This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/BK3jTQPLxRwQTexIdAztJbb9r_w.roa File: BK3jTQPLxRwQTexIdAztJbb9r_w.roa (raw, json) Hash identifier: BOA6VwRzLfu//oI/CTeyTW3+atD142Sf/KFEEM4fRyU= Subject key identifier: 04:AD:E3:4D:03:CB:C5:1C:10:4D:EC:48:74:0C:ED:25:B6:FD:AF:FC Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da Certificate serial: 019B7E37A8FBE1E57F240DD9932B67BDCD22 Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/BK3jTQPLxRwQTexIdAztJbb9r_w.roa Signing time: Fri 02 Jan 2026 10:18:55 +0000 ROA not before: Fri 02 Jan 2026 10:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4609 IP address blocks: 124.198.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 00:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:a8:fb:e1:e5:7f:24:0d:d9:93:2b:67:bd:cd:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da Validity Not Before: Jan 2 10:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04ade34d03cbc51c104dec48740ced25b6fdaffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:10:29:02:35:55:f1:24:8e:0d:ff:38:43:1f: e1:10:69:10:9f:33:12:3a:3f:80:98:bb:a7:51:f0: b3:2f:ab:f1:41:84:25:a0:d4:d5:aa:42:07:3c:14: 93:28:4c:74:4d:14:bd:bc:5d:74:35:4a:ef:83:aa: a1:72:a6:f1:e0:c2:61:74:96:e0:b1:40:08:9a:fb: b1:57:63:8d:be:fe:e3:7a:cc:76:5d:68:26:d1:fa: e7:90:97:82:8e:d6:13:70:8a:d1:52:34:c3:b1:c5: c5:5d:c7:8d:10:34:5f:75:50:91:86:2a:0f:91:ed: f7:f8:21:63:87:f3:87:f2:00:c5:c3:e5:87:1a:e7: d1:77:96:f2:d3:8a:65:ec:d3:48:36:b6:88:37:ba: 01:88:a2:c5:18:37:1c:d0:96:31:7d:51:1b:6b:5f: 5f:82:9f:d1:d8:f7:c5:b8:f9:b5:ca:bf:5f:78:0c: f6:b0:27:fb:cc:b9:84:d2:96:1d:a6:3c:7a:88:f2: 72:7d:4f:84:cf:54:28:6f:6e:9e:c4:c3:08:84:ab: 51:8a:66:7b:e7:b4:87:a3:95:eb:c3:58:b2:8d:c4: 11:5b:93:27:a4:fe:e9:3d:dc:68:a5:4a:fd:4f:41: a8:4a:9c:22:4d:04:de:4c:93:54:15:07:3b:28:f3: 00:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AD:E3:4D:03:CB:C5:1C:10:4D:EC:48:74:0C:ED:25:B6:FD:AF:FC X509v3 Authority Key Identifier: keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/BK3jTQPLxRwQTexIdAztJbb9r_w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.198.133.0/24 Signature Algorithm: sha256WithRSAEncryption 52:ca:52:cd:84:6a:4d:d5:f6:ef:0a:fa:35:b2:12:79:05:e0: fb:64:f0:32:0b:d7:47:5c:18:86:e3:a9:02:28:f5:b4:1e:4e: cf:70:20:99:27:d5:c5:54:7c:e8:a4:de:87:9e:ee:55:0b:08: ba:e8:93:01:68:a9:51:89:fe:a6:9c:eb:b0:35:fa:1e:63:9c: 32:3e:74:9e:70:cd:4f:9f:50:fb:d2:8a:46:68:61:4a:67:4f: 60:08:d0:9f:ab:83:38:d5:70:97:1c:e0:d8:3e:34:c1:50:34: 85:53:59:ea:4d:2d:c3:6a:53:d4:6c:8b:99:b4:b1:a9:b2:e4: 72:42:56:e3:cb:ad:61:6a:b7:98:1d:89:8d:29:d4:b5:6b:2d: 2f:70:91:b0:75:f5:75:b1:fa:e2:32:ba:4c:2e:25:67:a5:f6: 86:b4:11:2f:f0:d9:38:a5:50:d0:bd:1e:b8:ae:f1:d5:a7:79: a5:8b:63:7f:16:b0:ed:74:b4:9d:88:ee:5b:fc:3b:b2:0a:f4: de:f3:af:9d:3a:a8:75:39:f3:0e:c0:12:b3:ee:ca:22:d6:08: 93:55:58:0b:86:6d:55:a9:a7:8d:b9:4b:ab:db:15:e0:e4:a3: e2:94:5c:81:ae:a6:31:99:17:e7:52:4e:0c:3f:98:76:26:4f: 1e:32:1c:7f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N6j74eV/JA3Zkytnvc0iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5 NTkyZGEwHhcNMjYwMTAyMTAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGFkZTM0ZDAzY2JjNTFjMTA0ZGVjNDg3NDBjZWQyNWI2ZmRhZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRApAjVV8SSODf84Qx/hEGkQnzMS Oj+AmLunUfCzL6vxQYQloNTVqkIHPBSTKEx0TRS9vF10NUrvg6qhcqbx4MJhdJbg sUAImvuxV2ONvv7jesx2XWgm0frnkJeCjtYTcIrRUjTDscXFXceNEDRfdVCRhioP ke33+CFjh/OH8gDFw+WHGufRd5by04pl7NNINraIN7oBiKLFGDcc0JYxfVEba19f gp/R2PfFuPm1yr9feAz2sCf7zLmE0pYdpjx6iPJyfU+Ez1Qob26exMMIhKtRimZ7 57SHo5Xrw1iyjcQRW5MnpP7pPdxopUr9T0GoSpwiTQTeTJNUFQc7KPMADQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFASt400Dy8UcEE3sSHQM7SW2/a/8MB8GA1UdIwQY MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt ZjVmYjcxYjlhNTFmLzEvQkszalRRUEx4UndRVGV4SWRBenRKYmI5cl93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAfMaFMA0G CSqGSIb3DQEBCwUAA4IBAQBSylLNhGpN1fbvCvo1shJ5BeD7ZPAyC9dHXBiG46kC KPW0Hk7PcCCZJ9XFVHzopN6Hnu5VCwi66JMBaKlRif6mnOuwNfoeY5wyPnSecM1P n1D70opGaGFKZ09gCNCfq4M41XCXHODYPjTBUDSFU1nqTS3DalPUbIuZtLGpsuRy Qlbjy61hareYHYmNKdS1ay0vcJGwdfV1sfriMrpMLiVnpfaGtBEv8Nk4pVDQvR64 rvHVp3mli2N/FrDtdLSdiO5b/DuyCvTe86+dOqh1OfMOwBKz7soi1giTVVgLhm1V qaeNuUur2xXg5KPilFyBrqYxmRfnUk4MP5h2Jk8eMhx/ -----END CERTIFICATE-----Generated at Fri Jan 23 04:39:08 2026 by rpki-client