This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa File: BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa (raw, json) Hash identifier: Hf/PRSH8627ldiT+c/R6Jxk5Uw2/lYafueoJm0baWdM= Subject key identifier: 05:27:75:0D:F3:1B:4A:1E:81:27:B4:6A:41:0E:7B:27:A8:88:9F:9E Certificate issuer: /CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1 Certificate serial: 019B7F14EB3E08C3ACA851B0695DAE8A2195 Authority key identifier: 5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa Signing time: Fri 02 Jan 2026 14:20:36 +0000 ROA not before: Fri 02 Jan 2026 14:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203437 IP address blocks: 79.135.112.0/21 maxlen: 21 193.218.8.0/22 maxlen: 22 194.77.185.0/24 maxlen: 24 194.105.40.0/21 maxlen: 21 2a02:db00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.mft rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:eb:3e:08:c3:ac:a8:51:b0:69:5d:ae:8a:21:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dfb074d47b7e0bc891ed06ea8fc67e38ecf50a1 Validity Not Before: Jan 2 14:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0527750df31b4a1e8127b46a410e7b27a8889f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:b1:27:5e:7e:15:6f:e1:ae:db:83:b2:90: a5:90:e7:7a:3d:43:78:1b:1b:ba:14:af:98:51:f8: 67:2f:84:7b:0a:8e:39:c2:15:fa:6e:60:65:7a:bf: 08:e1:41:8f:b2:43:86:56:b2:74:b6:66:b6:39:fc: 2f:69:49:1d:5c:26:ab:c8:aa:08:fd:03:e6:19:b8: 0f:bd:c1:50:f0:51:ab:ab:09:53:ad:4f:8d:99:32: d0:50:e5:03:f4:89:dc:e8:23:ce:46:70:a3:9f:5e: 6e:99:12:0a:27:84:e1:53:ea:2a:5c:5a:7f:fe:50: 5d:0e:d8:6e:93:8e:b6:c0:f8:af:f3:0c:bf:b7:1d: 9b:b8:e4:3b:54:0f:23:b9:4f:44:21:23:35:93:70: a0:9e:fe:f1:f7:f1:c7:10:4c:00:29:67:ff:4e:d2: dc:50:c7:18:c4:f6:a6:f2:a9:81:b0:b2:77:74:32: 34:a6:e7:b0:05:60:3f:52:cb:97:96:2a:b6:da:0c: ef:30:7d:9c:ec:f2:cc:0a:8d:74:58:df:24:f5:3c: c8:6d:2a:fd:42:4e:eb:5e:3c:ec:14:e7:49:37:5a: e6:86:9e:ac:d4:d0:f2:6c:fc:2c:8e:3a:a6:05:b4: af:a9:b4:27:7a:6e:d2:65:49:c4:db:48:c0:c9:0f: 0e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:27:75:0D:F3:1B:4A:1E:81:27:B4:6A:41:0E:7B:27:A8:88:9F:9E X509v3 Authority Key Identifier: keyid:5D:FB:07:4D:47:B7:E0:BC:89:1E:D0:6E:A8:FC:67:E3:8E:CF:50:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfsHTUe34LyJHtBuqPxn447PUKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/BSd1DfMbSh6BJ7RqQQ57J6iIn54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/42fc92-1663-4688-a31d-cf6a63e4efb6/1/XfsHTUe34LyJHtBuqPxn447PUKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.135.112.0/21 193.218.8.0/22 194.77.185.0/24 194.105.40.0/21 IPv6: 2a02:db00::/29 Signature Algorithm: sha256WithRSAEncryption 2c:10:7a:fb:60:22:3d:66:57:e2:b5:d1:18:d4:7d:c3:99:17: 7f:89:eb:c9:68:ce:7c:79:2c:1a:53:6b:aa:99:26:dc:7c:a0: b8:f1:e6:ff:38:d8:b1:61:78:a1:6f:b9:60:47:f7:c8:e7:fe: 41:6a:23:11:70:0e:41:d5:79:d1:17:f2:52:4f:ff:cb:80:6d: e1:97:b0:ef:a5:ff:91:94:df:55:45:2a:2e:a2:75:7d:cb:9d: 22:fb:92:8e:a9:5f:1d:db:9c:ac:2b:97:10:39:ef:c9:ed:f6: c6:c7:97:57:f0:23:e4:8c:87:49:65:58:b0:f2:b6:90:5b:e9: 8d:c8:5d:83:f2:df:e3:65:22:0e:b7:67:82:24:cb:e3:c0:38: 7f:0b:37:2e:9b:34:bc:7b:4b:ac:22:f5:f7:5c:66:17:e3:bf: a7:69:fd:2f:46:94:44:92:d8:f7:55:d7:ee:f8:d8:78:13:2d: d8:74:f2:19:f1:d0:a0:7e:99:67:5a:d5:12:f7:83:d4:f1:59: 94:c0:c3:4e:f2:cc:c0:af:6b:9b:a3:10:11:8f:59:93:ef:40: 1c:00:bd:5c:ee:4d:45:97:f9:d4:38:c9:2b:31:99:5d:a1:59: f8:ba:07:e2:37:1a:c5:ef:f6:72:bf:57:de:ae:07:82:3c:78: 50:ae:f3:b3 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt/FOs+CMOsqFGwaV2uiiGVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZmIwNzRkNDdiN2UwYmM4OTFlZDA2ZWE4ZmM2N2UzOGVj ZjUwYTEwHhcNMjYwMTAyMTQyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTI3NzUwZGYzMWI0YTFlODEyN2I0NmE0MTBlN2IyN2E4ODg5ZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7OxJ15+FW/hrtuDspClkOd6PUN4 Gxu6FK+YUfhnL4R7Co45whX6bmBler8I4UGPskOGVrJ0tma2OfwvaUkdXCaryKoI /QPmGbgPvcFQ8FGrqwlTrU+NmTLQUOUD9Inc6CPORnCjn15umRIKJ4ThU+oqXFp/ /lBdDthuk462wPiv8wy/tx2buOQ7VA8juU9EISM1k3Cgnv7x9/HHEEwAKWf/TtLc UMcYxPam8qmBsLJ3dDI0puewBWA/UsuXliq22gzvMH2c7PLMCo10WN8k9TzIbSr9 Qk7rXjzsFOdJN1rmhp6s1NDybPwsjjqmBbSvqbQnem7SZUnE20jAyQ8OXwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFAUndQ3zG0oegSe0akEOeyeoiJ+eMB8GA1UdIwQY MBaAFF37B01Ht+C8iR7Qbqj8Z+OOz1ChMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQt Y2Y2YTYzZTRlZmI2LzEvQlNkMURmTWJTaDZCSjdScVFRNTdKNmlJbjU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi80MmZjOTItMTY2My00Njg4LWEzMWQtY2Y2YTYzZTRlZmI2 LzEvWGZzSFRVZTM0THlKSHRCdXFQeG40NDdQVUtFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDT4dwAwQC wdoIAwQAwk25AwQDwmkoMA0EAgACMAcDBQMqAtsAMA0GCSqGSIb3DQEBCwUAA4IB AQAsEHr7YCI9ZlfitdEY1H3DmRd/ievJaM58eSwaU2uqmSbcfKC48eb/ONixYXih b7lgR/fI5/5BaiMRcA5B1XnRF/JST//LgG3hl7Dvpf+RlN9VRSouonV9y50i+5KO qV8d25ysK5cQOe/J7fbGx5dX8CPkjIdJZViw8raQW+mNyF2D8t/jZSIOt2eCJMvj wDh/CzcumzS8e0usIvX3XGYX47+naf0vRpREktj3Vdfu+Nh4Ey3YdPIZ8dCgfpln WtUS94PU8VmUwMNO8szAr2uboxARj1mT70AcAL1c7k1Fl/nUOMkrMZldoVn4ugfi NxrF7/Zyv1fergeCPHhQrvOz -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:52 2026 by rpki-client