This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/bAHo5l8Kz5vMkMpKnElt47V8J1U.roa File: bAHo5l8Kz5vMkMpKnElt47V8J1U.roa (raw, json) Hash identifier: iaBIgcXtq6BZtgd3NDUosXz7R3M7z9RE1AgckIsW6eI= Subject key identifier: 6C:01:E8:E6:5F:0A:CF:9B:CC:90:CA:4A:9C:49:6D:E3:B5:7C:27:55 Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Certificate serial: 019B7EA71391BD408A17BE2E68F802459C12 Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/bAHo5l8Kz5vMkMpKnElt47V8J1U.roa Signing time: Fri 02 Jan 2026 12:20:37 +0000 ROA not before: Fri 02 Jan 2026 12:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199984 IP address blocks: 185.40.84.0/24 maxlen: 24 185.40.85.0/24 maxlen: 24 2a04:8340:8340::/48 maxlen: 48 2a04:8340:8341::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:13:91:bd:40:8a:17:be:2e:68:f8:02:45:9c:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430 Validity Not Before: Jan 2 12:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c01e8e65f0acf9bcc90ca4a9c496de3b57c2755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c8:76:34:d0:b8:d8:f2:1e:91:97:72:1c:65: e2:47:3f:e6:cf:fe:3e:33:13:37:73:26:33:75:8c: 70:5e:1c:72:99:00:d5:48:19:ae:be:be:04:43:54: 56:b6:e1:4e:b7:8e:19:9c:e1:ed:f5:6d:f1:f1:48: 19:9e:97:98:57:a4:b2:86:ba:49:52:20:61:91:16: 24:12:71:c9:27:0a:65:a7:06:36:fe:fc:98:9b:ca: 1b:a1:57:27:61:2c:88:d0:37:4e:1b:b9:c2:c7:65: 09:00:d2:7c:29:24:a4:f7:69:6a:cb:17:6c:25:93: 46:dd:d8:d4:b2:1b:73:ca:80:fd:0e:3b:b9:b7:ab: 05:91:1a:3e:eb:65:19:34:19:dd:d3:26:6f:ce:bf: de:83:c6:84:b4:6c:13:74:38:d1:f3:4c:c4:f7:31: 6b:21:d8:88:77:99:57:30:c0:38:9f:96:4c:ff:18: b8:22:59:de:05:fb:58:d9:f2:b1:f6:67:9d:c1:ba: d9:72:8b:e2:10:8c:1f:84:39:d0:a1:b4:76:0d:32: cf:c1:64:b4:83:70:49:1d:cc:ed:dd:48:20:88:46: f3:4b:d7:db:17:43:7e:e0:ab:73:e1:ed:c4:93:8a: 5a:f3:7c:90:05:39:b8:10:81:31:b0:2b:c7:71:16: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:01:E8:E6:5F:0A:CF:9B:CC:90:CA:4A:9C:49:6D:E3:B5:7C:27:55 X509v3 Authority Key Identifier: keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/bAHo5l8Kz5vMkMpKnElt47V8J1U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.40.84.0/23 IPv6: 2a04:8340:8340::/47 Signature Algorithm: sha256WithRSAEncryption 53:f1:91:03:f6:5e:9c:b1:c4:42:d6:1f:33:16:a0:4b:a0:a5: b7:5f:c2:dc:fb:6f:cf:79:8c:c5:9c:80:bd:cf:4c:3e:25:96: 80:60:f4:25:40:0f:d2:a3:d7:f6:86:af:a0:d7:cd:3e:19:85: c9:5b:5f:3f:e1:6b:98:29:f2:f9:64:f8:1a:71:82:a0:05:fa: 29:86:ab:c3:c5:17:d6:cc:aa:b0:ae:15:4a:e5:44:85:33:34: ba:23:f0:68:e2:0d:d8:a2:25:a4:6d:ad:6e:c5:15:14:8d:d3: aa:f9:49:39:42:69:84:92:fb:21:1d:06:21:8f:a0:48:94:c4: 3c:c4:6e:76:d0:8c:d3:eb:5d:34:1f:5e:4d:27:56:75:bf:94: 61:cd:9e:da:a5:a9:8c:28:49:96:c9:47:52:0d:7d:01:61:bf: 44:71:b7:58:d6:d0:cf:94:32:b9:bf:c0:ec:ee:d6:c4:1a:17: 85:2d:a0:31:c0:73:8a:2a:47:1f:72:78:59:67:1d:22:a0:b7: 8f:7b:01:1d:cc:b2:d3:c0:db:93:0a:70:cd:5b:f0:72:8d:54: 0f:35:4b:de:df:33:f0:26:96:cd:23:5a:20:c5:2d:31:9c:09: d4:b2:7b:f6:f0:b9:e0:c1:fd:8e:1a:53:82:88:57:bf:16:98: 5e:12:b7:d7 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt+pxORvUCKF74uaPgCRZwSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjYmZkM2U3MmQ0YTAzOTZmOTUzNDczMzZiNDI2NzhmNjhj MjY0MzAwHhcNMjYwMTAyMTIyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzAxZThlNjVmMGFjZjliY2M5MGNhNGE5YzQ5NmRlM2I1N2MyNzU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoch2NNC42PIekZdyHGXiRz/mz/4+ MxM3cyYzdYxwXhxymQDVSBmuvr4EQ1RWtuFOt44ZnOHt9W3x8UgZnpeYV6SyhrpJ UiBhkRYkEnHJJwplpwY2/vyYm8oboVcnYSyI0DdOG7nCx2UJANJ8KSSk92lqyxds JZNG3djUshtzyoD9Dju5t6sFkRo+62UZNBnd0yZvzr/eg8aEtGwTdDjR80zE9zFr IdiId5lXMMA4n5ZM/xi4IlneBftY2fKx9medwbrZcoviEIwfhDnQobR2DTLPwWS0 g3BJHczt3UggiEbzS9fbF0N+4Ktz4e3Ek4pa83yQBTm4EIExsCvHcRZWWQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFGwB6OZfCs+bzJDKSpxJbeO1fCdVMB8GA1UdIwQY MBaAFEy/0+ctSgOW+VNHM2tCZ49owmQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAt ZmY2MGUyMThlZDQxLzEvYkFIbzVsOEt6NXZNa01wS25FbHQ0N1Y4SjFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iNTczM2ItMzg5MS00NDliLTk5NTAtZmY2MGUyMThlZDQx LzEvVExfVDV5MUtBNWI1VTBjemEwSm5qMmpDWkRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBuShUMA8E AgACMAkDBwEqBINAg0AwDQYJKoZIhvcNAQELBQADggEBAFPxkQP2XpyxxELWHzMW oEugpbdfwtz7b895jMWcgL3PTD4lloBg9CVAD9Kj1/aGr6DXzT4ZhclbXz/ha5gp 8vlk+BpxgqAF+imGq8PFF9bMqrCuFUrlRIUzNLoj8GjiDdiiJaRtrW7FFRSN06r5 STlCaYSS+yEdBiGPoEiUxDzEbnbQjNPrXTQfXk0nVnW/lGHNntqlqYwoSZbJR1IN fQFhv0Rxt1jW0M+UMrm/wOzu1sQaF4UtoDHAc4oqRx9yeFlnHSKgt497AR3MstPA 25MKcM1b8HKNVA81S97fM/Amls0jWiDFLTGcCdSye/bwueDB/Y4aU4KIV78WmF4S t9c= -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:32 2026 by rpki-client