This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/baIq0BCiBz3PcJlSkOIxGUjevrQ.roa File: baIq0BCiBz3PcJlSkOIxGUjevrQ.roa (raw, json) Hash identifier: CeBScbn4OcxM8onOF7lmNXHa9tIqH0Nd/sjn3RSNRVM= Subject key identifier: 6D:A2:2A:D0:10:A2:07:3D:CF:70:99:52:90:E2:31:19:48:DE:BE:B4 Certificate issuer: /CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b Certificate serial: 019B7B36BEC3FE62D35B0025131B7B2FFC06 Authority key identifier: A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/baIq0BCiBz3PcJlSkOIxGUjevrQ.roa Signing time: Thu 01 Jan 2026 20:19:03 +0000 ROA not before: Thu 01 Jan 2026 20:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15576 IP address blocks: 194.153.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.mft rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:be:c3:fe:62:d3:5b:00:25:13:1b:7b:2f:fc:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08e0aef1cd1e9d32a616adf58245a3ab88a554b Validity Not Before: Jan 1 20:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6da22ad010a2073dcf70995290e2311948debeb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c0:38:54:13:71:d5:1c:87:e2:3a:89:c5:39: be:17:de:c6:90:8a:9d:19:9b:54:d0:13:39:68:54: 47:6c:65:e9:8c:54:da:71:62:be:a9:60:f4:70:76: e4:af:29:70:17:54:10:23:cb:ef:bc:c9:bc:fa:a4: 0d:b3:ef:89:ea:7b:71:60:a9:ca:e8:1f:08:cc:4b: c2:ee:7d:89:78:a1:6c:13:16:d8:0a:84:63:a8:9c: 9b:44:51:37:19:f0:85:c0:3d:43:7a:b1:af:a1:01: 0b:a5:90:96:a3:27:0b:72:18:3c:38:07:87:78:9e: 97:f9:c6:9d:a7:ef:63:77:8e:07:ad:60:bd:b5:2b: b0:6d:11:90:f3:55:16:bf:0f:f7:cb:63:67:25:0b: 34:ab:47:ea:68:e9:b7:e0:5c:8b:d6:35:3a:34:3d: 43:05:d9:04:4c:b2:29:fb:54:d6:1c:d9:c3:36:ca: fb:87:86:64:2a:d4:d0:79:d4:e8:25:d4:ce:d4:3c: c7:b9:38:dc:0e:b9:b9:b0:18:e7:5f:e8:07:0e:b6: e3:95:a2:3a:b1:57:f5:8c:d7:66:dd:46:f7:4b:ea: 47:96:78:9a:54:34:68:f9:25:e4:b2:7d:2b:80:2d: f5:d9:ba:eb:47:9a:43:44:67:0c:a4:cc:bb:0c:a4: 2d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:A2:2A:D0:10:A2:07:3D:CF:70:99:52:90:E2:31:19:48:DE:BE:B4 X509v3 Authority Key Identifier: keyid:A0:8E:0A:EF:1C:D1:E9:D3:2A:61:6A:DF:58:24:5A:3A:B8:8A:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI4K7xzR6dMqYWrfWCRaOriKVUs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/baIq0BCiBz3PcJlSkOIxGUjevrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3be7b4-7f42-4217-819b-2476291d70ee/1/oI4K7xzR6dMqYWrfWCRaOriKVUs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.153.94.0/24 Signature Algorithm: sha256WithRSAEncryption a2:28:a6:b0:74:9a:1a:a6:a4:d8:97:28:14:95:8a:e2:a9:2b: ac:96:9b:2e:90:8b:85:01:01:00:b4:10:34:4c:d0:a8:a0:48: 48:e7:68:dd:66:f7:e4:81:71:3c:17:bd:69:33:92:e9:80:09: 6b:64:cc:fd:5b:e0:86:9f:bc:f7:9f:e7:4b:47:76:4d:58:95: 37:da:53:9b:8a:24:ac:62:ab:6d:46:cb:8d:aa:31:41:88:b3: 2e:57:50:ef:ba:ba:d2:5f:0a:a9:b7:e7:e1:8c:c9:ca:89:52: a8:9e:ff:9c:19:f7:ae:24:b5:86:89:77:30:e4:2f:d5:01:22: 3f:9c:56:66:6a:97:bd:de:03:c8:29:7b:99:1b:8c:73:56:fc: 89:47:bd:e4:ac:d0:bc:bb:af:18:52:fe:f1:cd:74:c5:47:81: 29:d1:0d:b6:b2:09:27:b4:8e:90:3f:28:37:53:4f:03:05:4e: ad:60:cf:6d:52:89:22:b5:b1:24:9d:7e:58:d5:c9:98:8e:ef: 94:49:40:28:0d:2a:1f:45:ad:4e:82:98:d0:6c:c9:b0:2a:4a: 64:2a:6e:9e:e9:d9:9a:c3:86:2d:89:fc:dc:bc:76:98:d1:31: 03:eb:d2:78:4a:d4:8e:f3:31:1e:f6:25:19:29:8b:5d:98:cf: 77:ca:0a:08 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nr7D/mLTWwAlExt7L/wGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGUwYWVmMWNkMWU5ZDMyYTYxNmFkZjU4MjQ1YTNhYjg4 YTU1NGIwHhcNMjYwMTAxMjAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGEyMmFkMDEwYTIwNzNkY2Y3MDk5NTI5MGUyMzExOTQ4ZGViZWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8A4VBNx1RyH4jqJxTm+F97GkIqd GZtU0BM5aFRHbGXpjFTacWK+qWD0cHbkrylwF1QQI8vvvMm8+qQNs++J6ntxYKnK 6B8IzEvC7n2JeKFsExbYCoRjqJybRFE3GfCFwD1DerGvoQELpZCWoycLchg8OAeH eJ6X+cadp+9jd44HrWC9tSuwbRGQ81UWvw/3y2NnJQs0q0fqaOm34FyL1jU6ND1D BdkETLIp+1TWHNnDNsr7h4ZkKtTQedToJdTO1DzHuTjcDrm5sBjnX+gHDrbjlaI6 sVf1jNdm3Ub3S+pHlniaVDRo+SXksn0rgC312brrR5pDRGcMpMy7DKQtWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG2iKtAQogc9z3CZUpDiMRlI3r60MB8GA1UdIwQY MBaAFKCOCu8c0enTKmFq31gkWjq4ilVLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWIt MjQ3NjI5MWQ3MGVlLzEvYmFJcTBCQ2lCejNQY0psU2tPSXhHVWpldnJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYmU3YjQtN2Y0Mi00MjE3LTgxOWItMjQ3NjI5MWQ3MGVl LzEvb0k0Szd4elI2ZE1xWVdyZldDUmFPcmlLVlVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpleMA0G CSqGSIb3DQEBCwUAA4IBAQCiKKawdJoapqTYlygUlYriqSuslpsukIuFAQEAtBA0 TNCooEhI52jdZvfkgXE8F71pM5LpgAlrZMz9W+CGn7z3n+dLR3ZNWJU32lObiiSs YqttRsuNqjFBiLMuV1DvurrSXwqpt+fhjMnKiVKonv+cGfeuJLWGiXcw5C/VASI/ nFZmape93gPIKXuZG4xzVvyJR73krNC8u68YUv7xzXTFR4Ep0Q22sgkntI6QPyg3 U08DBU6tYM9tUokitbEknX5Y1cmYju+USUAoDSofRa1OgpjQbMmwKkpkKm6e6dma w4YtifzcvHaY0TED69J4StSO8zEe9iUZKYtdmM93ygoI -----END CERTIFICATE-----Generated at Mon Jan 26 19:22:38 2026 by rpki-client