This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/Bb0AlX7LVs8xu9FbBxHR7jZ41sc.roa File: Bb0AlX7LVs8xu9FbBxHR7jZ41sc.roa (raw, json) Hash identifier: 1RAeUNL+1NswFK++fmlLXs7tYc2gvuypR/zGLkI4pFk= Subject key identifier: 05:BD:00:95:7E:CB:56:CF:31:BB:D1:5B:07:11:D1:EE:36:78:D6:C7 Certificate issuer: /CN=2101b6388d6435f54990905382b41dc9675fd490 Certificate serial: 019B775944F2D29718514BBF31A0E644EE94 Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/Bb0AlX7LVs8xu9FbBxHR7jZ41sc.roa Signing time: Thu 01 Jan 2026 02:18:17 +0000 ROA not before: Thu 01 Jan 2026 02:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198371 IP address blocks: 217.79.148.0/24 maxlen: 24 217.79.149.0/24 maxlen: 24 217.79.150.0/24 maxlen: 24 217.79.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:44:f2:d2:97:18:51:4b:bf:31:a0:e6:44:ee:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490 Validity Not Before: Jan 1 02:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05bd00957ecb56cf31bbd15b0711d1ee3678d6c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:80:e9:c2:6c:7a:bc:11:5d:7b:03:20:b8:3c: 09:cb:bb:4f:8e:4f:d9:d4:05:cb:76:0c:aa:d6:9c: fd:13:f1:f2:b4:64:72:21:f0:30:03:25:a6:84:6f: b5:4c:87:3c:fd:5f:41:53:50:3c:02:95:10:49:c8: 71:52:c7:c5:54:b8:22:a8:38:16:0d:d2:7f:48:72: 92:2d:7c:26:5d:f7:5b:37:8a:7e:85:58:64:ff:cf: e2:ed:f7:f7:22:01:54:3d:de:03:e0:c0:de:7d:8b: 70:3f:b3:aa:5c:22:5f:72:5c:5d:2a:97:62:6d:92: d2:46:8c:f9:7c:f0:09:e2:ae:88:8b:49:60:b6:95: 09:25:83:87:c3:30:84:b4:a7:a8:77:db:c8:1e:96: ac:37:c4:50:90:aa:2a:2d:06:61:af:b1:ff:97:e4: bf:9b:59:b5:15:01:37:c2:2a:70:d3:5f:1c:59:f7: cd:dc:52:af:02:7d:b1:58:6c:cd:7b:75:a3:99:85: ef:5a:4a:28:c1:f5:fc:33:ca:37:0d:0e:58:d7:47: 82:05:71:16:b3:ed:2e:5d:56:15:f9:7b:db:ab:d1: 82:5e:fa:cd:06:d0:f7:ae:9b:18:c8:60:e6:40:60: e5:4a:d2:28:0c:31:da:50:9c:b1:f6:7a:a3:c1:cd: 7e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BD:00:95:7E:CB:56:CF:31:BB:D1:5B:07:11:D1:EE:36:78:D6:C7 X509v3 Authority Key Identifier: keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/Bb0AlX7LVs8xu9FbBxHR7jZ41sc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.79.148.0/22 Signature Algorithm: sha256WithRSAEncryption 76:00:91:59:31:ea:2d:bf:9f:19:61:86:e8:51:79:a2:69:09: 92:21:9e:b1:66:c1:9c:95:08:7c:f5:4f:5b:25:30:3c:f7:a4: 06:b6:73:87:a5:16:e0:cb:6b:55:a6:aa:d7:12:30:59:c4:74: ac:83:94:a3:12:d1:b1:cf:0a:f5:ee:12:97:60:c5:12:c3:a8: 58:a0:67:57:a0:39:e8:5b:e5:31:68:3f:5f:cc:25:1c:ea:63: 89:8c:05:ea:97:8a:fb:c7:c4:e9:29:8b:93:9d:33:fe:fa:75: 6b:36:2c:c0:93:a5:76:24:48:45:76:56:bb:ff:79:3f:96:5e: 34:e7:d3:b8:33:67:4d:a4:51:32:70:f7:30:8a:f1:f5:d7:37: d1:30:84:64:24:b5:7d:37:5f:80:7b:63:03:c8:5c:8e:11:2a: 7b:dd:ed:8b:41:3f:39:16:52:b0:46:53:cd:82:81:86:5f:99: 03:c3:c8:ff:95:6b:f7:67:02:43:33:7c:a8:13:14:53:a6:a8: e5:6e:6f:d0:0e:93:41:21:95:c9:c7:91:dc:73:70:c4:07:85: 83:1c:2e:7f:f7:c5:06:2e:f4:6a:cc:04:2c:d0:b6:a2:58:33: 00:5a:9e:5d:5a:5b:29:8f:1e:66:09:38:71:6a:ba:e9:5d:c9: 9d:be:72:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WUTy0pcYUUu/MaDmRO6UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMDFiNjM4OGQ2NDM1ZjU0OTkwOTA1MzgyYjQxZGM5Njc1 ZmQ0OTAwHhcNMjYwMTAxMDIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWJkMDA5NTdlY2I1NmNmMzFiYmQxNWIwNzExZDFlZTM2NzhkNmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIDpwmx6vBFdewMguDwJy7tPjk/Z 1AXLdgyq1pz9E/HytGRyIfAwAyWmhG+1TIc8/V9BU1A8ApUQSchxUsfFVLgiqDgW DdJ/SHKSLXwmXfdbN4p+hVhk/8/i7ff3IgFUPd4D4MDefYtwP7OqXCJfclxdKpdi bZLSRoz5fPAJ4q6Ii0lgtpUJJYOHwzCEtKeod9vIHpasN8RQkKoqLQZhr7H/l+S/ m1m1FQE3wipw018cWffN3FKvAn2xWGzNe3WjmYXvWkoowfX8M8o3DQ5Y10eCBXEW s+0uXVYV+Xvbq9GCXvrNBtD3rpsYyGDmQGDlStIoDDHaUJyx9nqjwc1+kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAW9AJV+y1bPMbvRWwcR0e42eNbHMB8GA1UdIwQY MBaAFCEBtjiNZDX1SZCQU4K0HclnX9SQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzIt NGRmODkxMjE4OGY3LzEvQmIwQWxYN0xWczh4dTlGYkJ4SFI3alo0MXNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9jMjA5NWEtM2IzZC00YWM0LTljMzItNGRmODkxMjE4OGY3 LzEvSVFHMk9JMWtOZlZKa0pCVGdyUWR5V2RmMUpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2U+UMA0G CSqGSIb3DQEBCwUAA4IBAQB2AJFZMeotv58ZYYboUXmiaQmSIZ6xZsGclQh89U9b JTA896QGtnOHpRbgy2tVpqrXEjBZxHSsg5SjEtGxzwr17hKXYMUSw6hYoGdXoDno W+UxaD9fzCUc6mOJjAXql4r7x8TpKYuTnTP++nVrNizAk6V2JEhFdla7/3k/ll40 59O4M2dNpFEycPcwivH11zfRMIRkJLV9N1+Ae2MDyFyOESp73e2LQT85FlKwRlPN goGGX5kDw8j/lWv3ZwJDM3yoExRTpqjlbm/QDpNBIZXJx5Hcc3DEB4WDHC5/98UG LvRqzAQs0LaiWDMAWp5dWlspjx5mCThxarrpXcmdvnJo -----END CERTIFICATE-----Generated at Tue Jan 20 03:33:12 2026 by rpki-client