This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/rBmEGDubcqlZrtDGPGxXRA6syRg.roa File: rBmEGDubcqlZrtDGPGxXRA6syRg.roa (raw, json) Hash identifier: GlNlYXlO5j2UMesmzKb+0CUD6Zm7XyqgTvAdykVpsfo= Subject key identifier: AC:19:84:18:3B:9B:72:A9:59:AE:D0:C6:3C:6C:57:44:0E:AC:C9:18 Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511 Certificate serial: 019B7C800B9680BB44C570F40EA62DD8F442 Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/rBmEGDubcqlZrtDGPGxXRA6syRg.roa Signing time: Fri 02 Jan 2026 02:18:44 +0000 ROA not before: Fri 02 Jan 2026 02:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12601 IP address blocks: 195.101.164.0/23 maxlen: 23 195.101.166.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:0b:96:80:bb:44:c5:70:f4:0e:a6:2d:d8:f4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511 Validity Not Before: Jan 2 02:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac1984183b9b72a959aed0c63c6c57440eacc918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5d:41:32:3d:10:14:bb:0a:bf:90:3c:ca:92: ae:6e:d0:bd:36:f4:5c:2a:71:d5:99:16:3f:58:a2: 26:ee:be:fa:a9:1a:bc:92:c4:e5:8e:45:55:eb:4d: b5:2f:10:f1:c0:da:d3:58:25:41:87:ee:87:ad:44: 97:78:2c:d8:06:37:18:17:ee:c9:00:46:6b:77:92: 07:3d:7b:3f:4d:57:67:22:92:77:30:4f:c6:68:ac: 9e:c0:87:b0:cb:b1:f1:a7:db:be:e2:df:14:fd:b3: 1b:27:e6:de:ce:5f:de:bb:6d:17:93:76:03:1e:7b: 38:32:0b:8b:a7:24:17:8b:70:da:84:1f:4f:fc:b4: 5d:90:fe:76:2f:f9:a4:9b:7c:48:55:28:a7:26:26: 08:37:a6:97:b7:eb:19:2a:4d:bf:7b:d8:69:49:8c: f3:56:59:8c:60:b1:84:24:cc:00:f8:b9:21:47:24: 32:7f:fa:5a:d0:d3:83:b7:af:bc:be:20:4f:9a:12: b1:dc:d4:be:7c:f1:0d:4f:01:da:0b:34:14:c1:df: bf:51:ce:50:7a:15:e9:20:71:fc:63:4b:7a:a8:d7: e0:0b:9b:49:fc:79:01:40:92:7d:2a:f1:a9:f7:fb: 80:c4:f7:76:da:ba:7f:89:b7:d1:e2:fc:4f:b8:2a: 36:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:19:84:18:3B:9B:72:A9:59:AE:D0:C6:3C:6C:57:44:0E:AC:C9:18 X509v3 Authority Key Identifier: keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/rBmEGDubcqlZrtDGPGxXRA6syRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.101.164.0/22 Signature Algorithm: sha256WithRSAEncryption 52:58:9a:b9:c1:1e:f6:67:41:f2:4d:81:20:ed:59:a2:8b:a3: 12:6c:df:05:3d:fc:d5:8e:f6:49:54:0f:5c:53:49:51:e7:dd: 2e:c2:70:f4:ac:18:6a:ea:1d:39:e5:89:e1:39:05:76:f7:25: 40:70:10:89:33:e0:f2:9f:1a:3f:25:97:6f:37:ea:01:0a:e1: 44:37:cd:75:39:af:7e:20:6b:34:f5:93:6a:e5:88:c5:fe:6f: 6e:ef:b2:b0:62:4a:53:67:e5:1c:cc:69:e6:fc:e9:77:68:10: a6:09:0e:0f:97:b9:b8:51:6e:b6:de:15:01:d4:c8:3e:81:92: 30:6f:ea:a6:16:8f:7e:50:8a:46:d1:83:0d:87:1d:8e:c6:2e: 73:cf:1b:91:ca:7f:e0:31:3c:be:12:db:f6:54:80:43:14:0b: 2b:2f:d7:30:1d:7d:5f:7b:20:23:5f:96:bc:58:7f:f0:dc:1f: 6b:c3:a6:0d:c2:72:b4:ff:a3:6f:e7:06:6c:f2:79:6a:dc:24: 95:37:c6:c0:8d:a2:d9:52:4f:a7:c3:d5:4a:d3:ad:f7:37:1d: bb:63:70:b4:28:6d:c8:81:d7:43:eb:1b:3d:ff:5a:11:0e:c5: a5:e1:4f:cc:53:79:7f:36:ec:92:aa:6c:92:8c:9c:61:1c:90: ab:78:cd:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gAuWgLtExXD0DqYt2PRCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZjA5YmEzM2I1YWU1ODFiMGQyOTMyMzI0OTMxNGY3NmFh MTA1MTEwHhcNMjYwMTAyMDIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzE5ODQxODNiOWI3MmE5NTlhZWQwYzYzYzZjNTc0NDBlYWNjOTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoF1BMj0QFLsKv5A8ypKubtC9NvRc KnHVmRY/WKIm7r76qRq8ksTljkVV6021LxDxwNrTWCVBh+6HrUSXeCzYBjcYF+7J AEZrd5IHPXs/TVdnIpJ3ME/GaKyewIewy7Hxp9u+4t8U/bMbJ+bezl/eu20Xk3YD Hns4MguLpyQXi3DahB9P/LRdkP52L/mkm3xIVSinJiYIN6aXt+sZKk2/e9hpSYzz VlmMYLGEJMwA+LkhRyQyf/pa0NODt6+8viBPmhKx3NS+fPENTwHaCzQUwd+/Uc5Q ehXpIHH8Y0t6qNfgC5tJ/HkBQJJ9KvGp9/uAxPd22rp/ibfR4vxPuCo28QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKwZhBg7m3KpWa7QxjxsV0QOrMkYMB8GA1UdIwQY MBaAFDrwm6M7WuWBsNKTIySTFPdqoQURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQt NDU5MzVmNTA2YTEyLzEvckJtRUdEdWJjcWxacnRER1BHeFhSQTZzeVJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zM2Q1ZDEtYzQ1MC00MTNiLWFmZTQtNDU5MzVmNTA2YTEy LzEvT3ZDYm96dGE1WUd3MHBNakpKTVU5MnFoQlJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw2WkMA0G CSqGSIb3DQEBCwUAA4IBAQBSWJq5wR72Z0HyTYEg7Vmii6MSbN8FPfzVjvZJVA9c U0lR590uwnD0rBhq6h055YnhOQV29yVAcBCJM+Dynxo/JZdvN+oBCuFEN811Oa9+ IGs09ZNq5YjF/m9u77KwYkpTZ+UczGnm/Ol3aBCmCQ4Pl7m4UW623hUB1Mg+gZIw b+qmFo9+UIpG0YMNhx2Oxi5zzxuRyn/gMTy+Etv2VIBDFAsrL9cwHX1feyAjX5a8 WH/w3B9rw6YNwnK0/6Nv5wZs8nlq3CSVN8bAjaLZUk+nw9VK0633Nx27Y3C0KG3I gddD6xs9/1oRDsWl4U/MU3l/NuySqmySjJxhHJCreM3Q -----END CERTIFICATE-----Generated at Wed Jan 21 20:42:22 2026 by rpki-client