This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/1-Zd0soPbonXlQSdZUd5F0BYzCmo.roa
File: 1-Zd0soPbonXlQSdZUd5F0BYzCmo.roa (raw, json)
Hash identifier: cDcxazDAPLuJF2nsTsFdY9N3evGGYYAD0eF62xKd6rw=
Subject key identifier: F9:97:74:B2:83:DB:A2:75:E5:41:27:59:51:DE:45:D0:16:33:0A:6A
Certificate issuer: /CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Certificate serial: 019B7C11D0A6C917EBCDDA7641A0ADD23037
Authority key identifier: 6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/1-Zd0soPbonXlQSdZUd5F0BYzCmo.roa
Signing time: Fri 02 Jan 2026 00:18:20 +0000
ROA not before: Fri 02 Jan 2026 00:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44700
IP address blocks: 195.149.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:11:d0:a6:c9:17:eb:cd:da:76:41:a0:ad:d2:30:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e80725060ff4b3b55acde6a397c31eea97c237c
Validity
Not Before: Jan 2 00:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f99774b283dba275e541275951de45d016330a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:15:5c:95:af:39:49:6a:d4:2f:2e:6b:79:96:
92:73:50:0b:12:ff:45:b0:8c:48:9d:e0:93:76:c6:
08:90:70:e9:8f:3c:66:2b:29:e1:b4:6d:81:0c:1b:
57:ca:a4:0d:56:12:22:bc:34:b4:da:13:eb:27:58:
72:5f:2c:89:c8:af:5f:89:af:70:80:40:58:3e:50:
9d:9f:6d:b8:75:8d:4c:c6:f5:4a:94:05:68:5d:06:
72:b7:b3:46:fa:2a:ad:fd:ca:71:63:1e:3b:40:27:
ba:a2:b0:ec:a6:dd:2e:9e:21:93:0e:5e:36:94:18:
6c:63:d1:f2:08:45:5e:d3:23:0e:86:17:26:02:13:
64:02:98:95:13:b9:6e:6b:0f:f9:37:fb:c5:b9:a6:
24:df:96:31:7e:37:31:84:2c:13:6d:fa:08:c5:26:
d6:37:44:de:31:cb:b4:a2:97:dd:41:3c:3e:1e:88:
1f:4e:f4:02:fc:2d:82:b2:d9:40:50:7d:da:4a:39:
39:98:61:1b:2e:01:57:51:99:85:51:44:6a:96:2c:
bb:3c:fc:1a:98:4a:91:8f:b7:d1:42:e6:76:ca:1a:
95:7a:72:bf:d7:98:fc:13:56:e2:a0:34:c0:25:c9:
d6:67:16:f6:50:17:71:1c:91:54:a8:cd:7b:0d:c1:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:97:74:B2:83:DB:A2:75:E5:41:27:59:51:DE:45:D0:16:33:0A:6A
X509v3 Authority Key Identifier:
keyid:6E:80:72:50:60:FF:4B:3B:55:AC:DE:6A:39:7C:31:EE:A9:7C:23:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boByUGD_SztVrN5qOXwx7ql8I3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/1-Zd0soPbonXlQSdZUd5F0BYzCmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7a6bd9-4be9-402b-8536-53335da0cfd3/1/boByUGD_SztVrN5qOXwx7ql8I3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.149.99.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f6:aa:5d:bc:ec:99:af:e1:4f:68:c1:cd:ea:06:14:42:12:
f6:08:e3:34:8e:17:d4:31:84:d6:f1:b4:c1:13:0f:c4:1f:65:
70:76:9d:f5:16:73:15:de:ce:ad:31:51:89:ee:c7:2c:1a:78:
ff:6f:f9:cb:a7:94:e3:12:e4:33:6d:d8:b7:e0:91:71:29:ab:
a0:ab:8b:ab:6b:87:1d:fa:e7:cb:f1:2f:06:96:d6:fd:70:86:
79:5f:04:47:88:ba:c4:2d:58:ff:87:59:64:da:b2:09:02:e9:
f6:93:d8:12:60:55:37:cc:f8:a0:dd:e4:4a:8e:aa:5e:35:8b:
d4:ed:d3:1b:9b:d6:39:57:14:94:78:db:cc:7d:fa:15:40:79:
22:a4:de:bb:5b:98:f8:dd:02:0a:78:1d:aa:47:5c:2b:f0:b5:
d9:3e:89:e4:64:7d:1f:5f:58:b0:50:5b:c6:e5:98:09:49:e1:
59:36:e1:06:cf:c9:26:e2:31:e5:d9:aa:7e:a7:b2:d1:2c:cd:
c3:c1:a5:f4:da:c8:fb:74:a3:36:b1:9a:59:72:e1:65:75:8b:
26:c4:0f:df:87:8f:93:d2:8d:2e:db:6b:0d:6c:e7:b2:1d:09:
08:04:8f:5c:f2:9b:81:64:8a:9a:b2:4c:dd:6e:9d:37:c4:98:
c0:b0:5e:b2
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZt8EdCmyRfrzdp2QaCt0jA3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODA3MjUwNjBmZjRiM2I1NWFjZGU2YTM5N2MzMWVlYTk3
YzIzN2MwHhcNMjYwMTAyMDAxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTk3NzRiMjgzZGJhMjc1ZTU0MTI3NTk1MWRlNDVkMDE2MzMwYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshVcla85SWrULy5reZaSc1ALEv9F
sIxIneCTdsYIkHDpjzxmKynhtG2BDBtXyqQNVhIivDS02hPrJ1hyXyyJyK9fia9w
gEBYPlCdn224dY1MxvVKlAVoXQZyt7NG+iqt/cpxYx47QCe6orDspt0uniGTDl42
lBhsY9HyCEVe0yMOhhcmAhNkApiVE7luaw/5N/vFuaYk35YxfjcxhCwTbfoIxSbW
N0TeMcu0opfdQTw+HogfTvQC/C2CstlAUH3aSjk5mGEbLgFXUZmFUURqliy7PPwa
mEqRj7fRQuZ2yhqVenK/15j8E1bioDTAJcnWZxb2UBdxHJFUqM17DcFGrwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPmXdLKD26J15UEnWVHeRdAWMwpqMB8GA1UdIwQY
MBaAFG6AclBg/0s7Vazeajl8Me6pfCN8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9CeVVHRF9TenRWck41cU9Yd3g3cWw4STN3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83YTZiZDktNGJlOS00MDJiLTg1MzYt
NTMzMzVkYTBjZmQzLzEvMS1aZDBzb1Bib25YbFFTZFpVZDVGMEJZekNtby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjUvN2E2YmQ5LTRiZTktNDAyYi04NTM2LTUzMzM1ZGEwY2Zk
My8xL2JvQnlVR0RfU3p0VnJONXFPWHd4N3FsOEkzdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMOVYzAN
BgkqhkiG9w0BAQsFAAOCAQEANfaqXbzsma/hT2jBzeoGFEIS9gjjNI4X1DGE1vG0
wRMPxB9lcHad9RZzFd7OrTFRie7HLBp4/2/5y6eU4xLkM23Yt+CRcSmroKuLq2uH
Hfrny/EvBpbW/XCGeV8ER4i6xC1Y/4dZZNqyCQLp9pPYEmBVN8z4oN3kSo6qXjWL
1O3TG5vWOVcUlHjbzH36FUB5IqTeu1uY+N0CCngdqkdcK/C12T6J5GR9H19YsFBb
xuWYCUnhWTbhBs/JJuIx5dmqfqey0SzNw8Gl9NrI+3SjNrGaWXLhZXWLJsQP34eP
k9KNLttrDWznsh0JCASPXPKbgWSKmrJM3W6dN8SYwLBesg==
-----END CERTIFICATE-----
Generated at Tue Feb 10 03:10:33 2026 by rpki-client