This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa File: bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa (raw, json) Hash identifier: UFUxr/kieGhgzteQIeGPVBH69D8iREI4DsJ6Yi6z7RE= Subject key identifier: 6C:7B:FA:A5:40:94:EC:FA:DF:31:B0:9A:E5:A2:B5:51:E0:E2:FF:C8 Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Certificate serial: 019B7A5B46F16317BC3AC016FDEE2D3E65D0 Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa Signing time: Thu 01 Jan 2026 16:19:20 +0000 ROA not before: Thu 01 Jan 2026 16:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56595 IP address blocks: 198.52.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:46:f1:63:17:bc:3a:c0:16:fd:ee:2d:3e:65:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28 Validity Not Before: Jan 1 16:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c7bfaa54094ecfadf31b09ae5a2b551e0e2ffc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e9:eb:65:84:36:74:00:17:f7:09:9a:5c:2b: 8a:7b:32:b7:a0:73:74:ff:2b:d0:5b:03:0e:69:d3: 1e:3e:f3:4b:8a:8e:c6:bc:a0:d6:ec:d5:83:79:bc: 31:10:20:dc:6e:53:aa:b3:c9:2a:d2:bc:cf:1b:91: e3:8e:69:2f:ac:73:df:80:0c:76:9d:2f:8c:9b:be: 0d:04:25:37:c9:94:de:ed:87:7e:a0:7b:9a:07:20: 1f:2b:36:d2:30:4f:76:b5:34:8c:99:31:11:09:65: 5c:7a:28:43:6e:48:09:80:4a:ef:cd:39:01:61:a7: 71:c4:5a:5a:b9:93:8c:86:18:48:fd:da:d7:41:0d: 6b:3f:ce:fd:49:30:c7:49:52:fb:72:12:6e:57:f6: 39:fb:f2:09:7f:45:e5:b6:54:46:f3:cf:c0:52:1f: 55:85:b4:ee:11:da:9c:ed:cf:27:04:16:60:b6:0e: ff:0c:6f:d6:5f:02:f4:ef:02:a5:cf:ed:a4:1f:1a: 24:20:95:b3:9a:d7:28:08:12:86:3e:b0:ab:37:65: 88:12:47:8a:c6:41:30:55:85:cd:8c:2f:13:45:95: b1:a5:83:e3:94:37:3b:74:75:fa:bf:9a:f8:35:2a: 57:d7:00:c3:e9:34:88:a5:a5:52:1d:21:89:ea:b5: 09:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:7B:FA:A5:40:94:EC:FA:DF:31:B0:9A:E5:A2:B5:51:E0:E2:FF:C8 X509v3 Authority Key Identifier: keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/bHv6pUCU7PrfMbCa5aK1UeDi_8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 198.52.45.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:f6:22:8f:00:cd:84:00:df:5c:53:de:c1:e7:b3:cb:15:a5: 14:77:b8:6f:16:68:45:da:4e:84:b6:29:bd:c6:5f:a3:b2:0e: c8:b9:b7:e5:60:54:93:ac:c3:ca:7a:5c:f1:f7:0c:bd:24:f2: 35:18:92:9d:60:77:f6:05:8b:54:57:85:7b:fa:07:cb:7f:5a: bb:b5:36:9c:68:0e:d2:76:4a:4d:21:a3:ca:38:a6:6c:27:0f: f5:aa:d3:6c:3c:fc:05:d7:e3:fe:fc:60:7e:bb:11:4a:f2:8b: 57:8c:45:ed:98:47:eb:bf:28:3f:19:6e:cf:4e:d9:6a:38:bc: cc:28:bd:14:e2:68:98:b4:da:0f:15:7e:4c:73:ae:96:37:8a: 01:e6:c1:60:55:8d:c8:b1:e5:d0:87:31:e4:16:e8:98:76:59: 48:88:5e:fa:46:f1:b2:cf:a6:0c:7b:7b:f6:21:df:a9:6a:80: 05:b7:8c:bc:da:aa:e1:eb:95:5b:82:b3:7f:5b:13:8e:f3:dc: 17:e3:d3:24:cf:06:99:75:6d:93:b5:a9:cc:80:c5:40:2e:64: ca:29:78:50:4c:1b:3d:5e:cd:24:02:33:a6:cc:5b:bf:16:0e: df:27:a6:17:1b:f8:a5:6d:77:64:bb:7d:f1:c7:91:54:13:3f: 97:f9:ba:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0bxYxe8OsAW/e4tPmXQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2 MjVmMjgwHhcNMjYwMTAxMTYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzdiZmFhNTQwOTRlY2ZhZGYzMWIwOWFlNWEyYjU1MWUwZTJmZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqenrZYQ2dAAX9wmaXCuKezK3oHN0 /yvQWwMOadMePvNLio7GvKDW7NWDebwxECDcblOqs8kq0rzPG5HjjmkvrHPfgAx2 nS+Mm74NBCU3yZTe7Yd+oHuaByAfKzbSME92tTSMmTERCWVceihDbkgJgErvzTkB YadxxFpauZOMhhhI/drXQQ1rP879STDHSVL7chJuV/Y5+/IJf0XltlRG88/AUh9V hbTuEdqc7c8nBBZgtg7/DG/WXwL07wKlz+2kHxokIJWzmtcoCBKGPrCrN2WIEkeK xkEwVYXNjC8TRZWxpYPjlDc7dHX6v5r4NSpX1wDD6TSIpaVSHSGJ6rUJYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGx7+qVAlOz63zGwmuWitVHg4v/IMB8GA1UdIwQY MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt MzhlZThmZDY0ZTdkLzEvYkh2NnBVQ1U3UHJmTWJDYTVhSzFVZURpXzhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjQtMA0G CSqGSIb3DQEBCwUAA4IBAQAL9iKPAM2EAN9cU97B57PLFaUUd7hvFmhF2k6Etim9 xl+jsg7IubflYFSTrMPKelzx9wy9JPI1GJKdYHf2BYtUV4V7+gfLf1q7tTacaA7S dkpNIaPKOKZsJw/1qtNsPPwF1+P+/GB+uxFK8otXjEXtmEfrvyg/GW7PTtlqOLzM KL0U4miYtNoPFX5Mc66WN4oB5sFgVY3IseXQhzHkFuiYdllIiF76RvGyz6YMe3v2 Id+paoAFt4y82qrh65VbgrN/WxOO89wX49MkzwaZdW2TtanMgMVALmTKKXhQTBs9 Xs0kAjOmzFu/Fg7fJ6YXG/ilbXdku33xx5FUEz+X+bqn -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:18 2026 by rpki-client