This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/bHXHREeiIlZobWnv85pxED889VM.roa File: bHXHREeiIlZobWnv85pxED889VM.roa (raw, json) Hash identifier: h0DRcaf7usOPw3gm22x0Kelqp60qYrawYYvGluccU04= Subject key identifier: 6C:75:C7:44:47:A2:22:56:68:6D:69:EF:F3:9A:71:10:3F:3C:F5:53 Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab Certificate serial: 019B79ECAAAF380B5474403B8E3D5C6C8C94 Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/bHXHREeiIlZobWnv85pxED889VM.roa Signing time: Thu 01 Jan 2026 14:18:31 +0000 ROA not before: Thu 01 Jan 2026 14:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198958 IP address blocks: 193.107.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 08:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:aa:af:38:0b:54:74:40:3b:8e:3d:5c:6c:8c:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab Validity Not Before: Jan 1 14:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c75c74447a22256686d69eff39a71103f3cf553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:b1:70:26:8f:e7:a3:5c:23:07:82:b9:fd: 05:4d:48:18:e4:a4:e7:cc:42:cc:04:8e:e7:27:1b: 58:fb:1d:b4:97:19:ca:7b:a6:6a:60:ad:fe:48:43: 66:3f:f4:0d:71:3b:55:15:fa:d5:5d:f0:1a:21:68: 73:61:60:34:16:6d:d7:88:4a:9f:91:4f:79:6b:4d: 2e:21:7a:54:51:97:5f:05:ab:2b:4b:ea:e7:af:86: 42:f7:4c:c0:c5:92:a3:4e:f4:f6:4b:8b:4d:4e:35: ce:13:9a:86:66:41:44:d6:12:02:6c:50:d6:b1:28: e7:9a:ba:f5:f2:c0:9f:7c:d8:e6:0b:16:d9:60:76: 17:15:56:36:18:f1:37:e6:85:8c:db:8f:64:d9:7c: ce:02:02:be:07:57:f7:aa:f4:ee:72:9e:57:99:a1: e6:19:07:17:5c:b6:b2:79:f3:59:31:97:46:52:4d: cc:a5:55:4c:f0:0b:f0:2f:9c:de:93:39:79:51:af: 44:34:4b:9a:ae:90:65:1b:f9:b2:d2:86:fa:33:01: da:87:d1:1c:62:49:93:ee:89:d6:e9:18:65:ec:45: 7c:8a:89:22:5a:ce:58:de:1e:41:56:bb:1d:04:4e: 8f:e0:6d:dc:e2:85:76:0b:02:78:b4:75:1d:24:47: a3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:75:C7:44:47:A2:22:56:68:6D:69:EF:F3:9A:71:10:3F:3C:F5:53 X509v3 Authority Key Identifier: keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/bHXHREeiIlZobWnv85pxED889VM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.111.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:22:b7:2a:3f:05:3a:d4:70:9f:3f:aa:cf:e1:0a:f2:20:f0: bf:7b:ab:37:49:98:51:16:ff:9a:db:61:b5:61:81:90:75:01: 37:1d:61:7c:1f:7b:b9:66:b3:82:2d:fb:1c:eb:e1:a3:e5:f4: 5c:71:63:d3:57:5d:01:05:a4:31:71:7f:c9:36:15:75:98:7c: d8:c7:d5:3d:98:fa:e4:44:ab:02:ed:fb:b9:e2:b8:3b:5a:9e: 7e:74:bf:0d:21:0a:ac:50:dd:e1:37:ad:15:77:e9:38:3f:47: 95:5e:c4:17:14:ec:4c:1e:e8:c5:ce:cb:25:ab:2d:71:38:09: 44:27:c6:c7:99:78:cd:a3:18:cd:31:71:5e:fd:11:03:8c:73: 6d:20:b3:a2:2d:ab:7a:b5:9e:18:2f:7b:4d:47:bf:94:e6:5f: 4c:be:d9:30:bb:4d:fe:f7:1d:a4:d1:3d:be:85:5e:81:26:3e: c6:08:db:35:32:83:df:9c:2b:56:ed:90:57:5d:c7:f9:b0:68: 0e:15:c8:8a:5f:8b:08:da:e0:a0:c1:cb:cf:d9:d5:ce:bc:78: e8:42:b1:1b:d2:97:6a:3a:d5:09:28:bf:ac:5b:01:68:a3:71: b8:97:77:87:62:96:d8:81:34:02:c2:77:09:8d:71:b4:71:a5: de:3f:6b:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57KqvOAtUdEA7jj1cbIyUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNDkxNzcwY2U5YjY2MzAwMmE3OTQ1NDJkOTg4NmQxYTJj ZTYzYWIwHhcNMjYwMTAxMTQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yzc1Yzc0NDQ3YTIyMjU2Njg2ZDY5ZWZmMzlhNzExMDNmM2NmNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQixcCaP56NcIweCuf0FTUgY5KTn zELMBI7nJxtY+x20lxnKe6ZqYK3+SENmP/QNcTtVFfrVXfAaIWhzYWA0Fm3XiEqf kU95a00uIXpUUZdfBasrS+rnr4ZC90zAxZKjTvT2S4tNTjXOE5qGZkFE1hICbFDW sSjnmrr18sCffNjmCxbZYHYXFVY2GPE35oWM249k2XzOAgK+B1f3qvTucp5XmaHm GQcXXLayefNZMZdGUk3MpVVM8AvwL5zekzl5Ua9ENEuarpBlG/my0ob6MwHah9Ec YkmT7onW6Rhl7EV8iokiWs5Y3h5BVrsdBE6P4G3c4oV2CwJ4tHUdJEej3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGx1x0RHoiJWaG1p7/OacRA/PPVTMB8GA1UdIwQY MBaAFNJJF3DOm2YwAqeUVC2YhtGizmOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEt ODVjMGQwMWY5ZGUyLzEvYkhYSFJFZWlJbFpvYldudjg1cHhFRDg4OVZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEtODVjMGQwMWY5ZGUy LzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWtvMA0G CSqGSIb3DQEBCwUAA4IBAQAeIrcqPwU61HCfP6rP4QryIPC/e6s3SZhRFv+a22G1 YYGQdQE3HWF8H3u5ZrOCLfsc6+Gj5fRccWPTV10BBaQxcX/JNhV1mHzYx9U9mPrk RKsC7fu54rg7Wp5+dL8NIQqsUN3hN60Vd+k4P0eVXsQXFOxMHujFzsslqy1xOAlE J8bHmXjNoxjNMXFe/REDjHNtILOiLat6tZ4YL3tNR7+U5l9Mvtkwu03+9x2k0T2+ hV6BJj7GCNs1MoPfnCtW7ZBXXcf5sGgOFciKX4sI2uCgwcvP2dXOvHjoQrEb0pdq OtUJKL+sWwFoo3G4l3eHYpbYgTQCwncJjXG0caXeP2tQ -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:25 2026 by rpki-client