This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/BAW400X5Cp3GNyjjsyWRzyNaFgg.roa File: BAW400X5Cp3GNyjjsyWRzyNaFgg.roa (raw, json) Hash identifier: GB/H4O93w5LLUQkpbn36ChcZqhyQGrlT9Iz0jJ/HcgQ= Subject key identifier: 04:05:B8:D3:45:F9:0A:9D:C6:37:28:E3:B3:25:91:CF:23:5A:16:08 Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019C22EEA21C40EC60489609334BDEC3D3A5 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/BAW400X5Cp3GNyjjsyWRzyNaFgg.roa Signing time: Tue 03 Feb 2026 09:56:30 +0000 ROA not before: Tue 03 Feb 2026 09:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34369 IP address blocks: 37.148.0.0/17 maxlen: 24 37.202.128.0/18 maxlen: 24 84.241.0.0/18 maxlen: 24 94.182.109.0/24 maxlen: 24 94.182.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:22:ee:a2:1c:40:ec:60:48:96:09:33:4b:de:c3:d3:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Feb 3 09:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0405b8d345f90a9dc63728e3b32591cf235a1608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:37:70:78:40:b4:12:04:31:0c:99:81:30:09: 5f:31:d4:f3:71:c8:87:a6:e4:51:7f:65:41:a7:56: 3c:1c:26:3d:67:e0:1b:37:e5:79:2e:66:73:ae:93: 49:80:db:19:75:4b:b8:5f:11:a8:c4:23:a9:b2:20: 10:31:ef:4f:f6:27:d6:25:09:da:87:dd:40:a5:99: b7:f0:8a:7b:c9:63:88:4f:b1:7c:d8:e1:8a:8c:76: 1d:b1:45:63:c9:f6:20:ee:df:a8:27:3b:6d:71:2e: fb:41:93:cf:a5:64:78:e2:b4:3e:74:09:21:50:93: 32:72:69:2b:f1:82:f4:6a:aa:4d:29:1e:32:0c:c8: a1:6b:48:b2:91:70:03:7e:e9:53:58:c8:bf:19:55: f3:94:fd:93:4a:39:ab:7a:b8:e0:f1:78:2e:fb:2c: 6a:22:38:91:cb:89:38:ee:1c:07:b0:c9:94:2a:42: 72:76:93:27:6e:43:63:2a:46:6d:ea:05:6d:6b:94: b8:ae:6f:e5:3b:11:4d:70:ac:4e:c9:69:c6:e3:b1: 87:39:6d:29:03:de:7d:e1:84:68:72:27:d0:df:7d: 10:a5:90:a1:34:7a:50:8f:0c:8d:25:fe:a0:3e:72: 76:48:e4:d0:d7:d7:ba:24:e1:ff:46:f0:9d:96:b1: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:05:B8:D3:45:F9:0A:9D:C6:37:28:E3:B3:25:91:CF:23:5A:16:08 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/BAW400X5Cp3GNyjjsyWRzyNaFgg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.148.0.0/17 37.202.128.0/18 84.241.0.0/18 94.182.109.0/24 94.182.151.0/24 Signature Algorithm: sha256WithRSAEncryption b4:17:05:d3:31:f8:ef:68:03:27:f4:cd:42:67:9f:85:98:eb: 31:e2:12:8a:c1:a1:62:48:df:c7:3f:47:aa:c0:3a:d5:ad:43: 88:0f:0a:f7:7a:25:a9:a4:c3:90:e2:ba:c2:11:bd:a7:c3:b1: c1:5b:02:f1:63:ee:4e:48:ce:88:28:b4:4f:8b:b2:0d:1e:bb: 64:59:e8:af:7d:84:65:0a:7e:83:34:27:fa:52:bc:b4:37:18: 76:86:ad:99:73:ba:7d:bd:6a:4e:90:69:83:c6:2b:57:d3:84: 54:0c:8e:5a:e0:57:24:a0:23:ed:99:27:88:f1:12:38:d6:fb: 1a:ac:f4:9c:4a:b8:2a:2d:bc:f4:4d:c0:c4:0c:c9:b1:2d:4b: 9c:ad:81:a5:c9:f8:bb:05:e4:f1:55:c4:b2:9c:c2:0e:96:25: d1:ff:d9:d9:6c:14:08:a2:3f:ae:d8:56:96:aa:ab:8e:ef:bb: 87:d2:fb:04:14:3c:17:45:2b:d4:65:5d:bf:7c:3d:19:8e:85: 7b:7e:80:8e:36:63:32:6c:fb:0c:81:66:ac:f2:9c:f6:ad:fb: 7e:d9:6f:74:57:d2:df:21:f2:fd:07:ea:c4:cd:62:04:c7:8d: 66:8b:4c:87:9a:ef:b3:76:3c:a5:e7:07:1d:61:50:ac:67:f4: 94:84:07:3e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZwi7qIcQOxgSJYJM0vew9OlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMjAzMDk1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDA1YjhkMzQ1ZjkwYTlkYzYzNzI4ZTNiMzI1OTFjZjIzNWExNjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DdweEC0EgQxDJmBMAlfMdTzcciH puRRf2VBp1Y8HCY9Z+AbN+V5LmZzrpNJgNsZdUu4XxGoxCOpsiAQMe9P9ifWJQna h91ApZm38Ip7yWOIT7F82OGKjHYdsUVjyfYg7t+oJzttcS77QZPPpWR44rQ+dAkh UJMycmkr8YL0aqpNKR4yDMiha0iykXADfulTWMi/GVXzlP2TSjmrerjg8Xgu+yxq IjiRy4k47hwHsMmUKkJydpMnbkNjKkZt6gVta5S4rm/lOxFNcKxOyWnG47GHOW0p A9594YRocifQ330QpZChNHpQjwyNJf6gPnJ2SOTQ19e6JOH/RvCdlrFALwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAQFuNNF+Qqdxjco47Mlkc8jWhYIMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvQkFXNDAwWDVDcDNHTnlqanN5V1J6eU5hRmdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQHJZQAAwQG JcqAAwQGVPEAAwQAXrZtAwQAXraXMA0GCSqGSIb3DQEBCwUAA4IBAQC0FwXTMfjv aAMn9M1CZ5+FmOsx4hKKwaFiSN/HP0eqwDrVrUOIDwr3eiWppMOQ4rrCEb2nw7HB WwLxY+5OSM6IKLRPi7INHrtkWeivfYRlCn6DNCf6Ury0Nxh2hq2Zc7p9vWpOkGmD xitX04RUDI5a4FckoCPtmSeI8RI41vsarPScSrgqLbz0TcDEDMmxLUucrYGlyfi7 BeTxVcSynMIOliXR/9nZbBQIoj+u2FaWqquO77uH0vsEFDwXRSvUZV2/fD0ZjoV7 foCONmMybPsMgWas8pz2rft+2W90V9LfIfL9B+rEzWIEx41mi0yHmu+zdjyl5wcd YVCsZ/SUhAc+ -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:14 2026 by rpki-client