This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/C_BYzmZaPYXIqVDDaSSHJjG6eok.roa File: C_BYzmZaPYXIqVDDaSSHJjG6eok.roa (raw, json) Hash identifier: orMdIRPBGplk0jJg6EM/iTvOk2LshUfKLy+asvUuzbU= Subject key identifier: 0B:F0:58:CE:66:5A:3D:85:C8:A9:50:C3:69:24:87:26:31:BA:7A:89 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B8EC9ED7AD77756FC74B5B32280FBDA0A Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/C_BYzmZaPYXIqVDDaSSHJjG6eok.roa Signing time: Mon 05 Jan 2026 15:32:36 +0000 ROA not before: Mon 05 Jan 2026 15:32:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215935 IP address blocks: 188.255.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8e:c9:ed:7a:d7:77:56:fc:74:b5:b3:22:80:fb:da:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 5 15:32:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0bf058ce665a3d85c8a950c36924872631ba7a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:9d:b7:0f:59:42:77:73:43:58:93:b4:a6: b5:8a:4d:f6:11:bd:08:6a:cd:7c:3e:9d:af:02:c9: 2d:a1:32:8b:92:4a:d3:23:66:16:4a:93:da:80:c4: e1:6a:97:15:94:82:a4:b7:b7:00:fa:12:46:ee:e9: fa:8d:e3:0f:e4:59:2c:1c:7b:89:02:9b:8b:03:5a: d4:f0:b0:08:d9:fe:40:0e:e2:9c:da:85:16:66:86: a1:d9:aa:57:37:bf:09:d2:19:12:d5:79:48:d0:0a: 92:f4:bc:f2:02:47:73:a3:ad:d1:9e:e9:fa:6a:80: 4e:e6:2f:07:28:31:2d:29:9e:71:e1:a9:87:a5:f4: b6:b4:fd:09:be:a8:25:e6:ed:2e:4a:3b:30:2b:f3: 26:44:0d:b7:86:a0:ef:4a:07:44:6f:70:ff:eb:7b: 7f:84:c7:bc:29:a5:00:59:8f:d6:ff:4d:e1:7c:d5: 1f:fb:6a:e4:11:6a:05:7e:5d:c1:a6:dc:3d:87:f5: c9:5e:da:d2:c6:92:55:50:8d:d2:56:b9:4d:8a:8c: 30:63:88:b1:7e:3c:ac:1e:4e:0c:7a:a4:ba:03:46: 1e:5b:36:4c:58:bf:cf:65:57:f1:d6:d3:08:1d:59: 36:48:a7:88:70:50:b0:aa:96:1b:e2:18:0f:73:4a: 2d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F0:58:CE:66:5A:3D:85:C8:A9:50:C3:69:24:87:26:31:BA:7A:89 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/C_BYzmZaPYXIqVDDaSSHJjG6eok.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.148.0/24 Signature Algorithm: sha256WithRSAEncryption 55:51:71:10:a6:5a:2b:12:db:ed:84:b0:b4:16:a8:4d:91:c7: 45:24:b3:21:df:13:ea:59:4c:dd:b6:a4:23:9e:3f:47:33:7e: 30:7d:c4:38:fe:0f:ee:60:8c:9e:36:43:70:f8:51:5e:a9:35: 76:7a:aa:0e:58:2e:15:9a:b4:db:dd:48:9f:c3:ae:19:9c:d4: 9d:ae:a2:90:98:5a:da:9f:b7:67:ff:d2:3d:ea:ca:ab:1c:e6: d0:d2:64:5e:d4:fc:6a:10:4d:43:02:06:e8:e3:e1:1e:18:ed: 81:59:04:83:cc:7e:b1:46:c8:d3:b7:69:66:d2:1b:98:0d:ca: b2:05:0d:bd:52:65:5b:57:11:0d:b9:fb:8b:86:7f:52:ef:a0: 50:92:05:bf:8a:8c:fc:8c:0a:79:9f:24:48:b8:02:52:67:cf: 14:d9:bf:46:5d:ea:05:43:55:be:17:56:dc:66:88:86:8d:82: 64:f4:00:8c:98:be:67:e5:97:de:2f:3d:e8:c9:40:82:48:53: 5a:52:ea:23:29:ea:9f:8c:02:61:1c:4d:9d:5f:e2:de:93:ba: e5:ff:77:64:f6:49:cd:15:64:2e:b1:c2:09:f5:3c:03:35:7e: cc:cd:72:b9:f4:db:d2:67:ce:11:ac:23:8a:f1:b0:e7:f0:33: cc:17:93:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuOye1613dW/HS1syKA+9oKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTA1MTUzMjM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYmYwNThjZTY2NWEzZDg1YzhhOTUwYzM2OTI0ODcyNjMxYmE3YTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ2dtw9ZQndzQ1iTtKa1ik32Eb0I as18Pp2vAsktoTKLkkrTI2YWSpPagMThapcVlIKkt7cA+hJG7un6jeMP5FksHHuJ ApuLA1rU8LAI2f5ADuKc2oUWZoah2apXN78J0hkS1XlI0AqS9LzyAkdzo63Rnun6 aoBO5i8HKDEtKZ5x4amHpfS2tP0Jvqgl5u0uSjswK/MmRA23hqDvSgdEb3D/63t/ hMe8KaUAWY/W/03hfNUf+2rkEWoFfl3Bptw9h/XJXtrSxpJVUI3SVrlNiowwY4ix fjysHk4MeqS6A0YeWzZMWL/PZVfx1tMIHVk2SKeIcFCwqpYb4hgPc0otuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAvwWM5mWj2FyKlQw2kkhyYxunqJMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvQ19CWXptWmFQWVhJcVZERGFTU0hKakc2ZW9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP+UMA0G CSqGSIb3DQEBCwUAA4IBAQBVUXEQplorEtvthLC0FqhNkcdFJLMh3xPqWUzdtqQj nj9HM34wfcQ4/g/uYIyeNkNw+FFeqTV2eqoOWC4VmrTb3Uifw64ZnNSdrqKQmFra n7dn/9I96sqrHObQ0mRe1PxqEE1DAgbo4+EeGO2BWQSDzH6xRsjTt2lm0huYDcqy BQ29UmVbVxENufuLhn9S76BQkgW/ioz8jAp5nyRIuAJSZ88U2b9GXeoFQ1W+F1bc ZoiGjYJk9ACMmL5n5ZfeLz3oyUCCSFNaUuojKeqfjAJhHE2dX+Lek7rl/3dk9knN FWQuscIJ9TwDNX7MzXK59NvSZ84RrCOK8bDn8DPMF5Mh -----END CERTIFICATE-----Generated at Mon Jan 12 22:23:44 2026 by rpki-client