This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/bba2QTZrp_1uueLnjfHPBxHS3PY.roa File: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (raw, json) Hash identifier: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8= Subject key identifier: 6D:B6:B6:41:36:6B:A7:FD:6E:B9:E2:E7:8D:F1:CF:07:11:D2:DC:F6 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019B7B36754913EB9331FFC7DEA089D3C7E3 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/bba2QTZrp_1uueLnjfHPBxHS3PY.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213218 IP address blocks: 194.219.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:75:49:13:eb:93:31:ff:c7:de:a0:89:d3:c7:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6db6b641366ba7fd6eb9e2e78df1cf0711d2dcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f3:8c:c5:7e:fe:65:b5:a9:d8:2e:d4:5b:d2: dc:5f:de:ca:49:9c:81:36:13:14:a1:72:da:67:d9: 09:ae:13:bf:4d:ea:09:f5:fa:1b:76:08:7b:f6:f8: 2b:72:8d:ed:61:96:a3:db:0c:61:04:58:ad:90:44: c6:de:7c:81:f5:c8:55:7b:b7:e4:67:c0:2f:f3:da: 50:4a:7f:71:32:6e:bd:f0:af:39:56:a5:9a:f2:70: 32:6e:92:d9:e3:17:64:9a:40:34:c2:02:83:55:96: 1f:31:16:7b:e3:42:21:e2:64:fc:92:31:c1:3e:d6: 74:9a:f3:10:5c:b9:91:64:12:5a:54:0d:c6:5e:d4: f9:f2:bb:e6:d1:f9:a0:fc:e4:0c:8e:89:b2:d7:81: 99:60:3d:c6:39:36:65:f4:ae:a3:53:42:c1:b9:4b: cc:d1:a5:15:27:1a:0c:ed:5a:d4:41:85:fe:6b:d7: c3:26:5c:34:04:52:79:67:ae:1c:5c:48:10:7d:27: 2a:5c:0d:d1:1e:60:ab:c7:34:a5:17:32:4f:9d:a1: 33:9e:2e:59:33:f1:6a:ad:da:05:98:a3:ed:fb:1f: 91:00:a0:30:5a:3b:c0:b8:38:b3:3a:fc:22:04:82: a1:3a:22:86:a7:09:b5:33:ec:b6:f1:e6:99:cd:87: 8f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B6:B6:41:36:6B:A7:FD:6E:B9:E2:E7:8D:F1:CF:07:11:D2:DC:F6 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/bba2QTZrp_1uueLnjfHPBxHS3PY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.219.1.0/24 Signature Algorithm: sha256WithRSAEncryption 95:9f:d0:6b:17:12:f7:2f:59:d1:43:d2:a8:40:02:23:b5:46: 21:e3:54:fe:4d:97:9d:17:05:27:dc:02:0d:28:dc:36:6f:d3: 4e:b0:62:78:ec:96:de:ba:66:8e:95:c0:b2:93:33:4b:98:ad: 47:37:59:46:fc:e5:f4:ac:9f:a8:1c:09:d8:cc:48:13:17:25: 23:11:02:8f:00:d9:3a:50:91:4d:66:c5:dd:38:d7:8b:e6:8d: 12:f6:11:2a:c9:fd:5e:fd:bc:3f:db:bd:4c:02:1f:ae:2a:a4: 74:af:7e:78:ba:40:fc:d4:44:61:cd:ce:fa:7d:a2:a1:31:64: 3b:6c:bc:3c:e4:ca:dc:ac:50:ae:8a:9a:c5:9a:43:0d:20:23: ff:ec:ca:ea:44:46:c5:1b:b5:f5:22:13:57:d0:b4:89:db:b0: 6e:c0:20:f1:fe:2c:03:1c:f7:56:3b:c9:33:c5:70:da:1b:45: 21:77:9a:fe:52:63:9a:98:ca:e5:db:01:b8:11:9a:8d:18:11: 71:f3:99:75:ed:b5:4a:0b:e0:a5:a9:38:24:d5:98:67:a8:6b: 7c:7c:4a:c3:0f:1b:f9:18:0d:f6:74:f0:d0:f2:80:50:91:41: 76:96:7b:7b:cb:7e:d8:6e:45:d0:d2:de:52:d4:27:5c:d4:dd: 6e:cd:ca:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnVJE+uTMf/H3qCJ08fjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGI2YjY0MTM2NmJhN2ZkNmViOWUyZTc4ZGYxY2YwNzExZDJkY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfOMxX7+ZbWp2C7UW9LcX97KSZyB NhMUoXLaZ9kJrhO/TeoJ9fobdgh79vgrco3tYZaj2wxhBFitkETG3nyB9chVe7fk Z8Av89pQSn9xMm698K85VqWa8nAybpLZ4xdkmkA0wgKDVZYfMRZ740Ih4mT8kjHB PtZ0mvMQXLmRZBJaVA3GXtT58rvm0fmg/OQMjomy14GZYD3GOTZl9K6jU0LBuUvM 0aUVJxoM7VrUQYX+a9fDJlw0BFJ5Z64cXEgQfScqXA3RHmCrxzSlFzJPnaEzni5Z M/FqrdoFmKPt+x+RAKAwWjvAuDizOvwiBIKhOiKGpwm1M+y28eaZzYePSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG22tkE2a6f9brni543xzwcR0tz2MB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvYmJhMlFUWnJwXzF1dWVMbmpmSFBCeEhTM1BZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwtsBMA0G CSqGSIb3DQEBCwUAA4IBAQCVn9BrFxL3L1nRQ9KoQAIjtUYh41T+TZedFwUn3AIN KNw2b9NOsGJ47JbeumaOlcCykzNLmK1HN1lG/OX0rJ+oHAnYzEgTFyUjEQKPANk6 UJFNZsXdONeL5o0S9hEqyf1e/bw/271MAh+uKqR0r354ukD81ERhzc76faKhMWQ7 bLw85MrcrFCuiprFmkMNICP/7MrqREbFG7X1IhNX0LSJ27BuwCDx/iwDHPdWO8kz xXDaG0Uhd5r+UmOamMrl2wG4EZqNGBFx85l17bVKC+ClqTgk1ZhnqGt8fErDDxv5 GA32dPDQ8oBQkUF2lnt7y37YbkXQ0t5S1Cdc1N1uzcp0 -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:34 2026 by rpki-client