This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/bAaj7VG6a1DYoCW572VFENn1HCg.roa File: bAaj7VG6a1DYoCW572VFENn1HCg.roa (raw, json) Hash identifier: VCGixDe+g+Dthg8lI3ZGkWR4n/AbrXrOkCm7i4hZfv0= Subject key identifier: 6C:06:A3:ED:51:BA:6B:50:D8:A0:25:B9:EF:65:45:10:D9:F5:1C:28 Certificate issuer: /CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb Certificate serial: 019B7BA3EA7C65215738DDDEAA1420A9EA5A Authority key identifier: 58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/bAaj7VG6a1DYoCW572VFENn1HCg.roa Signing time: Thu 01 Jan 2026 22:18:18 +0000 ROA not before: Thu 01 Jan 2026 22:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196725 IP address blocks: 151.252.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.mft rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ea:7c:65:21:57:38:dd:de:aa:14:20:a9:ea:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f75ef0d630e1d086790ca0b78e7eef8e2acfbb Validity Not Before: Jan 1 22:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c06a3ed51ba6b50d8a025b9ef654510d9f51c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:f3:e6:b7:64:a1:cd:6b:6c:b8:ce:b9:69: 0d:d5:1b:2b:a7:a4:0b:e6:b7:7f:65:78:dd:03:cc: 31:8a:2e:1e:aa:7f:eb:bc:4e:e0:13:f5:4c:32:c5: 9f:42:8b:de:67:0a:c1:75:c6:b0:d6:c8:1c:56:32: 0b:8d:df:ce:17:cc:fe:b0:b4:27:e0:ae:f4:bf:b9: b6:da:79:c8:66:dd:c3:f7:6c:ad:90:ec:1f:d4:11: e8:11:de:f2:3c:b5:18:ed:ef:d9:03:1a:6b:8b:4c: e5:ae:24:df:e6:ab:0a:3f:66:02:10:19:08:15:8a: 68:dd:4d:b3:86:9f:da:61:43:16:5f:aa:b9:73:b5: 5e:4b:73:91:d0:50:7c:58:3c:d5:58:8a:c7:46:25: a2:83:4f:af:ac:e3:7c:eb:ac:26:b9:79:71:52:7c: 24:26:8f:99:f8:5d:8d:8d:88:14:28:f8:38:9b:ed: 0e:da:9e:fc:9e:62:76:d4:6d:64:bc:9b:87:c2:10: 06:ba:25:ea:42:9f:9d:f1:7c:f3:e1:a6:79:d4:be: 00:41:60:87:62:c9:88:92:7b:ea:46:50:f8:2c:90: 6d:7a:29:45:17:32:a9:fe:d0:74:a7:9a:a0:b5:f1: f3:24:c5:fe:19:cc:cc:f0:fb:bf:0c:fa:47:4f:de: f8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:06:A3:ED:51:BA:6B:50:D8:A0:25:B9:EF:65:45:10:D9:F5:1C:28 X509v3 Authority Key Identifier: keyid:58:F7:5E:F0:D6:30:E1:D0:86:79:0C:A0:B7:8E:7E:EF:8E:2A:CF:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPde8NYw4dCGeQygt45-744qz7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/bAaj7VG6a1DYoCW572VFENn1HCg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/34bd6e-79a7-4126-8a32-2fd280e0d54a/1/WPde8NYw4dCGeQygt45-744qz7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.252.96.0/21 Signature Algorithm: sha256WithRSAEncryption 39:54:a7:12:ac:90:98:38:a2:90:71:17:11:1e:ab:13:7c:62: fb:20:4d:d6:f8:1f:68:fa:4b:92:cf:5e:e4:5a:63:5e:7d:fc: 9b:2d:08:98:fd:10:f0:32:c0:b4:f5:5a:05:5d:84:56:40:57: 82:8c:56:e8:5b:8c:61:45:ca:56:cd:b1:b4:87:04:e5:b8:d7: 37:23:b2:37:22:77:fd:dd:87:8e:7e:2f:f8:85:6c:ef:01:67: 8f:8b:8a:a4:f1:59:1b:22:16:3b:24:a0:8d:16:6d:90:58:86: da:55:8f:12:31:68:46:95:69:95:34:99:a3:3e:0c:5a:49:92: 83:f9:22:f2:ab:7a:20:d0:47:e3:3a:37:a1:dc:f7:fc:6f:2b: 98:55:33:6c:ee:26:f4:70:0e:61:ca:3b:e6:e8:25:33:92:97: 62:29:d6:e1:99:36:1f:83:e9:e3:d2:d6:4f:5e:65:95:93:18: d9:74:72:ad:c1:5c:32:3d:85:88:e5:1f:69:0d:71:04:d4:eb: 49:fd:5d:b2:c3:6c:82:5a:6a:30:c1:6a:c7:1c:d6:2f:f4:ae: c6:4f:68:c0:69:d5:e4:d4:3a:c3:a6:18:11:91:25:1b:92:0e: f2:40:54:2a:38:ae:87:44:cb:e3:bf:67:be:12:a0:46:05:86: 36:54:6e:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+p8ZSFXON3eqhQgqepaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Zjc1ZWYwZDYzMGUxZDA4Njc5MGNhMGI3OGU3ZWVmOGUy YWNmYmIwHhcNMjYwMTAxMjIxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzA2YTNlZDUxYmE2YjUwZDhhMDI1YjllZjY1NDUxMGQ5ZjUxYzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszHz5rdkoc1rbLjOuWkN1Rsrp6QL 5rd/ZXjdA8wxii4eqn/rvE7gE/VMMsWfQoveZwrBdcaw1sgcVjILjd/OF8z+sLQn 4K70v7m22nnIZt3D92ytkOwf1BHoEd7yPLUY7e/ZAxpri0zlriTf5qsKP2YCEBkI FYpo3U2zhp/aYUMWX6q5c7VeS3OR0FB8WDzVWIrHRiWig0+vrON866wmuXlxUnwk Jo+Z+F2NjYgUKPg4m+0O2p78nmJ21G1kvJuHwhAGuiXqQp+d8Xzz4aZ51L4AQWCH YsmIknvqRlD4LJBteilFFzKp/tB0p5qgtfHzJMX+GczM8Pu/DPpHT974mQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGwGo+1RumtQ2KAlue9lRRDZ9RwoMB8GA1UdIwQY MBaAFFj3XvDWMOHQhnkMoLeOfu+OKs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzIt MmZkMjgwZTBkNTRhLzEvYkFhajdWRzZhMURZb0NXNTcyVkZFTm4xSENnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8zNGJkNmUtNzlhNy00MTI2LThhMzItMmZkMjgwZTBkNTRh LzEvV1BkZThOWXc0ZENHZVF5Z3Q0NS03NDRxejdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl/xgMA0G CSqGSIb3DQEBCwUAA4IBAQA5VKcSrJCYOKKQcRcRHqsTfGL7IE3W+B9o+kuSz17k WmNeffybLQiY/RDwMsC09VoFXYRWQFeCjFboW4xhRcpWzbG0hwTluNc3I7I3Inf9 3YeOfi/4hWzvAWePi4qk8VkbIhY7JKCNFm2QWIbaVY8SMWhGlWmVNJmjPgxaSZKD +SLyq3og0EfjOjeh3Pf8byuYVTNs7ib0cA5hyjvm6CUzkpdiKdbhmTYfg+nj0tZP XmWVkxjZdHKtwVwyPYWI5R9pDXEE1OtJ/V2yw2yCWmowwWrHHNYv9K7GT2jAadXk 1DrDphgRkSUbkg7yQFQqOK6HRMvjv2e+EqBGBYY2VG6K -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:38 2026 by rpki-client