This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Bkj4O73XU-g1ipmqwwe_xijWtD4.roa File: Bkj4O73XU-g1ipmqwwe_xijWtD4.roa (raw, json) Hash identifier: ePKQQmqbqKezQ+aaPSBLfVgD1LQvI1E0KVQ57NIp9Tw= Subject key identifier: 06:48:F8:3B:BD:D7:53:E8:35:8A:99:AA:C3:07:BF:C6:28:D6:B4:3E Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c Certificate serial: 019B7F14645BB28F21A16EFCDF648BA054FC Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Bkj4O73XU-g1ipmqwwe_xijWtD4.roa Signing time: Fri 02 Jan 2026 14:20:01 +0000 ROA not before: Fri 02 Jan 2026 14:20:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209759 IP address blocks: 193.233.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:64:5b:b2:8f:21:a1:6e:fc:df:64:8b:a0:54:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c Validity Not Before: Jan 2 14:20:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0648f83bbdd753e8358a99aac307bfc628d6b43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:03:cc:84:10:20:10:5f:d5:7c:9d:16:7d:ff: f8:d5:28:28:0d:58:af:95:cd:96:1d:b3:93:63:a1: ba:27:f7:9e:f6:d3:fb:81:45:fd:9d:de:4c:81:af: 5e:02:b8:73:a1:15:66:d7:8d:4d:fc:0d:60:a6:ea: 32:7e:b2:fd:91:4a:d2:bc:f4:de:55:16:98:e9:e9: 72:a0:e9:e7:40:08:76:66:89:9e:70:37:58:55:1b: f3:ac:8d:e4:e4:38:b9:b4:06:29:b3:bd:7f:e8:ac: b5:c2:16:24:b8:37:25:eb:53:95:85:a4:a7:df:d4: 50:75:ab:38:06:76:71:c5:11:38:af:21:cf:62:4f: 80:4b:8e:5a:8a:d3:aa:27:6e:ad:32:fe:f8:3a:4c: c7:a2:45:26:16:f7:fb:a4:11:f2:db:86:1d:01:88: ae:3c:03:0c:d2:3b:7b:15:1c:ee:da:87:79:38:35: 16:67:3d:0c:9e:75:cb:ef:44:ae:3e:15:7a:46:ff: 69:1d:d2:d1:fa:2d:7c:3c:2d:f7:7a:37:3e:b4:9a: 8d:9e:ee:ec:6b:9e:2c:79:f0:b5:2d:46:7b:e2:3f: 41:52:eb:31:01:d0:c2:ec:a2:79:14:bd:13:cd:e9: 5f:48:22:cd:a6:74:f0:e6:23:4f:a5:b6:5f:a8:cd: 35:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:48:F8:3B:BD:D7:53:E8:35:8A:99:AA:C3:07:BF:C6:28:D6:B4:3E X509v3 Authority Key Identifier: keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Bkj4O73XU-g1ipmqwwe_xijWtD4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.233.201.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:3c:2f:b0:e0:75:8f:fe:6c:51:4c:6b:c7:6d:f9:5f:b3:4d: e3:62:a8:cc:f1:e6:a5:87:ce:7a:18:4a:46:79:2b:c6:61:71: 6e:c7:c8:4a:fc:22:76:79:6b:d4:80:c2:43:f4:fa:51:7d:85: c1:96:44:c7:67:71:87:bb:35:c0:87:b3:79:d4:a9:11:61:1a: 58:cb:94:97:a0:fa:93:45:e6:88:3f:47:49:df:c7:6e:5f:1e: f0:de:dd:aa:2a:ed:e7:8a:e4:fb:5d:7f:13:79:14:64:aa:06: 9b:64:6d:a7:59:b7:30:5b:1b:94:1d:55:d3:0f:7c:5b:d5:76: 9e:9b:d2:32:59:57:31:2b:bf:52:64:74:97:f5:ed:89:26:f9: 79:af:1a:00:d4:75:d9:b7:4d:e7:ac:ff:38:2f:ee:fc:65:d4: a4:b6:30:71:37:c5:28:3e:45:79:d2:04:24:91:f4:b0:a5:d6: 31:cd:82:93:91:75:b3:a9:cd:e0:45:29:b5:5c:d9:fe:c8:b7: 56:50:7f:3b:44:d4:9e:2b:2b:9b:fb:4f:e1:99:b8:9e:f1:40: 8f:20:58:ca:5b:fd:58:ff:e8:68:4a:12:dc:a9:42:0e:9f:4e: e8:cf:98:66:79:83:52:07:73:29:b7:e5:5e:bc:dc:17:81:fd: 8a:aa:5b:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FGRbso8hoW7832SLoFT8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4 Mjg3M2MwHhcNMjYwMTAyMTQyMDAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjQ4ZjgzYmJkZDc1M2U4MzU4YTk5YWFjMzA3YmZjNjI4ZDZiNDNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAPMhBAgEF/VfJ0Wff/41SgoDViv lc2WHbOTY6G6J/ee9tP7gUX9nd5Mga9eArhzoRVm141N/A1gpuoyfrL9kUrSvPTe VRaY6elyoOnnQAh2ZomecDdYVRvzrI3k5Di5tAYps71/6Ky1whYkuDcl61OVhaSn 39RQdas4BnZxxRE4ryHPYk+AS45aitOqJ26tMv74OkzHokUmFvf7pBHy24YdAYiu PAMM0jt7FRzu2od5ODUWZz0MnnXL70SuPhV6Rv9pHdLR+i18PC33ejc+tJqNnu7s a54sefC1LUZ74j9BUusxAdDC7KJ5FL0TzelfSCLNpnTw5iNPpbZfqM01dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAZI+Du911PoNYqZqsMHv8Yo1rQ+MB8GA1UdIwQY MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt NGRlYzRkYWZlZTQ5LzEvQmtqNE83M1hVLWcxaXBtcXd3ZV94aWpXdEQ0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5 LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwenJMA0G CSqGSIb3DQEBCwUAA4IBAQCKPC+w4HWP/mxRTGvHbflfs03jYqjM8ealh856GEpG eSvGYXFux8hK/CJ2eWvUgMJD9PpRfYXBlkTHZ3GHuzXAh7N51KkRYRpYy5SXoPqT ReaIP0dJ38duXx7w3t2qKu3niuT7XX8TeRRkqgabZG2nWbcwWxuUHVXTD3xb1Xae m9IyWVcxK79SZHSX9e2JJvl5rxoA1HXZt03nrP84L+78ZdSktjBxN8UoPkV50gQk kfSwpdYxzYKTkXWzqc3gRSm1XNn+yLdWUH87RNSeKyub+0/hmbie8UCPIFjKW/1Y /+hoShLcqUIOn07oz5hmeYNSB3Mpt+VevNwXgf2KqluF -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:39 2026 by rpki-client