This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/BIo28pXo6DKLLlMdXKajPhOhgpE.roa File: BIo28pXo6DKLLlMdXKajPhOhgpE.roa (raw, json) Hash identifier: Yxz0YX56/XjwEqK3eJFqdGwrvy8qCQG0h/ZHhD2mdYI= Subject key identifier: 04:8A:36:F2:95:E8:E8:32:8B:2E:53:1D:5C:A6:A3:3E:13:A1:82:91 Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199 Certificate serial: 019B7EA64D1B21CD3C505BF0D75BA75AC497 Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/BIo28pXo6DKLLlMdXKajPhOhgpE.roa Signing time: Fri 02 Jan 2026 12:19:46 +0000 ROA not before: Fri 02 Jan 2026 12:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212603 IP address blocks: 45.143.176.0/22 maxlen: 24 195.200.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:4d:1b:21:cd:3c:50:5b:f0:d7:5b:a7:5a:c4:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199 Validity Not Before: Jan 2 12:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=048a36f295e8e8328b2e531d5ca6a33e13a18291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b3:b9:de:b3:d1:0b:f9:47:c1:b2:97:e1:9a: f8:1b:7c:0d:08:66:3d:b6:4f:4b:40:f7:45:18:57: f9:af:0e:a8:5a:7f:14:a5:c4:c4:c9:32:50:bc:ba: 8c:cd:cf:ec:a1:31:63:93:de:e9:72:bc:95:07:c5: ba:a8:72:19:79:03:0e:dc:f7:44:69:fe:ad:ab:bd: 7b:24:0a:9a:e7:63:c3:df:07:ce:87:99:e2:80:7d: 6d:de:8f:db:eb:c6:4c:86:1d:fe:54:88:77:a5:db: 4f:78:93:c6:84:d1:f6:bb:d9:5d:dd:85:96:99:8d: ae:00:36:e9:3b:55:2f:06:25:c5:0f:a3:04:eb:44: 03:b7:52:e7:39:e5:82:29:8b:01:cc:ad:b6:be:b0: 8f:34:27:9c:f9:e1:e5:73:a5:49:c7:7e:7e:56:95: 4d:ca:cb:27:b6:f1:b2:40:50:9f:cc:23:26:1f:f2: 52:bc:ac:29:45:9a:6d:de:7f:4d:0f:3a:ff:c5:48: 7e:4c:5b:a4:e2:35:77:45:ab:29:e3:e0:af:bb:67: a4:d3:c0:9c:59:9a:e5:5f:c4:bb:7f:60:7b:52:5d: 80:ab:f8:ef:a4:ad:cf:b6:c7:c0:f3:7e:66:d5:3f: 6a:e4:e7:f1:24:6d:e5:5b:67:8f:67:4f:a8:67:fd: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:8A:36:F2:95:E8:E8:32:8B:2E:53:1D:5C:A6:A3:3E:13:A1:82:91 X509v3 Authority Key Identifier: keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/BIo28pXo6DKLLlMdXKajPhOhgpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.176.0/22 195.200.194.0/24 Signature Algorithm: sha256WithRSAEncryption b8:3e:fc:f9:6f:b2:52:e4:ee:71:00:30:eb:e2:89:16:37:97: 99:49:de:41:dd:8d:a5:0d:00:20:e4:04:f7:c2:b4:dc:b7:18: 23:4d:9f:e1:a1:57:80:7d:d3:4b:3a:e6:bc:ae:13:e3:fa:0d: 3a:66:51:fe:dc:92:a1:bc:f4:ad:96:0b:9e:9d:37:58:d8:08: d7:f9:61:7b:40:8a:70:56:b9:6d:84:c8:a1:c7:f8:5f:f7:6e: 4a:45:79:f2:8b:53:0c:a3:06:6a:42:25:b9:3a:4b:82:f3:e3: 04:7c:79:66:76:10:2b:27:de:e0:eb:63:ae:51:7e:d9:4f:9f: 2c:ad:35:70:00:ad:d4:b3:c6:21:0e:3a:93:25:ef:21:2f:c4: 6d:bc:a6:aa:00:a6:c1:c8:41:57:3c:d8:bd:1f:cd:85:7b:9a: ed:db:1b:57:90:f3:e7:83:23:10:cd:5d:ff:83:d4:9f:ef:98: 0d:d9:30:88:51:4b:ae:ee:93:91:8a:fe:e9:e0:62:f1:c6:ee: b1:46:eb:e2:81:93:05:ce:3b:41:ab:72:13:89:b6:0f:72:be: b5:bc:d3:bf:41:45:9d:a5:18:e1:87:19:bf:e4:04:84:34:e5: 56:df:3a:eb:2a:22:cd:d1:06:c0:43:95:13:2e:02:20:7e:4b: d5:38:3e:36 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pk0bIc08UFvw11unWsSXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NWQ0NzJmYTUzODIwNGYxYzIzZThiNmE3NTgwNzNiODBj ZmMxOTkwHhcNMjYwMTAyMTIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDhhMzZmMjk1ZThlODMyOGIyZTUzMWQ1Y2E2YTMzZTEzYTE4MjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rO53rPRC/lHwbKX4Zr4G3wNCGY9 tk9LQPdFGFf5rw6oWn8UpcTEyTJQvLqMzc/soTFjk97pcryVB8W6qHIZeQMO3PdE af6tq717JAqa52PD3wfOh5nigH1t3o/b68ZMhh3+VIh3pdtPeJPGhNH2u9ld3YWW mY2uADbpO1UvBiXFD6ME60QDt1LnOeWCKYsBzK22vrCPNCec+eHlc6VJx35+VpVN yssntvGyQFCfzCMmH/JSvKwpRZpt3n9NDzr/xUh+TFuk4jV3Rasp4+Cvu2ek08Cc WZrlX8S7f2B7Ul2Aq/jvpK3PtsfA835m1T9q5OfxJG3lW2ePZ0+oZ/2GOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFASKNvKV6Ogyiy5THVymoz4ToYKRMB8GA1UdIwQY MBaAFJhdRy+lOCBPHCPotqdYBzuAz8GZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTIt ZWRjMzE2MjIyNjQ0LzEvQklvMjhwWG82REtMTGxNZFhLYWpQaE9oZ3BFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9jMjhlYmMtNzQ5Zi00OGY2LTg5YTItZWRjMzE2MjIyNjQ0 LzEvbUYxSEw2VTRJRThjSS1pMnAxZ0hPNERQd1prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLY+wAwQA w8jCMA0GCSqGSIb3DQEBCwUAA4IBAQC4Pvz5b7JS5O5xADDr4okWN5eZSd5B3Y2l DQAg5AT3wrTctxgjTZ/hoVeAfdNLOua8rhPj+g06ZlH+3JKhvPStlguenTdY2AjX +WF7QIpwVrlthMihx/hf925KRXnyi1MMowZqQiW5OkuC8+MEfHlmdhArJ97g62Ou UX7ZT58srTVwAK3Us8YhDjqTJe8hL8RtvKaqAKbByEFXPNi9H82Fe5rt2xtXkPPn gyMQzV3/g9Sf75gN2TCIUUuu7pORiv7p4GLxxu6xRuvigZMFzjtBq3ITibYPcr61 vNO/QUWdpRjhhxm/5ASENOVW3zrrKiLN0QbAQ5UTLgIgfkvVOD42 -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:16 2026 by rpki-client