This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/1BFQM936y9WGcLJKwy60Wg2ag-8.roa File: 1BFQM936y9WGcLJKwy60Wg2ag-8.roa (raw, json) Hash identifier: NTbQFXMY5QSvW0BgWqBt3HeqiX8tXZPRJi0IS+SKq2s= Subject key identifier: D4:11:50:33:DD:FA:CB:D5:86:70:B2:4A:C3:2E:B4:5A:0D:9A:83:EF Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019B7F1521D2FFA283BAFD12E21C4763EB6B Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/1BFQM936y9WGcLJKwy60Wg2ag-8.roa Signing time: Fri 02 Jan 2026 14:20:49 +0000 ROA not before: Fri 02 Jan 2026 14:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42898 IP address blocks: 185.73.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:21:d2:ff:a2:83:ba:fd:12:e2:1c:47:63:eb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jan 2 14:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4115033ddfacbd58670b24ac32eb45a0d9a83ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0e:ac:5b:61:a5:b6:3f:8f:57:29:37:20:50: ae:5d:a3:3f:ce:b7:f2:20:0a:63:28:92:73:71:4e: 81:c0:1c:5b:81:7b:a5:80:12:8a:72:7a:c3:94:88: c9:18:0a:c3:12:1c:35:af:42:ac:1f:f5:60:51:8e: 1c:6c:b6:09:c4:c9:cb:47:67:c9:27:68:1f:1b:bc: 05:c1:57:03:a7:f2:b3:7e:2c:46:37:ea:b8:fe:ab: e4:8e:2e:eb:ed:53:5f:b8:fb:9d:f1:cb:94:38:62: dc:9d:4f:dc:b4:84:35:ed:73:58:1e:8f:ab:22:ca: e3:ee:68:a3:4e:b6:ee:ed:d7:62:e5:34:ef:2a:0d: 0b:bd:0a:c4:1b:73:84:18:cd:c5:6f:28:ee:26:1d: 24:39:83:55:d1:4e:07:37:1e:db:d4:88:3f:72:07: 3e:fd:a1:88:44:92:ce:02:c1:68:ff:20:5e:12:9a: 2f:2a:70:c4:5a:19:3b:ce:73:2d:aa:47:2d:09:e0: 87:dc:8b:f6:94:00:f5:06:b1:9a:62:1f:39:fb:0e: 81:a8:8b:58:42:24:a3:1e:64:ac:3d:02:98:9f:6b: ad:b7:80:48:9d:48:13:81:57:ee:c4:7b:55:7c:ae: b5:4c:a8:12:d3:a9:98:10:f7:90:dc:24:b0:fb:9b: 11:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:11:50:33:DD:FA:CB:D5:86:70:B2:4A:C3:2E:B4:5A:0D:9A:83:EF X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/1BFQM936y9WGcLJKwy60Wg2ag-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.243.0/24 Signature Algorithm: sha256WithRSAEncryption 30:32:38:4d:fe:5d:ce:43:f3:7d:23:a2:ec:e4:95:bd:90:02: fb:21:21:08:2e:a2:2c:b6:07:07:17:66:c4:33:45:db:ef:39: 86:e0:6b:97:a3:c8:4c:fc:a7:b6:c0:59:97:96:31:c7:2c:1e: 49:ff:6f:3b:ef:d4:83:26:28:02:c3:c0:fb:04:d8:4b:8e:b8: 17:ef:5d:e4:2f:7b:6a:95:d8:91:f9:3d:63:47:6d:83:d2:8e: 85:27:51:ea:db:30:8d:5e:42:dd:8f:1a:4a:56:6a:1f:c0:b3: 2c:c4:c5:e9:60:f4:ca:c8:4b:22:5f:47:a0:94:ae:9d:cd:5b: 72:65:dc:61:f1:00:1c:ff:3d:d0:99:7c:cb:8c:cf:42:39:01: 88:ef:b1:53:cf:3c:f1:de:68:db:ab:bd:cf:11:08:e4:bf:f3: e6:7d:5b:35:e5:41:c7:ae:2c:46:d9:32:71:57:3e:59:12:ee: d3:00:89:37:39:e4:be:ac:1b:52:ea:06:62:73:0e:43:77:0d: 82:e1:11:79:36:21:91:21:35:0b:0b:c9:5c:0d:be:11:6e:f1: 4d:f8:db:56:c2:b8:63:00:36:10:a8:12:8c:f0:ed:f6:e5:9d: 6f:b6:25:71:fd:99:cc:a2:47:43:28:fa:c4:9e:dc:21:b4:82: 0b:9c:ba:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FSHS/6KDuv0S4hxHY+trMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwMTAyMTQyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDExNTAzM2RkZmFjYmQ1ODY3MGIyNGFjMzJlYjQ1YTBkOWE4M2VmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyw6sW2Gltj+PVyk3IFCuXaM/zrfy IApjKJJzcU6BwBxbgXulgBKKcnrDlIjJGArDEhw1r0KsH/VgUY4cbLYJxMnLR2fJ J2gfG7wFwVcDp/KzfixGN+q4/qvkji7r7VNfuPud8cuUOGLcnU/ctIQ17XNYHo+r Isrj7mijTrbu7ddi5TTvKg0LvQrEG3OEGM3FbyjuJh0kOYNV0U4HNx7b1Ig/cgc+ /aGIRJLOAsFo/yBeEpovKnDEWhk7znMtqkctCeCH3Iv2lAD1BrGaYh85+w6BqItY QiSjHmSsPQKYn2utt4BInUgTgVfuxHtVfK61TKgS06mYEPeQ3CSw+5sRwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNQRUDPd+svVhnCySsMutFoNmoPvMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvMUJGUU05MzZ5OVdHY0xKS3d5NjBXZzJhZy04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUnzMA0G CSqGSIb3DQEBCwUAA4IBAQAwMjhN/l3OQ/N9I6Ls5JW9kAL7ISEILqIstgcHF2bE M0Xb7zmG4GuXo8hM/Ke2wFmXljHHLB5J/28779SDJigCw8D7BNhLjrgX713kL3tq ldiR+T1jR22D0o6FJ1Hq2zCNXkLdjxpKVmofwLMsxMXpYPTKyEsiX0eglK6dzVty Zdxh8QAc/z3QmXzLjM9COQGI77FTzzzx3mjbq73PEQjkv/PmfVs15UHHrixG2TJx Vz5ZEu7TAIk3OeS+rBtS6gZicw5Ddw2C4RF5NiGRITULC8lcDb4RbvFN+NtWwrhj ADYQqBKM8O325Z1vtiVx/ZnMokdDKPrEntwhtIILnLpC -----END CERTIFICATE-----Generated at Mon Jan 19 17:32:58 2026 by rpki-client