This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BRAX4UbN3M6FzUW62IsVcz2akM8.roa File: BRAX4UbN3M6FzUW62IsVcz2akM8.roa (raw, json) Hash identifier: v7B+qR8TbCW5AvG9J6AsX4zwtn0CQP48x4tEH3KY+T0= Subject key identifier: 05:10:17:E1:46:CD:DC:CE:85:CD:45:BA:D8:8B:15:73:3D:9A:90:CF Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B783448B637B711E1D443071CB850E36E Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BRAX4UbN3M6FzUW62IsVcz2akM8.roa Signing time: Thu 01 Jan 2026 06:17:31 +0000 ROA not before: Thu 01 Jan 2026 06:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12312 IP address blocks: 194.68.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:48:b6:37:b7:11:e1:d4:43:07:1c:b8:50:e3:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=051017e146cddcce85cd45bad88b15733d9a90cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dc:9d:87:f9:27:0d:4f:a1:a2:04:95:6d:84: e3:13:33:07:bd:75:db:c0:65:df:db:c8:db:de:10: 31:3b:ef:75:11:de:42:c5:1c:0b:16:8c:7f:f3:f5: 86:0f:9a:b4:ba:79:67:ed:45:40:05:a9:85:da:fc: 6a:52:69:38:34:47:52:ee:bd:03:ae:c9:29:2e:3e: 2e:95:6a:63:cf:6b:63:2e:d1:3e:c5:ff:ac:fd:79: 59:c3:45:a5:a3:9d:4b:e3:f9:69:36:40:1b:18:df: 74:dd:e7:c5:cb:fb:69:f3:18:8c:d6:ac:e5:61:30: 80:b3:80:b3:e6:a8:f8:33:24:e4:17:c4:86:2e:b8: 1e:ae:9f:86:4e:6c:a1:0e:27:24:f1:4b:cf:a2:be: 85:87:fb:e9:99:ba:50:3e:3c:bb:57:f2:2b:45:62: c4:23:70:d8:14:fd:6b:27:30:58:c6:c0:c6:65:1a: 52:41:f0:e4:19:b8:f5:73:4b:7f:dd:08:7f:32:ad: 26:ff:f9:38:cd:e2:4e:7a:a3:13:83:2f:13:c9:73: 5f:5b:d0:66:c0:c1:38:71:f6:14:45:50:5e:a0:3f: 93:5d:20:4c:90:73:36:81:c7:a3:8c:0c:c1:d3:14: 68:4d:2e:e3:b6:e0:95:21:3d:81:24:d6:d3:c9:34: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:10:17:E1:46:CD:DC:CE:85:CD:45:BA:D8:8B:15:73:3D:9A:90:CF X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BRAX4UbN3M6FzUW62IsVcz2akM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.68.152.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:fd:6e:63:ee:2c:6a:32:cd:8a:75:cd:39:d0:e8:81:f9:85: 97:f3:d4:f1:a1:66:8a:19:58:38:8f:24:8a:7b:1c:2a:99:f4: 68:e8:d0:82:c6:c6:21:e4:02:2a:82:ea:4d:0f:f1:6d:02:35: cb:64:25:a2:57:06:98:c9:43:38:77:9e:ee:20:e2:c4:d6:ad: f0:f5:00:71:ca:8e:5f:d1:b3:82:27:73:01:dd:8b:74:ca:22: 2e:19:1f:53:b6:62:c6:22:2f:d0:bb:05:55:47:ca:ff:b3:e5: 69:4c:29:78:84:23:6b:9b:28:f4:b4:cd:90:a1:4a:29:a6:ae: 0d:0e:cc:26:bd:19:a3:86:78:11:01:83:01:21:9c:6f:f5:d5: a1:be:90:df:38:0e:d3:9b:ec:6e:9c:71:47:43:7c:2d:65:e8: eb:34:91:b0:e5:21:10:71:b3:5a:19:35:4d:b3:27:b1:da:7f: 74:4f:55:55:9c:7c:8d:db:5d:dd:3e:6d:65:10:52:f4:29:6c: 03:29:f8:e6:f7:b1:43:ce:da:4f:3b:5e:78:d1:13:60:38:32: db:40:a3:7d:0d:fb:f2:c2:c6:dd:b8:8f:db:2a:6e:e5:0f:21: ed:90:b9:a6:71:b3:94:ee:dc:54:1a:a3:d7:8a:69:9c:41:01: 98:de:3d:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEi2N7cR4dRDBxy4UONuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTEwMTdlMTQ2Y2RkY2NlODVjZDQ1YmFkODhiMTU3MzNkOWE5MGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdydh/knDU+hogSVbYTjEzMHvXXb wGXf28jb3hAxO+91Ed5CxRwLFox/8/WGD5q0unln7UVABamF2vxqUmk4NEdS7r0D rskpLj4ulWpjz2tjLtE+xf+s/XlZw0Wlo51L4/lpNkAbGN903efFy/tp8xiM1qzl YTCAs4Cz5qj4MyTkF8SGLrgerp+GTmyhDick8UvPor6Fh/vpmbpQPjy7V/IrRWLE I3DYFP1rJzBYxsDGZRpSQfDkGbj1c0t/3Qh/Mq0m//k4zeJOeqMTgy8TyXNfW9Bm wME4cfYURVBeoD+TXSBMkHM2gcejjAzB0xRoTS7jtuCVIT2BJNbTyTQiZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUQF+FGzdzOhc1FutiLFXM9mpDPMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvQlJBWDRVYk4zTTZGelVXNjJJc1ZjejJha004LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwkSYMA0G CSqGSIb3DQEBCwUAA4IBAQA9/W5j7ixqMs2Kdc050OiB+YWX89TxoWaKGVg4jySK exwqmfRo6NCCxsYh5AIqgupND/FtAjXLZCWiVwaYyUM4d57uIOLE1q3w9QBxyo5f 0bOCJ3MB3Yt0yiIuGR9TtmLGIi/QuwVVR8r/s+VpTCl4hCNrmyj0tM2QoUoppq4N DswmvRmjhngRAYMBIZxv9dWhvpDfOA7Tm+xunHFHQ3wtZejrNJGw5SEQcbNaGTVN syex2n90T1VVnHyN213dPm1lEFL0KWwDKfjm97FDztpPO1540RNgODLbQKN9Dfvy wsbduI/bKm7lDyHtkLmmcbOU7txUGqPXimmcQQGY3j2z -----END CERTIFICATE-----Generated at Sun Jan 25 09:04:22 2026 by rpki-client