This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/bv4XO5zS2npXPyVaEioUa-aIjJ0.roa File: bv4XO5zS2npXPyVaEioUa-aIjJ0.roa (raw, json) Hash identifier: icKCmIQnuw0+kzV+kMR4IQooHIsyV92myhle/JdjMl4= Subject key identifier: 6E:FE:17:3B:9C:D2:DA:7A:57:3F:25:5A:12:2A:14:6B:E6:88:8C:9D Certificate issuer: /CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000 Certificate serial: 019B7758C6F35AFEC6FD0F8464E731A5DC5B Authority key identifier: 4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/bv4XO5zS2npXPyVaEioUa-aIjJ0.roa Signing time: Thu 01 Jan 2026 02:17:45 +0000 ROA not before: Thu 01 Jan 2026 02:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 185.73.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.mft rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:c6:f3:5a:fe:c6:fd:0f:84:64:e7:31:a5:dc:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e0f31c6efdb9a445b8f172f0be0dfd5142be000 Validity Not Before: Jan 1 02:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6efe173b9cd2da7a573f255a122a146be6888c9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:9e:34:dd:7f:d5:70:d5:bf:08:eb:f2:42: af:ac:62:7a:f8:33:92:95:4d:fd:07:fb:9d:9e:8f: 7e:91:f1:f9:7a:49:3e:ab:00:88:88:f2:a6:04:aa: dc:a6:07:5f:c2:24:18:51:79:37:82:11:42:db:58: 21:14:7d:17:0a:82:d3:28:67:1b:bd:9b:5b:97:f0: 7a:09:04:c2:80:00:0c:0a:68:13:95:7a:0c:07:4d: 26:cc:d2:69:8f:39:0a:3e:91:a9:78:f0:be:b2:2b: 5d:6f:d1:a7:0e:6b:b3:c1:bb:d9:2b:e5:a9:94:8a: d5:5c:46:ad:53:5c:43:af:1f:c0:10:c9:e8:6c:c7: 7a:4d:77:86:1d:c6:24:bb:7d:4e:6b:fe:06:1c:b5: 5e:45:41:43:dd:20:14:f7:9d:e7:57:a7:ab:94:f5: 4b:59:8f:07:d3:ca:02:bb:a0:80:f2:47:59:3f:ad: 6e:c8:57:f8:a7:53:d0:44:31:c8:d7:b1:24:4b:ac: 99:e9:96:b1:b4:bb:14:fc:5e:2c:a6:d3:f4:1b:3c: 97:82:b4:5f:46:e9:15:57:91:3c:4e:13:df:0e:ac: 5d:02:63:0d:e3:04:55:82:19:ac:da:bb:30:49:75: 3a:aa:f9:28:63:4a:d7:75:31:43:02:cf:91:74:50: 13:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FE:17:3B:9C:D2:DA:7A:57:3F:25:5A:12:2A:14:6B:E6:88:8C:9D X509v3 Authority Key Identifier: keyid:4E:0F:31:C6:EF:DB:9A:44:5B:8F:17:2F:0B:E0:DF:D5:14:2B:E0:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/bv4XO5zS2npXPyVaEioUa-aIjJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/aca790-6329-414a-bed5-bad2cb480912/1/Tg8xxu_bmkRbjxcvC-Df1RQr4AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.73.86.0/24 Signature Algorithm: sha256WithRSAEncryption 66:76:88:6f:3b:fd:06:e6:b3:74:52:f0:56:15:bd:ea:d0:ad: 49:b7:ee:7d:e7:17:79:a1:0d:2d:48:b9:18:60:89:63:6b:05: d1:1d:0d:68:40:7d:2d:17:5d:45:1e:85:fb:48:dc:cb:c8:d4: 49:3a:b4:b3:78:91:04:f7:21:df:87:3a:2a:38:83:bb:c0:47: 74:9f:c4:f4:db:ac:fe:38:50:5e:63:e5:1c:43:18:d5:05:f5: 1d:43:bf:fd:f0:f6:ef:5e:51:8e:be:b3:2e:b5:40:5c:9a:aa: cc:14:2e:2b:8b:06:a7:89:99:33:3e:db:27:44:00:37:74:20: 45:3e:b5:da:e5:b7:5a:05:d1:e0:67:46:84:de:ea:6b:a9:fa: 59:ab:63:1a:aa:6a:14:0c:bd:f3:dd:36:3c:b1:5d:97:60:b7: 9e:6d:ac:c0:f7:56:74:2b:9c:12:47:23:ca:ab:61:5d:03:12: 8d:42:2e:77:9c:71:55:c1:f1:6c:7f:81:09:f4:bc:b3:8e:69: 63:f2:3d:49:1c:f5:b6:cc:92:a9:34:a4:49:31:31:2b:d8:e9: 59:fe:e2:15:d0:32:25:9c:15:bb:1d:10:c9:11:3a:5c:e2:54: 90:58:0c:e6:ed:25:0c:a1:3d:4d:aa:56:10:f5:1e:50:de:e9: b1:20:8f:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WMbzWv7G/Q+EZOcxpdxbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlMGYzMWM2ZWZkYjlhNDQ1YjhmMTcyZjBiZTBkZmQ1MTQy YmUwMDAwHhcNMjYwMTAxMDIxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWZlMTczYjljZDJkYTdhNTczZjI1NWExMjJhMTQ2YmU2ODg4YzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvaeNN1/1XDVvwjr8kKvrGJ6+DOS lU39B/udno9+kfH5ekk+qwCIiPKmBKrcpgdfwiQYUXk3ghFC21ghFH0XCoLTKGcb vZtbl/B6CQTCgAAMCmgTlXoMB00mzNJpjzkKPpGpePC+sitdb9GnDmuzwbvZK+Wp lIrVXEatU1xDrx/AEMnobMd6TXeGHcYku31Oa/4GHLVeRUFD3SAU953nV6erlPVL WY8H08oCu6CA8kdZP61uyFf4p1PQRDHI17EkS6yZ6ZaxtLsU/F4sptP0GzyXgrRf RukVV5E8ThPfDqxdAmMN4wRVghms2rswSXU6qvkoY0rXdTFDAs+RdFATgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG7+Fzuc0tp6Vz8lWhIqFGvmiIydMB8GA1UdIwQY MBaAFE4PMcbv25pEW48XLwvg39UUK+AAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUt YmFkMmNiNDgwOTEyLzEvYnY0WE81elMybnBYUHlWYUVpb1VhLWFJakowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9hY2E3OTAtNjMyOS00MTRhLWJlZDUtYmFkMmNiNDgwOTEy LzEvVGc4eHh1X2Jta1JianhjdkMtRGYxUlFyNEFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUlWMA0G CSqGSIb3DQEBCwUAA4IBAQBmdohvO/0G5rN0UvBWFb3q0K1Jt+595xd5oQ0tSLkY YIljawXRHQ1oQH0tF11FHoX7SNzLyNRJOrSzeJEE9yHfhzoqOIO7wEd0n8T026z+ OFBeY+UcQxjVBfUdQ7/98PbvXlGOvrMutUBcmqrMFC4riwaniZkzPtsnRAA3dCBF PrXa5bdaBdHgZ0aE3uprqfpZq2MaqmoUDL3z3TY8sV2XYLeebazA91Z0K5wSRyPK q2FdAxKNQi53nHFVwfFsf4EJ9Lyzjmlj8j1JHPW2zJKpNKRJMTEr2OlZ/uIV0DIl nBW7HRDJETpc4lSQWAzm7SUMoT1NqlYQ9R5Q3umxII/M -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:22 2026 by rpki-client