This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BRdlrjo4CvYMyLCy06uJnGAzutA.roa File: BRdlrjo4CvYMyLCy06uJnGAzutA.roa (raw, json) Hash identifier: lmsJdXFF48Dwk4ieCKZgJ1J6DKEU+0sYJajV8p5dOOI= Subject key identifier: 05:17:65:AE:3A:38:0A:F6:0C:C8:B0:B2:D3:AB:89:9C:60:33:BA:D0 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84EA7B38E1902C4ED604A3379A6F55 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BRdlrjo4CvYMyLCy06uJnGAzutA.roa Signing time: Fri 02 Jan 2026 16:22:55 +0000 ROA not before: Fri 02 Jan 2026 16:22:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197726 IP address blocks: 2a02:128:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ea:7b:38:e1:90:2c:4e:d6:04:a3:37:9a:6f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=051765ae3a380af60cc8b0b2d3ab899c6033bad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b4:12:0e:26:af:3a:0c:e8:19:6e:38:a0:ba: d7:52:5c:38:0f:c9:7b:9a:a7:28:e1:78:e5:21:28: 1c:4c:90:73:5a:0a:35:eb:0d:c8:ee:ee:39:c6:b4: 1a:8d:d5:96:50:3a:89:99:5f:c5:a1:1c:13:c3:01: d0:ed:f0:ab:2e:ca:5c:5a:74:de:a3:62:a9:b7:b2: 8f:1d:73:a2:3b:89:8f:8f:fe:eb:b5:91:b5:4b:66: f9:34:25:cf:d3:73:bb:ba:67:c6:9b:86:e9:f7:82: e5:b6:67:a1:c9:a6:d2:51:0a:5d:f4:9f:0d:3b:59: 26:9a:f3:78:91:da:5a:aa:5e:48:78:82:01:3b:d2: 6f:f6:83:a3:55:1f:76:a4:04:0e:fc:bf:3f:fc:cb: 7e:9b:9a:00:0a:88:d3:ff:4e:0c:5e:f1:9e:9c:51: 98:55:df:14:f7:e3:ab:fd:fb:16:81:bf:39:cc:d2: b9:25:1e:2d:46:8d:f7:b9:20:97:d6:7a:d7:d8:ca: 7e:a0:a8:7c:99:7c:4d:76:74:5e:32:a5:a6:77:aa: 77:07:da:30:6e:69:31:a5:43:28:84:d0:b0:c2:a1: 8c:4e:5c:f1:39:5b:e9:85:8f:a1:2d:3a:c6:6f:d1: f4:bc:ef:d6:ba:27:23:df:0e:01:cb:a2:05:55:95: 68:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:17:65:AE:3A:38:0A:F6:0C:C8:B0:B2:D3:AB:89:9C:60:33:BA:D0 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BRdlrjo4CvYMyLCy06uJnGAzutA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a02:128:2::/48 Signature Algorithm: sha256WithRSAEncryption 66:1e:24:f8:8a:e9:9a:2d:0f:aa:eb:00:be:79:4b:70:c0:c3: 4d:ec:4c:68:c0:ef:7f:a3:4e:ef:88:20:aa:70:a1:d5:4b:e4: f7:35:b5:ba:b3:31:10:88:f5:05:de:d5:f6:68:5b:8d:46:3e: bc:ab:1c:f7:5a:80:b9:b4:a0:b5:85:82:95:20:05:9e:8c:16: f4:b3:6f:c3:fd:d6:79:0c:7a:fd:e2:29:a0:7f:38:c2:7a:d8: 07:d9:28:65:ba:45:d6:9d:09:53:a9:be:d8:d4:b6:72:72:a5: ce:d3:80:f6:91:91:90:cb:59:ba:7e:4a:bc:de:1b:0c:38:63: a2:47:71:30:13:60:4c:8e:38:f4:8a:f6:72:0b:7d:ba:02:6c: bd:00:a3:55:ab:8c:97:4f:ca:2a:9a:7c:ee:36:01:6c:79:a9: 4e:eb:9a:1d:35:51:8b:2b:e9:ce:18:99:89:8a:90:a9:9f:41: 0c:4b:ad:70:3b:12:22:72:b6:10:65:0c:31:ff:f2:e1:9d:3d: 1a:34:8e:6b:0e:a5:16:96:e1:2a:e9:45:94:ae:02:ed:c7:2e: fd:85:46:08:83:4a:5d:9a:fe:ef:6b:8c:63:79:fa:22:b2:4c: 0e:64:73:76:ec:54:57:6d:e8:86:f8:d0:e4:d3:15:35:ed:01: ef:7e:fc:ee -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/hOp7OOGQLE7WBKM3mm9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTE3NjVhZTNhMzgwYWY2MGNjOGIwYjJkM2FiODk5YzYwMzNiYWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7QSDiavOgzoGW44oLrXUlw4D8l7 mqco4XjlISgcTJBzWgo16w3I7u45xrQajdWWUDqJmV/FoRwTwwHQ7fCrLspcWnTe o2Kpt7KPHXOiO4mPj/7rtZG1S2b5NCXP03O7umfGm4bp94LltmehyabSUQpd9J8N O1kmmvN4kdpaql5IeIIBO9Jv9oOjVR92pAQO/L8//Mt+m5oACojT/04MXvGenFGY Vd8U9+Or/fsWgb85zNK5JR4tRo33uSCX1nrX2Mp+oKh8mXxNdnReMqWmd6p3B9ow bmkxpUMohNCwwqGMTlzxOVvphY+hLTrGb9H0vO/Wuicj3w4By6IFVZVoVQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAUXZa46OAr2DMiwstOriZxgM7rQMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvQlJkbHJqbzRDdllNeUxDeTA2dUpuR0F6dXRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgIBKAAC MA0GCSqGSIb3DQEBCwUAA4IBAQBmHiT4iumaLQ+q6wC+eUtwwMNN7ExowO9/o07v iCCqcKHVS+T3NbW6szEQiPUF3tX2aFuNRj68qxz3WoC5tKC1hYKVIAWejBb0s2/D /dZ5DHr94imgfzjCetgH2ShlukXWnQlTqb7Y1LZycqXO04D2kZGQy1m6fkq83hsM OGOiR3EwE2BMjjj0ivZyC326Amy9AKNVq4yXT8oqmnzuNgFsealO65odNVGLK+nO GJmJipCpn0EMS61wOxIicrYQZQwx//LhnT0aNI5rDqUWluEq6UWUrgLtxy79hUYI g0pdmv7va4xjefoiskwOZHN27FRXbeiG+NDk0xU17QHvfvzu -----END CERTIFICATE-----Generated at Mon Jan 26 08:03:33 2026 by rpki-client