This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/buasPl807dGAfqgw1urBhY4Km5w.roa File: buasPl807dGAfqgw1urBhY4Km5w.roa (raw, json) Hash identifier: PQav8NXXwoaYuBOPi54S+Cjky9Sn3BtCmVplgakM7xk= Subject key identifier: 6E:E6:AC:3E:5F:34:ED:D1:80:7E:A8:30:D6:EA:C1:85:8E:0A:9B:9C Certificate issuer: /CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2 Certificate serial: 019B7F83E40C5CD831F1D6B313283A1B2D92 Authority key identifier: 1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/buasPl807dGAfqgw1urBhY4Km5w.roa Signing time: Fri 02 Jan 2026 16:21:48 +0000 ROA not before: Fri 02 Jan 2026 16:21:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33843 IP address blocks: 91.206.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.mft rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:e4:0c:5c:d8:31:f1:d6:b3:13:28:3a:1b:2d:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b646d42ce89d4093e4ac927a7f236f37a51abe2 Validity Not Before: Jan 2 16:21:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ee6ac3e5f34edd1807ea830d6eac1858e0a9b9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e4:6c:c9:0a:6d:d3:a3:65:1d:79:e3:ad:e5: 0b:3a:b5:85:4a:01:17:95:c2:c3:50:f5:26:90:da: 2e:65:90:e8:ff:c4:cc:10:1d:4f:64:81:e8:25:76: bd:fa:2d:19:80:df:4e:b4:7b:23:2b:2e:7c:ab:e9: d8:97:e3:df:36:b2:21:a4:09:11:ed:b7:d5:5e:27: a2:da:61:08:a2:c8:5e:e0:11:26:5f:1c:50:c3:ac: 16:6c:d8:ec:e5:26:2a:1a:9a:97:da:39:29:1e:65: 8f:cc:fc:ad:3f:e6:6c:46:75:0b:0d:d9:20:28:14: 75:d0:53:90:d6:6a:e2:b1:33:ee:76:d3:56:b4:5f: 9c:68:e4:f7:98:3c:ee:b3:f3:4f:48:4a:9f:a2:82: a8:e4:9a:5d:53:aa:51:02:80:bb:3b:f7:c2:52:19: 25:65:f8:b9:11:27:ea:4e:0d:e9:54:18:59:77:81: e2:8c:10:f7:15:86:cf:43:13:07:26:08:1b:bf:d1: 6a:af:53:14:64:5a:3a:ad:da:f3:57:50:eb:b7:b1: 71:2d:3a:5e:bd:0a:a0:fb:cb:f0:e1:17:8e:6c:ab: 59:bf:4d:8b:b7:09:12:9c:a8:9b:0b:57:ec:9a:67: 78:b6:7c:7c:6c:92:b6:c7:f9:c8:02:15:e3:30:f0: fb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E6:AC:3E:5F:34:ED:D1:80:7E:A8:30:D6:EA:C1:85:8E:0A:9B:9C X509v3 Authority Key Identifier: keyid:1B:64:6D:42:CE:89:D4:09:3E:4A:C9:27:A7:F2:36:F3:7A:51:AB:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2RtQs6J1Ak-Ssknp_I283pRq-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/buasPl807dGAfqgw1urBhY4Km5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/df1bcc-0200-46cb-a933-66340bbff0b9/1/G2RtQs6J1Ak-Ssknp_I283pRq-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.46.0/23 Signature Algorithm: sha256WithRSAEncryption 71:e1:59:4d:a0:cf:ef:d3:3f:b7:0e:56:5f:19:47:79:aa:90: ce:c9:ab:81:aa:74:12:9f:fc:c8:05:e7:6d:c4:07:41:7e:89: d4:c1:59:e7:23:ca:05:e6:40:64:99:31:b3:ce:9d:ea:c5:1b: 66:34:8f:9e:1b:96:15:c0:bb:7a:47:d1:b4:b4:63:ee:f3:69: 9d:97:21:f2:6b:00:3a:a1:01:0e:16:4b:5a:b7:4d:37:be:c5: 9e:bf:4c:6d:13:aa:fe:d7:10:52:05:fa:db:08:15:e3:51:f8: 53:e2:72:74:25:08:11:ff:01:b8:cd:7b:b9:12:48:aa:90:95: 76:9f:9b:e7:d4:df:9e:20:91:2f:27:aa:34:28:e1:99:cf:4d: 78:68:f8:a8:67:38:e8:12:00:4d:1a:3a:03:02:80:08:f6:08: 45:b6:12:43:a9:79:c6:fa:f0:52:de:52:57:cb:99:0d:df:82: 6b:75:67:d6:e9:60:a5:ef:be:ae:26:f2:9b:f3:4d:32:b7:c2: f0:43:06:10:9a:35:fa:92:f6:4a:12:b5:35:0c:84:6f:6d:b2: e9:78:21:34:6f:63:6d:ca:64:ea:a4:66:f8:8f:42:1c:5d:e2: d5:c3:4b:8c:b4:bc:01:42:84:73:ca:a7:63:82:18:95:ee:e3: e6:9f:54:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g+QMXNgx8dazEyg6Gy2SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiNjQ2ZDQyY2U4OWQ0MDkzZTRhYzkyN2E3ZjIzNmYzN2E1 MWFiZTIwHhcNMjYwMTAyMTYyMTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWU2YWMzZTVmMzRlZGQxODA3ZWE4MzBkNmVhYzE4NThlMGE5YjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApORsyQpt06NlHXnjreULOrWFSgEX lcLDUPUmkNouZZDo/8TMEB1PZIHoJXa9+i0ZgN9OtHsjKy58q+nYl+PfNrIhpAkR 7bfVXiei2mEIoshe4BEmXxxQw6wWbNjs5SYqGpqX2jkpHmWPzPytP+ZsRnULDdkg KBR10FOQ1mrisTPudtNWtF+caOT3mDzus/NPSEqfooKo5JpdU6pRAoC7O/fCUhkl Zfi5ESfqTg3pVBhZd4HijBD3FYbPQxMHJggbv9Fqr1MUZFo6rdrzV1Drt7FxLTpe vQqg+8vw4ReObKtZv02LtwkSnKibC1fsmmd4tnx8bJK2x/nIAhXjMPD7QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG7mrD5fNO3RgH6oMNbqwYWOCpucMB8GA1UdIwQY MBaAFBtkbULOidQJPkrJJ6fyNvN6UaviMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMt NjYzNDBiYmZmMGI5LzEvYnVhc1BsODA3ZEdBZnFndzF1ckJoWTRLbTV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kZjFiY2MtMDIwMC00NmNiLWE5MzMtNjYzNDBiYmZmMGI5 LzEvRzJSdFFzNkoxQWstU3NrbnBfSTI4M3BScS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW84uMA0G CSqGSIb3DQEBCwUAA4IBAQBx4VlNoM/v0z+3DlZfGUd5qpDOyauBqnQSn/zIBedt xAdBfonUwVnnI8oF5kBkmTGzzp3qxRtmNI+eG5YVwLt6R9G0tGPu82mdlyHyawA6 oQEOFktat003vsWev0xtE6r+1xBSBfrbCBXjUfhT4nJ0JQgR/wG4zXu5EkiqkJV2 n5vn1N+eIJEvJ6o0KOGZz014aPioZzjoEgBNGjoDAoAI9ghFthJDqXnG+vBS3lJX y5kN34JrdWfW6WCl776uJvKb800yt8LwQwYQmjX6kvZKErU1DIRvbbLpeCE0b2Nt ymTqpGb4j0IcXeLVw0uMtLwBQoRzyqdjghiV7uPmn1SY -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:16 2026 by rpki-client