This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa File: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (raw, json) Hash identifier: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0= Subject key identifier: 04:1F:06:9B:DB:FF:74:37:E1:C9:AF:14:4C:71:8C:C2:81:72:66:C5 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019B797EF9846B954FDA68EB49D03D97BD30 Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa Signing time: Thu 01 Jan 2026 12:18:43 +0000 ROA not before: Thu 01 Jan 2026 12:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396190 IP address blocks: 89.249.193.0/24 maxlen: 24 212.42.193.0/24 maxlen: 24 212.42.194.0/24 maxlen: 24 212.42.200.0/24 maxlen: 24 212.42.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f9:84:6b:95:4f:da:68:eb:49:d0:3d:97:bd:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: Jan 1 12:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=041f069bdbff7437e1c9af144c718cc2817266c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:ec:87:0c:ee:2c:fc:18:59:a7:04:90:1e: c7:dc:18:04:5b:49:8b:f6:11:0c:a3:e5:5e:92:6d: 7e:46:e0:ff:11:f5:bb:1b:b6:ff:75:54:7d:e5:a3: 5f:5d:ab:64:92:a1:b3:ff:b6:ad:e2:6b:4e:51:e5: 49:e1:6c:48:d6:27:94:e3:9e:5f:07:31:91:9e:bc: 3b:5d:71:70:7f:da:42:66:e2:34:53:9d:85:8c:c2: 60:3c:9e:20:ce:e8:76:49:31:fd:84:4c:22:b7:0f: 2a:15:82:b8:c4:93:09:95:52:97:5b:52:e1:8c:58: 43:6b:52:ff:63:1f:4e:90:33:53:16:be:21:68:67: b6:db:f6:9b:b7:85:89:b8:e3:92:71:c1:bc:ee:35: 39:40:c4:2b:ed:64:86:8f:e4:4d:8e:d7:7d:7a:5d: fc:a8:af:27:e5:b0:c8:38:06:de:37:06:c7:b5:4c: ef:be:a3:84:ed:6c:08:23:3e:9e:98:91:c8:48:94: a5:85:cf:ff:a1:a2:bd:40:7e:f4:df:b6:e2:91:87: 6b:9a:9c:11:a6:c4:a2:21:cd:23:6b:0d:e2:f3:a0: b4:6c:78:33:09:5d:79:4e:a4:d4:ee:b4:7d:2f:b2: 49:3d:29:cc:58:b3:f8:b9:63:5a:6f:b5:74:7e:10: ab:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1F:06:9B:DB:FF:74:37:E1:C9:AF:14:4C:71:8C:C2:81:72:66:C5 X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.249.193.0/24 212.42.193.0-212.42.194.255 212.42.200.0/24 212.42.207.0/24 Signature Algorithm: sha256WithRSAEncryption 99:21:21:d3:ab:59:e6:af:85:8c:66:0c:5f:da:c8:46:82:d2: e5:0e:f9:18:b1:0f:1d:63:5d:a2:2a:68:c4:ab:09:39:78:f4: 3a:07:21:92:70:bc:82:45:59:07:0a:f5:e1:23:33:7b:ad:60: ce:8b:ee:5a:e6:b7:84:ce:dd:62:7c:5d:e3:b4:00:da:51:31: 38:53:50:f2:c1:5a:fa:05:cd:15:80:b4:b4:48:33:17:f2:4d: 59:b7:aa:38:85:e0:b2:14:fe:7b:73:66:89:19:2b:48:71:25: a3:4f:83:14:6d:97:ab:d7:c5:ee:33:a3:35:0f:de:ab:ea:59: b2:60:77:0d:a3:a9:7e:3e:7c:3d:c4:c4:cc:2b:91:4a:47:5a: 7a:fb:e1:40:8b:74:87:17:f0:40:db:ed:50:a5:54:79:c8:6f: 88:af:4c:8a:d0:a0:35:1d:9f:49:de:26:5c:5f:dd:b6:84:23: f3:2a:06:44:54:e2:fd:ca:33:6f:36:c5:ab:8f:94:a9:a2:26: 7b:1a:35:5e:01:04:f2:99:b0:ca:ec:7e:07:2c:7b:bc:cb:04: 00:39:d7:10:41:cd:42:30:e2:94:7a:2f:90:23:d1:d9:dc:df: 6a:0d:36:56:82:d2:69:00:b7:93:58:7d:cf:be:92:ae:12:ba: 42:19:60:ad -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt5fvmEa5VP2mjrSdA9l70wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwMTAxMTIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDFmMDY5YmRiZmY3NDM3ZTFjOWFmMTQ0YzcxOGNjMjgxNzI2NmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbjshwzuLPwYWacEkB7H3BgEW0mL 9hEMo+Vekm1+RuD/EfW7G7b/dVR95aNfXatkkqGz/7at4mtOUeVJ4WxI1ieU455f BzGRnrw7XXFwf9pCZuI0U52FjMJgPJ4gzuh2STH9hEwitw8qFYK4xJMJlVKXW1Lh jFhDa1L/Yx9OkDNTFr4haGe22/abt4WJuOOSccG87jU5QMQr7WSGj+RNjtd9el38 qK8n5bDIOAbeNwbHtUzvvqOE7WwIIz6emJHISJSlhc//oaK9QH7037bikYdrmpwR psSiIc0jaw3i86C0bHgzCV15TqTU7rR9L7JJPSnMWLP4uWNab7V0fhCrXQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFAQfBpvb/3Q34cmvFExxjMKBcmbFMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvQkI4R205dl9kRGZoeWE4VVRIR013b0Z5WnNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAWfnBMAwD BADUKsEDBADUKsIDBADUKsgDBADUKs8wDQYJKoZIhvcNAQELBQADggEBAJkhIdOr WeavhYxmDF/ayEaC0uUO+RixDx1jXaIqaMSrCTl49DoHIZJwvIJFWQcK9eEjM3ut YM6L7lrmt4TO3WJ8XeO0ANpRMThTUPLBWvoFzRWAtLRIMxfyTVm3qjiF4LIU/ntz ZokZK0hxJaNPgxRtl6vXxe4zozUP3qvqWbJgdw2jqX4+fD3ExMwrkUpHWnr74UCL dIcX8EDb7VClVHnIb4ivTIrQoDUdn0neJlxf3baEI/MqBkRU4v3KM282xauPlKmi JnsaNV4BBPKZsMrsfgcse7zLBAA51xBBzUIw4pR6L5Aj0dnc32oNNlaC0mkAt5NY fc++kq4SukIZYK0= -----END CERTIFICATE-----Generated at Sat Jan 10 21:05:55 2026 by rpki-client