This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/bTookxgPSxSd_gnM8XNiIJ3mpr8.roa File: bTookxgPSxSd_gnM8XNiIJ3mpr8.roa (raw, json) Hash identifier: qaTVa3H72kXabxQBE9N2TN7e2tyXH6RWDJSNci8VjEs= Subject key identifier: 6D:3A:28:93:18:0F:4B:14:9D:FE:09:CC:F1:73:62:20:9D:E6:A6:BF Certificate issuer: /CN=ba9d30e6035be8b8386061f271481c707e04ce2b Certificate serial: 019B76EB8523BB6F760767DB20D16AA1612E Authority key identifier: BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/bTookxgPSxSd_gnM8XNiIJ3mpr8.roa Signing time: Thu 01 Jan 2026 00:18:25 +0000 ROA not before: Thu 01 Jan 2026 00:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51206 IP address blocks: 92.45.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.mft rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:85:23:bb:6f:76:07:67:db:20:d1:6a:a1:61:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba9d30e6035be8b8386061f271481c707e04ce2b Validity Not Before: Jan 1 00:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d3a2893180f4b149dfe09ccf17362209de6a6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:94:8f:00:42:4d:3d:b5:23:4c:5f:6c:b5:b5: ad:c7:f0:93:c5:91:8e:2d:9d:00:1a:b8:bf:ba:b0: 9f:a8:5f:5c:37:6e:bf:40:68:76:53:07:37:ff:f3: 1d:7b:82:63:7c:bc:63:ff:3a:97:24:aa:2e:d6:1a: bb:56:fe:a8:be:93:07:c4:3b:9e:10:a3:e8:d4:45: d2:58:30:4e:cf:b2:1a:2c:82:77:ce:44:bc:e8:82: 01:76:1f:42:3f:aa:68:f4:1d:67:ec:51:bd:ed:02: 9c:dd:67:78:ba:4e:e0:13:f4:14:da:78:54:1b:f8: 23:a1:5a:23:47:ce:24:03:fb:95:0c:cb:e4:4f:94: 3c:8d:d5:8b:32:42:0d:e6:70:3c:6a:1a:77:4c:e2: a7:5e:32:73:60:de:93:83:9c:75:e2:87:bd:0e:88: 9e:dc:26:8a:4e:44:a2:48:1a:c0:2b:b5:62:8f:95: 48:b7:e5:1d:6c:9a:00:d6:c5:7e:1b:7d:1c:fe:cb: 37:5a:63:b2:ae:69:42:f6:66:9b:dc:1b:0a:09:61: 6d:91:78:54:ca:13:97:0c:6b:9d:7e:a4:ff:d5:6f: 13:85:6c:e3:ce:60:88:4e:c1:bf:10:97:ff:1a:79: e7:3d:98:56:37:d2:a0:27:13:7b:93:e0:66:71:10: 37:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:3A:28:93:18:0F:4B:14:9D:FE:09:CC:F1:73:62:20:9D:E6:A6:BF X509v3 Authority Key Identifier: keyid:BA:9D:30:E6:03:5B:E8:B8:38:60:61:F2:71:48:1C:70:7E:04:CE:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/up0w5gNb6Lg4YGHycUgccH4Ezis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/bTookxgPSxSd_gnM8XNiIJ3mpr8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ac9c32-7dbc-4d6c-bc08-5d584fbc5d27/1/up0w5gNb6Lg4YGHycUgccH4Ezis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.45.3.0/24 Signature Algorithm: sha256WithRSAEncryption 87:b8:ed:19:3e:24:fd:cf:5f:a0:cc:8d:27:c3:c4:85:b1:fa: f5:70:d3:7f:fa:3c:87:fb:48:51:3b:71:6e:de:81:11:68:80: 08:4f:5a:37:cd:51:ee:90:65:9e:fb:9d:89:7a:1d:ae:c7:23: 5b:a9:5f:4d:8f:39:ed:6c:89:17:fc:7f:a0:de:5a:a6:3d:bd: a0:f1:29:c1:1b:cf:ba:81:79:2f:22:df:b7:97:c4:e5:9f:a6: b9:a0:8a:2d:e6:52:f1:fc:61:4d:75:f8:59:9f:ad:83:95:70: 57:1d:21:25:b6:8c:f9:8f:38:7b:49:71:41:c9:71:7f:7a:df: 75:5f:0b:a4:2a:26:b6:4b:b2:fb:fb:8d:07:21:84:09:1d:d2: e3:e8:ae:db:6d:fe:67:4a:ac:7f:03:30:d6:d9:83:ee:2c:97: 58:77:53:49:14:32:de:59:2b:b7:af:ac:2c:0c:46:35:f2:df: 05:4f:61:ac:1b:b4:48:96:7f:bd:a2:fe:73:61:40:61:25:a1: cf:d5:aa:b1:ec:24:31:fd:50:87:24:3a:bb:0d:4f:e2:15:82: 6c:f4:3d:b2:ff:01:2f:d5:08:8d:d2:c1:8c:36:95:3d:c2:61: 5b:9d:db:9a:f1:b2:ee:96:8b:89:d8:a3:35:e2:ac:bc:91:37: 94:7e:04:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt264Uju292B2fbINFqoWEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhOWQzMGU2MDM1YmU4YjgzODYwNjFmMjcxNDgxYzcwN2Uw NGNlMmIwHhcNMjYwMTAxMDAxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDNhMjg5MzE4MGY0YjE0OWRmZTA5Y2NmMTczNjIyMDlkZTZhNmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5SPAEJNPbUjTF9stbWtx/CTxZGO LZ0AGri/urCfqF9cN26/QGh2Uwc3//Mde4JjfLxj/zqXJKou1hq7Vv6ovpMHxDue EKPo1EXSWDBOz7IaLIJ3zkS86IIBdh9CP6po9B1n7FG97QKc3Wd4uk7gE/QU2nhU G/gjoVojR84kA/uVDMvkT5Q8jdWLMkIN5nA8ahp3TOKnXjJzYN6Tg5x14oe9Doie 3CaKTkSiSBrAK7Vij5VIt+UdbJoA1sV+G30c/ss3WmOyrmlC9mab3BsKCWFtkXhU yhOXDGudfqT/1W8ThWzjzmCITsG/EJf/GnnnPZhWN9KgJxN7k+BmcRA3WQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG06KJMYD0sUnf4JzPFzYiCd5qa/MB8GA1UdIwQY MBaAFLqdMOYDW+i4OGBh8nFIHHB+BM4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgt NWQ1ODRmYmM1ZDI3LzEvYlRvb2t4Z1BTeFNkX2duTThYTmlJSjNtcHI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hYzljMzItN2RiYy00ZDZjLWJjMDgtNWQ1ODRmYmM1ZDI3 LzEvdXAwdzVnTmI2TGc0WUdIeWNVZ2NjSDRFemlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXC0DMA0G CSqGSIb3DQEBCwUAA4IBAQCHuO0ZPiT9z1+gzI0nw8SFsfr1cNN/+jyH+0hRO3Fu 3oERaIAIT1o3zVHukGWe+52Jeh2uxyNbqV9NjzntbIkX/H+g3lqmPb2g8SnBG8+6 gXkvIt+3l8Tln6a5oIot5lLx/GFNdfhZn62DlXBXHSEltoz5jzh7SXFByXF/et91 XwukKia2S7L7+40HIYQJHdLj6K7bbf5nSqx/AzDW2YPuLJdYd1NJFDLeWSu3r6ws DEY18t8FT2GsG7RIln+9ov5zYUBhJaHP1aqx7CQx/VCHJDq7DU/iFYJs9D2y/wEv 1QiN0sGMNpU9wmFbndua8bLulouJ2KM14qy8kTeUfgRC -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:17 2026 by rpki-client