This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa File: S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa (raw, json) Hash identifier: thzWzHkRBVrBpMkyMju39NgzMSOUf/2SSYied1BZFaw= Subject key identifier: 4B:EC:81:9D:B5:B6:4C:F4:5D:1E:6F:01:BE:79:1B:E9:22:8D:3F:E1 Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a Certificate serial: 019B7E375E5CC0282BE50F5AA699396992AB Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa Signing time: Fri 02 Jan 2026 10:18:36 +0000 ROA not before: Fri 02 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 195.78.50.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5e:5c:c0:28:2b:e5:0f:5a:a6:99:39:69:92:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a Validity Not Before: Jan 2 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bec819db5b64cf45d1e6f01be791be9228d3fe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:26:64:6f:8c:37:50:b8:3c:42:b9:f2:6e:ad: 91:29:76:c6:f5:c4:2f:37:7b:4e:d1:ed:f7:8b:cd: 9c:27:c1:65:fd:3e:f5:ad:b5:1f:36:60:1f:4d:ba: 92:5a:86:56:12:63:cb:20:19:ba:b1:ac:fe:4b:c2: e1:cb:1f:83:ed:0f:5c:7a:3e:59:e5:0b:98:dc:78: 63:a7:0a:2e:1d:15:19:bb:dc:ec:99:8c:30:07:69: 29:d8:5f:82:05:f3:e1:b6:6a:1a:1f:e5:1f:93:f1: d1:1e:06:f9:b2:f3:ab:20:2c:07:90:42:32:fe:95: 7c:94:6b:16:9a:e0:09:59:bb:a2:39:9d:ca:16:a2: 1e:de:ec:e5:d6:57:8d:8c:48:07:98:43:43:75:83: 80:65:6f:ca:b6:91:0e:62:b7:dd:da:ac:ae:35:6f: 92:76:d2:11:5d:d7:df:b6:76:cb:64:c4:ad:6e:39: cd:6e:0e:dd:d7:41:04:21:a3:f5:a2:20:f8:83:8f: 14:2a:13:98:67:cf:af:69:a5:51:e1:54:7f:a9:ea: b1:23:a3:a8:50:15:da:5d:c0:31:78:e8:f8:38:a4: a9:b4:9f:8a:3e:11:73:8f:36:55:0f:0a:7f:73:70: 6d:a6:3a:56:64:e6:46:55:93:ca:ae:8e:13:3b:a2: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EC:81:9D:B5:B6:4C:F4:5D:1E:6F:01:BE:79:1B:E9:22:8D:3F:E1 X509v3 Authority Key Identifier: keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.50.0/23 Signature Algorithm: sha256WithRSAEncryption 61:5d:5f:24:36:11:e6:3a:bb:d1:fc:73:d9:28:ee:17:ae:e4: df:e6:96:b6:99:79:e6:50:0b:43:fa:95:d5:86:d6:6e:80:61: 9c:1d:7e:d5:72:3d:a2:b9:3b:9b:ae:71:75:93:44:61:c3:58: 27:ce:5b:45:5e:13:5a:cb:17:a7:9d:e7:d8:15:ea:93:79:48: b4:aa:b0:72:54:e0:4b:11:9c:06:db:b7:a0:92:9e:23:cb:e3: 51:32:1b:65:47:f3:62:19:2d:1d:49:d5:5e:55:fd:8d:f5:69: e9:0f:e3:07:18:4b:a2:b7:4e:67:9a:d0:5e:8f:5c:b3:a0:19: 03:08:12:29:35:94:7f:70:1b:ea:ea:4a:90:e5:bd:b7:1e:9c: 5f:3d:98:e4:e6:48:74:65:af:6c:13:0c:b6:12:d1:7b:83:27: 75:20:b2:29:3f:67:16:39:f4:31:00:9e:9d:1b:95:4f:94:df: a5:4f:5e:2a:e9:cf:2a:12:c3:a4:12:63:96:0a:dc:71:12:0c: 84:04:8e:69:0d:82:ee:5b:dc:ca:2d:ee:ae:31:84:2b:99:22: 2e:db:30:35:e1:ab:87:66:e5:7e:b5:28:8d:18:76:bc:94:f2: a1:53:2a:62:a6:f3:c8:1b:3c:5b:3e:4c:c8:a4:aa:ec:42:62: cf:c8:ae:fd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N15cwCgr5Q9appk5aZKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWFkMDhmMzZjZmJjMDAwNTNhNWVlM2Q1YWJiN2EzMTE3 YzNmOGEwHhcNMjYwMTAyMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmVjODE5ZGI1YjY0Y2Y0NWQxZTZmMDFiZTc5MWJlOTIyOGQzZmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSZkb4w3ULg8Qrnybq2RKXbG9cQv N3tO0e33i82cJ8Fl/T71rbUfNmAfTbqSWoZWEmPLIBm6saz+S8Lhyx+D7Q9cej5Z 5QuY3HhjpwouHRUZu9zsmYwwB2kp2F+CBfPhtmoaH+Ufk/HRHgb5svOrICwHkEIy /pV8lGsWmuAJWbuiOZ3KFqIe3uzl1leNjEgHmENDdYOAZW/KtpEOYrfd2qyuNW+S dtIRXdfftnbLZMStbjnNbg7d10EEIaP1oiD4g48UKhOYZ8+vaaVR4VR/qeqxI6Oo UBXaXcAxeOj4OKSptJ+KPhFzjzZVDwp/c3BtpjpWZOZGVZPKro4TO6I3TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEvsgZ21tkz0XR5vAb55G+kijT/hMB8GA1UdIwQY MBaAFLqq0I82z7wABTpe49Wrt6MRfD+KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAt M2Q0OGRhOWIwNmEyLzEvUy15Qm5iVzJUUFJkSG04QnZua2I2U0tOUC1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80ZWRiZTktYzVkMi00MWRhLTljNjAtM2Q0OGRhOWIwNmEy LzEvdXFyUWp6YlB2QUFGT2w3ajFhdTNveEY4UDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw04yMA0G CSqGSIb3DQEBCwUAA4IBAQBhXV8kNhHmOrvR/HPZKO4XruTf5pa2mXnmUAtD+pXV htZugGGcHX7Vcj2iuTubrnF1k0Rhw1gnzltFXhNayxennefYFeqTeUi0qrByVOBL EZwG27egkp4jy+NRMhtlR/NiGS0dSdVeVf2N9WnpD+MHGEuit05nmtBej1yzoBkD CBIpNZR/cBvq6kqQ5b23HpxfPZjk5kh0Za9sEwy2EtF7gyd1ILIpP2cWOfQxAJ6d G5VPlN+lT14q6c8qEsOkEmOWCtxxEgyEBI5pDYLuW9zKLe6uMYQrmSIu2zA14auH ZuV+tSiNGHa8lPKhUypipvPIGzxbPkzIpKrsQmLPyK79 -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:01 2026 by rpki-client