This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/s10C4U4_iMbhAR-vN3wyqp0CB_I.roa File: s10C4U4_iMbhAR-vN3wyqp0CB_I.roa (raw, json) Hash identifier: A8eBTCP+tcWaGZkZbjSTGKteJJ98FWaM61rC4IT5gZE= Subject key identifier: B3:5D:02:E1:4E:3F:88:C6:E1:01:1F:AF:37:7C:32:AA:9D:02:07:F2 Certificate issuer: /CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e Certificate serial: 019B7F14DDEB77CA8E5A8BAD7AD74C2BA824 Authority key identifier: 07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/s10C4U4_iMbhAR-vN3wyqp0CB_I.roa Signing time: Fri 02 Jan 2026 14:20:32 +0000 ROA not before: Fri 02 Jan 2026 14:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60633 IP address blocks: 194.11.156.0/22 maxlen: 23 2001:67c:5d8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.mft rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:dd:eb:77:ca:8e:5a:8b:ad:7a:d7:4c:2b:a8:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=075e993e76f9d7fa404d69a6cb60d4bf98f2ba1e Validity Not Before: Jan 2 14:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b35d02e14e3f88c6e1011faf377c32aa9d0207f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a8:cd:c2:a1:39:84:5b:1b:22:81:9b:ac:0c: 55:82:2e:8f:ce:c9:53:84:e2:e1:93:be:17:39:81: 3a:33:83:1d:10:eb:31:32:34:15:80:c9:45:d5:0d: d7:6e:b7:06:0d:29:59:66:97:28:d1:c9:ac:47:9d: 8e:04:7c:43:ad:f6:82:3f:18:00:ec:11:aa:09:65: 5f:0f:a2:2a:7f:4a:26:f9:85:35:52:e6:ad:91:32: da:20:88:27:7d:9f:d6:fc:ff:54:f7:e3:22:7a:be: 45:02:a8:3b:5f:20:f2:20:42:6f:11:87:1f:ab:c6: e8:a6:72:d8:8d:c2:b3:19:97:a0:b1:1a:07:70:f6: 1a:df:ab:d0:90:20:05:28:85:f6:ad:70:d8:e5:bc: e5:9c:d5:6e:c0:27:dd:63:69:1a:f0:c8:93:1d:86: 6a:7c:be:cb:ce:2c:28:12:06:f1:60:e1:70:c0:4c: 86:d0:16:1f:2a:a9:40:7c:f1:32:d0:5d:8d:c8:7c: f2:4e:9d:af:ed:f5:86:6d:73:e0:56:16:50:e4:6c: e4:58:0d:7f:47:81:1c:ac:ad:88:08:bf:43:ee:44: 62:5d:f8:52:65:0c:f2:4c:f0:69:6c:fd:a1:6f:ca: ec:2c:37:43:2c:3f:18:d6:85:85:a3:7f:12:e0:4b: fc:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:5D:02:E1:4E:3F:88:C6:E1:01:1F:AF:37:7C:32:AA:9D:02:07:F2 X509v3 Authority Key Identifier: keyid:07:5E:99:3E:76:F9:D7:FA:40:4D:69:A6:CB:60:D4:BF:98:F2:BA:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B16ZPnb51_pATWmmy2DUv5jyuh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/s10C4U4_iMbhAR-vN3wyqp0CB_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b4566b-bcc8-4df5-ba2f-e15e666ad6c2/1/B16ZPnb51_pATWmmy2DUv5jyuh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.11.156.0/22 IPv6: 2001:67c:5d8::/48 Signature Algorithm: sha256WithRSAEncryption 57:f2:05:8b:04:a7:0b:61:b4:0c:32:d8:19:57:d2:75:36:b9: bf:70:04:81:2e:9b:72:d2:9c:bf:5c:23:d5:5d:cc:be:14:95: b7:76:55:af:09:cc:23:78:b2:f1:72:55:ab:fd:e0:a3:95:15: 8a:fd:9e:2f:c5:82:a9:e7:4c:d5:7d:a0:0b:65:d0:95:11:4b: 95:a6:fc:4a:dd:5c:35:e5:b6:19:d0:a3:b8:0e:ba:72:a6:cf: 65:80:5c:36:8e:ba:93:bd:6f:1c:30:92:6c:70:50:5a:7b:86: 77:4d:e2:11:59:ca:51:d2:fd:ff:8b:9a:cc:4e:28:87:db:cd: 30:4e:52:7f:94:b7:cd:d2:23:d7:9c:09:2c:c6:ed:53:c4:db: 60:e0:a5:ef:1b:75:41:d0:98:9f:07:7c:29:b7:93:89:b6:bf: 30:c5:63:41:dd:ae:e6:92:70:60:33:c5:33:5e:56:f7:22:eb: 32:2b:3d:1d:97:c1:44:9a:9c:95:ec:d3:5d:82:39:f3:4d:cd: 39:c6:af:08:c7:f0:d5:da:28:14:8b:79:1d:6c:d5:ee:17:62: 20:41:c5:05:f8:5f:f4:29:90:d7:cc:31:33:0b:78:6b:2f:a6: 8c:ca:8a:be:74:db:0f:61:0d:ba:88:bd:1d:c8:93:4b:22:c2: d7:8a:72:84 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FN3rd8qOWoutetdMK6gkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NWU5OTNlNzZmOWQ3ZmE0MDRkNjlhNmNiNjBkNGJmOThm MmJhMWUwHhcNMjYwMTAyMTQyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzVkMDJlMTRlM2Y4OGM2ZTEwMTFmYWYzNzdjMzJhYTlkMDIwN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKjNwqE5hFsbIoGbrAxVgi6PzslT hOLhk74XOYE6M4MdEOsxMjQVgMlF1Q3XbrcGDSlZZpco0cmsR52OBHxDrfaCPxgA 7BGqCWVfD6Iqf0om+YU1UuatkTLaIIgnfZ/W/P9U9+Mier5FAqg7XyDyIEJvEYcf q8bopnLYjcKzGZegsRoHcPYa36vQkCAFKIX2rXDY5bzlnNVuwCfdY2ka8MiTHYZq fL7LziwoEgbxYOFwwEyG0BYfKqlAfPEy0F2NyHzyTp2v7fWGbXPgVhZQ5GzkWA1/ R4EcrK2ICL9D7kRiXfhSZQzyTPBpbP2hb8rsLDdDLD8Y1oWFo38S4Ev8pQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFLNdAuFOP4jG4QEfrzd8MqqdAgfyMB8GA1UdIwQY MBaAFAdemT52+df6QE1ppstg1L+Y8roeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjE2WlBuYjUxX3BBVFdtbXkyRFV2NWp5dWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iNDU2NmItYmNjOC00ZGY1LWJhMmYt ZTE1ZTY2NmFkNmMyLzEvczEwQzRVNF9pTWJoQVItdk4zd3lxcDBDQl9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iNDU2NmItYmNjOC00ZGY1LWJhMmYtZTE1ZTY2NmFkNmMy LzEvQjE2WlBuYjUxX3BBVFdtbXkyRFV2NWp5dWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwgucMA8E AgACMAkDBwAgAQZ8BdgwDQYJKoZIhvcNAQELBQADggEBAFfyBYsEpwthtAwy2BlX 0nU2ub9wBIEum3LSnL9cI9VdzL4Ulbd2Va8JzCN4svFyVav94KOVFYr9ni/Fgqnn TNV9oAtl0JURS5Wm/ErdXDXlthnQo7gOunKmz2WAXDaOupO9bxwwkmxwUFp7hndN 4hFZylHS/f+LmsxOKIfbzTBOUn+Ut83SI9ecCSzG7VPE22Dgpe8bdUHQmJ8HfCm3 k4m2vzDFY0HdruaScGAzxTNeVvci6zIrPR2XwUSanJXs012COfNNzTnGrwjH8NXa KBSLeR1s1e4XYiBBxQX4X/QpkNfMMTMLeGsvpozKir502w9hDbqIvR3Ik0siwteK coQ= -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:40 2026 by rpki-client