This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Z_bau-Rc4aDrVcMzzBRBYK8JB_A.roa File: Z_bau-Rc4aDrVcMzzBRBYK8JB_A.roa (raw, json) Hash identifier: n5UC1YNyDeo3tOwMdR9naxOihPnec2k4aw6qmGkEy5Q= Subject key identifier: 67:F6:DA:BB:E4:5C:E1:A0:EB:55:C3:33:CC:14:41:60:AF:09:07:F0 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E382998DAB22030218057C017F67BF2 Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Z_bau-Rc4aDrVcMzzBRBYK8JB_A.roa Signing time: Fri 02 Jan 2026 10:19:28 +0000 ROA not before: Fri 02 Jan 2026 10:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 5.188.232.0/24 maxlen: 24 46.161.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:29:98:da:b2:20:30:21:80:57:c0:17:f6:7b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67f6dabbe45ce1a0eb55c333cc144160af0907f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:ad:23:1c:76:4c:5c:f9:b3:6e:37:f7:d9: aa:c8:bf:10:dc:4c:2d:1b:f8:6c:ca:17:7d:1d:62: 7a:ac:b1:c4:2b:51:ba:83:ef:ca:11:7a:ce:9c:c8: 50:65:f1:07:75:d4:f0:04:c2:2d:fa:e7:36:4a:1d: 3a:79:aa:e8:0a:86:32:3c:c5:07:43:90:4e:88:1b: 4a:ae:dc:93:a9:d0:8b:3a:29:a3:76:3a:5a:0e:88: 42:7e:21:69:86:7e:af:cf:48:02:03:18:81:f4:24: a0:93:87:4a:55:ba:1e:bb:48:1c:b2:3f:3f:d8:af: 79:1f:4f:2f:f4:7b:ee:6f:5f:b1:cd:01:fd:de:5d: 2b:44:28:01:34:b0:29:97:47:f7:04:3e:31:a0:e9: e0:7a:b4:33:63:1f:30:3b:4d:60:81:07:1b:61:97: d1:d5:63:f8:f4:8f:8c:83:5b:1a:ed:93:da:ba:97: fc:5a:15:a5:3f:a8:fe:d0:65:b7:dc:ab:49:2a:75: c6:31:7b:98:61:a3:61:21:34:72:f0:0c:51:ba:8a: d9:a8:08:99:a4:af:f8:6f:35:f9:ec:7b:ae:02:3e: f7:e1:3e:9c:5e:01:59:60:33:16:d9:9e:5f:3d:1c: ef:6c:29:3c:2c:41:5d:9e:18:b4:df:03:eb:b8:bd: fd:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F6:DA:BB:E4:5C:E1:A0:EB:55:C3:33:CC:14:41:60:AF:09:07:F0 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/Z_bau-Rc4aDrVcMzzBRBYK8JB_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.188.232.0/24 46.161.40.0/24 Signature Algorithm: sha256WithRSAEncryption 48:bd:67:0d:03:26:96:84:63:98:f3:2d:e1:11:d0:eb:bf:99: a2:0c:7c:a7:e1:6e:1b:d5:57:07:98:d9:8d:fe:95:aa:5e:29: 32:bb:8e:84:b1:11:a8:9a:b1:6c:72:84:0d:89:66:c8:df:ec: 75:47:09:6b:8c:3e:db:b8:b2:f6:ea:54:e1:fb:7a:42:9c:63: 36:ff:e0:98:4a:0a:12:89:7d:95:95:d9:5c:5a:ec:c5:7f:26: d1:87:fe:ed:4d:9a:4d:19:e6:40:80:26:81:5b:63:c8:75:87: 5f:1f:4e:30:06:67:fd:a8:13:36:b3:53:b9:f3:63:48:6e:b3: 43:f1:b8:36:20:ef:d8:8c:ba:09:da:32:8d:66:b2:9f:69:bb: 90:73:8e:eb:e6:a4:7d:23:93:f6:b5:41:27:71:b8:3f:b3:5e: 7d:11:2b:81:71:61:60:83:d4:7c:85:ee:76:cc:12:3d:74:09: b8:48:6c:da:2a:13:34:1c:e7:e5:19:75:1c:6f:1f:ee:c9:3a: 31:2f:1d:ab:02:d9:28:9a:33:b2:84:53:ca:75:33:26:df:1b: 0e:72:04:4a:77:a7:aa:f7:be:69:db:cb:04:c0:5d:02:2f:35: 2d:bf:e9:51:3d:5a:29:20:bf:e2:1b:7a:e6:33:79:fa:b3:2b: f4:5c:a6:8d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OCmY2rIgMCGAV8AX9nvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2Y2ZGFiYmU0NWNlMWEwZWI1NWMzMzNjYzE0NDE2MGFmMDkwN2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjatIxx2TFz5s24399mqyL8Q3Ewt G/hsyhd9HWJ6rLHEK1G6g+/KEXrOnMhQZfEHddTwBMIt+uc2Sh06earoCoYyPMUH Q5BOiBtKrtyTqdCLOimjdjpaDohCfiFphn6vz0gCAxiB9CSgk4dKVboeu0gcsj8/ 2K95H08v9Hvub1+xzQH93l0rRCgBNLApl0f3BD4xoOngerQzYx8wO01ggQcbYZfR 1WP49I+Mg1sa7ZPaupf8WhWlP6j+0GW33KtJKnXGMXuYYaNhITRy8AxRuorZqAiZ pK/4bzX57HuuAj734T6cXgFZYDMW2Z5fPRzvbCk8LEFdnhi03wPruL39IwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGf22rvkXOGg61XDM8wUQWCvCQfwMB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvWl9iYXUtUmM0YURyVmNNenpCUkJZSzhKQl9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbzoAwQA LqEoMA0GCSqGSIb3DQEBCwUAA4IBAQBIvWcNAyaWhGOY8y3hEdDrv5miDHyn4W4b 1VcHmNmN/pWqXikyu46EsRGomrFscoQNiWbI3+x1RwlrjD7buLL26lTh+3pCnGM2 /+CYSgoSiX2VldlcWuzFfybRh/7tTZpNGeZAgCaBW2PIdYdfH04wBmf9qBM2s1O5 82NIbrND8bg2IO/YjLoJ2jKNZrKfabuQc47r5qR9I5P2tUEncbg/s159ESuBcWFg g9R8he52zBI9dAm4SGzaKhM0HOflGXUcbx/uyToxLx2rAtkomjOyhFPKdTMm3xsO cgRKd6eq975p28sEwF0CLzUtv+lRPVopIL/iG3rmM3n6syv0XKaN -----END CERTIFICATE-----Generated at Tue Jan 20 09:20:28 2026 by rpki-client