This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/bAqvaOAbS_zyWG89lZX643VSXiY.roa File: bAqvaOAbS_zyWG89lZX643VSXiY.roa (raw, json) Hash identifier: aCU8YvRzFkWCl+qdiCxPi41xQwSF9YId56RdRoh8KaQ= Subject key identifier: 6C:0A:AF:68:E0:1B:4B:FC:F2:58:6F:3D:95:95:FA:E3:75:52:5E:26 Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0 Certificate serial: 019B79EBC436C77153EE5E8663FCFB9E9832 Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/bAqvaOAbS_zyWG89lZX643VSXiY.roa Signing time: Thu 01 Jan 2026 14:17:32 +0000 ROA not before: Thu 01 Jan 2026 14:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59752 IP address blocks: 193.109.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:c4:36:c7:71:53:ee:5e:86:63:fc:fb:9e:98:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0 Validity Not Before: Jan 1 14:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c0aaf68e01b4bfcf2586f3d9595fae375525e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:2e:77:8d:02:e9:bc:43:59:a7:0d:c2:7b:02: 0c:6a:81:b7:ff:03:45:09:fb:a7:4a:b2:26:42:05: 0b:51:f1:2c:5c:38:6d:c6:26:ce:a4:9d:ab:64:18: 01:86:75:c8:4a:88:5b:e1:97:6e:b3:e0:33:cc:54: 31:49:8c:08:fc:72:27:4c:51:0a:e1:cb:b9:e3:d5: f3:90:40:26:37:e3:dd:fe:06:87:93:92:b2:d6:22: b9:b4:79:07:45:9d:4c:3c:c8:82:80:5a:9b:e2:11: b7:d0:c6:8a:5a:00:22:e3:dd:95:00:4a:8c:f0:d4: 28:d2:c6:de:61:af:82:13:42:b8:d5:bf:cb:b1:80: a2:e0:93:aa:06:43:10:fc:50:55:2d:0c:1f:3b:a8: 55:ec:67:a4:4e:5f:3d:d1:69:18:95:38:08:fb:27: 0d:61:1d:75:0f:97:aa:d0:3b:00:9b:48:6a:54:c8: ce:57:08:47:0a:87:6a:7d:f1:3c:7f:a6:29:cb:e8: 99:ae:07:c9:6c:8c:01:5a:48:aa:e5:8a:7c:90:65: 27:36:a1:3b:46:11:68:68:23:e3:d2:10:90:a3:8f: 68:ce:bc:e6:a7:07:12:82:98:86:b0:e5:21:58:60: 93:54:bd:a4:1d:af:df:67:59:c3:6f:36:06:ce:3d: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:0A:AF:68:E0:1B:4B:FC:F2:58:6F:3D:95:95:FA:E3:75:52:5E:26 X509v3 Authority Key Identifier: keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/bAqvaOAbS_zyWG89lZX643VSXiY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.109.237.0/24 Signature Algorithm: sha256WithRSAEncryption 15:93:e1:69:da:37:4a:af:47:54:da:e6:94:0a:c4:bc:8e:56: 78:1e:1b:7a:f7:6e:92:b3:ea:fd:ad:ea:2a:e8:15:4e:3f:31: a6:1f:ee:25:8f:ec:de:ce:3b:3e:ac:28:4d:16:4e:3d:68:e1: 9c:e1:ea:c4:90:ae:c2:57:d4:a5:d9:9f:f0:61:c5:cf:07:f0: 8a:95:84:d0:8d:51:14:26:be:48:90:32:01:39:78:aa:6f:bc: 55:7a:38:5c:4a:9d:e0:b0:86:56:a3:64:2a:e0:86:14:8e:64: 03:c9:3d:6c:92:15:e1:ef:94:9b:b1:a8:5c:36:5e:95:6c:71: db:45:8a:1a:d4:46:97:cf:93:2c:57:64:8f:55:dd:f2:9c:6e: 4b:b0:22:0f:78:3d:92:51:c0:81:df:5d:52:a7:f8:f3:cd:c0: 77:94:1b:c9:c5:e4:cc:87:22:bc:1e:2d:6a:c2:d8:05:bd:d5: d1:09:08:0c:b3:e3:a6:cc:a9:5f:ee:f6:8f:2c:55:fc:e6:0b: b4:cd:de:12:21:af:4f:6f:bb:8e:21:2e:2c:0e:ac:37:2f:c4: 86:0e:09:25:52:09:8c:af:c1:d8:0c:00:fa:fb:60:78:6e:4c: c5:14:78:87:94:5e:50:36:4b:ad:e4:0e:11:15:2f:7c:b9:2a: cc:51:6e:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt568Q2x3FT7l6GY/z7npgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZGQ2ZjA4ODIyYWUwYmE1MDU0NTQyNDU2OTIzZmFmOTA0 MGY1ZDAwHhcNMjYwMTAxMTQxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzBhYWY2OGUwMWI0YmZjZjI1ODZmM2Q5NTk1ZmFlMzc1NTI1ZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmC53jQLpvENZpw3CewIMaoG3/wNF CfunSrImQgULUfEsXDhtxibOpJ2rZBgBhnXISohb4Zdus+AzzFQxSYwI/HInTFEK 4cu549XzkEAmN+Pd/gaHk5Ky1iK5tHkHRZ1MPMiCgFqb4hG30MaKWgAi492VAEqM 8NQo0sbeYa+CE0K41b/LsYCi4JOqBkMQ/FBVLQwfO6hV7GekTl890WkYlTgI+ycN YR11D5eq0DsAm0hqVMjOVwhHCodqffE8f6Ypy+iZrgfJbIwBWkiq5Yp8kGUnNqE7 RhFoaCPj0hCQo49ozrzmpwcSgpiGsOUhWGCTVL2kHa/fZ1nDbzYGzj1YNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGwKr2jgG0v88lhvPZWV+uN1Ul4mMB8GA1UdIwQY MBaAFJndbwiCKuC6UFRUJFaSP6+QQPXQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMt YTcyYzQwNGYyNmZkLzEvYkFxdmFPQWJTX3p5V0c4OWxaWDY0M1ZTWGlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9jZWMyYTktMzAxMy00MmI0LTk0ODMtYTcyYzQwNGYyNmZk LzEvbWQxdkNJSXE0THBRVkZRa1ZwSV9yNUJBOWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW3tMA0G CSqGSIb3DQEBCwUAA4IBAQAVk+Fp2jdKr0dU2uaUCsS8jlZ4Hht6926Ss+r9reoq 6BVOPzGmH+4lj+zezjs+rChNFk49aOGc4erEkK7CV9Sl2Z/wYcXPB/CKlYTQjVEU Jr5IkDIBOXiqb7xVejhcSp3gsIZWo2Qq4IYUjmQDyT1skhXh75SbsahcNl6VbHHb RYoa1EaXz5MsV2SPVd3ynG5LsCIPeD2SUcCB311Sp/jzzcB3lBvJxeTMhyK8Hi1q wtgFvdXRCQgMs+OmzKlf7vaPLFX85gu0zd4SIa9Pb7uOIS4sDqw3L8SGDgklUgmM r8HYDAD6+2B4bkzFFHiHlF5QNkut5A4RFS98uSrMUW6h -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:28 2026 by rpki-client