This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Bax6o4-NzxkAhAjfR_GFHkHw9iQ.roa File: Bax6o4-NzxkAhAjfR_GFHkHw9iQ.roa (raw, json) Hash identifier: xFxb60gYq3cu/yo+1/lRCOmkwuUCUfsdJZ/VYwmhC4c= Subject key identifier: 05:AC:7A:A3:8F:8D:CF:19:00:84:08:DF:47:F1:85:1E:41:F0:F6:24 Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Certificate serial: 019B7B364E53E72C3F8560BE48F825F8611B Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Bax6o4-NzxkAhAjfR_GFHkHw9iQ.roa Signing time: Thu 01 Jan 2026 20:18:35 +0000 ROA not before: Thu 01 Jan 2026 20:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 79.110.236.0/24 maxlen: 24 146.19.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:4e:53:e7:2c:3f:85:60:be:48:f8:25:f8:61:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e Validity Not Before: Jan 1 20:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05ac7aa38f8dcf19008408df47f1851e41f0f624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4f:f4:0e:f3:3f:f7:fe:48:b9:1d:1e:ca:6d: 48:1f:19:93:2a:7c:60:40:8f:e5:f5:76:61:08:6b: eb:99:ca:7a:dc:2f:f8:f1:31:36:85:11:d9:7a:5b: 16:2c:51:2e:c3:24:41:bd:ac:49:a0:7e:b7:59:89: c7:35:96:c9:6a:28:4d:e6:90:1e:a0:f0:9d:f5:d1: fd:d0:89:1f:72:bc:a7:f0:85:c4:5c:d8:47:6f:fd: ed:9d:9c:12:18:98:d7:71:f8:b5:0f:41:b7:80:73: 78:5b:4a:d3:b7:bf:96:a4:65:be:3c:dd:60:b4:64: 48:e8:56:92:a5:aa:68:11:7a:6b:ca:c8:a6:5b:7d: 5c:9c:58:79:43:52:fb:78:1e:e8:fb:c5:01:8f:60: de:c9:1b:f6:00:dd:c3:d0:a4:69:da:6b:ba:04:dd: 40:3c:3d:fa:15:ef:74:ac:34:ba:08:63:e9:74:26: 61:dd:84:58:6c:0b:e5:cd:e4:dd:4b:42:74:29:f9: ba:d2:72:40:e2:55:4c:87:d1:b8:a4:57:84:80:34: 52:4a:15:22:1e:a6:4f:d0:6c:1a:37:bc:b0:76:e9: ca:1b:38:1e:1f:ce:15:23:7b:df:94:28:d8:fc:37: 06:dd:9c:56:61:5f:71:23:bb:4e:ca:9f:75:0c:71: f5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AC:7A:A3:8F:8D:CF:19:00:84:08:DF:47:F1:85:1E:41:F0:F6:24 X509v3 Authority Key Identifier: keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Bax6o4-NzxkAhAjfR_GFHkHw9iQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.236.0/24 146.19.160.0/24 Signature Algorithm: sha256WithRSAEncryption 07:f6:65:2e:e1:52:74:f4:57:ea:93:32:5f:1c:1a:a8:00:67: c3:70:55:ca:bb:44:ac:80:ec:8d:3d:e2:14:97:20:67:8c:5f: 69:2a:1c:00:e5:08:b9:74:15:ee:a2:48:8d:2b:c9:6d:ac:19: 14:01:49:2b:c0:86:e6:12:23:a6:92:9b:2b:c3:d1:5a:9c:19: 5d:21:df:9e:74:5f:81:15:9a:4f:49:1c:44:56:d4:66:b8:4f: 90:e1:66:61:e1:a7:09:a0:5c:70:d3:c5:41:51:de:85:78:3f: 7e:df:8d:82:bd:b2:71:0d:dc:e5:30:6a:e6:87:c8:a2:f8:27: 7f:f0:92:c0:ab:85:ff:87:eb:aa:f0:d6:68:54:48:d0:9b:86: a9:17:cd:e8:fd:07:fd:1d:44:69:2b:2b:0a:a6:8e:d3:e8:fa: 65:c6:78:16:df:72:d2:06:9d:5c:36:08:d3:9a:3d:17:89:98: a8:27:cf:73:33:67:a3:29:7f:b7:f6:13:b4:9f:bf:cd:10:33: ad:15:74:55:3a:66:4d:d6:06:fe:55:42:62:83:6b:cf:0d:c7: a4:1e:26:4a:dc:09:47:c9:f0:19:3b:b9:08:fa:98:89:94:2f: 83:25:c1:7b:40:7b:2f:8c:b4:0e:39:a9:58:b0:06:b3:e3:c5: e9:92:0e:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Nk5T5yw/hWC+SPgl+GEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2 MmU1NmUwHhcNMjYwMTAxMjAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWFjN2FhMzhmOGRjZjE5MDA4NDA4ZGY0N2YxODUxZTQxZjBmNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk/0DvM/9/5IuR0eym1IHxmTKnxg QI/l9XZhCGvrmcp63C/48TE2hRHZelsWLFEuwyRBvaxJoH63WYnHNZbJaihN5pAe oPCd9dH90Ikfcryn8IXEXNhHb/3tnZwSGJjXcfi1D0G3gHN4W0rTt7+WpGW+PN1g tGRI6FaSpapoEXprysimW31cnFh5Q1L7eB7o+8UBj2DeyRv2AN3D0KRp2mu6BN1A PD36Fe90rDS6CGPpdCZh3YRYbAvlzeTdS0J0Kfm60nJA4lVMh9G4pFeEgDRSShUi HqZP0GwaN7ywdunKGzgeH84VI3vflCjY/DcG3ZxWYV9xI7tOyp91DHH1sQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAWseqOPjc8ZAIQI30fxhR5B8PYkMB8GA1UdIwQY MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt YjBiMzVhMzRlMzg4LzEvQmF4Nm80LU56eGtBaEFqZlJfR0ZIa0h3OWlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4 LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT27sAwQA khOgMA0GCSqGSIb3DQEBCwUAA4IBAQAH9mUu4VJ09FfqkzJfHBqoAGfDcFXKu0Ss gOyNPeIUlyBnjF9pKhwA5Qi5dBXuokiNK8ltrBkUAUkrwIbmEiOmkpsrw9FanBld Id+edF+BFZpPSRxEVtRmuE+Q4WZh4acJoFxw08VBUd6FeD9+342CvbJxDdzlMGrm h8ii+Cd/8JLAq4X/h+uq8NZoVEjQm4apF83o/Qf9HURpKysKpo7T6PplxngW33LS Bp1cNgjTmj0XiZioJ89zM2ejKX+39hO0n7/NEDOtFXRVOmZN1gb+VUJig2vPDcek HiZK3AlHyfAZO7kI+piJlC+DJcF7QHsvjLQOOalYsAaz48Xpkg6u -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:40 2026 by rpki-client