This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/bAJITC8jwAEkzAKiUjDU0eUe8Pc.roa File: bAJITC8jwAEkzAKiUjDU0eUe8Pc.roa (raw, json) Hash identifier: peS4a0MIEzgVVM+PWhsaiUBRQch82seWA7U9uiXyF5Q= Subject key identifier: 6C:02:48:4C:2F:23:C0:01:24:CC:02:A2:52:30:D4:D1:E5:1E:F0:F7 Certificate issuer: /CN=d4074714142f83970148fab0ec3e2117c393c491 Certificate serial: 019B7C80498F8C2D53DD7B5958E12F408933 Authority key identifier: D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/bAJITC8jwAEkzAKiUjDU0eUe8Pc.roa Signing time: Fri 02 Jan 2026 02:19:00 +0000 ROA not before: Fri 02 Jan 2026 02:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214095 IP address blocks: 46.235.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.mft rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:49:8f:8c:2d:53:dd:7b:59:58:e1:2f:40:89:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4074714142f83970148fab0ec3e2117c393c491 Validity Not Before: Jan 2 02:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c02484c2f23c00124cc02a25230d4d1e51ef0f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:79:c2:b4:63:98:36:72:ea:4a:98:24:b4:9b: f6:de:c9:65:67:3e:0d:93:45:75:74:f5:3e:56:67: 2f:16:33:43:3a:0f:c4:44:1c:15:6e:7e:88:13:4b: 7a:d0:f2:c8:2b:c4:8f:cf:f0:49:da:28:bd:1d:3e: c8:3f:c0:5d:a7:fa:49:05:6f:a2:28:2a:51:d5:ab: c4:69:d7:a2:32:b3:60:42:2e:7d:16:2f:47:db:fe: 11:8f:fd:74:a3:10:f3:21:57:1a:ed:68:79:89:5e: 6b:db:1e:f9:07:ae:ad:5d:37:f0:a7:1d:34:b7:b3: 03:fb:f3:f0:12:18:54:ec:df:3d:dd:42:fa:62:c7: 1d:c6:cd:56:ca:9a:2a:68:25:bf:2b:3a:3b:1d:af: 84:60:6a:00:53:c6:2d:3b:82:15:43:ce:5d:85:7e: 58:8c:75:65:3a:76:a9:34:1f:cd:0a:ed:f6:61:e3: 91:ff:6c:c0:be:24:92:82:2c:52:25:6f:3b:d9:a8: 1e:0a:db:64:d9:07:0a:76:57:a8:ac:04:b6:51:f3: 0e:81:c1:e1:dd:95:e0:cf:7d:bc:5b:14:82:3b:08: 1a:47:6d:31:61:6c:bf:c7:29:89:5a:87:93:d9:cf: 20:50:ba:37:3a:25:8d:d7:56:a7:8f:0e:73:e4:df: 9f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:02:48:4C:2F:23:C0:01:24:CC:02:A2:52:30:D4:D1:E5:1E:F0:F7 X509v3 Authority Key Identifier: keyid:D4:07:47:14:14:2F:83:97:01:48:FA:B0:EC:3E:21:17:C3:93:C4:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AdHFBQvg5cBSPqw7D4hF8OTxJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/bAJITC8jwAEkzAKiUjDU0eUe8Pc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1ff4c-a58f-4ee3-98e9-d79ce2deea70/1/1AdHFBQvg5cBSPqw7D4hF8OTxJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.15.0/24 Signature Algorithm: sha256WithRSAEncryption 01:6f:9d:13:8b:08:74:78:23:76:be:52:fb:4c:74:ed:4c:19: 86:ce:fc:78:64:20:c2:b5:67:6e:5c:12:cb:ef:77:c7:24:f5: 2c:9b:5f:ca:07:b1:89:68:c4:77:ec:b4:f5:98:49:82:3b:cb: a1:e4:8d:db:d8:02:93:1f:83:77:cd:b6:5b:83:cc:ff:89:aa: 96:d0:f5:a6:92:ef:65:ae:58:f1:61:2f:02:9b:84:b4:71:3b: 51:2f:98:33:54:48:4c:20:c7:25:6c:1a:56:e6:b5:70:08:f5: bf:4c:a6:67:12:83:e4:8f:79:85:3f:3f:28:ac:d0:e8:34:01: 5f:c9:c4:bf:63:99:4d:27:42:29:89:8c:63:41:47:05:69:7e: 4f:82:e1:07:dd:bc:6b:ea:67:60:99:9c:c9:86:c6:b6:84:86: 30:d6:a9:ff:9b:5c:60:43:cc:ca:64:f9:07:b2:b1:6f:a1:64: 34:6e:62:09:ee:d0:6a:b8:a6:75:ad:98:29:85:58:93:44:b7: 0e:6f:b7:7a:f9:87:e3:7d:98:50:b9:0b:b7:36:46:0c:74:32: fe:03:87:6e:f6:b2:93:c1:2d:5f:20:3e:c7:2c:f9:a6:a8:d0: 84:ac:60:75:d3:0e:9e:20:6d:19:93:d3:7a:05:33:82:0b:7e: 0d:38:29:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gEmPjC1T3XtZWOEvQIkzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MDc0NzE0MTQyZjgzOTcwMTQ4ZmFiMGVjM2UyMTE3YzM5 M2M0OTEwHhcNMjYwMTAyMDIxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzAyNDg0YzJmMjNjMDAxMjRjYzAyYTI1MjMwZDRkMWU1MWVmMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HnCtGOYNnLqSpgktJv23sllZz4N k0V1dPU+VmcvFjNDOg/ERBwVbn6IE0t60PLIK8SPz/BJ2ii9HT7IP8Bdp/pJBW+i KCpR1avEadeiMrNgQi59Fi9H2/4Rj/10oxDzIVca7Wh5iV5r2x75B66tXTfwpx00 t7MD+/PwEhhU7N893UL6Yscdxs1WypoqaCW/Kzo7Ha+EYGoAU8YtO4IVQ85dhX5Y jHVlOnapNB/NCu32YeOR/2zAviSSgixSJW872ageCttk2QcKdleorAS2UfMOgcHh 3ZXgz328WxSCOwgaR20xYWy/xymJWoeT2c8gULo3OiWN11anjw5z5N+fIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGwCSEwvI8ABJMwColIw1NHlHvD3MB8GA1UdIwQY MBaAFNQHRxQUL4OXAUj6sOw+IRfDk8SRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTkt ZDc5Y2UyZGVlYTcwLzEvYkFKSVRDOGp3QUVrekFLaVVqRFUwZVVlOFBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9hMWZmNGMtYTU4Zi00ZWUzLTk4ZTktZDc5Y2UyZGVlYTcw LzEvMUFkSEZCUXZnNWNCU1BxdzdENGhGOE9UeEpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALusPMA0G CSqGSIb3DQEBCwUAA4IBAQABb50Tiwh0eCN2vlL7THTtTBmGzvx4ZCDCtWduXBLL 73fHJPUsm1/KB7GJaMR37LT1mEmCO8uh5I3b2AKTH4N3zbZbg8z/iaqW0PWmku9l rljxYS8Cm4S0cTtRL5gzVEhMIMclbBpW5rVwCPW/TKZnEoPkj3mFPz8orNDoNAFf ycS/Y5lNJ0IpiYxjQUcFaX5PguEH3bxr6mdgmZzJhsa2hIYw1qn/m1xgQ8zKZPkH srFvoWQ0bmIJ7tBquKZ1rZgphViTRLcOb7d6+YfjfZhQuQu3NkYMdDL+A4du9rKT wS1fID7HLPmmqNCErGB10w6eIG0Zk9N6BTOCC34NOCk1 -----END CERTIFICATE-----Generated at Mon Feb 9 23:55:02 2026 by rpki-client