This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa File: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (raw, json) Hash identifier: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs= Subject key identifier: 05:AD:61:C5:17:C7:FA:4E:DC:78:7D:28:1C:FA:B5:55:50:6C:A7:A4 Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3 Certificate serial: 019B7A59F5EE65D00ADBB9E2AE252546D3BB Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa Signing time: Thu 01 Jan 2026 16:17:54 +0000 ROA not before: Thu 01 Jan 2026 16:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 185.248.28.0/22 maxlen: 24 195.189.245.0/24 maxlen: 24 2a0d:dd80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:59:f5:ee:65:d0:0a:db:b9:e2:ae:25:25:46:d3:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3 Validity Not Before: Jan 1 16:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05ad61c517c7fa4edc787d281cfab555506ca7a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:57:c4:fe:76:d7:ad:94:55:b6:77:93:10:b4: 5e:70:00:a4:93:22:93:c4:75:41:d7:98:6b:09:dc: a3:3a:20:1f:05:b7:fa:2e:c8:5b:9e:3b:2e:d9:8a: a5:e0:e6:6c:ba:0d:b2:8c:ea:fa:6c:a4:94:38:03: fc:09:76:ef:36:b0:0e:34:e0:99:0c:e9:30:d0:aa: 6d:83:51:08:01:5c:4e:d0:4d:9f:e6:72:5e:77:11: 44:24:c9:87:46:a1:80:5a:5e:d8:e2:d9:d0:ef:5e: 1f:3c:1e:3f:93:5a:1f:55:8d:f4:1a:a8:f7:95:36: be:13:13:48:bf:cf:38:ab:16:54:97:c1:62:e8:52: b0:c9:de:94:10:41:ff:a4:65:05:2c:a3:e7:da:c1: 1a:05:9f:68:d4:90:bf:29:30:b6:f0:55:b3:cf:2b: 27:19:86:57:c5:93:1f:7e:8c:a8:e6:ae:4a:45:b7: fc:83:64:06:b2:03:2f:55:8d:0f:4f:a3:9f:d8:42: 10:37:3f:86:0a:f7:85:7a:43:25:c5:0f:b0:43:30: 20:77:8d:23:80:cf:7d:43:35:78:be:3d:83:36:9b: 35:af:8a:9c:69:36:21:9d:be:b3:18:95:3e:cc:6c: 2f:95:69:c7:39:f5:66:b0:c8:29:36:63:a9:88:71: ea:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AD:61:C5:17:C7:FA:4E:DC:78:7D:28:1C:FA:B5:55:50:6C:A7:A4 X509v3 Authority Key Identifier: keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.248.28.0/22 195.189.245.0/24 IPv6: 2a0d:dd80::/29 Signature Algorithm: sha256WithRSAEncryption 66:cd:f6:96:0a:2a:54:4d:26:71:d0:b3:79:1b:bd:e1:da:c6: 87:09:c8:00:13:1c:76:d8:5e:b5:36:e5:2b:7a:e2:c0:4a:a9: 11:d6:69:96:be:88:90:91:ae:43:da:60:d1:80:81:75:2d:07: bd:90:a6:63:06:1c:8d:ad:2d:ac:db:99:10:cc:9c:1b:a0:fe: 02:23:bc:93:39:e9:8d:a9:bf:06:12:a8:a3:df:55:d5:a9:23: 82:35:52:64:1c:4f:47:06:54:b2:f1:e8:f2:c2:8a:80:ab:21: 78:0f:fb:73:04:d5:d6:9c:92:01:13:d9:df:8c:7f:2f:68:6b: 19:85:67:b0:8a:a5:56:e0:1b:50:08:60:3c:81:27:16:e9:12: e3:ba:1a:c9:9f:9f:ec:fa:da:21:bc:b5:9b:03:cd:bb:c0:ae: 65:5b:99:3f:97:36:52:ed:2f:41:52:09:e7:6c:e7:14:bc:01: 50:40:4e:73:b5:a5:27:58:71:e6:40:7c:ad:07:31:e4:84:3d: a9:cb:d2:31:0a:fb:8b:93:ba:8b:ed:da:cb:c8:56:2a:22:3d: 15:20:69:58:4d:27:8a:83:44:86:42:a0:c4:64:b0:8e:58:0e: 8a:94:b9:74:6f:de:1a:9d:da:41:97:cf:33:fa:f4:52:8e:5e: 82:af:8a:e6 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WfXuZdAK27niriUlRtO7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNDczMTg4NGJhMGY1NzNmYTYxOGI2ZTdhZDUwM2ExMmM5 NjVhZjMwHhcNMjYwMTAxMTYxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWFkNjFjNTE3YzdmYTRlZGM3ODdkMjgxY2ZhYjU1NTUwNmNhN2E0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFfE/nbXrZRVtneTELRecACkkyKT xHVB15hrCdyjOiAfBbf6Lshbnjsu2Yql4OZsug2yjOr6bKSUOAP8CXbvNrAONOCZ DOkw0Kptg1EIAVxO0E2f5nJedxFEJMmHRqGAWl7Y4tnQ714fPB4/k1ofVY30Gqj3 lTa+ExNIv884qxZUl8Fi6FKwyd6UEEH/pGUFLKPn2sEaBZ9o1JC/KTC28FWzzysn GYZXxZMffoyo5q5KRbf8g2QGsgMvVY0PT6Of2EIQNz+GCveFekMlxQ+wQzAgd40j gM99QzV4vj2DNps1r4qcaTYhnb6zGJU+zGwvlWnHOfVmsMgpNmOpiHHqYwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAWtYcUXx/pO3Hh9KBz6tVVQbKekMB8GA1UdIwQY MBaAFLtHMYhLoPVz+mGLbnrVA6EsllrzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYt ODM1YTU4NDJiOTRjLzEvQmExaHhSZkgtazdjZUgwb0hQcTFWVkJzcDZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jMjEyYTItMzdlOS00YWQ2LWJiZTYtODM1YTU4NDJiOTRj LzEvdTBjeGlFdWc5WFA2WVl0dWV0VURvU3lXV3ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCufgcAwQA w731MA0EAgACMAcDBQMqDd2AMA0GCSqGSIb3DQEBCwUAA4IBAQBmzfaWCipUTSZx 0LN5G73h2saHCcgAExx22F61NuUreuLASqkR1mmWvoiQka5D2mDRgIF1LQe9kKZj BhyNrS2s25kQzJwboP4CI7yTOemNqb8GEqij31XVqSOCNVJkHE9HBlSy8ejywoqA qyF4D/tzBNXWnJIBE9nfjH8vaGsZhWewiqVW4BtQCGA8gScW6RLjuhrJn5/s+toh vLWbA827wK5lW5k/lzZS7S9BUgnnbOcUvAFQQE5ztaUnWHHmQHytBzHkhD2py9Ix CvuLk7qL7drLyFYqIj0VIGlYTSeKg0SGQqDEZLCOWA6KlLl0b94andpBl88z+vRS jl6Cr4rm -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:26 2026 by rpki-client