This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BxkSRbEySEKWWgtUI4cwJO-7G8Y.roa File: BxkSRbEySEKWWgtUI4cwJO-7G8Y.roa (raw, json) Hash identifier: siaf99iyuV3KdXABwMgMl6wNAX6aB73ek+c/LNV9xr0= Subject key identifier: 07:19:12:45:B1:32:48:42:96:5A:0B:54:23:87:30:24:EF:BB:1B:C6 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B358CE21B59DDECC07253083D515232 Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BxkSRbEySEKWWgtUI4cwJO-7G8Y.roa Signing time: Thu 01 Jan 2026 20:17:45 +0000 ROA not before: Thu 01 Jan 2026 20:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203809 IP address blocks: 85.120.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:8c:e2:1b:59:dd:ec:c0:72:53:08:3d:51:52:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07191245b1324842965a0b5423873024efbb1bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4e:63:5d:2a:9c:6b:1e:50:a9:72:fc:50:bf: 4a:d0:b2:5c:24:a4:2b:1c:9c:38:fb:a3:63:32:e3: 7e:89:f1:49:24:ee:a8:07:ef:7d:32:ec:eb:58:32: d3:7e:6c:9d:c1:32:17:f9:05:f7:f9:54:6c:c1:6d: d1:b2:1a:7f:2f:3f:ca:de:73:ea:9a:be:0c:71:84: 05:da:5f:da:7a:56:4e:24:c8:3e:8e:40:46:3c:50: 4a:8e:c1:b5:7e:cf:0b:f7:10:e6:ec:1f:3c:2f:86: e0:3a:d5:53:d8:10:c2:85:b8:2b:46:2a:76:be:2e: c1:fb:de:88:83:a9:f3:f6:5f:58:c7:c9:3b:91:94: 80:43:71:59:df:1e:9c:22:e1:e0:27:6e:8e:51:5b: 2b:d2:1a:a1:ec:aa:ec:f2:2d:7a:ae:85:cc:0f:7f: 84:a5:94:75:a0:ba:7a:5a:26:89:fc:9f:23:53:0b: c3:1a:56:02:84:20:9a:43:44:9b:c1:d5:f0:52:c7: cc:81:70:dd:ad:e6:6c:85:e4:65:7a:b1:5f:ce:a8: 39:f4:ed:78:bf:f1:71:a9:65:49:f4:74:05:84:59: a8:b8:84:b1:e6:e4:1c:e6:e3:c5:eb:11:bc:bb:3d: b5:b6:80:a4:ba:d5:6b:0f:0e:9a:3e:06:f7:ba:a2: 5e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:19:12:45:B1:32:48:42:96:5A:0B:54:23:87:30:24:EF:BB:1B:C6 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/BxkSRbEySEKWWgtUI4cwJO-7G8Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.43.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:f9:a7:44:a2:eb:66:57:b1:9a:11:be:3a:c3:e2:c2:6f:f8: 72:69:8f:b1:d9:bd:08:47:8f:93:2e:5f:a1:6f:3d:cf:22:5e: 0b:f0:fe:3c:f3:b7:8c:cd:21:fc:67:18:6e:6a:2d:a4:e9:dc: 90:6a:72:f5:a0:a8:f4:85:67:57:ab:5c:2b:9a:ed:4a:03:60: ba:f7:0b:9b:f2:79:e0:b4:c3:41:6b:97:fc:45:05:8e:ba:0e: c7:31:dc:78:be:49:1f:c9:c9:37:8c:6c:08:bd:e7:b0:61:d9: e0:38:e7:08:62:6f:4f:a6:6d:32:3c:ac:ba:bd:a5:47:85:a1: 69:ed:b3:3a:f2:f1:14:e5:bb:c4:30:99:1c:80:df:cf:71:74: 33:c6:fb:94:02:ce:5d:c8:e7:14:6a:da:53:da:88:e7:24:e1: 5e:0b:fa:4b:a8:d0:bc:4c:db:52:28:af:9d:65:ff:84:70:cc: 0d:14:78:d5:1e:c8:aa:df:5e:71:f0:2a:ea:71:58:bc:b4:4f: b6:40:e6:f1:65:ae:4e:f8:d7:ee:a5:92:3c:6b:36:fd:df:45: d1:d1:22:0a:99:8f:68:48:61:09:bc:e3:66:82:08:82:dd:20: 59:9d:0f:1b:00:d1:6c:8b:3a:02:08:0e:a5:1c:a2:10:4e:d8: 30:d8:45:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NYziG1nd7MByUwg9UVIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzE5MTI0NWIxMzI0ODQyOTY1YTBiNTQyMzg3MzAyNGVmYmIxYmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU5jXSqcax5QqXL8UL9K0LJcJKQr HJw4+6NjMuN+ifFJJO6oB+99MuzrWDLTfmydwTIX+QX3+VRswW3Rshp/Lz/K3nPq mr4McYQF2l/aelZOJMg+jkBGPFBKjsG1fs8L9xDm7B88L4bgOtVT2BDChbgrRip2 vi7B+96Ig6nz9l9Yx8k7kZSAQ3FZ3x6cIuHgJ26OUVsr0hqh7Krs8i16roXMD3+E pZR1oLp6WiaJ/J8jUwvDGlYChCCaQ0SbwdXwUsfMgXDdreZsheRlerFfzqg59O14 v/FxqWVJ9HQFhFmouISx5uQc5uPF6xG8uz21toCkutVrDw6aPgb3uqJe8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcZEkWxMkhClloLVCOHMCTvuxvGMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvQnhrU1JiRXlTRUtXV2d0VUk0Y3dKTy03RzhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXgrMA0G CSqGSIb3DQEBCwUAA4IBAQCf+adEoutmV7GaEb46w+LCb/hyaY+x2b0IR4+TLl+h bz3PIl4L8P4887eMzSH8Zxhuai2k6dyQanL1oKj0hWdXq1wrmu1KA2C69wub8nng tMNBa5f8RQWOug7HMdx4vkkfyck3jGwIveewYdngOOcIYm9Ppm0yPKy6vaVHhaFp 7bM68vEU5bvEMJkcgN/PcXQzxvuUAs5dyOcUatpT2ojnJOFeC/pLqNC8TNtSKK+d Zf+EcMwNFHjVHsiq315x8CrqcVi8tE+2QObxZa5O+NfupZI8azb930XR0SIKmY9o SGEJvONmggiC3SBZnQ8bANFsizoCCA6lHKIQTtgw2EUF -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:24 2026 by rpki-client