This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Bson5QpUOFI1QdCm6xHzbdmNIvE.roa File: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (raw, json) Hash identifier: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks= Subject key identifier: 06:CA:27:E5:0A:54:38:52:35:41:D0:A6:EB:11:F3:6D:D9:8D:22:F1 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A3469F8900AB2D8344271F200ACE57 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Bson5QpUOFI1QdCm6xHzbdmNIvE.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56630 IP address blocks: 94.241.128.0/22 maxlen: 24 94.241.184.0/22 maxlen: 24 178.253.8.0/22 maxlen: 24 178.253.48.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:46:9f:89:00:ab:2d:83:44:27:1f:20:0a:ce:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06ca27e50a5438523541d0a6eb11f36dd98d22f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:1c:a8:84:dc:64:d3:da:7b:04:24:ff:e2:65: d3:6f:0e:8b:3f:97:eb:ef:38:1d:54:63:10:75:a1: 01:9e:73:5d:68:23:9d:90:b3:65:eb:eb:19:06:2c: ef:96:8b:de:1b:28:1f:43:70:2b:b5:93:76:24:2a: 03:76:ca:fb:cf:b9:02:10:bc:ee:e8:06:1f:aa:51: 89:ec:1b:85:e3:b5:8d:af:8c:45:89:d6:9a:4b:89: 55:b3:cf:c0:c3:5b:62:e1:ed:4f:61:e8:b4:3f:d7: 70:cf:af:ac:76:22:d7:a5:bc:cc:6d:04:a4:cf:7a: 96:50:18:1e:97:9c:d2:76:36:3c:8a:e0:79:0e:11: ed:2d:f3:e8:11:91:03:45:0a:17:ad:d5:f0:4d:43: 0f:a4:16:fd:8f:67:a7:4d:4d:da:be:ea:ad:49:86: 81:9e:b0:e2:f3:15:dd:4d:7b:97:56:f2:ff:c4:b6: 0c:5c:e3:02:2c:69:25:1a:61:63:67:0d:19:6e:a2: 0f:25:a9:87:9f:c5:96:b2:a7:fa:3f:17:27:cf:27: f5:26:8f:47:15:dc:60:04:a1:78:c8:01:31:6c:b5: 49:59:d0:de:b3:98:3a:87:70:f8:b4:d3:1e:5f:89: 17:20:49:a4:34:85:da:df:fb:32:2f:7b:99:bd:d5: 09:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CA:27:E5:0A:54:38:52:35:41:D0:A6:EB:11:F3:6D:D9:8D:22:F1 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/Bson5QpUOFI1QdCm6xHzbdmNIvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.241.128.0/22 94.241.184.0/22 178.253.8.0/22 178.253.48.0/22 Signature Algorithm: sha256WithRSAEncryption 48:1c:84:97:07:50:40:b9:a4:99:bd:02:5b:14:09:24:6b:24: 9e:23:d4:92:8c:d0:b1:c8:ae:a4:fb:3a:8d:32:0f:02:63:58: cb:ce:67:46:44:7f:ab:dc:5d:32:48:cd:cf:3a:05:ac:2b:74: 00:c3:13:d3:43:d0:50:ae:92:2e:1d:79:11:69:5b:58:ef:20: 64:a0:36:3d:08:09:11:25:ea:ff:5d:7e:3f:24:a0:46:ac:d4: 68:52:a2:e8:51:a0:7f:31:d7:25:bb:79:cb:b2:ec:50:3b:4c: 0f:72:28:d2:bb:3e:0a:66:d8:8e:2f:bf:ce:a7:92:98:14:53: 6b:21:52:5d:24:a9:f1:59:44:6a:8f:23:92:35:56:fa:36:7e: 24:2f:a1:71:51:d1:80:93:37:d4:1b:13:f1:b9:79:5c:6c:f5: e1:11:eb:72:55:b5:93:ef:4e:27:90:76:9f:41:4d:5a:b1:c2: 24:fd:69:29:fc:a1:30:a1:34:8a:27:c9:17:92:5a:2d:f3:7f: 03:b5:14:29:86:09:21:5c:72:0d:f3:62:d3:47:d6:a6:04:77: aa:eb:af:7b:80:f2:e4:b1:17:0e:6d:a9:48:42:e1:a9:b7:84: a3:4c:86:23:98:98:5b:fa:b7:82:4e:0a:03:47:58:11:9e:f5: ee:5c:fa:90 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt4o0afiQCrLYNEJx8gCs5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmNhMjdlNTBhNTQzODUyMzU0MWQwYTZlYjExZjM2ZGQ5OGQyMmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8xyohNxk09p7BCT/4mXTbw6LP5fr 7zgdVGMQdaEBnnNdaCOdkLNl6+sZBizvloveGygfQ3ArtZN2JCoDdsr7z7kCELzu 6AYfqlGJ7BuF47WNr4xFidaaS4lVs8/Aw1ti4e1PYei0P9dwz6+sdiLXpbzMbQSk z3qWUBgel5zSdjY8iuB5DhHtLfPoEZEDRQoXrdXwTUMPpBb9j2enTU3avuqtSYaB nrDi8xXdTXuXVvL/xLYMXOMCLGklGmFjZw0ZbqIPJamHn8WWsqf6Pxcnzyf1Jo9H FdxgBKF4yAExbLVJWdDes5g6h3D4tNMeX4kXIEmkNIXa3/syL3uZvdUJ3QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAbKJ+UKVDhSNUHQpusR823ZjSLxMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvQnNvbjVRcFVPRkkxUWRDbTZ4SHpiZG1OSXZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXvGAAwQC XvG4AwQCsv0IAwQCsv0wMA0GCSqGSIb3DQEBCwUAA4IBAQBIHISXB1BAuaSZvQJb FAkkaySeI9SSjNCxyK6k+zqNMg8CY1jLzmdGRH+r3F0ySM3POgWsK3QAwxPTQ9BQ rpIuHXkRaVtY7yBkoDY9CAkRJer/XX4/JKBGrNRoUqLoUaB/Mdclu3nLsuxQO0wP cijSuz4KZtiOL7/Op5KYFFNrIVJdJKnxWURqjyOSNVb6Nn4kL6FxUdGAkzfUGxPx uXlcbPXhEetyVbWT704nkHafQU1ascIk/Wkp/KEwoTSKJ8kXklot838DtRQphgkh XHIN82LTR9amBHeq6697gPLksRcObalIQuGpt4SjTIYjmJhb+reCTgoDR1gRnvXu XPqQ -----END CERTIFICATE-----Generated at Tue Jan 20 02:56:32 2026 by rpki-client