This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/BrQWQH8--Mj5tZtgVFYfk4W4JwM.roa File: BrQWQH8--Mj5tZtgVFYfk4W4JwM.roa (raw, json) Hash identifier: AziH1ARAI5xj2rqg4kopx2Ube5SH7xatZd+mqQQm67w= Subject key identifier: 06:B4:16:40:7F:3E:F8:C8:F9:B5:9B:60:54:56:1F:93:85:B8:27:03 Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Certificate serial: 019B7F82C647A0447ADEBFF2AA69AB8016DD Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/BrQWQH8--Mj5tZtgVFYfk4W4JwM.roa Signing time: Fri 02 Jan 2026 16:20:35 +0000 ROA not before: Fri 02 Jan 2026 16:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203589 IP address blocks: 194.31.141.0/24 maxlen: 24 2a0b:b81:3600::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 07:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:c6:47:a0:44:7a:de:bf:f2:aa:69:ab:80:16:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034 Validity Not Before: Jan 2 16:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06b416407f3ef8c8f9b59b6054561f9385b82703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:d1:8e:75:87:17:03:bb:f5:d3:ab:70:72: 4f:1d:1b:7f:91:58:f7:55:c0:57:40:de:d0:5a:4f: 30:ae:67:9d:fc:b1:b7:9a:38:e7:14:c1:1d:6c:e8: ab:10:0b:80:f7:4a:15:c8:13:20:68:21:b7:4f:e6: a3:35:45:55:6f:5b:58:a7:ce:21:1e:7d:f1:90:40: 2d:2b:b8:1e:6b:96:89:20:72:87:fd:99:18:dd:26: ed:26:62:37:89:cd:aa:7d:29:4e:42:78:72:7c:5f: 9c:ed:43:9f:f7:d4:f1:25:75:bb:66:4f:7f:6b:87: ed:4f:34:3e:a7:62:73:80:9a:c0:bd:eb:ba:fc:8c: 5d:d4:32:89:c2:d6:fd:ef:28:0a:4c:cd:73:20:03: df:ff:50:16:92:bf:22:55:1b:8a:ca:f2:44:57:ad: 78:8c:29:ff:ab:7c:71:9a:60:c1:a9:7f:10:a8:82: 83:34:47:3d:59:50:23:df:6d:6b:d8:eb:ae:2a:40: e2:fa:40:ac:e6:f5:9f:cf:53:9a:10:6f:15:90:c9: 35:6b:13:4c:26:52:b2:15:ad:d8:f8:d1:83:fd:15: fd:be:9b:80:b1:8d:2c:fc:d1:f1:16:8e:18:ab:7c: 3d:73:8d:0b:af:b4:98:4b:72:83:3d:c4:e2:96:8e: 1b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B4:16:40:7F:3E:F8:C8:F9:B5:9B:60:54:56:1F:93:85:B8:27:03 X509v3 Authority Key Identifier: keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/BrQWQH8--Mj5tZtgVFYfk4W4JwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.31.141.0/24 IPv6: 2a0b:b81:3600::/40 Signature Algorithm: sha256WithRSAEncryption 21:cb:50:46:72:87:e9:87:e8:ca:fa:df:50:a2:ba:bf:0a:13: b4:41:67:4a:57:ce:7c:dd:f7:a5:1f:37:88:7a:88:d0:4a:50: d2:bc:3e:5c:6c:7a:1e:75:5b:d3:93:87:c5:0d:a9:8a:77:5a: 15:a3:3b:c4:ce:40:e4:e6:0b:dc:46:49:21:46:8e:1b:a2:c7: ab:ba:ea:24:74:d1:0b:a1:93:c8:cb:6f:08:b4:70:72:a6:63: e7:13:54:71:0c:2f:b2:35:3d:e4:44:c1:6a:18:7f:9f:f0:a2: 81:e2:a3:52:5e:09:9a:b4:aa:9d:f8:8f:26:8a:6a:d0:cc:cc: 0b:3d:4d:d7:17:b9:2b:8b:02:7b:59:3a:94:54:76:a3:c5:51: ca:dc:e1:3a:9f:12:af:6e:6f:19:a5:ce:b1:28:9a:69:fa:c2: 4f:48:bb:4d:96:4d:97:0e:89:76:4e:a2:07:1c:92:26:4a:04: bf:2b:ac:cc:ab:7f:fd:8c:9d:26:e5:48:c4:cb:c8:32:e6:fa: e1:f1:b5:e7:86:00:da:5e:d3:7b:57:60:5f:3c:7a:77:7b:39: e8:8d:2e:eb:97:5b:aa:41:7c:de:dd:e0:eb:3b:d0:de:5e:d0: 86:57:9a:30:b7:09:7f:14:bc:fa:93:b2:cd:8e:02:52:3a:52: 24:91:86:11 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt/gsZHoER63r/yqmmrgBbdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz YjUwMzQwHhcNMjYwMTAyMTYyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmI0MTY0MDdmM2VmOGM4ZjliNTliNjA1NDU2MWY5Mzg1YjgyNzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorvRjnWHFwO79dOrcHJPHRt/kVj3 VcBXQN7QWk8wrmed/LG3mjjnFMEdbOirEAuA90oVyBMgaCG3T+ajNUVVb1tYp84h Hn3xkEAtK7gea5aJIHKH/ZkY3SbtJmI3ic2qfSlOQnhyfF+c7UOf99TxJXW7Zk9/ a4ftTzQ+p2JzgJrAveu6/Ixd1DKJwtb97ygKTM1zIAPf/1AWkr8iVRuKyvJEV614 jCn/q3xxmmDBqX8QqIKDNEc9WVAj321r2OuuKkDi+kCs5vWfz1OaEG8VkMk1axNM JlKyFa3Y+NGD/RX9vpuAsY0s/NHxFo4Yq3w9c40Lr7SYS3KDPcTilo4bEwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFAa0FkB/PvjI+bWbYFRWH5OFuCcDMB8GA1UdIwQY MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It Mzk0YWNkMjFmMzliLzEvQnJRV1FIOC0tTWo1dFp0Z1ZGWWZrNFc0SndNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAwh+NMA4E AgACMAgDBgAqCwuBNjANBgkqhkiG9w0BAQsFAAOCAQEAIctQRnKH6YfoyvrfUKK6 vwoTtEFnSlfOfN33pR83iHqI0EpQ0rw+XGx6HnVb05OHxQ2pindaFaM7xM5A5OYL 3EZJIUaOG6LHq7rqJHTRC6GTyMtvCLRwcqZj5xNUcQwvsjU95ETBahh/n/CigeKj Ul4JmrSqnfiPJopq0MzMCz1N1xe5K4sCe1k6lFR2o8VRytzhOp8Sr25vGaXOsSia afrCT0i7TZZNlw6Jdk6iBxySJkoEvyuszKt//YydJuVIxMvIMub64fG154YA2l7T e1dgXzx6d3s56I0u65dbqkF83t3g6zvQ3l7QhleaMLcJfxS8+pOyzY4CUjpSJJGG EQ== -----END CERTIFICATE-----Generated at Tue Jan 20 15:21:17 2026 by rpki-client