This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/1-BmddrRCTrz7VYKk3rThhN-4C50.roa File: 1-BmddrRCTrz7VYKk3rThhN-4C50.roa (raw, json) Hash identifier: agmz4jnWRRmWdGKpePPlZ8/HyL1clWO7pTX6EyMxCQs= Subject key identifier: F8:19:9D:76:B4:42:4E:BC:FB:55:82:A4:DE:B4:E1:84:DF:B8:0B:9D Certificate issuer: /CN=e81393bdff601462a55591d26acb3d8c923ff26d Certificate serial: 019B79EC1C249B3B8C88576907441BBE6955 Authority key identifier: E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/1-BmddrRCTrz7VYKk3rThhN-4C50.roa Signing time: Thu 01 Jan 2026 14:17:55 +0000 ROA not before: Thu 01 Jan 2026 14:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213373 IP address blocks: 2.56.10.0/24 maxlen: 24 149.3.170.0/24 maxlen: 24 2a10:5fc0::/32 maxlen: 32 2a10:5fc1::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.mft rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:1c:24:9b:3b:8c:88:57:69:07:44:1b:be:69:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e81393bdff601462a55591d26acb3d8c923ff26d Validity Not Before: Jan 1 14:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8199d76b4424ebcfb5582a4deb4e184dfb80b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1c:2e:f4:11:b4:f1:6a:82:78:d3:f9:e5:be: 0e:6e:41:e0:9e:08:6a:37:a2:0e:9d:d9:48:e4:d9: 08:20:18:02:1c:b0:85:94:14:45:56:37:b6:ce:b7: 88:91:b3:da:67:04:8e:94:0b:77:71:53:07:fb:ce: bf:24:39:20:ec:b3:18:66:04:8e:10:53:7f:27:2f: 19:77:9f:89:c0:6d:de:f2:44:db:b4:0d:67:cc:6a: b8:f7:db:dc:1d:1d:e6:25:14:ce:a2:47:09:b4:aa: 2c:82:c8:b8:fb:6d:60:de:13:a0:5c:2b:64:38:95: e6:4b:ce:03:4f:fc:3c:5c:77:da:15:48:54:5f:39: 95:8c:39:29:f9:b9:df:9b:88:ae:5b:b1:4c:68:22: 31:c7:d5:22:f6:35:a9:20:dc:5b:aa:eb:7a:2d:c8: a3:e3:b6:a3:9d:68:4f:e3:5e:25:8c:e4:04:8e:e7: 1b:b2:00:71:db:6a:8f:8d:66:89:47:db:15:26:c6: 0e:f8:00:46:a1:b1:f8:8b:9c:7b:8d:0f:de:d6:19: e2:0b:22:0d:5b:2a:d5:7f:8c:14:c7:7a:dc:e0:a5: 73:13:d2:f4:4f:aa:e9:0b:c4:e5:12:6b:8b:87:56: c6:eb:cf:3b:e2:d9:35:75:b9:0d:a5:4c:16:2b:46: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:19:9D:76:B4:42:4E:BC:FB:55:82:A4:DE:B4:E1:84:DF:B8:0B:9D X509v3 Authority Key Identifier: keyid:E8:13:93:BD:FF:60:14:62:A5:55:91:D2:6A:CB:3D:8C:92:3F:F2:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6BOTvf9gFGKlVZHSass9jJI_8m0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/1-BmddrRCTrz7VYKk3rThhN-4C50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/bd0384-805d-48a1-bf09-3c14621ecfc5/1/6BOTvf9gFGKlVZHSass9jJI_8m0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.10.0/24 149.3.170.0/24 IPv6: 2a10:5fc0::/31 Signature Algorithm: sha256WithRSAEncryption 44:aa:c7:97:35:9a:e0:0e:30:6b:e6:e6:b0:db:e6:e2:b9:3c: 0a:3e:dd:e4:29:04:9e:01:d5:d5:6a:65:a9:05:2a:91:9e:81: ae:33:58:15:82:15:e6:5d:9a:00:08:5b:45:14:df:58:5c:15: 52:3e:63:7b:7d:99:5a:fa:0b:73:cb:ef:a4:bf:02:bf:3a:5e: ae:b0:1a:dc:5a:3e:e8:61:be:a3:d6:62:45:d1:52:a7:67:aa: 57:de:81:2b:15:41:ab:8f:1b:9a:df:f1:53:3c:0d:72:58:f7: d2:0a:15:28:34:a6:4d:72:7f:38:72:1b:91:7c:f3:81:e1:21: c8:3a:56:84:d4:a8:60:a0:a1:e3:2a:30:a1:6c:38:c4:8f:bc: 85:0e:f8:85:93:2a:d6:ef:2e:4a:4f:b3:14:5f:29:6e:a9:9d: 24:45:21:30:8a:35:c2:39:c9:65:7c:b8:27:b0:56:7b:ab:c4: f7:70:a6:c2:af:68:48:ab:d0:a8:26:84:e4:e7:fe:a0:e4:26: 35:cd:55:ac:63:e1:97:39:0c:01:9f:bb:1d:9e:e6:cb:2f:fd: 1a:29:d3:47:a2:e7:a5:dd:e5:9e:ab:41:72:19:3f:3b:f8:48: 52:f9:58:5d:02:23:16:7a:68:1f:eb:b5:9d:5c:d4:36:e7:93: 95:62:b9:31 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt57BwkmzuMiFdpB0QbvmlVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MTM5M2JkZmY2MDE0NjJhNTU1OTFkMjZhY2IzZDhjOTIz ZmYyNmQwHhcNMjYwMTAxMTQxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODE5OWQ3NmI0NDI0ZWJjZmI1NTgyYTRkZWI0ZTE4NGRmYjgwYjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBwu9BG08WqCeNP55b4ObkHgnghq N6IOndlI5NkIIBgCHLCFlBRFVje2zreIkbPaZwSOlAt3cVMH+86/JDkg7LMYZgSO EFN/Jy8Zd5+JwG3e8kTbtA1nzGq499vcHR3mJRTOokcJtKosgsi4+21g3hOgXCtk OJXmS84DT/w8XHfaFUhUXzmVjDkp+bnfm4iuW7FMaCIxx9Ui9jWpINxbqut6Lcij 47ajnWhP414ljOQEjucbsgBx22qPjWaJR9sVJsYO+ABGobH4i5x7jQ/e1hniCyIN WyrVf4wUx3rc4KVzE9L0T6rpC8TlEmuLh1bG68874tk1dbkNpUwWK0b5xwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPgZnXa0Qk68+1WCpN604YTfuAudMB8GA1UdIwQY MBaAFOgTk73/YBRipVWR0mrLPYySP/JtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkJPVHZmOWdGR0tsVlpIU2FzczlqSklfOG0wLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iZDAzODQtODA1ZC00OGExLWJmMDkt M2MxNDYyMWVjZmM1LzEvMS1CbWRkclJDVHJ6N1ZZS2szclRoaE4tNEM1MC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZDEvYmQwMzg0LTgwNWQtNDhhMS1iZjA5LTNjMTQ2MjFlY2Zj NS8xLzZCT1R2ZjlnRkdLbFZaSFNhc3M5akpJXzhtMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEAAI4CgME AJUDqjANBAIAAjAHAwUBKhBfwDANBgkqhkiG9w0BAQsFAAOCAQEARKrHlzWa4A4w a+bmsNvm4rk8Cj7d5CkEngHV1WplqQUqkZ6BrjNYFYIV5l2aAAhbRRTfWFwVUj5j e32ZWvoLc8vvpL8CvzperrAa3Fo+6GG+o9ZiRdFSp2eqV96BKxVBq48bmt/xUzwN clj30goVKDSmTXJ/OHIbkXzzgeEhyDpWhNSoYKCh4yowoWw4xI+8hQ74hZMq1u8u Sk+zFF8pbqmdJEUhMIo1wjnJZXy4J7BWe6vE93Cmwq9oSKvQqCaE5Of+oOQmNc1V rGPhlzkMAZ+7HZ7myy/9GinTR6Lnpd3lnqtBchk/O/hIUvlYXQIjFnpoH+u1nVzU NueTlWK5MQ== -----END CERTIFICATE-----Generated at Wed Jan 21 14:48:00 2026 by rpki-client