.76.0/23 maxlen: 24 195.191.76.196/32 maxlen: 32 195.191.76.210/32 maxlen: 32 195.191.77.99/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c0:1d:ee:aa:30:dd:cc:82:74:1f:29:a3:fd:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45b40e28f3c218ca723382b90b800a357a676ddb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a1:de:b5:39:ae:f6:48:ee:91:a2:ab:16:8c: d0:ac:df:cb:e9:6a:bc:d3:ff:23:fa:d4:ee:89:a4: e1:07:3f:19:9c:98:0f:16:bb:25:44:31:08:95:c4: 2e:0e:f7:ca:95:33:4d:04:55:5b:d4:08:56:f7:09: a6:ad:94:34:4c:df:90:25:06:e4:4c:c0:ce:e8:b4: f7:ff:2f:8d:ba:65:8c:3e:83:4f:0f:67:cb:a0:53: 31:52:9f:97:87:02:21:9c:13:6c:f0:15:96:f1:43: b8:6d:36:95:dd:5e:fb:0a:e5:e2:fe:40:12:b6:2a: c7:24:52:ca:20:d4:19:9c:8b:98:a4:3c:6a:d5:cb: fc:d0:f5:41:12:51:1b:24:1a:77:04:15:8b:cb:e6: d1:ff:43:ea:0e:b8:f4:e7:8a:b4:bc:d6:04:a0:b0: fb:9f:a8:d6:d9:1e:29:fe:b9:c3:74:ba:2c:69:08: 56:09:e5:e0:94:b8:d6:6f:bc:3f:ab:d2:e6:0c:6e: 8b:10:49:32:12:ba:cf:fb:d8:21:eb:d0:6f:a3:99: b2:39:c1:85:fb:5a:0b:d9:aa:a4:7b:6e:37:1b:08: 33:71:23:e2:d0:7f:10:83:bf:d5:74:03:69:76:78: ce:16:8a:02:62:c1:a1:04:c1:e0:14:42:ab:6d:d8: f0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:B4:0E:28:F3:C2:18:CA:72:33:82:B9:0B:80:0A:35:7A:67:6D:DB X509v3 Authority Key Identifier: keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/RbQOKPPCGMpyM4K5C4AKNXpnbds.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.191.76.0/23 Signature Algorithm: sha256WithRSAEncryption 15:46:26:ce:99:7a:77:66:ec:60:a5:b8:98:7b:90:1a:9d:33: 78:b5:ee:bf:85:58:9a:91:37:00:0f:2c:f9:33:28:4d:23:d6: 05:e8:9c:13:2e:03:73:bd:c2:c2:83:d6:27:eb:b1:47:07:24: fd:73:79:39:fd:59:1b:c4:50:85:d4:d1:c6:e9:c7:f4:11:f1: 20:81:2c:11:53:e9:e3:25:bb:66:25:cc:c2:9c:42:e8:a8:cf: f3:f3:d6:5a:85:20:b3:b6:3c:3d:e5:97:5c:f3:70:1f:65:0b: 46:a2:1b:9c:1b:2e:3d:a4:18:94:8a:53:3c:22:b6:fc:19:c7: 80:25:ec:ee:4a:b4:1e:2d:3c:82:f8:a1:ef:92:3f:a8:b1:e8: f7:86:8e:e1:97:cd:71:98:ff:26:aa:b0:fa:ba:d4:c9:3b:79: 89:07:7f:48:f6:37:49:b8:81:e7:ad:47:de:b9:29:78:24:a7: 4f:f8:e7:fe:26:e1:3f:3f:0b:91:22:76:90:c6:42:5d:97:72: a6:39:31:9e:60:b9:25:65:79:7d:88:b4:74:00:b2:94:75:41: 35:8a:82:24:66:e6:d4:cf:6f:a6:20:e8:40:7e:7f:d4:0c:64: a7:b7:d5:8a:2a:dd:b6:af:98:56:05:15:3d:08:80:d0:37:70: bb:92:b3:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NMAd7qow3cyCdB8po/2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMGVjZGJmNTEzNjBjZWNhZTYxN2FiZTFhM2FjNmE2ZmYw YTViNmMwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWI0MGUyOGYzYzIxOGNhNzIzMzgyYjkwYjgwMGEzNTdhNjc2ZGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6HetTmu9kjukaKrFozQrN/L6Wq8 0/8j+tTuiaThBz8ZnJgPFrslRDEIlcQuDvfKlTNNBFVb1AhW9wmmrZQ0TN+QJQbk TMDO6LT3/y+NumWMPoNPD2fLoFMxUp+XhwIhnBNs8BWW8UO4bTaV3V77CuXi/kAS tirHJFLKINQZnIuYpDxq1cv80PVBElEbJBp3BBWLy+bR/0PqDrj054q0vNYEoLD7 n6jW2R4p/rnDdLosaQhWCeXglLjWb7w/q9LmDG6LEEkyErrP+9gh69Bvo5myOcGF +1oL2aqke243GwgzcSPi0H8Qg7/VdANpdnjOFooCYsGhBMHgFEKrbdjwFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEW0DijzwhjKcjOCuQuACjV6Z23bMB8GA1UdIwQY MBaAFGsOzb9RNgzsrmF6vho6xqb/CltsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2Qt MTFkZmZlMTA4MTQ3LzEvUmJRT0tQUENHTXB5TTRLNUM0QUtOWHBuYmRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy8xYWNiMGMtMzFhMy00NzE4LTk5M2QtMTFkZmZlMTA4MTQ3 LzEvYXc3TnYxRTJET3l1WVhxLUdqckdwdjhLVzJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw79MMA0G CSqGSIb3DQEBCwUAA4IBAQAVRibOmXp3ZuxgpbiYe5AanTN4te6/hViakTcADyz5 MyhNI9YF6JwTLgNzvcLCg9Yn67FHByT9c3k5/VkbxFCF1NHG6cf0EfEggSwRU+nj JbtmJczCnELoqM/z89ZahSCztjw95Zdc83AfZQtGohucGy49pBiUilM8Irb8GceA JezuSrQeLTyC+KHvkj+osej3ho7hl81xmP8mqrD6utTJO3mJB39I9jdJuIHnrUfe uSl4JKdP+Of+JuE/PwuRInaQxkJdl3KmOTGeYLklZXl9iLR0ALKUdUE1ioIkZubU z2+mIOhAfn/UDGSnt9WKKt22r5hWBRU9CIDQN3C7krNG -----END CERTIFICATE-----Generated at Mon Jan 26 08:57:46 2026 by rpki-client