This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa File: bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa (raw, json) Hash identifier: 87KIQ9XId5k9Ww9xMmtV6OZLD6Wry24vd0PmuggxAkY= Subject key identifier: 6D:D8:B5:AD:9F:87:BF:C5:D8:94:CC:C6:EA:9E:1D:4B:2A:B2:9E:44 Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed Certificate serial: 019B797DF4AA9DCADF3A0591E7DF3F2D7CE6 Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa Signing time: Thu 01 Jan 2026 12:17:36 +0000 ROA not before: Thu 01 Jan 2026 12:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11269 IP address blocks: 194.15.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 06:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:f4:aa:9d:ca:df:3a:05:91:e7:df:3f:2d:7c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed Validity Not Before: Jan 1 12:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dd8b5ad9f87bfc5d894ccc6ea9e1d4b2ab29e44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:7f:ae:35:e3:d5:28:09:bb:9d:af:fb:20:8c: f6:8e:1b:b7:60:16:55:24:f8:9e:44:df:d4:b1:c2: 2b:be:60:04:67:98:5c:02:8c:f4:01:5a:ba:17:a5: e5:f2:5b:b6:2e:db:ea:47:8c:c6:04:9e:17:ab:e7: 93:2d:1d:5d:4c:c9:61:ad:0f:f5:dc:72:f3:cb:b5: 1e:8a:63:06:b8:9a:41:d3:5f:7d:0e:4c:8c:d2:75: bc:8f:f6:94:af:f3:dd:c9:9a:23:05:b4:77:0a:7d: ed:2a:cf:19:8d:5f:2d:cd:91:96:d5:ff:1a:55:16: 90:31:d8:cc:f1:20:10:9d:fa:e8:4a:b7:c3:51:33: a2:70:24:03:a2:6d:46:46:6a:0d:68:64:11:6d:8f: 96:a2:c6:6e:96:d4:3f:3e:c3:dc:c2:56:84:01:72: b1:ea:10:d3:de:70:c8:4a:e5:e6:db:9b:10:69:6d: 1f:f7:58:54:c4:64:43:62:ae:31:a2:fd:de:b5:d3: 64:b7:92:52:21:3f:c9:77:3a:83:c0:53:94:c3:2a: 25:e9:ea:43:48:e8:f3:eb:28:49:b9:ff:5e:eb:98: 0f:ae:db:0a:4d:b1:32:cc:af:33:d8:f2:95:cf:a9: dc:62:77:ae:df:52:2e:5f:51:e2:4d:bf:6f:2a:23: 7a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D8:B5:AD:9F:87:BF:C5:D8:94:CC:C6:EA:9E:1D:4B:2A:B2:9E:44 X509v3 Authority Key Identifier: keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/bdi1rZ-Hv8XYlMzG6p4dSyqynkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.15.241.0/24 Signature Algorithm: sha256WithRSAEncryption 44:1c:3c:9b:09:e9:d4:f3:ea:b7:33:88:3b:ba:8d:c0:45:e6: 8b:6b:21:f8:f7:e4:2a:01:ec:31:7c:fc:0f:42:e1:9f:3f:59: 7a:a8:ff:e8:4b:b8:04:dc:7d:66:47:4f:5b:60:08:7c:2e:03: 7a:90:09:ab:99:b6:8e:33:c9:89:85:9a:a9:2e:34:e0:9c:5b: 3d:ac:db:4b:6e:2d:4c:a7:c7:b3:aa:3e:bc:7a:a6:d9:40:41: ad:d1:08:80:be:88:d8:fb:b9:9d:10:ee:38:4b:13:15:f7:45: 7e:06:15:61:62:89:2c:e6:84:ed:1b:fe:5c:76:10:8d:5a:bf: 53:86:eb:0e:5a:78:0e:51:02:80:d8:5c:45:d7:7e:46:e5:ff: 0b:b3:58:d7:99:01:db:49:3e:45:a3:4f:41:e2:38:51:e9:d8: 97:5e:c0:95:26:82:0b:92:3b:5c:14:66:74:9c:52:3e:e2:f0: c0:0a:0d:21:f4:d4:fb:0f:18:90:33:29:f1:e1:c9:a8:6b:88: c5:49:1e:2c:8a:6d:f8:a8:e8:60:51:13:b4:21:e8:5a:df:5c: af:e9:d0:0e:a8:a4:44:7f:7e:6a:07:55:61:4b:ed:32:19:63: 32:bc:dc:46:c5:4b:08:d0:8c:15:0b:42:5c:fc:97:85:6d:54: 1b:f0:f8:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ffSqncrfOgWR598/LXzmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyZjA0N2EzNDIxMjg3MmIwYjFmZjgwNGVlMDIyYjAyYWY3 NWZmZWQwHhcNMjYwMTAxMTIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGQ4YjVhZDlmODdiZmM1ZDg5NGNjYzZlYTllMWQ0YjJhYjI5ZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3+uNePVKAm7na/7IIz2jhu3YBZV JPieRN/UscIrvmAEZ5hcAoz0AVq6F6Xl8lu2LtvqR4zGBJ4Xq+eTLR1dTMlhrQ/1 3HLzy7UeimMGuJpB0199DkyM0nW8j/aUr/PdyZojBbR3Cn3tKs8ZjV8tzZGW1f8a VRaQMdjM8SAQnfroSrfDUTOicCQDom1GRmoNaGQRbY+WosZultQ/PsPcwlaEAXKx 6hDT3nDISuXm25sQaW0f91hUxGRDYq4xov3etdNkt5JSIT/JdzqDwFOUwyol6epD SOjz6yhJuf9e65gPrtsKTbEyzK8z2PKVz6ncYneu31IuX1HiTb9vKiN60QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG3Yta2fh7/F2JTMxuqeHUsqsp5EMB8GA1UdIwQY MBaAFDLwR6NCEocrCx/4BO4CKwKvdf/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYt N2ZhZTA2NWI2NDZhLzEvYmRpMXJaLUh2OFhZbE16RzZwNGRTeXF5bmtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYtN2ZhZTA2NWI2NDZh LzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg/xMA0G CSqGSIb3DQEBCwUAA4IBAQBEHDybCenU8+q3M4g7uo3AReaLayH49+QqAewxfPwP QuGfP1l6qP/oS7gE3H1mR09bYAh8LgN6kAmrmbaOM8mJhZqpLjTgnFs9rNtLbi1M p8ezqj68eqbZQEGt0QiAvojY+7mdEO44SxMV90V+BhVhYoks5oTtG/5cdhCNWr9T husOWngOUQKA2FxF135G5f8Ls1jXmQHbST5Fo09B4jhR6diXXsCVJoILkjtcFGZ0 nFI+4vDACg0h9NT7DxiQMynx4cmoa4jFSR4sim34qOhgURO0Ieha31yv6dAOqKRE f35qB1VhS+0yGWMyvNxGxUsI0IwVC0Jc/JeFbVQb8PhN -----END CERTIFICATE-----Generated at Sun Jan 11 15:24:45 2026 by rpki-client