This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/BNslYYnyJbQUX-hm0CSR2lkEI-c.roa File: BNslYYnyJbQUX-hm0CSR2lkEI-c.roa (raw, json) Hash identifier: ccskpB9Iw7RlPpaSvm887XUkgOImLelHDmM6zJHbDaQ= Subject key identifier: 04:DB:25:61:89:F2:25:B4:14:5F:E8:66:D0:24:91:DA:59:04:23:E7 Certificate issuer: /CN=de8cd4769c326d845ec753a670da3aca9b69ee15 Certificate serial: 019B77C73200A7A64B7C5EA5A87D5987A974 Authority key identifier: DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/BNslYYnyJbQUX-hm0CSR2lkEI-c.roa Signing time: Thu 01 Jan 2026 04:18:21 +0000 ROA not before: Thu 01 Jan 2026 04:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12966 IP address blocks: 193.227.216.0/21 maxlen: 21 193.227.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.mft rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:32:00:a7:a6:4b:7c:5e:a5:a8:7d:59:87:a9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8cd4769c326d845ec753a670da3aca9b69ee15 Validity Not Before: Jan 1 04:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04db256189f225b4145fe866d02491da590423e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:25:8d:70:67:4e:2f:bf:f4:96:7f:e5:f2: 47:59:23:68:53:97:e8:11:cf:95:e5:e9:38:f4:4b: 4c:81:74:a5:f1:6a:60:e2:97:6d:be:0b:ff:1a:60: 58:9b:5f:54:07:55:55:54:37:83:de:e8:fc:6c:32: e2:c9:b6:68:5d:79:03:e1:4d:d7:6e:a7:3e:73:fa: d7:57:cd:6f:23:00:80:a0:c9:77:a9:01:fc:91:db: d8:7f:1d:b7:54:0c:50:10:e3:ce:eb:f3:25:8c:d4: 0c:b4:69:c6:23:e7:76:f6:ef:24:af:3b:00:55:94: e0:59:a2:60:f5:dd:e7:73:c5:6d:d0:0b:36:d7:69: ce:12:9a:a0:85:79:32:7f:47:a1:ca:18:41:9f:f4: 1b:f7:a3:1c:02:3d:27:94:84:11:b7:e8:ed:9c:c2: 4e:aa:f8:39:8d:37:37:b8:1e:87:ca:d6:dc:9f:5c: 2f:a1:af:e2:b7:ae:f1:e1:8e:6a:4b:53:bb:3d:18: 8d:21:2a:2e:e4:00:02:a8:f1:86:5a:88:5a:c8:b3: 17:ef:23:75:08:0e:80:fb:87:fe:9a:3e:49:22:68: 30:56:b9:bf:ce:5e:71:b4:fc:97:07:c8:df:07:23: e4:71:47:b1:d4:ad:78:26:ca:86:f5:11:00:0b:46: 1e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DB:25:61:89:F2:25:B4:14:5F:E8:66:D0:24:91:DA:59:04:23:E7 X509v3 Authority Key Identifier: keyid:DE:8C:D4:76:9C:32:6D:84:5E:C7:53:A6:70:DA:3A:CA:9B:69:EE:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ozUdpwybYRex1OmcNo6yptp7hU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/BNslYYnyJbQUX-hm0CSR2lkEI-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9d09af-017a-4ac1-9872-6166ff6e665c/1/3ozUdpwybYRex1OmcNo6yptp7hU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.227.216.0/21 Signature Algorithm: sha256WithRSAEncryption 69:39:b3:29:cb:a6:16:64:28:20:58:ea:60:c8:60:89:67:91: 25:f9:e6:08:92:0b:7c:5e:df:c7:7a:4e:b1:96:6d:9d:66:89: 1f:d4:ec:35:3b:2a:78:fe:97:7c:81:ea:5f:3d:a9:da:c6:0c: 7d:59:6b:20:d5:e4:94:b4:cd:a4:6d:b5:79:54:6e:90:c3:5c: 9c:21:2f:e7:17:fc:4e:ab:08:83:54:e9:c2:1a:72:7f:75:7c: 74:b2:cf:17:a8:de:0a:c3:38:94:77:05:2b:9a:93:96:b3:b8: 52:70:74:c3:4e:23:17:d2:03:79:89:76:a8:5f:0e:b9:61:dd: e5:4f:f2:08:e7:07:75:67:a2:7f:43:af:33:88:bf:dc:98:b7: 67:90:04:5c:33:79:4c:87:f9:f0:cb:4e:58:1b:7a:95:10:42: b8:fe:83:1d:26:a9:b5:9f:e8:bc:e4:93:2d:71:9d:6b:70:f9: 74:7b:ad:f5:ff:4c:60:9e:8f:40:94:4b:bb:12:97:8d:f0:f7: db:fe:d7:ba:01:62:a4:d8:49:4c:85:1d:3f:0b:0e:4c:66:80: 66:c4:fa:c4:8f:55:9f:62:e1:24:b0:48:85:2c:bc:be:08:d1: ee:4b:7d:c6:9b:b2:c9:5c:33:e8:e4:36:1a:3e:a2:99:65:01: 18:a5:25:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xzIAp6ZLfF6lqH1Zh6l0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGNkNDc2OWMzMjZkODQ1ZWM3NTNhNjcwZGEzYWNhOWI2 OWVlMTUwHhcNMjYwMTAxMDQxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGRiMjU2MTg5ZjIyNWI0MTQ1ZmU4NjZkMDI0OTFkYTU5MDQyM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxekljXBnTi+/9JZ/5fJHWSNoU5fo Ec+V5ek49EtMgXSl8Wpg4pdtvgv/GmBYm19UB1VVVDeD3uj8bDLiybZoXXkD4U3X bqc+c/rXV81vIwCAoMl3qQH8kdvYfx23VAxQEOPO6/MljNQMtGnGI+d29u8krzsA VZTgWaJg9d3nc8Vt0As212nOEpqghXkyf0ehyhhBn/Qb96McAj0nlIQRt+jtnMJO qvg5jTc3uB6Hytbcn1wvoa/it67x4Y5qS1O7PRiNISou5AACqPGGWohayLMX7yN1 CA6A+4f+mj5JImgwVrm/zl5xtPyXB8jfByPkcUex1K14JsqG9REAC0YeJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFATbJWGJ8iW0FF/oZtAkkdpZBCPnMB8GA1UdIwQY MBaAFN6M1HacMm2EXsdTpnDaOsqbae4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM296VWRwd3liWVJleDFPbWNObzZ5cHRwN2hVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85ZDA5YWYtMDE3YS00YWMxLTk4NzIt NjE2NmZmNmU2NjVjLzEvQk5zbFlZbnlKYlFVWC1obTBDU1IybGtFSS1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy85ZDA5YWYtMDE3YS00YWMxLTk4NzItNjE2NmZmNmU2NjVj LzEvM296VWRwd3liWVJleDFPbWNObzZ5cHRwN2hVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwePYMA0G CSqGSIb3DQEBCwUAA4IBAQBpObMpy6YWZCggWOpgyGCJZ5El+eYIkgt8Xt/Hek6x lm2dZokf1Ow1Oyp4/pd8gepfPanaxgx9WWsg1eSUtM2kbbV5VG6Qw1ycIS/nF/xO qwiDVOnCGnJ/dXx0ss8XqN4KwziUdwUrmpOWs7hScHTDTiMX0gN5iXaoXw65Yd3l T/II5wd1Z6J/Q68ziL/cmLdnkARcM3lMh/nwy05YG3qVEEK4/oMdJqm1n+i85JMt cZ1rcPl0e631/0xgno9AlEu7EpeN8Pfb/te6AWKk2ElMhR0/Cw5MZoBmxPrEj1Wf YuEksEiFLLy+CNHuS33Gm7LJXDPo5DYaPqKZZQEYpSUx -----END CERTIFICATE-----Generated at Tue Feb 10 03:11:24 2026 by rpki-client