This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BSYUr9nK-7FhGks8SeUaWC4vM3c.roa File: BSYUr9nK-7FhGks8SeUaWC4vM3c.roa (raw, json) Hash identifier: zHwKFGB2Hs2twHUr4BI1erLASgypQFM2ar2keKpl7tg= Subject key identifier: 05:26:14:AF:D9:CA:FB:B1:61:1A:4B:3C:49:E5:1A:58:2E:2F:33:77 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15EA9972ABE4300FF6C4B069B2E310 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BSYUr9nK-7FhGks8SeUaWC4vM3c.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200063 IP address blocks: 194.15.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ea:99:72:ab:e4:30:0f:f6:c4:b0:69:b2:e3:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=052614afd9cafbb1611a4b3c49e51a582e2f3377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:2b:84:dd:95:7b:f9:90:06:41:09:1a:6a:f2: 4d:7e:31:de:5f:63:22:a9:d0:23:27:4d:4e:74:17: 99:9b:f1:74:26:b2:f2:15:77:b0:2b:19:64:70:ca: 6d:26:11:4c:a7:3a:09:ac:8d:40:44:df:d8:7f:59: 46:b7:05:cb:b7:11:b4:6d:b2:13:0f:b0:9d:f9:b5: e3:9a:41:7e:aa:a5:16:50:47:c3:d8:a6:c8:75:ac: 3f:ac:c2:a2:ee:3e:9b:ef:fd:5d:f1:63:55:84:d0: 1e:eb:45:8c:ed:91:57:5e:97:d5:54:8d:b2:4d:19: 89:65:f0:ef:51:e3:86:f8:10:2e:54:01:f3:d2:fa: 4a:a7:65:b5:3e:7b:1e:d5:70:0b:6b:d8:f4:cf:be: c1:d3:2f:26:d0:64:6a:32:c8:3a:0a:3b:21:20:f1: 9d:3f:b8:b7:01:0a:e1:31:06:f8:ea:c7:d6:c6:40: a9:fb:98:c6:08:50:88:1a:6f:6a:54:ee:f4:4c:08: c9:cd:bd:bb:af:43:94:e3:59:f3:a3:61:0a:ef:72: 84:85:f2:96:9a:7b:88:02:8d:a6:88:cf:e0:b8:a2: 86:47:73:d9:dd:9e:f0:ef:c9:3c:20:6b:51:3c:11: 7a:0e:e0:e5:04:93:7d:67:2c:a0:c6:31:8e:fa:df: c2:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:26:14:AF:D9:CA:FB:B1:61:1A:4B:3C:49:E5:1A:58:2E:2F:33:77 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/BSYUr9nK-7FhGks8SeUaWC4vM3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.53.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:16:37:26:f6:8a:57:39:a1:60:fe:b5:5d:d0:60:cb:3b:94: 75:ed:fa:73:67:27:e8:ff:5e:0e:43:0d:b7:6e:d0:bb:1a:1e: db:1f:8c:10:da:15:1d:1d:56:5a:8c:6f:4e:23:85:df:a1:7c: c7:5f:03:d0:75:1e:04:5d:8e:f3:0f:1b:3f:b9:8d:45:b5:fe: 18:7e:34:7a:d9:b1:7d:cd:ef:7c:53:11:19:a4:f8:9c:80:12: ce:27:26:03:d8:82:b3:5c:23:6a:0c:00:f8:f5:9d:d5:f0:14: 48:f7:5c:5c:84:fb:7a:da:0b:dc:04:e5:56:72:93:e6:0a:ce: 2f:92:b1:2f:90:8c:48:e0:30:e7:ab:ff:1e:f5:c4:1b:10:c9: 36:06:d7:2e:69:29:ab:d3:8f:11:23:01:ca:6a:2c:2b:bf:d7: 6b:9c:a5:d5:4b:77:94:87:ec:04:93:e2:00:b2:14:2c:21:0d: 3b:5b:b6:b3:fe:9a:1d:38:9e:66:02:f7:1c:ae:0e:5d:f2:a5: a2:c6:1d:ca:7d:37:3b:98:75:ac:c6:d9:77:1b:d2:7a:45:2e: ee:8e:53:e2:63:6f:a4:1e:8c:a3:3f:f1:3b:9c:8b:62:04:9d: c7:b7:fc:ef:14:6c:47:b1:0e:28:3c:fb:0c:ae:3b:d8:8a:62: 2e:a0:27:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeqZcqvkMA/2xLBpsuMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTI2MTRhZmQ5Y2FmYmIxNjExYTRiM2M0OWU1MWE1ODJlMmYzMzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyuE3ZV7+ZAGQQkaavJNfjHeX2Mi qdAjJ01OdBeZm/F0JrLyFXewKxlkcMptJhFMpzoJrI1ARN/Yf1lGtwXLtxG0bbIT D7Cd+bXjmkF+qqUWUEfD2KbIdaw/rMKi7j6b7/1d8WNVhNAe60WM7ZFXXpfVVI2y TRmJZfDvUeOG+BAuVAHz0vpKp2W1Pnse1XALa9j0z77B0y8m0GRqMsg6CjshIPGd P7i3AQrhMQb46sfWxkCp+5jGCFCIGm9qVO70TAjJzb27r0OU41nzo2EK73KEhfKW mnuIAo2miM/guKKGR3PZ3Z7w78k8IGtRPBF6DuDlBJN9ZyygxjGO+t/CDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUmFK/ZyvuxYRpLPEnlGlguLzN3MB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvQlNZVXI5bkstN0ZoR2tzOFNlVWFXQzR2TTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg81MA0G CSqGSIb3DQEBCwUAA4IBAQB6Fjcm9opXOaFg/rVd0GDLO5R17fpzZyfo/14OQw23 btC7Gh7bH4wQ2hUdHVZajG9OI4XfoXzHXwPQdR4EXY7zDxs/uY1Ftf4YfjR62bF9 ze98UxEZpPicgBLOJyYD2IKzXCNqDAD49Z3V8BRI91xchPt62gvcBOVWcpPmCs4v krEvkIxI4DDnq/8e9cQbEMk2BtcuaSmr048RIwHKaiwrv9drnKXVS3eUh+wEk+IA shQsIQ07W7az/podOJ5mAvccrg5d8qWixh3KfTc7mHWsxtl3G9J6RS7ujlPiY2+k HoyjP/E7nItiBJ3Ht/zvFGxHsQ4oPPsMrjvYimIuoCdA -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:32 2026 by rpki-client