This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/bEbGHAVBvLNhZMOl0igfKIEM0No.roa File: bEbGHAVBvLNhZMOl0igfKIEM0No.roa (raw, json) Hash identifier: EIV52KkKGsMHvVBu+0ylavrX5X03lUn7tKLOYPYuNh8= Subject key identifier: 6C:46:C6:1C:05:41:BC:B3:61:64:C3:A5:D2:28:1F:28:81:0C:D0:DA Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A344B4CF880038F35FBC5F72DF41A7 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/bEbGHAVBvLNhZMOl0igfKIEM0No.roa Signing time: Thu 01 Jan 2026 08:18:44 +0000 ROA not before: Thu 01 Jan 2026 08:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 83.147.248.0/22 maxlen: 22 91.186.200.0/23 maxlen: 24 91.186.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:44:b4:cf:88:00:38:f3:5f:bc:5f:72:df:41:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c46c61c0541bcb36164c3a5d2281f28810cd0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:a1:c1:7f:0d:2f:20:4a:e6:c0:24:56:ed: ef:3f:70:77:de:dc:b5:66:58:69:95:a5:75:74:12: 39:ba:d8:c6:ef:dd:1a:00:0d:77:fa:ff:5f:64:87: ab:00:81:88:12:ce:98:e1:e1:30:67:93:47:1a:c4: 35:57:49:be:61:91:65:67:88:89:d0:2e:d7:5c:a3: d1:4a:0d:d2:2b:03:1c:b6:f2:2b:ab:24:60:7b:c6: fc:89:aa:81:fa:c1:27:ca:87:6e:5a:68:4a:6f:f4: 30:4f:25:08:77:29:c8:08:4c:80:68:c8:f9:41:ef: d0:08:71:65:be:27:ba:8b:e1:c1:1f:ea:0d:ad:a3: 02:7d:73:96:f1:f6:85:ce:11:50:1e:2c:dd:2e:bb: b1:76:e4:58:a4:58:f0:0d:d8:4a:e7:f5:44:be:ad: 78:62:6a:d1:5d:a4:7d:67:ab:f8:c5:9f:67:27:cb: 90:15:63:1c:30:e3:42:aa:b4:af:d8:73:c8:1d:c6: df:c1:97:83:f6:9c:62:03:9f:b0:a9:72:9d:d9:e9: 0b:aa:28:a5:e2:fe:95:c9:76:6a:3d:c3:c6:90:af: 92:0e:16:07:c6:e2:9c:ff:d9:d8:a9:69:66:25:f0: ff:e3:cb:44:f4:e5:a5:78:eb:2a:5b:51:b8:24:f0: 49:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:46:C6:1C:05:41:BC:B3:61:64:C3:A5:D2:28:1F:28:81:0C:D0:DA X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/bEbGHAVBvLNhZMOl0igfKIEM0No.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.248.0/22 91.186.200.0/22 Signature Algorithm: sha256WithRSAEncryption 79:f7:e6:1a:76:9d:61:25:a4:8d:aa:17:97:d9:81:a1:c1:da: 90:38:e7:b0:a6:9e:b4:8d:02:d7:91:92:71:11:81:68:94:bd: 48:7d:3d:f1:c8:94:b1:b4:79:d4:cb:43:bb:89:e4:05:17:51: 0e:18:13:05:6a:1b:4a:e7:2a:b3:06:3d:61:98:4d:af:2b:48: 10:13:1d:32:3a:e9:9c:d1:25:ea:1a:69:91:4d:06:18:00:72: ef:cf:ac:a7:57:b7:71:83:42:e4:3a:db:88:79:b4:13:94:3b: 19:d9:c3:48:f8:0e:d3:72:42:05:2f:88:0a:fe:22:e7:58:3a: 95:9f:43:05:14:2d:bc:22:d1:89:be:38:d1:ad:4a:9d:34:d9: ec:2a:50:5f:30:56:a1:14:2f:21:79:43:f7:4b:a6:15:5f:b8: 3e:87:20:c6:0d:d6:45:19:66:f8:4a:97:ea:48:a4:79:f4:ca: cc:c9:fb:bb:75:ad:fc:63:4e:bf:4f:26:62:23:62:1e:73:92: 67:2c:4f:b4:17:e1:e8:7a:b8:3a:0a:5b:b2:8f:ad:9c:01:c2: e4:89:8e:cf:b6:56:7e:04:73:6e:41:85:4f:55:ce:19:f2:dd: 6e:80:68:55:53:53:93:20:23:64:8a:ae:b4:51:5f:95:32:41: ec:a1:23:04 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o0S0z4gAOPNfvF9y30GnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzQ2YzYxYzA1NDFiY2IzNjE2NGMzYTVkMjI4MWYyODgxMGNkMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHyhwX8NLyBK5sAkVu3vP3B33ty1 ZlhplaV1dBI5utjG790aAA13+v9fZIerAIGIEs6Y4eEwZ5NHGsQ1V0m+YZFlZ4iJ 0C7XXKPRSg3SKwMctvIrqyRge8b8iaqB+sEnyoduWmhKb/QwTyUIdynICEyAaMj5 Qe/QCHFlvie6i+HBH+oNraMCfXOW8faFzhFQHizdLruxduRYpFjwDdhK5/VEvq14 YmrRXaR9Z6v4xZ9nJ8uQFWMcMONCqrSv2HPIHcbfwZeD9pxiA5+wqXKd2ekLqiil 4v6VyXZqPcPGkK+SDhYHxuKc/9nYqWlmJfD/48tE9OWleOsqW1G4JPBJFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGxGxhwFQbyzYWTDpdIoHyiBDNDaMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvYkViR0hBVkJ2TE5oWk1PbDBpZ2ZLSUVNME5vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCU5P4AwQC W7rIMA0GCSqGSIb3DQEBCwUAA4IBAQB59+Yadp1hJaSNqheX2YGhwdqQOOewpp60 jQLXkZJxEYFolL1IfT3xyJSxtHnUy0O7ieQFF1EOGBMFahtK5yqzBj1hmE2vK0gQ Ex0yOumc0SXqGmmRTQYYAHLvz6ynV7dxg0LkOtuIebQTlDsZ2cNI+A7TckIFL4gK /iLnWDqVn0MFFC28ItGJvjjRrUqdNNnsKlBfMFahFC8heUP3S6YVX7g+hyDGDdZF GWb4SpfqSKR59MrMyfu7da38Y06/TyZiI2Iec5JnLE+0F+Hoerg6Cluyj62cAcLk iY7PtlZ+BHNuQYVPVc4Z8t1ugGhVU1OTICNkiq60UV+VMkHsoSME -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:49 2026 by rpki-client