This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/biJ04bmigw6iVpUiIdYRLfiKayE.roa File: biJ04bmigw6iVpUiIdYRLfiKayE.roa (raw, json) Hash identifier: //R/p5jeoEyHzrVxssR2SpOIbWo1BamvM90LorlHczo= Subject key identifier: 6E:22:74:E1:B9:A2:83:0E:A2:56:95:22:21:D6:11:2D:F8:8A:6B:21 Certificate issuer: /CN=c4145465f0696a70d5f03ee1d5decafd41dc6385 Certificate serial: 019B7D5C51A558DFF07BB43E924322FB5AB6 Authority key identifier: C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/biJ04bmigw6iVpUiIdYRLfiKayE.roa Signing time: Fri 02 Jan 2026 06:19:20 +0000 ROA not before: Fri 02 Jan 2026 06:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48825 IP address blocks: 95.128.128.0/21 maxlen: 21 185.4.48.0/22 maxlen: 23 2a02:64c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.mft rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:51:a5:58:df:f0:7b:b4:3e:92:43:22:fb:5a:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c4145465f0696a70d5f03ee1d5decafd41dc6385 Validity Not Before: Jan 2 06:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e2274e1b9a2830ea256952221d6112df88a6b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f8:5c:e0:d2:7f:32:9b:2b:1f:08:e0:23:aa: 21:4a:92:77:4a:f9:b9:c9:7b:5d:ae:02:fa:e6:e5: bd:55:96:64:61:5b:04:d2:ff:d0:4e:24:32:8b:55: d3:69:7a:ea:52:b3:d7:f1:aa:47:26:5a:5a:94:26: c2:de:41:e7:23:d3:40:53:0e:d3:a4:74:f0:20:49: 7e:17:8f:de:6a:4c:28:50:49:a4:c2:7e:27:48:01: 0c:49:ef:36:e1:c8:c0:26:03:e3:83:9c:04:75:bf: fd:a8:9d:ab:d1:8a:90:13:81:69:16:3d:5e:23:f0: 90:dc:ed:6e:84:dc:42:28:bf:9e:01:d0:7f:a2:fb: 83:55:bd:37:80:37:81:64:1b:18:5f:5e:dd:dd:2d: d1:29:87:95:b9:b6:67:eb:4b:72:70:fc:f1:87:11: 6a:21:c8:ae:c2:55:6c:67:2f:45:c3:18:df:a7:8d: 78:23:30:12:1f:9d:52:68:af:52:0b:fa:b0:91:46: 5b:32:b1:18:70:31:28:9d:ee:c0:91:ae:22:8a:70: 10:c1:14:6c:5d:91:fe:1e:2e:92:b6:54:bd:d9:5e: 39:e2:a1:c2:58:73:71:23:61:bb:3f:6b:25:5d:f1: 2e:71:ec:92:8e:63:f9:cf:83:12:34:f5:aa:d0:8e: 2d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:22:74:E1:B9:A2:83:0E:A2:56:95:22:21:D6:11:2D:F8:8A:6B:21 X509v3 Authority Key Identifier: keyid:C4:14:54:65:F0:69:6A:70:D5:F0:3E:E1:D5:DE:CA:FD:41:DC:63:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBRUZfBpanDV8D7h1d7K_UHcY4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/biJ04bmigw6iVpUiIdYRLfiKayE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/1a58d4-133f-4750-a7ed-65e996312cbe/1/xBRUZfBpanDV8D7h1d7K_UHcY4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.128.128.0/21 185.4.48.0/22 IPv6: 2a02:64c0::/32 Signature Algorithm: sha256WithRSAEncryption 3d:ec:f6:2b:84:c1:39:d3:3e:f8:ae:35:26:62:d7:69:19:f4: 2a:3f:a0:ce:a5:c6:90:22:31:9c:53:9c:98:07:d2:02:45:95: a1:dc:77:37:c8:33:08:be:9f:9f:0c:a4:33:76:69:86:a4:32: 14:1f:03:40:6e:ef:e5:a8:3a:45:c3:d5:7d:55:3b:fa:30:c0: cd:fc:48:7e:36:77:9e:97:5b:82:1a:5a:31:dc:19:ff:de:e7: bd:16:04:43:d8:b8:58:75:4f:b8:89:fc:b3:40:f8:3a:d5:46: 7c:7f:fc:11:cd:10:a6:3e:1c:99:b5:95:7e:66:39:ba:4c:88: 84:8e:bb:84:8c:5d:22:81:dc:28:18:da:ba:91:09:4c:e1:89: 1b:ae:df:c5:6d:d8:a4:e1:61:3c:4f:73:47:c7:8b:c9:46:08: 46:51:3a:10:0f:cb:77:43:9c:bc:6c:d4:a9:a0:89:9c:db:c8: 11:81:63:06:a8:93:d4:86:9a:da:07:4a:22:93:17:82:1c:8d: 66:f5:c6:6c:dc:cd:fa:03:26:0f:b7:09:f0:19:c6:a9:34:77: 0f:0b:44:46:59:e3:a2:6a:8e:c7:15:18:7b:5c:ee:95:07:a6: 90:74:8e:e2:16:43:c9:20:7b:33:d0:d2:45:0c:c6:a4:b2:75: 25:d8:5a:8e -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XFGlWN/we7Q+kkMi+1q2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTQ1NDY1ZjA2OTZhNzBkNWYwM2VlMWQ1ZGVjYWZkNDFk YzYzODUwHhcNMjYwMTAyMDYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTIyNzRlMWI5YTI4MzBlYTI1Njk1MjIyMWQ2MTEyZGY4OGE2YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/hc4NJ/MpsrHwjgI6ohSpJ3Svm5 yXtdrgL65uW9VZZkYVsE0v/QTiQyi1XTaXrqUrPX8apHJlpalCbC3kHnI9NAUw7T pHTwIEl+F4/eakwoUEmkwn4nSAEMSe824cjAJgPjg5wEdb/9qJ2r0YqQE4FpFj1e I/CQ3O1uhNxCKL+eAdB/ovuDVb03gDeBZBsYX17d3S3RKYeVubZn60tycPzxhxFq IciuwlVsZy9Fwxjfp414IzASH51SaK9SC/qwkUZbMrEYcDEone7Aka4iinAQwRRs XZH+Hi6StlS92V454qHCWHNxI2G7P2slXfEuceySjmP5z4MSNPWq0I4twQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFG4idOG5ooMOolaVIiHWES34imshMB8GA1UdIwQY MBaAFMQUVGXwaWpw1fA+4dXeyv1B3GOFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8xYTU4ZDQtMTMzZi00NzUwLWE3ZWQt NjVlOTk2MzEyY2JlLzEvYmlKMDRibWlndzZpVnBVaUlkWVJMZmlLYXlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8xYTU4ZDQtMTMzZi00NzUwLWE3ZWQtNjVlOTk2MzEyY2Jl LzEveEJSVVpmQnBhbkRWOEQ3aDFkN0tfVUhjWTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDX4CAAwQC uQQwMA0EAgACMAcDBQAqAmTAMA0GCSqGSIb3DQEBCwUAA4IBAQA97PYrhME50z74 rjUmYtdpGfQqP6DOpcaQIjGcU5yYB9ICRZWh3Hc3yDMIvp+fDKQzdmmGpDIUHwNA bu/lqDpFw9V9VTv6MMDN/Eh+Nneel1uCGlox3Bn/3ue9FgRD2LhYdU+4ifyzQPg6 1UZ8f/wRzRCmPhyZtZV+Zjm6TIiEjruEjF0igdwoGNq6kQlM4Ykbrt/Fbdik4WE8 T3NHx4vJRghGUToQD8t3Q5y8bNSpoImc28gRgWMGqJPUhpraB0oikxeCHI1m9cZs 3M36AyYPtwnwGcapNHcPC0RGWeOiao7HFRh7XO6VB6aQdI7iFkPJIHsz0NJFDMak snUl2FqO -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:05 2026 by rpki-client