This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/Bs1AUrLSgm9TC4Z_qw4x4013GyI.roa File: Bs1AUrLSgm9TC4Z_qw4x4013GyI.roa (raw, json) Hash identifier: 16yeZ21Za1Z/lNRNjThEGWHSFlEFLlT8Kt56uKRyMVA= Subject key identifier: 06:CD:40:52:B2:D2:82:6F:53:0B:86:7F:AB:0E:31:E3:4D:77:1B:22 Certificate issuer: /CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d Certificate serial: 019B7910A1A200F3E70018BEC0DF632AF57F Authority key identifier: AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/Bs1AUrLSgm9TC4Z_qw4x4013GyI.roa Signing time: Thu 01 Jan 2026 10:18:11 +0000 ROA not before: Thu 01 Jan 2026 10:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48613 IP address blocks: 194.126.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.mft rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a1:a2:00:f3:e7:00:18:be:c0:df:63:2a:f5:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac9fce0b8b637c15f231aecffb5c80a74ffccb1d Validity Not Before: Jan 1 10:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06cd4052b2d2826f530b867fab0e31e34d771b22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:93:10:ea:5a:11:9b:b0:cf:8a:5e:01:10:b1: 01:a0:aa:81:8c:36:09:11:9e:03:2d:d0:17:24:9d: b3:9b:13:35:78:a1:b7:04:e2:19:b8:57:59:46:d2: 11:93:f1:12:bb:16:af:ae:2d:5e:f3:f4:0c:b0:72: 27:1c:cb:78:00:0e:a9:12:69:39:aa:1a:40:25:96: a2:6c:7e:89:fd:94:10:85:8d:a0:c6:da:41:69:ee: 99:af:7d:62:31:64:38:92:41:b9:70:0b:ab:41:4f: c3:f7:a1:d3:63:64:60:4e:ac:a7:93:62:87:05:d2: 68:de:24:c3:fb:e1:58:30:63:e8:98:9d:13:47:8b: 71:17:07:1c:ea:d4:1c:22:70:2a:f7:4a:ff:49:c8: 30:34:19:c9:24:78:82:dc:9e:d0:26:61:5d:50:36: e4:f0:ba:19:27:86:ee:f8:8c:14:47:72:47:84:e6: d2:b3:5f:1d:ca:12:6b:74:e4:b6:40:0c:9f:37:f7: 19:96:9e:97:1d:f3:15:9e:28:81:71:e8:76:1e:b3: e9:96:11:e9:6e:5b:9d:e9:8a:43:27:08:f3:15:8d: 25:b3:73:c3:bc:55:0e:96:97:3a:90:ad:98:90:32: b4:00:34:d0:48:b3:83:a1:6a:f3:2b:d3:99:c8:7e: 8e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:CD:40:52:B2:D2:82:6F:53:0B:86:7F:AB:0E:31:E3:4D:77:1B:22 X509v3 Authority Key Identifier: keyid:AC:9F:CE:0B:8B:63:7C:15:F2:31:AE:CF:FB:5C:80:A7:4F:FC:CB:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/Bs1AUrLSgm9TC4Z_qw4x4013GyI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/4d0b1f-ac85-4a2a-a1b4-08b07e89b42a/1/rJ_OC4tjfBXyMa7P-1yAp0_8yx0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.128.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:56:04:b3:d7:a8:cb:e2:3a:23:29:9c:c4:d6:46:65:79:7d: 35:4c:4a:e7:1a:10:f1:7e:d1:d1:df:53:c0:56:d7:4b:e5:d4: b1:fa:0d:39:69:98:6c:eb:cc:32:57:b4:21:41:22:3f:9f:c6: 7a:fd:7c:e6:7f:85:a3:aa:f6:66:a9:c1:fe:10:cf:a8:3e:b8: f9:2c:35:91:fa:3d:d8:90:8d:35:2a:66:74:45:a4:09:20:d7: d9:d1:f1:e7:36:ca:ec:a9:b1:c9:99:7b:57:19:70:4e:17:43: 1e:c6:0f:9d:08:2a:cb:42:38:d9:3f:31:17:c0:05:8f:fe:8c: ca:21:c7:b1:c5:9d:df:9f:48:b2:5d:e9:39:f2:97:17:12:e5: 92:cf:93:11:10:18:46:26:f3:57:b4:ad:f7:f2:9d:a7:2c:7c: c5:44:d6:92:b0:01:b3:bf:01:7d:f9:ac:70:e9:fa:68:9c:57: a4:59:9d:a3:aa:fe:17:04:44:78:dc:12:cd:4c:dc:79:6a:2f: ec:b4:fe:24:bc:8d:c4:95:9d:7a:7d:d3:cb:10:eb:1c:10:8f: 51:8c:aa:64:83:4d:29:ae:0c:4b:f6:d5:0a:99:d9:0a:3a:7c: 9f:e0:26:f4:a9:a8:69:71:b1:2d:cd:c5:45:02:6c:75:42:a8: 67:dd:d7:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKGiAPPnABi+wN9jKvV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjOWZjZTBiOGI2MzdjMTVmMjMxYWVjZmZiNWM4MGE3NGZm Y2NiMWQwHhcNMjYwMTAxMTAxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmNkNDA1MmIyZDI4MjZmNTMwYjg2N2ZhYjBlMzFlMzRkNzcxYjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZMQ6loRm7DPil4BELEBoKqBjDYJ EZ4DLdAXJJ2zmxM1eKG3BOIZuFdZRtIRk/ESuxavri1e8/QMsHInHMt4AA6pEmk5 qhpAJZaibH6J/ZQQhY2gxtpBae6Zr31iMWQ4kkG5cAurQU/D96HTY2RgTqynk2KH BdJo3iTD++FYMGPomJ0TR4txFwcc6tQcInAq90r/ScgwNBnJJHiC3J7QJmFdUDbk 8LoZJ4bu+IwUR3JHhObSs18dyhJrdOS2QAyfN/cZlp6XHfMVniiBceh2HrPplhHp blud6YpDJwjzFY0ls3PDvFUOlpc6kK2YkDK0ADTQSLODoWrzK9OZyH6OXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAbNQFKy0oJvUwuGf6sOMeNNdxsiMB8GA1UdIwQY MBaAFKyfzguLY3wV8jGuz/tcgKdP/MsdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQt MDhiMDdlODliNDJhLzEvQnMxQVVyTFNnbTlUQzRaX3F3NHg0MDEzR3lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC80ZDBiMWYtYWM4NS00YTJhLWExYjQtMDhiMDdlODliNDJh LzEvckpfT0M0dGpmQlh5TWE3UC0xeUFwMF84eXgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn6AMA0G CSqGSIb3DQEBCwUAA4IBAQCNVgSz16jL4jojKZzE1kZleX01TErnGhDxftHR31PA VtdL5dSx+g05aZhs68wyV7QhQSI/n8Z6/Xzmf4WjqvZmqcH+EM+oPrj5LDWR+j3Y kI01KmZ0RaQJINfZ0fHnNsrsqbHJmXtXGXBOF0Mexg+dCCrLQjjZPzEXwAWP/ozK IcexxZ3fn0iyXek58pcXEuWSz5MREBhGJvNXtK338p2nLHzFRNaSsAGzvwF9+axw 6fponFekWZ2jqv4XBER43BLNTNx5ai/stP4kvI3ElZ16fdPLEOscEI9RjKpkg00p rgxL9tUKmdkKOnyf4Cb0qahpcbEtzcVFAmx1Qqhn3ddv -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:16 2026 by rpki-client