This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/BT7pM6aA48OhQBOTNTxsIIj998o.roa File: BT7pM6aA48OhQBOTNTxsIIj998o.roa (raw, json) Hash identifier: KphTI+QWos8k5E5HwXib2t7YlXAqDNRWwkCn5ph3kyg= Subject key identifier: 05:3E:E9:33:A6:80:E3:C3:A1:40:13:93:35:3C:6C:20:88:FD:F7:CA Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c Certificate serial: 019B7EA75512DBB0823C0EEB805FE0748054 Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/BT7pM6aA48OhQBOTNTxsIIj998o.roa Signing time: Fri 02 Jan 2026 12:20:54 +0000 ROA not before: Fri 02 Jan 2026 12:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51364 IP address blocks: 193.142.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.mft rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:55:12:db:b0:82:3c:0e:eb:80:5f:e0:74:80:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c Validity Not Before: Jan 2 12:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=053ee933a680e3c3a1401393353c6c2088fdf7ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:29:6c:8a:4a:89:23:3e:87:cf:fa:8b:77:97: 23:2b:bc:68:a4:dc:b0:ef:85:30:73:46:75:ee:0c: d0:35:cd:0c:e4:e9:4f:22:0c:b2:80:a6:cb:e6:95: 02:e8:c6:2d:67:03:d0:db:e5:fa:87:0a:ed:c3:d3: 18:7f:d0:7f:65:ce:f6:73:a0:fa:b8:30:69:0c:9b: bd:4e:1a:61:f9:de:09:58:d0:28:f2:32:8c:55:d5: 3b:24:ab:b4:21:ee:51:c4:a1:1b:82:55:c1:7d:55: 13:d0:ce:85:d5:a7:45:e8:36:99:72:cf:99:64:66: be:80:96:2b:21:f1:85:12:7d:65:f9:32:f9:98:e4: fb:ed:58:d1:75:6f:7f:fa:7d:0e:db:29:8b:bd:0f: e4:b6:22:2f:64:d1:3d:93:ab:b5:7b:45:3c:55:8b: 07:8f:f4:8e:af:5c:2b:da:a1:df:ed:31:65:4d:42: c1:99:a7:87:db:6f:02:b7:eb:2a:25:e3:ed:51:9d: f3:5b:b6:7d:f2:45:02:1f:dd:aa:c2:b5:d8:ab:c1: f0:c7:e0:6c:fd:11:38:90:b5:5f:32:4c:45:26:66: 79:0e:97:ca:db:21:dd:0a:ba:60:92:81:bb:3c:85: 5f:fd:03:d3:75:83:b2:30:32:78:c6:95:5c:f2:47: 1f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3E:E9:33:A6:80:E3:C3:A1:40:13:93:35:3C:6C:20:88:FD:F7:CA X509v3 Authority Key Identifier: keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/BT7pM6aA48OhQBOTNTxsIIj998o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.142.127.0/24 Signature Algorithm: sha256WithRSAEncryption 88:bc:02:b7:91:d2:c8:6e:be:91:22:9c:6f:32:68:5a:e6:9b: 72:46:77:af:e6:b9:1c:b3:d7:17:81:e0:98:80:d4:ed:4a:06: d5:24:d1:d5:2b:25:94:51:9a:a4:93:b6:47:62:d0:3e:e2:eb: b8:69:7e:42:3d:26:ae:d1:33:2e:63:5f:1e:fb:20:ff:22:05: 88:38:90:a4:a6:91:ba:f4:3f:e2:29:f9:11:dd:f5:c3:c1:46: 06:12:43:65:73:06:f2:7b:77:a6:42:34:26:29:e5:d1:a6:9e: e6:2c:b9:28:a4:86:16:30:5c:25:7d:10:63:90:3f:62:c4:f0: 53:d8:3e:13:ac:23:0c:15:8a:2d:fd:f5:8c:13:6f:d7:10:ce: ef:29:15:c8:5e:10:09:b3:51:ae:2b:ff:99:2f:5e:59:d3:34: 60:70:3f:b7:aa:c0:d5:06:2e:52:f9:7d:90:07:c9:cb:33:eb: c0:cc:b2:b0:52:63:d9:d5:70:13:35:de:34:2e:71:b4:a6:59: 22:65:2a:da:52:bb:80:d5:d8:7f:2d:42:27:c6:c0:9c:22:f1: 57:4e:36:5f:8e:42:48:1e:14:b4:e2:2e:1a:35:b5:01:c8:47: 38:a5:fa:82:f4:ec:6e:69:a8:04:4c:14:13:0f:0c:1a:42:5d: 4f:f5:a6:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p1US27CCPA7rgF/gdIBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYWI0MjIzOWJhOTQ0ODViMzEwYjU1MTVkY2NjN2ZlZWQ5 MjIwNWMwHhcNMjYwMTAyMTIyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTNlZTkzM2E2ODBlM2MzYTE0MDEzOTMzNTNjNmMyMDg4ZmRmN2NhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtClsikqJIz6Hz/qLd5cjK7xopNyw 74Uwc0Z17gzQNc0M5OlPIgyygKbL5pUC6MYtZwPQ2+X6hwrtw9MYf9B/Zc72c6D6 uDBpDJu9Thph+d4JWNAo8jKMVdU7JKu0Ie5RxKEbglXBfVUT0M6F1adF6DaZcs+Z ZGa+gJYrIfGFEn1l+TL5mOT77VjRdW9/+n0O2ymLvQ/ktiIvZNE9k6u1e0U8VYsH j/SOr1wr2qHf7TFlTULBmaeH228Ct+sqJePtUZ3zW7Z98kUCH92qwrXYq8Hwx+Bs /RE4kLVfMkxFJmZ5DpfK2yHdCrpgkoG7PIVf/QPTdYOyMDJ4xpVc8kcfBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAU+6TOmgOPDoUATkzU8bCCI/ffKMB8GA1UdIwQY MBaAFAyrQiObqUSFsxC1UV3Mx/7tkiBcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEt Y2MxMTlkMjc3MTQ4LzEvQlQ3cE02YUE0OE9oUUJPVE5UeHNJSWo5OThvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9hYWI2MmUtNDA4Yy00ODNkLTk1ZmEtY2MxMTlkMjc3MTQ4 LzEvREt0Q0k1dXBSSVd6RUxWUlhjekhfdTJTSUZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY5/MA0G CSqGSIb3DQEBCwUAA4IBAQCIvAK3kdLIbr6RIpxvMmha5ptyRnev5rkcs9cXgeCY gNTtSgbVJNHVKyWUUZqkk7ZHYtA+4uu4aX5CPSau0TMuY18e+yD/IgWIOJCkppG6 9D/iKfkR3fXDwUYGEkNlcwbye3emQjQmKeXRpp7mLLkopIYWMFwlfRBjkD9ixPBT 2D4TrCMMFYot/fWME2/XEM7vKRXIXhAJs1GuK/+ZL15Z0zRgcD+3qsDVBi5S+X2Q B8nLM+vAzLKwUmPZ1XATNd40LnG0plkiZSraUruA1dh/LUInxsCcIvFXTjZfjkJI HhS04i4aNbUByEc4pfqC9OxuaagETBQTDwwaQl1P9aag -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:19 2026 by rpki-client