This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/bOWNnQQVbM5f-UYg-QV5mDSs02I.roa File: bOWNnQQVbM5f-UYg-QV5mDSs02I.roa (raw, json) Hash identifier: ZHzPwAfR/0qTdqa3UIdlS72kIIMUcV3Y09FsBOM1tW0= Subject key identifier: 6C:E5:8D:9D:04:15:6C:CE:5F:F9:46:20:F9:05:79:98:34:AC:D3:62 Certificate issuer: /CN=f566016d878230128b58e279d661c195e6399588 Certificate serial: 019B7C11204088010A04671EA93CDA11ED09 Authority key identifier: F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/bOWNnQQVbM5f-UYg-QV5mDSs02I.roa Signing time: Fri 02 Jan 2026 00:17:35 +0000 ROA not before: Fri 02 Jan 2026 00:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.158.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.mft rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:20:40:88:01:0a:04:67:1e:a9:3c:da:11:ed:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f566016d878230128b58e279d661c195e6399588 Validity Not Before: Jan 2 00:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ce58d9d04156cce5ff94620f905799834acd362 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6b:6b:6c:cc:40:f3:d8:1d:25:25:5a:37:ea: 59:f2:28:85:7a:33:1f:96:a6:0c:b7:89:a0:e4:01: 4a:aa:00:ae:f9:8e:91:9b:38:6f:34:ae:2c:a9:b0: 70:f7:83:58:2f:40:c2:5c:ce:18:c5:0e:09:31:d0: 27:11:25:ea:f6:b9:74:15:fe:bf:dc:d1:19:e9:c6: c3:da:5d:02:0c:1b:48:89:6c:49:9b:86:e9:78:35: 90:a2:e6:c0:80:28:e5:a2:fd:e7:84:45:f4:01:8f: ea:ae:41:7c:93:a3:4d:80:0f:64:07:19:3f:26:ea: e6:e7:47:0d:b3:da:af:75:f9:75:25:78:e5:04:59: a9:73:c9:1f:2d:15:a4:85:3f:89:76:51:97:5c:a0: d0:3d:dc:6c:9e:72:e5:ec:d2:d4:7b:76:8a:0b:bc: 79:b6:86:84:c8:65:8e:02:ed:cf:9e:45:ac:d2:3b: 85:d0:8c:0b:d4:6c:98:a9:5f:0f:9b:2f:06:b3:16: bf:e7:98:1d:bc:ba:a1:6b:47:1a:a1:9d:44:e2:d0: 23:b4:29:2f:a5:39:91:22:fb:e5:38:0f:57:99:d2: 27:93:dd:37:5a:16:d9:51:7e:c6:ee:44:f5:8d:3c: 02:e3:89:17:8f:ad:45:20:eb:c6:62:aa:01:eb:46: 2e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E5:8D:9D:04:15:6C:CE:5F:F9:46:20:F9:05:79:98:34:AC:D3:62 X509v3 Authority Key Identifier: keyid:F5:66:01:6D:87:82:30:12:8B:58:E2:79:D6:61:C1:95:E6:39:95:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9WYBbYeCMBKLWOJ51mHBleY5lYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/bOWNnQQVbM5f-UYg-QV5mDSs02I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/093a51-1075-40be-9dc2-d15b079c35fb/1/9WYBbYeCMBKLWOJ51mHBleY5lYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.158.109.0/24 Signature Algorithm: sha256WithRSAEncryption 45:c3:a3:76:a3:29:c8:23:a9:60:74:7f:2c:87:17:c1:41:f1: cc:46:e6:c5:65:80:97:73:3a:8f:b3:9d:70:29:4b:ee:ea:62: 42:89:1b:a6:59:7b:1c:7f:c1:3b:11:eb:0c:5c:65:f6:75:b8: 69:92:28:27:7b:b4:20:6e:e0:a6:38:8c:ad:b8:c9:33:b3:d5: 63:67:b8:2a:70:b3:e9:df:b6:52:e2:71:6f:c0:3e:32:79:6a: 5e:a8:6f:ec:e0:8f:85:20:7d:9d:78:3a:55:6f:bc:26:04:1a: f7:81:61:ee:01:ca:0b:97:ad:09:ae:85:c3:d9:5d:f8:2a:be: ec:a5:5f:a8:9c:0e:cd:db:f8:9f:76:5f:67:71:1c:7e:e2:8f: 3b:b4:cc:86:69:21:3c:cd:83:74:d8:c0:97:59:29:eb:d1:df: 0d:43:77:42:c6:25:3c:43:62:82:0b:87:dc:fe:30:14:56:7e: d6:64:39:d7:f0:2e:8f:5f:13:b2:5d:7e:2b:33:ab:a6:0e:61: d3:72:92:6b:f5:32:82:0b:c1:34:cc:99:bf:da:22:d9:48:09: 21:26:4f:fa:e5:ad:24:64:33:ea:72:3a:e2:7f:80:64:f0:82: a6:9d:71:f8:36:9a:ba:7b:6b:59:da:70:42:78:ed:5b:15:dd: 87:e2:38:b5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ESBAiAEKBGceqTzaEe0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1NjYwMTZkODc4MjMwMTI4YjU4ZTI3OWQ2NjFjMTk1ZTYz OTk1ODgwHhcNMjYwMTAyMDAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2U1OGQ5ZDA0MTU2Y2NlNWZmOTQ2MjBmOTA1Nzk5ODM0YWNkMzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumtrbMxA89gdJSVaN+pZ8iiFejMf lqYMt4mg5AFKqgCu+Y6RmzhvNK4sqbBw94NYL0DCXM4YxQ4JMdAnESXq9rl0Ff6/ 3NEZ6cbD2l0CDBtIiWxJm4bpeDWQoubAgCjlov3nhEX0AY/qrkF8k6NNgA9kBxk/ Jurm50cNs9qvdfl1JXjlBFmpc8kfLRWkhT+JdlGXXKDQPdxsnnLl7NLUe3aKC7x5 toaEyGWOAu3PnkWs0juF0IwL1GyYqV8Pmy8Gsxa/55gdvLqha0caoZ1E4tAjtCkv pTmRIvvlOA9XmdInk903WhbZUX7G7kT1jTwC44kXj61FIOvGYqoB60YuUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGzljZ0EFWzOX/lGIPkFeZg0rNNiMB8GA1UdIwQY MBaAFPVmAW2HgjASi1jiedZhwZXmOZWIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wOTNhNTEtMTA3NS00MGJlLTlkYzIt ZDE1YjA3OWMzNWZiLzEvYk9XTm5RUVZiTTVmLVVZZy1RVjVtRFNzMDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi8wOTNhNTEtMTA3NS00MGJlLTlkYzItZDE1YjA3OWMzNWZi LzEvOVdZQmJZZUNNQktMV09KNTFtSEJsZVk1bFlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ5tMA0G CSqGSIb3DQEBCwUAA4IBAQBFw6N2oynII6lgdH8shxfBQfHMRubFZYCXczqPs51w KUvu6mJCiRumWXscf8E7EesMXGX2dbhpkigne7QgbuCmOIytuMkzs9VjZ7gqcLPp 37ZS4nFvwD4yeWpeqG/s4I+FIH2deDpVb7wmBBr3gWHuAcoLl60JroXD2V34Kr7s pV+onA7N2/ifdl9ncRx+4o87tMyGaSE8zYN02MCXWSnr0d8NQ3dCxiU8Q2KCC4fc /jAUVn7WZDnX8C6PXxOyXX4rM6umDmHTcpJr9TKCC8E0zJm/2iLZSAkhJk/65a0k ZDPqcjrif4Bk8IKmnXH4Npq6e2tZ2nBCeO1bFd2H4ji1 -----END CERTIFICATE-----Generated at Fri Jan 9 17:04:37 2026 by rpki-client