This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/DaaeybnDDjVMgv8BbWZFPTyNFo4.roa File: DaaeybnDDjVMgv8BbWZFPTyNFo4.roa (raw, json) Hash identifier: QK+KxPGbli7LVnH/RtIUSITsGkxuycBQ6YKL9fWLh6M= Subject key identifier: 0D:A6:9E:C9:B9:C3:0E:35:4C:82:FF:01:6D:66:45:3D:3C:8D:16:8E Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d Certificate serial: 019B7E37D4CCEB92D181BED900147A6A616B Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/DaaeybnDDjVMgv8BbWZFPTyNFo4.roa Signing time: Fri 02 Jan 2026 10:19:06 +0000 ROA not before: Fri 02 Jan 2026 10:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3301 IP address blocks: 193.161.236.0/22 maxlen: 22 193.161.236.0/24 maxlen: 24 193.161.237.0/24 maxlen: 24 193.161.238.0/24 maxlen: 24 193.161.239.0/24 maxlen: 24 194.35.82.0/23 maxlen: 23 194.35.82.0/24 maxlen: 24 194.35.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d4:cc:eb:92:d1:81:be:d9:00:14:7a:6a:61:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d Validity Not Before: Jan 2 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0da69ec9b9c30e354c82ff016d66453d3c8d168e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:82:c9:c1:c8:9a:59:e2:c2:06:92:32:b8: 8e:87:6c:76:b1:33:51:f0:4e:95:21:56:33:b7:0a: 82:78:14:e0:ab:6d:e7:8b:1c:c1:1e:d8:0d:8d:a6: 22:60:39:2b:37:4c:08:11:2a:21:00:5b:2b:4d:5d: 2c:e5:4b:ef:07:40:23:74:f5:f3:d6:ce:62:be:b5: 8d:a7:c3:cf:30:cc:74:fd:e8:1e:63:4b:08:0d:0d: a8:ad:64:a2:60:7c:64:47:24:6a:21:4a:af:15:4c: c7:74:b1:66:9d:2d:95:09:56:b5:55:23:5c:43:ae: 50:27:c1:93:db:d8:8a:0b:a7:a6:cb:a3:b6:83:71: 63:52:53:ab:0d:74:7d:91:35:b7:cf:b0:68:e0:00: 0d:e4:c8:d6:3e:1d:b6:0d:77:fd:66:86:60:5a:82: be:0c:b3:de:18:4f:9e:ae:bd:78:38:e2:b8:58:07: a5:be:08:a8:7d:e9:b3:55:d5:6b:4d:6c:d2:bf:45: d3:28:00:9c:03:65:73:2c:7b:72:97:a3:fa:20:f7: cf:72:66:00:18:c5:8a:9f:ef:63:5c:74:94:45:93: 35:ee:2f:86:96:71:68:ef:09:6c:5a:7a:f5:cd:0e: db:ab:0c:6a:d3:8a:f4:7c:af:64:05:7b:b6:fe:83: d0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A6:9E:C9:B9:C3:0E:35:4C:82:FF:01:6D:66:45:3D:3C:8D:16:8E X509v3 Authority Key Identifier: keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/DaaeybnDDjVMgv8BbWZFPTyNFo4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.161.236.0/22 194.35.82.0/23 Signature Algorithm: sha256WithRSAEncryption 21:27:98:fb:10:9f:22:05:eb:99:0f:b2:ec:61:b4:d6:b0:a4: a0:e3:3f:e8:da:09:3c:67:4b:59:da:a5:9e:f9:16:09:f9:37: 14:cd:44:76:14:52:39:6b:3c:ce:d9:f0:02:6e:d3:94:a5:f4: 59:5a:1f:19:78:ba:23:7a:9f:f0:74:6a:35:43:f8:b7:4e:02: d2:9d:23:45:fd:0a:44:80:c1:6f:3d:71:25:81:04:8a:40:fa: 34:4a:d4:b7:16:16:bf:15:40:a6:54:f9:c5:9a:30:fb:85:db: d6:b6:e8:36:f6:15:85:84:c0:f7:df:62:fc:37:5c:17:44:14: f8:1b:7e:a3:6a:5d:c4:da:e5:8a:4b:ed:30:fa:59:a7:f0:c7: e5:cb:d3:64:0d:3c:09:4e:b9:cf:f7:9c:5c:21:3a:21:44:2c: 21:ae:3e:4c:fa:bb:0c:67:3b:b8:4a:73:84:5a:dc:f8:95:9e: 8d:a6:f0:15:7a:49:7c:fa:7b:39:50:4a:84:98:44:b3:d0:a5: df:17:b1:11:9a:ae:5c:5c:eb:22:63:f3:46:41:10:93:81:04: 71:e3:47:05:06:5e:cd:16:5f:49:48:ad:0c:be:e6:d1:1c:9a: 12:d0:06:ea:0f:49:a6:2c:d4:5d:5a:f5:ec:59:3b:4f:4f:dc: 11:00:2a:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N9TM65LRgb7ZABR6amFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODlhNWRkZDMwMDJlODAwOTk5YjVjMTg2N2Y3ODY3ODFi YWYxM2QwHhcNMjYwMTAyMTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZGE2OWVjOWI5YzMwZTM1NGM4MmZmMDE2ZDY2NDUzZDNjOGQxNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC2CycHImlniwgaSMriOh2x2sTNR 8E6VIVYztwqCeBTgq23nixzBHtgNjaYiYDkrN0wIESohAFsrTV0s5UvvB0AjdPXz 1s5ivrWNp8PPMMx0/egeY0sIDQ2orWSiYHxkRyRqIUqvFUzHdLFmnS2VCVa1VSNc Q65QJ8GT29iKC6emy6O2g3FjUlOrDXR9kTW3z7Bo4AAN5MjWPh22DXf9ZoZgWoK+ DLPeGE+err14OOK4WAelvgiofemzVdVrTWzSv0XTKACcA2VzLHtyl6P6IPfPcmYA GMWKn+9jXHSURZM17i+GlnFo7wlsWnr1zQ7bqwxq04r0fK9kBXu2/oPQ0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA2mnsm5ww41TIL/AW1mRT08jRaOMB8GA1UdIwQY MBaAFNSJpd3TAC6ACZm1wYZ/eGeBuvE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iZmQyZDQtNmQ0NS00NGJiLWFlNmIt NTI1OWVlZGNhMDdjLzEvRGFhZXlibkREalZNZ3Y4QmJXWkZQVHlORm80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9iZmQyZDQtNmQ0NS00NGJiLWFlNmItNTI1OWVlZGNhMDdj LzEvMUltbDNkTUFMb0FKbWJYQmhuOTRaNEc2OFQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwaHsAwQB wiNSMA0GCSqGSIb3DQEBCwUAA4IBAQAhJ5j7EJ8iBeuZD7LsYbTWsKSg4z/o2gk8 Z0tZ2qWe+RYJ+TcUzUR2FFI5azzO2fACbtOUpfRZWh8ZeLojep/wdGo1Q/i3TgLS nSNF/QpEgMFvPXElgQSKQPo0StS3Fha/FUCmVPnFmjD7hdvWtug29hWFhMD332L8 N1wXRBT4G36jal3E2uWKS+0w+lmn8Mfly9NkDTwJTrnP95xcITohRCwhrj5M+rsM Zzu4SnOEWtz4lZ6NpvAVekl8+ns5UEqEmESz0KXfF7ERmq5cXOsiY/NGQRCTgQRx 40cFBl7NFl9JSK0MvubRHJoS0AbqD0mmLNRdWvXsWTtPT9wRACqx -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:50 2026 by rpki-client