This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/b1reU844goiJaSzedmeIUwCuDWA.roa File: b1reU844goiJaSzedmeIUwCuDWA.roa (raw, json) Hash identifier: 8aKN8FAz4VAj8HRYdOpJT2QhMrGqx6d/ORqYtmr80c4= Subject key identifier: 6F:5A:DE:53:CE:38:82:88:89:69:2C:DE:76:67:88:53:00:AE:0D:60 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D3A80C5F7DED78B2BEBF407485381 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/b1reU844goiJaSzedmeIUwCuDWA.roa Signing time: Fri 02 Jan 2026 06:20:20 +0000 ROA not before: Fri 02 Jan 2026 06:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38337 IP address blocks: 188.241.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:3a:80:c5:f7:de:d7:8b:2b:eb:f4:07:48:53:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5ade53ce38828889692cde7667885300ae0d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ff:8b:4a:2f:bd:e0:5e:15:ed:7f:4b:85:1d: 8a:e0:35:25:bf:24:e7:4c:f2:e5:fb:31:c5:82:0c: b6:41:89:a1:39:34:86:f6:4f:91:aa:a7:97:df:b7: 03:83:a0:c4:87:7c:cf:cd:a3:c1:8b:59:f2:72:6f: d0:94:74:18:36:7c:79:fd:74:e9:31:da:1c:85:6a: d7:b0:8b:d8:02:69:95:bf:56:f0:b1:b0:c3:14:7d: 75:18:3e:f7:82:91:1b:32:72:a7:35:32:e5:9a:ad: c5:15:c6:67:bb:13:c9:ec:1b:37:61:44:37:8f:8e: af:22:6b:24:81:a6:7b:47:b6:7f:11:8a:89:de:db: 8a:cc:2a:8b:6b:87:10:a3:55:91:62:cd:4c:f9:8d: 51:15:bd:b5:b5:1a:88:cd:03:3f:a9:7b:27:81:37: 29:64:1e:f9:ef:8f:6d:2b:95:7c:94:97:ca:a7:a3: e2:12:72:35:cb:c3:32:2f:ed:a4:64:cb:3e:f2:56: 8c:66:e0:33:49:15:95:18:2f:32:e2:4e:66:ac:cf: aa:35:40:6d:8f:58:06:8b:e6:1f:82:a7:92:9a:7d: 62:70:aa:ae:8c:db:f9:cd:2b:2f:69:f3:85:dd:73: 57:7e:2b:fe:89:a4:c3:76:09:48:72:8b:ce:1a:2b: 65:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5A:DE:53:CE:38:82:88:89:69:2C:DE:76:67:88:53:00:AE:0D:60 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/b1reU844goiJaSzedmeIUwCuDWA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.241.243.0/24 Signature Algorithm: sha256WithRSAEncryption 05:ea:ed:08:0d:a3:0e:10:09:04:4d:29:6d:83:c1:71:27:7c: a3:a6:9f:7b:02:07:9b:c3:af:8b:a8:f8:3f:c9:9e:82:53:e1: 20:63:b7:c5:b4:25:a8:89:03:bd:e4:be:eb:46:62:f1:70:2d: 1e:2e:d1:a5:79:77:fc:10:ae:ac:89:53:b1:e5:15:b8:8b:2d: 2f:7b:e2:dd:df:63:4e:42:76:92:13:97:d3:78:ab:fc:90:d8: 9e:ed:2d:55:d1:b5:0e:25:21:ef:e9:5b:99:e1:b1:b5:3e:3f: 87:a1:b8:33:1b:a5:e6:85:13:4d:41:fa:47:be:37:60:de:09: 45:30:2a:d7:87:3a:7a:5f:42:e5:73:4a:96:bf:38:10:a6:05: 39:de:e8:59:f4:07:d3:ff:e9:4e:26:71:5d:6d:67:1e:1d:bd: 4c:1e:8e:a7:72:2a:c1:cc:ed:d0:77:15:30:31:d1:86:bc:ad: 38:20:e1:19:f8:30:4c:65:24:e8:03:e7:25:db:9f:db:bb:de: 62:ce:0f:2e:7e:c9:9c:e1:2b:8f:85:4f:38:d8:44:ed:a0:2e: d1:1f:5d:64:b2:6e:37:47:7d:3a:6d:cf:03:6c:84:bd:6c:1f: 84:7b:63:79:5c:16:56:a8:7d:77:98:59:6f:93:19:ad:0c:7d: e7:8b:2a:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XTqAxffe14sr6/QHSFOBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjVhZGU1M2NlMzg4Mjg4ODk2OTJjZGU3NjY3ODg1MzAwYWUwZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqP+LSi+94F4V7X9LhR2K4DUlvyTn TPLl+zHFggy2QYmhOTSG9k+RqqeX37cDg6DEh3zPzaPBi1nycm/QlHQYNnx5/XTp MdochWrXsIvYAmmVv1bwsbDDFH11GD73gpEbMnKnNTLlmq3FFcZnuxPJ7Bs3YUQ3 j46vImskgaZ7R7Z/EYqJ3tuKzCqLa4cQo1WRYs1M+Y1RFb21tRqIzQM/qXsngTcp ZB75749tK5V8lJfKp6PiEnI1y8MyL+2kZMs+8laMZuAzSRWVGC8y4k5mrM+qNUBt j1gGi+YfgqeSmn1icKqujNv5zSsvafOF3XNXfiv+iaTDdglIcovOGitlHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9a3lPOOIKIiWks3nZniFMArg1gMB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvYjFyZVU4NDRnb2lKYVN6ZWRtZUlVd0N1RFdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvPHzMA0G CSqGSIb3DQEBCwUAA4IBAQAF6u0IDaMOEAkETSltg8FxJ3yjpp97Agebw6+LqPg/ yZ6CU+EgY7fFtCWoiQO95L7rRmLxcC0eLtGleXf8EK6siVOx5RW4iy0ve+Ld32NO QnaSE5fTeKv8kNie7S1V0bUOJSHv6VuZ4bG1Pj+HobgzG6XmhRNNQfpHvjdg3glF MCrXhzp6X0Llc0qWvzgQpgU53uhZ9AfT/+lOJnFdbWceHb1MHo6ncirBzO3QdxUw MdGGvK04IOEZ+DBMZSToA+cl25/bu95izg8ufsmc4SuPhU842ETtoC7RH11ksm43 R306bc8DbIS9bB+Ee2N5XBZWqH13mFlvkxmtDH3niyq3 -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:14 2026 by rpki-client