This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/BB19wgK_cXo8Dd4pF6PmXBrBreM.roa File: BB19wgK_cXo8Dd4pF6PmXBrBreM.roa (raw, json) Hash identifier: 3iQxoj4exX4X3C1YSZ22/4UJclsEWITyZFVoJzL/n+o= Subject key identifier: 04:1D:7D:C2:02:BF:71:7A:3C:0D:DE:29:17:A3:E6:5C:1A:C1:AD:E3 Certificate issuer: /CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Certificate serial: 019B7910367B53DD4D66F7393240FF006203 Authority key identifier: 65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/BB19wgK_cXo8Dd4pF6PmXBrBreM.roa Signing time: Thu 01 Jan 2026 10:17:44 +0000 ROA not before: Thu 01 Jan 2026 10:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 195.216.183.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:36:7b:53:dd:4d:66:f7:39:32:40:ff:00:62:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b7d6699835bfe9a8081dfc114df1bf6d215da7 Validity Not Before: Jan 1 10:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=041d7dc202bf717a3c0dde2917a3e65c1ac1ade3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f5:79:b0:f4:ab:7a:c1:d7:e3:f7:ca:76:69: 40:2a:68:fe:e3:af:9e:3b:d3:e8:7c:c4:d0:32:65: 07:77:48:a3:04:6e:df:3a:c0:d3:3d:19:25:7c:13: f9:49:ac:f4:d8:05:01:20:24:a0:94:6b:5d:a9:35: 67:f6:da:fc:fa:11:d4:0e:89:05:49:d4:cd:e6:0d: c1:7f:ea:15:56:a9:e8:ed:9b:59:61:b9:4e:24:1c: da:50:e0:67:f8:48:d5:ab:44:fc:5e:c3:85:57:9e: 08:2c:f4:da:07:1b:77:16:44:61:77:de:9b:e6:76: f3:fc:6a:69:62:9f:10:4b:0c:d2:4a:90:48:54:ce: b9:5d:14:58:99:2a:6b:73:8f:08:ed:ee:49:a9:10: ca:99:10:d4:49:71:ce:08:3e:0e:a3:d2:bd:0c:75: 76:55:c7:66:23:c7:06:24:5a:cc:13:7c:a3:49:85: 0e:a4:5a:4f:e2:e8:6f:9f:1c:e5:43:25:f4:5a:e5: b3:2b:fe:96:36:fd:e1:b2:ff:db:1f:d9:49:a4:66: 3a:d1:73:9f:d8:fa:7e:07:c5:75:d1:6c:37:c6:30: 04:ca:7d:b2:e0:69:7e:4b:55:ce:27:88:74:b5:cd: 93:56:03:69:93:be:ec:87:e1:16:06:76:6e:35:25: fd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1D:7D:C2:02:BF:71:7A:3C:0D:DE:29:17:A3:E6:5C:1A:C1:AD:E3 X509v3 Authority Key Identifier: keyid:65:B7:D6:69:98:35:BF:E9:A8:08:1D:FC:11:4D:F1:BF:6D:21:5D:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbfWaZg1v-moCB38EU3xv20hXac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/BB19wgK_cXo8Dd4pF6PmXBrBreM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/025ee8-3f47-457d-8d47-9e413ebf42f3/1/ZbfWaZg1v-moCB38EU3xv20hXac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.216.183.0/24 Signature Algorithm: sha256WithRSAEncryption 54:49:65:c8:9b:ea:ea:ff:5c:df:e1:f6:a2:2e:b5:e1:e5:12: c9:1a:f8:b3:b2:cb:36:5f:8a:f7:d7:72:cc:01:d1:84:61:24: b6:95:e0:85:9d:75:d8:ba:00:4d:16:86:d7:78:63:df:62:c5: 63:31:d0:05:cf:49:69:c7:ca:72:35:fd:14:98:d5:aa:0e:8b: a6:20:71:f6:4e:48:e1:d9:dd:8a:e0:64:5b:0c:fc:ef:1f:09: cd:60:7c:75:f3:66:7b:73:42:aa:57:7e:88:b1:3e:c1:50:60: a7:bf:a8:56:37:22:e3:56:bb:57:3a:98:db:40:38:b9:3c:23: 82:68:2a:72:2d:cb:73:8d:78:68:4a:4a:99:29:c7:6a:96:de: 36:db:e0:e6:32:5a:1b:ec:96:c6:e1:3b:80:0e:8f:44:dc:46: 2a:77:a7:cc:f0:95:0e:ab:e1:bf:54:d9:ac:1d:b3:da:eb:fd: dd:73:73:78:6c:56:6e:ed:f6:77:e1:42:3b:d3:3e:7a:b5:0d: 49:e2:c1:b0:fe:ff:6c:77:a3:5c:cc:4d:4e:c7:1b:87:c5:f8: 90:8e:3f:52:56:dd:97:1b:16:71:3b:f0:7b:9e:97:bc:eb:95: b0:00:64:23:59:bf:75:4a:45:96:63:06:f6:b1:ca:5e:05:78: 31:0f:1c:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EDZ7U91NZvc5MkD/AGIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjdkNjY5OTgzNWJmZTlhODA4MWRmYzExNGRmMWJmNmQy MTVkYTcwHhcNMjYwMTAxMTAxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDFkN2RjMjAyYmY3MTdhM2MwZGRlMjkxN2EzZTY1YzFhYzFhZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyvV5sPSresHX4/fKdmlAKmj+46+e O9PofMTQMmUHd0ijBG7fOsDTPRklfBP5Saz02AUBICSglGtdqTVn9tr8+hHUDokF SdTN5g3Bf+oVVqno7ZtZYblOJBzaUOBn+EjVq0T8XsOFV54ILPTaBxt3FkRhd96b 5nbz/GppYp8QSwzSSpBIVM65XRRYmSprc48I7e5JqRDKmRDUSXHOCD4Oo9K9DHV2 VcdmI8cGJFrME3yjSYUOpFpP4uhvnxzlQyX0WuWzK/6WNv3hsv/bH9lJpGY60XOf 2Pp+B8V10Ww3xjAEyn2y4Gl+S1XOJ4h0tc2TVgNpk77sh+EWBnZuNSX9dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAQdfcICv3F6PA3eKRej5lwawa3jMB8GA1UdIwQY MBaAFGW31mmYNb/pqAgd/BFN8b9tIV2nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDct OWU0MTNlYmY0MmYzLzEvQkIxOXdnS19jWG84RGQ0cEY2UG1YQnJCcmVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8wMjVlZTgtM2Y0Ny00NTdkLThkNDctOWU0MTNlYmY0MmYz LzEvWmJmV2FaZzF2LW1vQ0IzOEVVM3h2MjBoWGFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw9i3MA0G CSqGSIb3DQEBCwUAA4IBAQBUSWXIm+rq/1zf4faiLrXh5RLJGvizsss2X4r313LM AdGEYSS2leCFnXXYugBNFobXeGPfYsVjMdAFz0lpx8pyNf0UmNWqDoumIHH2Tkjh 2d2K4GRbDPzvHwnNYHx182Z7c0KqV36IsT7BUGCnv6hWNyLjVrtXOpjbQDi5PCOC aCpyLctzjXhoSkqZKcdqlt422+DmMlob7JbG4TuADo9E3EYqd6fM8JUOq+G/VNms HbPa6/3dc3N4bFZu7fZ34UI70z56tQ1J4sGw/v9sd6NczE1OxxuHxfiQjj9SVt2X GxZxO/B7npe865WwAGQjWb91SkWWYwb2scpeBXgxDxwB -----END CERTIFICATE-----Generated at Mon Jan 12 00:54:08 2026 by rpki-client