This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bAEMCBs1xiFIYBax-KTVtiEJptE.roa File: bAEMCBs1xiFIYBax-KTVtiEJptE.roa (raw, json) Hash identifier: Fn2wtO66QIewZhDTuYw/6NsZTvxXQtYcKOlM0z46WGw= Subject key identifier: 6C:01:0C:08:1B:35:C6:21:48:60:16:B1:F8:A4:D5:B6:21:09:A6:D1 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B130C95B9F5706640D22A9700037EF7C3 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bAEMCBs1xiFIYBax-KTVtiEJptE.roa Signing time: Fri 12 Dec 2025 14:52:30 +0000 ROA not before: Fri 12 Dec 2025 14:52:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216459 IP address blocks: 45.130.54.0/23 maxlen: 23 193.109.137.0/24 maxlen: 24 194.156.176.0/24 maxlen: 24 194.156.178.0/24 maxlen: 24 194.156.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:0c:95:b9:f5:70:66:40:d2:2a:97:00:03:7e:f7:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Dec 12 14:52:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6c010c081b35c621486016b1f8a4d5b62109a6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:11:fa:45:08:2b:9f:b6:e2:1e:e0:24:cb:54: 52:92:ef:89:a8:74:72:2f:36:fb:47:c6:18:ca:41: 93:37:1b:8c:07:f8:e5:5e:8f:3d:25:87:2a:2b:1b: 4a:ae:9c:29:ac:c5:10:bd:68:7d:a1:87:46:99:cf: 2d:96:21:be:95:32:fd:b3:e7:c0:b9:c1:e4:06:4a: 88:f1:09:f4:d9:03:b3:4e:d3:7b:ad:42:22:bb:ae: a9:50:78:c8:db:88:87:0b:ef:de:14:cc:c6:d1:93: f5:5c:17:7f:47:18:0b:7f:da:d4:33:4c:36:1f:d6: 2e:3c:76:b8:ea:8b:ca:1a:ff:0f:61:a6:7a:65:08: e5:c4:df:00:3b:1c:b2:fb:bf:61:e1:da:60:9d:60: 0c:52:e2:43:d2:13:4e:a1:30:1d:cc:43:5a:e4:69: 37:6b:be:5d:92:3c:e9:b1:f7:c1:e2:ee:fd:6d:fa: 31:de:b1:ea:6c:91:8e:65:6e:ea:cd:84:53:1f:2a: e1:5b:24:8f:2c:14:07:d3:00:a9:1c:c5:13:0b:10: 6b:77:be:40:15:ad:04:bc:92:a9:27:ea:cc:b3:e5: 60:46:20:5e:2b:61:03:de:6f:43:27:40:13:68:1c: 00:e1:62:eb:e4:01:39:49:5e:6c:5a:de:c6:06:2b: 0e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:01:0C:08:1B:35:C6:21:48:60:16:B1:F8:A4:D5:B6:21:09:A6:D1 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/bAEMCBs1xiFIYBax-KTVtiEJptE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.54.0/23 193.109.137.0/24 194.156.176.0/24 194.156.178.0/23 Signature Algorithm: sha256WithRSAEncryption 10:4c:55:5a:47:fb:e7:07:c4:de:90:81:31:5e:7d:49:91:fc: 63:b4:91:e1:17:7e:a5:a3:60:1d:df:cc:9d:e6:00:61:5f:05: 16:50:66:91:1d:b4:ec:2a:b8:d7:7b:1d:c4:01:1e:c1:24:be: 0e:92:5f:e6:a9:ed:24:96:e5:82:71:75:96:9a:4e:95:b0:a7: a1:79:7b:d1:a8:c2:ec:01:f9:a8:14:47:16:5b:d0:d2:42:2f: d8:19:ef:21:dd:b4:f6:9b:11:50:d5:f4:77:f3:0e:1e:2c:4d: 1f:11:7d:64:05:f1:1d:9d:6a:59:6a:ff:0f:81:95:e3:29:20: d3:8b:fe:7c:47:f6:30:c9:48:fd:28:85:a8:03:86:c0:9d:35: b6:dc:ae:7c:71:6a:69:f7:38:cf:4b:80:31:a8:53:02:c6:29: 52:a7:78:08:14:c9:81:15:f2:96:31:2d:35:3e:0a:8f:bc:a9: 18:ed:f3:37:38:ec:ad:d8:4d:2b:fd:ed:95:cb:ba:61:eb:50: ee:54:ca:b8:45:94:dd:2c:7f:8f:4a:a0:66:5a:6b:06:72:47: 7c:fe:e4:0f:4d:d5:ed:ad:ef:c2:0b:dd:c4:90:d1:f6:bb:b4: 50:40:3c:b8:f3:1b:ba:74:c6:02:93:cd:f5:81:52:40:0c:18: 9d:64:04:55 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsTDJW59XBmQNIqlwADfvfDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjUxMjEyMTQ1MjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzAxMGMwODFiMzVjNjIxNDg2MDE2YjFmOGE0ZDViNjIxMDlhNmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhH6RQgrn7biHuAky1RSku+JqHRy Lzb7R8YYykGTNxuMB/jlXo89JYcqKxtKrpwprMUQvWh9oYdGmc8tliG+lTL9s+fA ucHkBkqI8Qn02QOzTtN7rUIiu66pUHjI24iHC+/eFMzG0ZP1XBd/RxgLf9rUM0w2 H9YuPHa46ovKGv8PYaZ6ZQjlxN8AOxyy+79h4dpgnWAMUuJD0hNOoTAdzENa5Gk3 a75dkjzpsffB4u79bfox3rHqbJGOZW7qzYRTHyrhWySPLBQH0wCpHMUTCxBrd75A Fa0EvJKpJ+rMs+VgRiBeK2ED3m9DJ0ATaBwA4WLr5AE5SV5sWt7GBisOzwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGwBDAgbNcYhSGAWsfik1bYhCabRMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvYkFFTUNCczF4aUZJWUJheC1LVFZ0aUVKcHRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLYI2AwQA wW2JAwQAwpywAwQBwpyyMA0GCSqGSIb3DQEBCwUAA4IBAQAQTFVaR/vnB8TekIEx Xn1JkfxjtJHhF36lo2Ad38yd5gBhXwUWUGaRHbTsKrjXex3EAR7BJL4Okl/mqe0k luWCcXWWmk6VsKeheXvRqMLsAfmoFEcWW9DSQi/YGe8h3bT2mxFQ1fR38w4eLE0f EX1kBfEdnWpZav8PgZXjKSDTi/58R/YwyUj9KIWoA4bAnTW23K58cWpp9zjPS4Ax qFMCxilSp3gIFMmBFfKWMS01PgqPvKkY7fM3OOyt2E0r/e2Vy7ph61DuVMq4RZTd LH+PSqBmWmsGckd8/uQPTdXtre/CC93EkNH2u7RQQDy48xu6dMYCk831gVJADBid ZARV -----END CERTIFICATE-----Generated at Fri Dec 19 13:46:46 2025 by rpki-client