This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa File: 1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa (raw, json) Hash identifier: 6tyEc5tMWuMh2FkN969E+Sctsk4S0t8ffe4PDGzRuAg= Subject key identifier: F9:BA:42:DD:1F:93:27:30:19:93:1E:D9:DC:9C:35:4A:80:79:29:9F Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a Certificate serial: 019B7FF16E3A3D30DFBCC010112C0A2120C8 Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa Signing time: Fri 02 Jan 2026 18:21:27 +0000 ROA not before: Fri 02 Jan 2026 18:21:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202592 IP address blocks: 45.12.100.0/22 maxlen: 24 185.96.56.0/22 maxlen: 24 185.136.16.0/22 maxlen: 24 2a05:ff00::/29 maxlen: 48 2a07:5b40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:6e:3a:3d:30:df:bc:c0:10:11:2c:0a:21:20:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a Validity Not Before: Jan 2 18:21:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9ba42dd1f93273019931ed9dc9c354a8079299f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d4:8b:13:70:9a:58:9b:bf:c0:2c:80:ac:dd: 16:68:9f:5c:74:c5:d0:2f:a4:86:25:54:cf:25:1a: 6f:8d:d9:d3:9a:6e:f1:5b:99:40:e5:c9:71:05:6d: db:21:c4:c5:28:0a:96:84:d1:00:af:bd:a0:e4:17: bd:9f:02:9a:f9:9d:a0:69:c0:00:6d:a0:5d:e5:d6: 25:85:14:d9:65:fb:08:eb:37:f8:cc:bd:61:94:34: 77:d1:72:ce:c9:ef:11:cd:92:e5:c9:0b:3a:64:e0: ba:7b:86:d8:25:ee:7a:52:4d:ad:31:31:ed:45:87: f4:d4:e7:3d:df:ec:7f:d4:0c:e3:7f:f4:b2:3c:23: 5b:65:dd:37:08:42:ce:5d:26:12:a7:3d:c6:38:60: 7a:60:24:b8:74:c5:67:71:86:d1:88:e2:cd:50:c7: 9d:23:1d:07:29:47:94:38:4a:66:43:f3:1c:4b:f4: 21:21:3f:a9:0f:88:95:fd:b4:46:63:ab:a0:b9:23: 94:7a:90:5a:7a:27:38:5a:41:12:38:bb:4d:6a:d8: cf:a2:73:d1:b3:92:be:e4:5b:e3:c7:45:b4:40:38: e8:86:c9:da:3f:9f:7b:10:52:d7:3f:09:77:87:46: fd:73:c2:b0:01:81:1e:23:14:d9:42:98:99:17:09: ec:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:BA:42:DD:1F:93:27:30:19:93:1E:D9:DC:9C:35:4A:80:79:29:9F X509v3 Authority Key Identifier: keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/1-bpC3R-TJzAZkx7Z3Jw1SoB5KZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.100.0/22 185.96.56.0/22 185.136.16.0/22 IPv6: 2a05:ff00::/29 2a07:5b40::/29 Signature Algorithm: sha256WithRSAEncryption 34:40:28:a3:cd:cd:90:03:df:45:b4:94:44:f9:54:5f:d0:2a: fb:01:81:f5:85:9b:62:6a:bb:a9:5d:02:0d:4d:06:ec:a0:bb: 04:5f:f9:0b:01:78:05:d5:6e:0f:0d:18:80:0e:fc:27:25:0e: ce:f0:a8:8a:2f:09:d4:29:a3:08:5d:7f:8e:e6:6e:0c:b5:04: 90:c6:4a:9c:b0:85:43:28:92:3d:6a:06:f3:6e:41:a6:aa:2f: 64:79:ab:e0:ea:45:22:fd:44:27:db:22:b9:d9:87:6c:4d:fd: 20:b3:52:c4:9e:17:51:58:fb:c0:95:fb:10:1f:5c:4a:5d:7b: 63:94:80:3f:9c:28:99:d3:ad:17:ee:fd:24:a5:e9:1f:b8:e9: ac:54:4d:68:07:fb:7b:ba:2a:4a:a3:ca:c2:9b:f6:37:a2:01: 50:62:f2:fc:21:43:7d:5f:99:39:4d:62:c3:34:db:ef:eb:97: ef:35:b6:5f:19:34:8f:e8:7d:5f:b9:0c:a4:75:76:ab:25:e1: 20:63:4d:3c:f0:2d:76:41:5e:36:bf:5c:fd:a0:49:49:2d:2f: e9:57:87:33:00:94:c0:70:a2:8f:93:8a:37:f4:90:66:31:cb: 5e:8c:ee:16:c9:fc:a8:4a:53:2e:82:ae:e2:46:54:da:27:16: 56:e6:f6:e6 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt/8W46PTDfvMAQESwKISDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk ZjM1NGEwHhcNMjYwMTAyMTgyMTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWJhNDJkZDFmOTMyNzMwMTk5MzFlZDlkYzljMzU0YTgwNzkyOTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9SLE3CaWJu/wCyArN0WaJ9cdMXQ L6SGJVTPJRpvjdnTmm7xW5lA5clxBW3bIcTFKAqWhNEAr72g5Be9nwKa+Z2gacAA baBd5dYlhRTZZfsI6zf4zL1hlDR30XLOye8RzZLlyQs6ZOC6e4bYJe56Uk2tMTHt RYf01Oc93+x/1Azjf/SyPCNbZd03CELOXSYSpz3GOGB6YCS4dMVncYbRiOLNUMed Ix0HKUeUOEpmQ/McS/QhIT+pD4iV/bRGY6uguSOUepBaeic4WkESOLtNatjPonPR s5K+5Fvjx0W0QDjohsnaP597EFLXPwl3h0b9c8KwAYEeIxTZQpiZFwnsxwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFPm6Qt0fkycwGZMe2dycNUqAeSmfMB8GA1UdIwQY MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt MjBlMTk3ODBjYjJlLzEvMS1icEMzUi1USnpBWmt4N1ozSncxU29CNUtaOC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTkvZmViZWY4LWEwZWEtNGM3ZS04ODA2LTIwZTE5NzgwY2Iy ZS8xLzBJMnB6d0RVMVl1RlRfeGlBUThqV3diZk5Vby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBBBggrBgEFBQcBBwEB/wQyMDAwGAQCAAEwEgMEAi0MZAME ArlgOAMEArmIEDAUBAIAAjAOAwUDKgX/AAMFAyoHW0AwDQYJKoZIhvcNAQELBQAD ggEBADRAKKPNzZAD30W0lET5VF/QKvsBgfWFm2Jqu6ldAg1NBuyguwRf+QsBeAXV bg8NGIAO/CclDs7wqIovCdQpowhdf47mbgy1BJDGSpywhUMokj1qBvNuQaaqL2R5 q+DqRSL9RCfbIrnZh2xN/SCzUsSeF1FY+8CV+xAfXEpde2OUgD+cKJnTrRfu/SSl 6R+46axUTWgH+3u6KkqjysKb9jeiAVBi8vwhQ31fmTlNYsM02+/rl+81tl8ZNI/o fV+5DKR1dqsl4SBjTTzwLXZBXja/XP2gSUktL+lXhzMAlMBwoo+Tijf0kGYxy16M 7hbJ/KhKUy6CruJGVNonFlbm9uY= -----END CERTIFICATE-----Generated at Mon Jan 19 14:43:30 2026 by rpki-client