This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Be29mTyhbB9dc1QxBtq9tvlEvUM.roa File: Be29mTyhbB9dc1QxBtq9tvlEvUM.roa (raw, json) Hash identifier: x68GRufPlhRPD8bbvof3W8b0dcr0P/3o4iKGi2RYXCs= Subject key identifier: 05:ED:BD:99:3C:A1:6C:1F:5D:73:54:31:06:DA:BD:B6:F9:44:BD:43 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106154F911251AEFA1FF75A8A15330 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Be29mTyhbB9dc1QxBtq9tvlEvUM.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206670 IP address blocks: 188.132.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:61:54:f9:11:25:1a:ef:a1:ff:75:a8:a1:53:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05edbd993ca16c1f5d73543106dabdb6f944bd43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:46:e0:89:7c:e7:46:f1:29:c5:31:b1:1a:16: 55:04:b6:e1:fb:e9:5f:8a:6f:69:ea:45:63:a8:f1: 74:1f:e4:29:59:96:e2:47:a9:26:cc:7e:6e:72:32: a7:1c:e8:24:5f:bd:4e:15:fe:6c:41:0d:0d:c4:6a: ee:db:48:23:03:41:36:cc:dc:e7:20:5b:d3:56:d9: af:fd:57:a8:d6:09:e7:e3:6c:cc:46:ef:cf:74:74: d1:ce:09:ff:34:da:c1:6a:3a:b0:1d:37:d4:19:97: ac:b3:e0:5c:29:29:d3:5d:be:8a:5e:7e:d3:6d:1d: be:b0:53:08:83:c4:16:a4:d2:b8:50:4b:aa:74:bc: 4e:ca:d7:44:02:8b:1a:d6:91:c2:7d:d3:68:71:23: 22:1c:16:2e:f8:ab:44:e3:cf:56:6b:36:c2:e6:35: 69:40:85:00:06:23:ff:44:72:94:3f:ce:9c:52:9b: 27:3f:e8:46:7c:24:57:29:40:f6:e9:31:64:a2:7e: 81:fe:24:8b:ab:4e:4d:f3:8f:1d:41:82:16:00:7e: 96:fa:0c:ce:2d:a0:c1:99:50:5f:a9:59:51:41:3e: b4:df:dc:53:4b:79:c4:ba:21:1e:ac:8e:3b:be:a1: 6d:0e:3f:04:65:73:61:9f:bb:c5:96:e9:91:5c:85: 88:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:ED:BD:99:3C:A1:6C:1F:5D:73:54:31:06:DA:BD:B6:F9:44:BD:43 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Be29mTyhbB9dc1QxBtq9tvlEvUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.156.0/24 Signature Algorithm: sha256WithRSAEncryption 53:bd:32:25:b1:db:5d:c3:dc:df:37:b1:8e:4a:00:fc:29:29: ff:2e:fd:eb:83:cf:6d:76:ae:0a:04:5b:6c:43:b5:3a:be:98: 4e:f4:d6:80:d0:cb:7f:60:07:1e:20:26:df:3b:1f:99:8a:0b: cf:b7:4f:1b:66:33:c1:5a:08:97:5c:65:fe:98:2d:ae:b4:b5: f0:87:e1:bb:85:31:14:d2:03:e0:6b:a9:a1:29:ac:84:7e:9f: fd:77:83:13:e5:c7:14:f3:a5:81:f0:4a:bd:21:fc:a0:5d:b1: 0b:ac:2a:a8:14:0b:89:2e:b9:ea:d3:cb:ac:03:03:dd:4a:ff: 8f:a3:3f:81:58:cf:16:a0:d1:b0:ee:ef:ad:42:85:8e:91:0a: c9:15:d9:75:f3:e0:e8:79:d5:99:88:e9:26:3d:f6:1c:da:75: 8b:d4:34:34:2d:99:98:10:c8:e0:31:e2:d9:b8:c5:43:83:4d: ef:95:52:d8:ad:0d:95:e9:85:2a:46:62:4b:03:24:54:c6:a0: a1:ce:51:c1:80:99:81:de:f6:8c:59:2f:14:b4:8a:59:6a:6a: d4:aa:e9:2b:52:91:b1:36:03:b0:a7:83:32:3b:68:85:d8:ea: 6b:da:19:45:20:f9:24:b3:8f:f2:c4:f3:d4:96:f6:32:d7:99: 2e:90:23:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGFU+RElGu+h/3WooVMwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWVkYmQ5OTNjYTE2YzFmNWQ3MzU0MzEwNmRhYmRiNmY5NDRiZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEbgiXznRvEpxTGxGhZVBLbh++lf im9p6kVjqPF0H+QpWZbiR6kmzH5ucjKnHOgkX71OFf5sQQ0NxGru20gjA0E2zNzn IFvTVtmv/Veo1gnn42zMRu/PdHTRzgn/NNrBajqwHTfUGZess+BcKSnTXb6KXn7T bR2+sFMIg8QWpNK4UEuqdLxOytdEAosa1pHCfdNocSMiHBYu+KtE489WazbC5jVp QIUABiP/RHKUP86cUpsnP+hGfCRXKUD26TFkon6B/iSLq05N848dQYIWAH6W+gzO LaDBmVBfqVlRQT6039xTS3nEuiEerI47vqFtDj8EZXNhn7vFlumRXIWIoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAXtvZk8oWwfXXNUMQbavbb5RL1DMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvQmUyOW1UeWhiQjlkYzFReEJ0cTl0dmxFdlVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvIScMA0G CSqGSIb3DQEBCwUAA4IBAQBTvTIlsdtdw9zfN7GOSgD8KSn/Lv3rg89tdq4KBFts Q7U6vphO9NaA0Mt/YAceICbfOx+ZigvPt08bZjPBWgiXXGX+mC2utLXwh+G7hTEU 0gPga6mhKayEfp/9d4MT5ccU86WB8Eq9IfygXbELrCqoFAuJLrnq08usAwPdSv+P oz+BWM8WoNGw7u+tQoWOkQrJFdl18+DoedWZiOkmPfYc2nWL1DQ0LZmYEMjgMeLZ uMVDg03vlVLYrQ2V6YUqRmJLAyRUxqChzlHBgJmB3vaMWS8UtIpZamrUqukrUpGx NgOwp4MyO2iF2Opr2hlFIPkks4/yxPPUlvYy15kukCPJ -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:25 2026 by rpki-client