This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/CN_bapZXIkvKBuYkpK0A9Fhg1yE.roa File: CN_bapZXIkvKBuYkpK0A9Fhg1yE.roa (raw, json) Hash identifier: ql+OkdfFafxxT0hXtF/ZDCWRkBrIRJfL/o6QiI+ud4Y= Subject key identifier: 08:DF:DB:6A:96:57:22:4B:CA:06:E6:24:A4:AD:00:F4:58:60:D7:21 Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Certificate serial: 019AD9761E0BD0543229AAF024E8C5D72A0C Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/CN_bapZXIkvKBuYkpK0A9Fhg1yE.roa Signing time: Mon 01 Dec 2025 10:29:48 +0000 ROA not before: Mon 01 Dec 2025 10:29:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215607 IP address blocks: 94.26.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 09 Dec 2025 15:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:76:1e:0b:d0:54:32:29:aa:f0:24:e8:c5:d7:2a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342 Validity Not Before: Dec 1 10:29:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=08dfdb6a9657224bca06e624a4ad00f45860d721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ae:70:5d:ca:e2:60:e9:ef:29:49:4a:1d:89: 79:a9:cd:ba:33:26:e8:0a:23:95:88:72:ba:5f:af: c5:66:1d:8b:d8:69:4c:b2:9d:af:a6:91:cf:bc:aa: 7c:db:ea:01:7c:60:a2:10:af:00:1c:71:4b:78:a3: e2:db:16:3a:1a:4d:19:0f:69:90:e6:06:4b:b6:e2: b0:19:34:e9:24:da:40:5d:b7:e5:1d:d5:b1:ec:8c: d9:cd:b8:eb:27:3c:d9:b6:2a:37:86:66:71:3f:e7: 7d:5c:88:10:f5:b8:54:31:7b:c5:f6:d4:d0:6d:c3: 5a:19:39:60:7d:de:c1:f1:ab:94:fb:5e:4b:cf:f7: f0:73:77:dc:9a:51:d5:db:ea:a5:78:4f:5c:82:57: a6:7e:41:2d:82:6c:95:b3:38:a6:8b:47:b9:7d:50: 87:4f:00:3e:1f:e0:38:7e:c2:fd:00:b9:d9:8b:8d: 58:f8:6b:76:f1:a9:3d:ef:2c:40:6c:e9:a7:ef:1c: 0e:54:c4:85:71:f7:6e:48:57:5e:84:c3:66:a9:3a: ba:83:66:27:58:6b:16:15:68:6a:6b:a1:bc:9d:e3: 59:a6:48:7d:29:fe:45:5a:ec:52:d4:df:44:b9:af: 04:08:dc:67:55:bd:92:d2:92:85:13:8a:91:1e:a6: ef:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DF:DB:6A:96:57:22:4B:CA:06:E6:24:A4:AD:00:F4:58:60:D7:21 X509v3 Authority Key Identifier: keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/CN_bapZXIkvKBuYkpK0A9Fhg1yE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.26.106.0/24 Signature Algorithm: sha256WithRSAEncryption b5:c5:31:91:3d:5c:c7:77:25:65:6b:2e:1d:37:e6:ab:08:3c: ae:97:bd:9c:72:2d:05:0b:1e:15:19:29:17:23:a7:58:c5:b7: 90:8d:f4:fe:3d:c8:17:83:34:cc:d6:32:0b:39:b3:7a:9e:53: fc:24:cf:77:a3:7f:a7:e6:0d:16:2b:32:bd:c7:22:c4:ab:c9: 0c:38:b1:0e:7b:8d:50:ad:5f:32:82:bd:b9:2d:52:e8:c3:ed: b6:5c:6f:0e:e7:f4:7d:26:de:a9:99:32:f7:c0:cd:56:1f:c4: 9c:ff:52:39:77:f3:90:19:99:e4:3f:e4:ac:76:c2:e9:1d:68: c4:ef:bc:59:54:39:64:0c:92:54:32:6d:6d:d3:69:04:82:72: 7a:46:1c:65:da:ab:56:fd:01:72:91:01:09:24:aa:92:19:0d: 93:b7:be:4e:e7:c3:f5:35:7b:3b:07:f5:89:44:29:69:07:c3: 6d:2c:f1:3a:5b:72:4c:2a:8f:42:38:c1:ac:eb:fa:b1:00:5b: 2e:27:bf:58:38:8f:a7:a5:69:0f:22:f5:d9:d2:ba:cb:7a:a1: f4:03:59:a3:94:e1:5a:c7:54:e7:37:a4:2b:34:03:d9:3d:72: 21:e6:86:1c:23:ae:7a:fc:3b:5f:e4:6c:c1:af:12:30:15:70: a1:59:99:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZdh4L0FQyKarwJOjF1yoMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlMTJlYjljNzVkMzU5ZDI1MTM3YjVlZjRlMTc2ZjVlZWI2 YzQzNDIwHhcNMjUxMjAxMTAyOTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOGRmZGI2YTk2NTcyMjRiY2EwNmU2MjRhNGFkMDBmNDU4NjBkNzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva5wXcriYOnvKUlKHYl5qc26Mybo CiOViHK6X6/FZh2L2GlMsp2vppHPvKp82+oBfGCiEK8AHHFLeKPi2xY6Gk0ZD2mQ 5gZLtuKwGTTpJNpAXbflHdWx7IzZzbjrJzzZtio3hmZxP+d9XIgQ9bhUMXvF9tTQ bcNaGTlgfd7B8auU+15Lz/fwc3fcmlHV2+qleE9cglemfkEtgmyVszimi0e5fVCH TwA+H+A4fsL9ALnZi41Y+Gt28ak97yxAbOmn7xwOVMSFcfduSFdehMNmqTq6g2Yn WGsWFWhqa6G8neNZpkh9Kf5FWuxS1N9Eua8ECNxnVb2S0pKFE4qRHqbvwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAjf22qWVyJLygbmJKStAPRYYNchMB8GA1UdIwQY MBaAFN4S65x101nSUTe1704Xb17rbENCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQt YzE2Nzg3MjcyMDQ5LzEvQ05fYmFwWlhJa3ZLQnVZa3BLMEE5RmhnMXlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8yNjlhMDQtNzdiNC00ZWU3LWIxNjQtYzE2Nzg3MjcyMDQ5 LzEvM2hMcm5IWFRXZEpSTjdYdlRoZHZYdXRzUTBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXhpqMA0G CSqGSIb3DQEBCwUAA4IBAQC1xTGRPVzHdyVlay4dN+arCDyul72cci0FCx4VGSkX I6dYxbeQjfT+PcgXgzTM1jILObN6nlP8JM93o3+n5g0WKzK9xyLEq8kMOLEOe41Q rV8ygr25LVLow+22XG8O5/R9Jt6pmTL3wM1WH8Sc/1I5d/OQGZnkP+SsdsLpHWjE 77xZVDlkDJJUMm1t02kEgnJ6Rhxl2qtW/QFykQEJJKqSGQ2Tt75O58P1NXs7B/WJ RClpB8NtLPE6W3JMKo9COMGs6/qxAFsuJ79YOI+npWkPIvXZ0rrLeqH0A1mjlOFa x1TnN6QrNAPZPXIh5oYcI656/Dtf5GzBrxIwFXChWZka -----END CERTIFICATE-----Generated at Tue Dec 9 01:18:39 2025 by rpki-client