This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/b1Xcvdr0537m5Ydq7PIENSWNEQA.roa File: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (raw, json) Hash identifier: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw= Subject key identifier: 6F:55:DC:BD:DA:F4:E7:7E:E6:E5:87:6A:EC:F2:04:35:25:8D:11:00 Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019B7E38B620400F7B0BB470554B9E325ECD Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/b1Xcvdr0537m5Ydq7PIENSWNEQA.roa Signing time: Fri 02 Jan 2026 10:20:04 +0000 ROA not before: Fri 02 Jan 2026 10:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 262287 IP address blocks: 193.111.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:b6:20:40:0f:7b:0b:b4:70:55:4b:9e:32:5e:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jan 2 10:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f55dcbddaf4e77ee6e5876aecf20435258d1100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6d:29:e2:9b:35:f6:be:e0:eb:40:b1:ce:4e: 10:64:7f:65:66:fc:87:92:b9:38:2d:d6:55:e1:85: ba:df:f3:b8:96:fa:b4:ae:ed:75:97:df:5b:38:7e: 99:c8:31:85:8b:2b:ca:50:b6:c3:ff:37:c5:9e:01: b6:91:5d:08:e2:4c:31:e4:e9:11:2a:b1:87:6d:13: 10:12:bf:9e:ec:e2:bd:9d:51:bc:7e:d3:39:f5:f0: 80:21:29:a8:d4:c3:55:4e:a8:95:a0:cb:47:6c:61: 5a:c3:4b:76:5c:c3:ad:0a:22:8f:1f:ce:e4:6b:fc: 7f:a4:4a:43:31:2c:c6:b8:39:d7:7b:09:85:0b:36: 53:51:f3:cd:22:bb:a4:24:d8:44:67:86:3a:01:4a: be:ae:6f:05:4b:69:bf:6a:a1:7f:ca:e6:8f:e4:ad: b5:09:01:0a:db:82:09:34:9b:1d:53:88:4b:6a:75: 29:de:e2:04:a0:b4:c3:ea:b3:90:23:58:09:5c:f7: c9:ee:4e:df:5f:68:cb:3c:58:93:b0:e8:0c:59:0d: 7e:48:6d:c3:40:9c:98:96:54:d4:d8:56:e5:00:81: d7:d8:c9:a4:84:ad:d6:7d:f0:52:ed:89:eb:3a:b0: 6e:2d:42:cb:ce:c7:89:e2:9f:e6:56:c2:61:ac:fd: fb:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:55:DC:BD:DA:F4:E7:7E:E6:E5:87:6A:EC:F2:04:35:25:8D:11:00 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/b1Xcvdr0537m5Ydq7PIENSWNEQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.184.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:14:42:5f:65:67:ba:9c:c8:6c:87:97:77:e7:51:1b:28:bc: 51:07:0c:fb:21:51:03:0a:08:ee:9d:9f:c1:c8:b5:3e:16:35: 23:e2:2a:65:77:44:87:62:01:c7:81:98:c6:11:1c:71:de:a6: b8:d8:05:2b:4c:1d:56:cf:0f:3a:a6:94:31:5e:04:b1:27:a6: e8:03:08:40:15:1c:4e:4c:ee:37:1f:50:fe:a9:e0:ac:aa:df: f2:3d:0b:79:e9:ef:cd:e0:6e:dd:71:f5:e2:81:4f:b2:59:5d: b0:a6:58:37:52:83:b5:eb:8d:cd:54:73:40:7a:6f:69:0e:2e: b4:c6:b2:9d:4c:de:a0:7b:79:5a:11:8c:1a:38:55:ea:65:c7: 64:e3:ca:9c:fc:17:cc:29:af:ac:5b:58:75:99:06:38:fc:7f: 08:51:a8:49:48:34:92:5e:6c:2b:73:66:87:dc:9c:b5:db:64: 9b:cf:5b:17:57:e3:8f:c7:a8:8e:12:f0:32:c0:76:be:4d:77: f4:5d:64:fa:9d:be:5e:96:43:4c:ec:35:9c:41:10:8b:41:81: 84:e6:3f:2b:0d:02:48:3d:c3:b5:5b:d6:7a:6a:40:b3:3b:9d: a8:6f:7f:e2:dc:0f:75:84:89:30:f9:d1:81:65:ec:55:b9:bb: 57:83:14:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OLYgQA97C7RwVUueMl7NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwMTAyMTAyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjU1ZGNiZGRhZjRlNzdlZTZlNTg3NmFlY2YyMDQzNTI1OGQxMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom0p4ps19r7g60Cxzk4QZH9lZvyH krk4LdZV4YW63/O4lvq0ru11l99bOH6ZyDGFiyvKULbD/zfFngG2kV0I4kwx5OkR KrGHbRMQEr+e7OK9nVG8ftM59fCAISmo1MNVTqiVoMtHbGFaw0t2XMOtCiKPH87k a/x/pEpDMSzGuDnXewmFCzZTUfPNIrukJNhEZ4Y6AUq+rm8FS2m/aqF/yuaP5K21 CQEK24IJNJsdU4hLanUp3uIEoLTD6rOQI1gJXPfJ7k7fX2jLPFiTsOgMWQ1+SG3D QJyYllTU2FblAIHX2MmkhK3WffBS7YnrOrBuLULLzseJ4p/mVsJhrP37kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9V3L3a9Od+5uWHauzyBDUljREAMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvYjFYY3ZkcjA1MzdtNVlkcTdQSUVOU1dORVFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW+4MA0G CSqGSIb3DQEBCwUAA4IBAQA8FEJfZWe6nMhsh5d351EbKLxRBwz7IVEDCgjunZ/B yLU+FjUj4ipld0SHYgHHgZjGERxx3qa42AUrTB1Wzw86ppQxXgSxJ6boAwhAFRxO TO43H1D+qeCsqt/yPQt56e/N4G7dcfXigU+yWV2wplg3UoO1643NVHNAem9pDi60 xrKdTN6ge3laEYwaOFXqZcdk48qc/BfMKa+sW1h1mQY4/H8IUahJSDSSXmwrc2aH 3Jy122Sbz1sXV+OPx6iOEvAywHa+TXf0XWT6nb5elkNM7DWcQRCLQYGE5j8rDQJI PcO1W9Z6akCzO52ob3/i3A91hIkw+dGBZexVubtXgxQQ -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:17 2026 by rpki-client