This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa File: 1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa (raw, json) Hash identifier: 1vCNqRI8XEb7PjtGyd1pWNMKL00lL0ojPCYN9P6eYI4= Subject key identifier: D4:10:0F:04:41:D9:DA:44:A8:08:30:0C:E5:E0:DB:AC:80:35:76:0A Certificate issuer: /CN=f56403bc1c874eef09b8a1344155abc3f0575b15 Certificate serial: 019B7EA72099A1A634837C639D63B8B774FE Authority key identifier: F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa Signing time: Fri 02 Jan 2026 12:20:40 +0000 ROA not before: Fri 02 Jan 2026 12:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8412 IP address blocks: 195.190.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.mft rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:20:99:a1:a6:34:83:7c:63:9d:63:b8:b7:74:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f56403bc1c874eef09b8a1344155abc3f0575b15 Validity Not Before: Jan 2 12:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4100f0441d9da44a808300ce5e0dbac8035760a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:dc:af:db:a4:bd:fb:a7:98:91:24:a4:69: 52:4b:a3:e0:ac:5a:48:0e:0a:d0:34:b9:f8:c5:43: b2:9e:f6:2a:05:09:0a:7a:7a:a4:27:45:6e:83:19: 05:7e:fe:5b:10:12:7f:64:66:c3:a3:26:4c:b4:3c: f5:65:0a:ea:05:f2:f9:aa:8f:42:2a:08:45:ec:53: fe:d8:78:44:5b:73:f2:73:3a:62:5f:3a:a1:cf:b4: 16:26:25:a6:d1:1c:be:8e:2c:57:b1:f9:e7:df:00: be:dc:92:5b:d2:0a:81:24:af:3e:da:85:9d:ce:18: 9f:28:2b:59:99:7b:ab:70:69:df:ab:71:40:0f:73: 65:ff:2b:a3:4c:7c:11:da:ce:b5:6b:67:12:b0:68: ea:01:01:02:63:8a:a1:06:2a:36:78:50:19:72:5f: b1:d0:2c:60:a6:08:0a:9a:36:43:4b:0e:5f:8a:a4: 5a:12:14:d0:ab:c8:80:54:86:a5:56:79:bc:44:e8: 8b:e2:77:6b:1c:e1:37:6b:fe:f9:59:3f:a7:68:4f: 4b:0b:b3:1d:20:84:9d:8c:16:3d:28:6a:17:23:48: 12:af:ce:68:1e:22:d4:3f:f8:54:7f:17:54:25:3a: 14:78:e2:1e:de:53:bd:13:75:42:0e:a3:43:29:ca: 30:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:10:0F:04:41:D9:DA:44:A8:08:30:0C:E5:E0:DB:AC:80:35:76:0A X509v3 Authority Key Identifier: keyid:F5:64:03:BC:1C:87:4E:EF:09:B8:A1:34:41:55:AB:C3:F0:57:5B:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WQDvByHTu8JuKE0QVWrw_BXWxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/1BAPBEHZ2kSoCDAM5eDbrIA1dgo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/174860-0c5a-44f0-97e7-fab85ee5702a/1/9WQDvByHTu8JuKE0QVWrw_BXWxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.190.131.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:65:36:2c:76:7b:3b:0c:99:e0:4a:26:00:04:bd:73:48:72: 2c:b5:06:26:98:3b:f0:ec:62:62:f7:ce:3e:6b:ef:7e:5f:80: b9:67:a2:02:ab:47:fb:b8:4c:83:69:07:40:e0:3b:47:41:4b: f4:44:5a:e7:ef:bb:8a:af:86:12:fa:64:0e:2d:08:2a:f5:e7: ca:b2:34:be:04:31:70:6f:5d:e0:5a:b3:e8:7c:88:b9:cd:1c: 67:45:49:e8:01:b6:f8:e9:c4:b9:df:25:cd:30:fc:99:ac:c7: f8:31:88:40:17:65:eb:fa:27:46:cf:60:cd:3e:86:2e:6e:2d: 7b:e0:46:4c:ca:13:c9:fe:cc:c5:d4:59:91:22:5e:1d:c3:00: 51:85:8f:cd:15:d6:7c:f6:02:0a:4c:6f:de:44:4d:d3:79:1c: 11:11:ab:0a:08:9a:bb:7e:0d:1b:bc:c5:bb:c5:64:da:ad:00: 7e:51:cc:89:d8:20:d4:4d:0a:d3:df:46:55:15:6b:1f:fc:4d: aa:6e:c7:bd:23:bb:91:59:3e:1e:ec:eb:12:be:1a:3d:ae:15: 17:29:ec:67:3b:b8:24:30:3c:bc:18:3b:b2:d7:3e:24:4b:1a: 2b:b0:be:ff:4a:a8:7a:30:55:a5:14:71:36:29:1e:bf:7e:7b: f0:00:2f:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pyCZoaY0g3xjnWO4t3T+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjQwM2JjMWM4NzRlZWYwOWI4YTEzNDQxNTVhYmMzZjA1 NzViMTUwHhcNMjYwMTAyMTIyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDEwMGYwNDQxZDlkYTQ0YTgwODMwMGNlNWUwZGJhYzgwMzU3NjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/fcr9ukvfunmJEkpGlSS6PgrFpI DgrQNLn4xUOynvYqBQkKenqkJ0VugxkFfv5bEBJ/ZGbDoyZMtDz1ZQrqBfL5qo9C KghF7FP+2HhEW3PyczpiXzqhz7QWJiWm0Ry+jixXsfnn3wC+3JJb0gqBJK8+2oWd zhifKCtZmXurcGnfq3FAD3Nl/yujTHwR2s61a2cSsGjqAQECY4qhBio2eFAZcl+x 0CxgpggKmjZDSw5fiqRaEhTQq8iAVIalVnm8ROiL4ndrHOE3a/75WT+naE9LC7Md IISdjBY9KGoXI0gSr85oHiLUP/hUfxdUJToUeOIe3lO9E3VCDqNDKcow9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNQQDwRB2dpEqAgwDOXg26yANXYKMB8GA1UdIwQY MBaAFPVkA7wch07vCbihNEFVq8PwV1sVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTct ZmFiODVlZTU3MDJhLzEvMUJBUEJFSFoya1NvQ0RBTTVlRGJySUExZGdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8xNzQ4NjAtMGM1YS00NGYwLTk3ZTctZmFiODVlZTU3MDJh LzEvOVdRRHZCeUhUdThKdUtFMFFWV3J3X0JYV3hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw76DMA0G CSqGSIb3DQEBCwUAA4IBAQBuZTYsdns7DJngSiYABL1zSHIstQYmmDvw7GJi984+ a+9+X4C5Z6ICq0f7uEyDaQdA4DtHQUv0RFrn77uKr4YS+mQOLQgq9efKsjS+BDFw b13gWrPofIi5zRxnRUnoAbb46cS53yXNMPyZrMf4MYhAF2Xr+idGz2DNPoYubi17 4EZMyhPJ/szF1FmRIl4dwwBRhY/NFdZ89gIKTG/eRE3TeRwREasKCJq7fg0bvMW7 xWTarQB+UcyJ2CDUTQrT30ZVFWsf/E2qbse9I7uRWT4e7OsSvho9rhUXKexnO7gk MDy8GDuy1z4kSxorsL7/Sqh6MFWlFHE2KR6/fnvwAC+X -----END CERTIFICATE-----Generated at Thu Jan 8 13:45:32 2026 by rpki-client