This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/bbW-cNXckpCNDMmKy7e6MdanMaQ.roa File: bbW-cNXckpCNDMmKy7e6MdanMaQ.roa (raw, json) Hash identifier: wi5U39n0WOqR1X9J/HwVc9wPVGV330f9mDaW+R+cz3I= Subject key identifier: 6D:B5:BE:70:D5:DC:92:90:8D:0C:C9:8A:CB:B7:BA:31:D6:A7:31:A4 Certificate issuer: /CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Certificate serial: 019B77C6BEA9F19D1B8CD7BF2CD26F1B074E Authority key identifier: 40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/bbW-cNXckpCNDMmKy7e6MdanMaQ.roa Signing time: Thu 01 Jan 2026 04:17:52 +0000 ROA not before: Thu 01 Jan 2026 04:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214557 IP address blocks: 92.60.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.mft rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 05:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:be:a9:f1:9d:1b:8c:d7:bf:2c:d2:6f:1b:07:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40dde71b41bffb1b516e07b0c61391bdf4d3bf11 Validity Not Before: Jan 1 04:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6db5be70d5dc92908d0cc98acbb7ba31d6a731a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b3:17:f7:b5:bf:18:a0:46:3f:0e:18:63:7e: ae:c7:cc:ca:6c:85:3f:db:87:cf:11:0e:46:4a:f1: 7e:b3:ff:b4:7b:45:52:4b:02:d9:9e:e0:46:13:8f: e9:fb:43:72:36:0f:d9:80:7d:a1:8c:ea:55:ca:09: da:14:4d:a0:42:78:26:32:1b:72:e0:a4:f5:19:25: 81:e6:b6:dc:a3:ae:0c:f8:7e:12:0d:2f:bd:61:b5: 8e:f0:e5:10:6f:89:7e:01:f0:66:a2:9a:17:83:f4: 62:63:c1:01:60:a0:f1:2a:b5:41:f7:26:1b:c0:08: 9e:76:28:64:93:1e:bb:1f:6b:5e:55:e3:75:06:2d: 5a:e4:b0:92:0a:82:36:36:7d:2a:d9:02:af:e9:81: d1:e7:b3:a4:17:b7:a5:9e:35:81:53:8e:c2:e0:17: b5:2b:14:e8:e9:24:34:7f:95:ed:4c:1d:d6:fc:1c: 1e:2f:e5:97:82:67:1d:9a:08:ec:cd:16:53:24:1b: 82:f9:06:0f:3e:ef:2e:fd:5c:99:fc:76:3b:a0:b4: 00:e1:02:bf:f2:60:17:50:2c:40:6c:10:62:e1:a3: dc:0d:b6:5e:17:7d:d8:76:5d:71:64:24:07:d5:5e: 95:4e:94:18:e0:ce:09:ca:33:9a:6e:47:2b:e2:12: fd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B5:BE:70:D5:DC:92:90:8D:0C:C9:8A:CB:B7:BA:31:D6:A7:31:A4 X509v3 Authority Key Identifier: keyid:40:DD:E7:1B:41:BF:FB:1B:51:6E:07:B0:C6:13:91:BD:F4:D3:BF:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QN3nG0G_-xtRbgewxhORvfTTvxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/bbW-cNXckpCNDMmKy7e6MdanMaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9562bf-92bc-46eb-9d16-2badce466853/1/QN3nG0G_-xtRbgewxhORvfTTvxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.60.77.0/24 Signature Algorithm: sha256WithRSAEncryption 37:63:97:85:0a:98:9e:8e:2f:08:c9:2b:b6:82:a4:35:6f:e1: e3:b9:23:03:f7:8c:0b:a2:ed:f2:08:c4:e4:21:e8:de:8d:fb: e5:7b:a2:f8:ca:71:b8:6b:c0:21:45:0b:a3:87:5f:a2:a9:29: b7:9b:95:ca:5c:ed:16:c9:1d:60:b8:03:4d:37:e9:53:54:dc: a5:af:70:d7:a3:e9:d9:9c:2a:7f:49:7d:5a:f3:da:ee:96:36: 75:c1:db:40:36:02:66:c5:61:3e:8a:24:01:60:96:21:85:ad: c9:01:15:92:16:3e:2d:bb:73:a5:d9:d4:f0:d5:8c:76:10:73: ae:c5:f1:8a:b5:fa:50:e6:c2:14:9e:19:f3:2e:32:7b:9d:0f: 4d:87:26:57:cc:31:96:0e:41:7e:e5:0f:f4:07:9f:d1:56:7c: 6e:44:a5:9c:b1:3d:b8:2b:f6:e7:56:69:68:53:94:9a:17:68: 67:f6:64:41:3e:7d:1d:d7:dc:6d:3b:ed:03:d3:f6:dc:29:09: 51:c5:64:5f:54:2b:f4:8e:a2:cf:f8:ad:75:56:fd:08:e3:71: 2f:e8:89:a2:78:89:f5:89:0a:a6:7b:7e:26:bd:07:dc:c6:45: 24:02:38:42:13:70:c8:19:a7:f9:d9:ec:eb:6a:2a:bc:c2:90: f0:da:17:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xr6p8Z0bjNe/LNJvGwdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwZGRlNzFiNDFiZmZiMWI1MTZlMDdiMGM2MTM5MWJkZjRk M2JmMTEwHhcNMjYwMTAxMDQxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGI1YmU3MGQ1ZGM5MjkwOGQwY2M5OGFjYmI3YmEzMWQ2YTczMWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbMX97W/GKBGPw4YY36ux8zKbIU/ 24fPEQ5GSvF+s/+0e0VSSwLZnuBGE4/p+0NyNg/ZgH2hjOpVygnaFE2gQngmMhty 4KT1GSWB5rbco64M+H4SDS+9YbWO8OUQb4l+AfBmopoXg/RiY8EBYKDxKrVB9yYb wAiedihkkx67H2teVeN1Bi1a5LCSCoI2Nn0q2QKv6YHR57OkF7elnjWBU47C4Be1 KxTo6SQ0f5XtTB3W/BweL+WXgmcdmgjszRZTJBuC+QYPPu8u/VyZ/HY7oLQA4QK/ 8mAXUCxAbBBi4aPcDbZeF33Ydl1xZCQH1V6VTpQY4M4JyjOabkcr4hL9mwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG21vnDV3JKQjQzJisu3ujHWpzGkMB8GA1UdIwQY MBaAFEDd5xtBv/sbUW4HsMYTkb30078RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYt MmJhZGNlNDY2ODUzLzEvYmJXLWNOWGNrcENORE1tS3k3ZTZNZGFuTWFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy85NTYyYmYtOTJiYy00NmViLTlkMTYtMmJhZGNlNDY2ODUz LzEvUU4zbkcwR18teHRSYmdld3hoT1J2ZlRUdnhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXDxNMA0G CSqGSIb3DQEBCwUAA4IBAQA3Y5eFCpieji8IySu2gqQ1b+HjuSMD94wLou3yCMTk Iejejfvle6L4ynG4a8AhRQujh1+iqSm3m5XKXO0WyR1guANNN+lTVNylr3DXo+nZ nCp/SX1a89ruljZ1wdtANgJmxWE+iiQBYJYhha3JARWSFj4tu3Ol2dTw1Yx2EHOu xfGKtfpQ5sIUnhnzLjJ7nQ9NhyZXzDGWDkF+5Q/0B5/RVnxuRKWcsT24K/bnVmlo U5SaF2hn9mRBPn0d19xtO+0D0/bcKQlRxWRfVCv0jqLP+K11Vv0I43Ev6ImieIn1 iQqme34mvQfcxkUkAjhCE3DIGaf52ezraiq8wpDw2hf6 -----END CERTIFICATE-----Generated at Fri Jan 23 15:20:46 2026 by rpki-client