This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/baBJqmkb8cH3trwUOjU-J7iCRm0.roa File: baBJqmkb8cH3trwUOjU-J7iCRm0.roa (raw, json) Hash identifier: aQ54DTMNhyRNR4Zku4OkKCZVHGX83o9BY8A3XuPXwQ0= Subject key identifier: 6D:A0:49:AA:69:1B:F1:C1:F7:B6:BC:14:3A:35:3E:27:B8:82:46:6D Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019A914D5F4177396DF9E8AAEB85EA0C6AF4 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/baBJqmkb8cH3trwUOjU-J7iCRm0.roa Signing time: Mon 17 Nov 2025 10:12:38 +0000 ROA not before: Mon 17 Nov 2025 10:12:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 213.130.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 24 Nov 2025 06:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:91:4d:5f:41:77:39:6d:f9:e8:aa:eb:85:ea:0c:6a:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Nov 17 10:12:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6da049aa691bf1c1f7b6bc143a353e27b882466d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:29:a9:6c:07:20:e1:4b:15:56:16:c0:e5:42: 04:45:79:02:a6:f0:65:86:ee:81:22:1a:69:ee:c2: f8:69:5c:78:46:2d:6f:2e:fe:7c:18:ae:a0:85:65: e9:51:72:c3:12:b4:d6:30:48:03:9c:df:87:ff:ab: 6a:18:e2:21:9d:5c:e2:63:b0:99:0c:f5:5a:38:0b: e8:39:12:28:2c:26:a0:b8:ea:e2:c4:30:d9:a9:c3: 95:1e:d5:23:aa:e4:c4:e7:e3:69:6d:43:95:34:58: 34:6a:d5:a2:1b:76:16:ed:d8:72:1c:b9:f6:b9:68: 18:19:4d:a9:a1:6f:f7:54:ca:e3:e6:0e:e3:69:24: 74:e4:f0:ee:f8:1d:74:8d:36:6e:d5:d0:9f:a9:9f: bb:60:16:d1:65:35:84:88:67:8d:30:32:d7:d9:02: 61:ab:eb:bc:53:2d:24:85:2a:21:49:be:dd:84:80: 05:42:67:0d:b0:76:ca:f6:bc:a3:95:a1:42:82:f2: 3a:69:7d:53:38:bc:8f:cb:8a:f5:78:2c:4a:c2:95: 3f:d3:56:0c:b4:b8:45:03:c4:1e:ad:04:74:52:3a: 19:b9:c3:3d:10:c4:8d:b9:3d:cf:d7:bd:07:8b:5a: ef:9f:82:ec:38:b4:ff:55:62:47:d8:bc:f5:85:b7: 4d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A0:49:AA:69:1B:F1:C1:F7:B6:BC:14:3A:35:3E:27:B8:82:46:6D X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/baBJqmkb8cH3trwUOjU-J7iCRm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.130.156.0/24 Signature Algorithm: sha256WithRSAEncryption 28:50:c8:2f:0b:82:6b:16:ca:4c:ca:6d:e2:7d:99:50:83:61: 04:fa:20:f9:89:2a:c5:f6:fd:3f:d2:77:5c:04:3c:c9:6d:dc: 86:21:d1:96:5b:9f:c3:67:39:32:fd:4c:06:46:ee:c5:5a:b4: 07:8e:be:3a:02:54:5b:6b:17:cc:19:3b:b6:ad:e6:10:ba:52: 76:b8:e3:e5:4b:15:0b:ac:e2:f9:42:ab:a0:cc:6d:47:5b:0f: 4f:1d:8f:71:df:01:26:35:38:d5:3d:c3:39:d6:66:1e:89:aa: cc:ff:ff:b6:8f:16:14:28:4c:5e:de:44:57:bc:ef:c9:04:54: e0:38:13:02:65:95:9b:b7:59:67:5b:48:d0:91:a9:90:e4:e6: 14:0f:71:d1:7b:ff:4b:47:b7:f8:82:a1:e2:1f:f4:ca:21:8a: 00:11:ca:a2:0c:1a:a6:d3:ae:2e:12:c7:50:d0:79:3b:df:31: 62:fd:a7:46:1a:69:43:fd:bd:59:3f:06:b8:ec:e7:9b:73:fa: 6b:9a:eb:10:f2:4a:bc:49:92:a5:4f:9f:6f:7a:dd:2a:b6:bf: b0:bd:42:ab:40:5f:81:5f:c8:66:22:6e:e6:6c:84:b1:d0:80: 00:7a:6d:aa:5d:15:6e:8f:21:ba:35:60:ad:d0:b4:f0:5b:59: 1a:72:6f:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqRTV9Bdzlt+eiq64XqDGr0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjUxMTE3MTAxMjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGEwNDlhYTY5MWJmMWMxZjdiNmJjMTQzYTM1M2UyN2I4ODI0NjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSmpbAcg4UsVVhbA5UIERXkCpvBl hu6BIhpp7sL4aVx4Ri1vLv58GK6ghWXpUXLDErTWMEgDnN+H/6tqGOIhnVziY7CZ DPVaOAvoORIoLCaguOrixDDZqcOVHtUjquTE5+NpbUOVNFg0atWiG3YW7dhyHLn2 uWgYGU2poW/3VMrj5g7jaSR05PDu+B10jTZu1dCfqZ+7YBbRZTWEiGeNMDLX2QJh q+u8Uy0khSohSb7dhIAFQmcNsHbK9ryjlaFCgvI6aX1TOLyPy4r1eCxKwpU/01YM tLhFA8QerQR0UjoZucM9EMSNuT3P170Hi1rvn4LsOLT/VWJH2Lz1hbdNKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG2gSappG/HB97a8FDo1Pie4gkZtMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvYmFCSnFta2I4Y0gzdHJ3VU9qVS1KN2lDUm0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YKcMA0G CSqGSIb3DQEBCwUAA4IBAQAoUMgvC4JrFspMym3ifZlQg2EE+iD5iSrF9v0/0ndc BDzJbdyGIdGWW5/DZzky/UwGRu7FWrQHjr46AlRbaxfMGTu2reYQulJ2uOPlSxUL rOL5QqugzG1HWw9PHY9x3wEmNTjVPcM51mYeiarM//+2jxYUKExe3kRXvO/JBFTg OBMCZZWbt1lnW0jQkamQ5OYUD3HRe/9LR7f4gqHiH/TKIYoAEcqiDBqm064uEsdQ 0Hk73zFi/adGGmlD/b1ZPwa47Oebc/prmusQ8kq8SZKlT59vet0qtr+wvUKrQF+B X8hmIm7mbISx0IAAem2qXRVujyG6NWCt0LTwW1kacm9g -----END CERTIFICATE-----Generated at Sun Nov 23 12:07:09 2025 by rpki-client