This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/BnK2KHVLfXFYZprocbcqi0uWmvQ.roa File: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (raw, json) Hash identifier: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY= Subject key identifier: 06:72:B6:28:75:4B:7D:71:58:66:9A:E8:71:B7:2A:8B:4B:96:9A:F4 Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Certificate serial: 019B7F81FE7B180AB544C5A26271D21EAB90 Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/BnK2KHVLfXFYZprocbcqi0uWmvQ.roa Signing time: Fri 02 Jan 2026 16:19:44 +0000 ROA not before: Fri 02 Jan 2026 16:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 194.140.230.0/24 maxlen: 24 2001:67c:144::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:fe:7b:18:0a:b5:44:c5:a2:62:71:d2:1e:ab:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Validity Not Before: Jan 2 16:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0672b628754b7d7158669ae871b72a8b4b969af4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:44:8c:c9:5c:43:a5:35:00:93:44:5a:d8:3e: 6a:25:24:3c:8f:ce:59:c1:41:95:af:9e:61:aa:66: a7:3f:1f:da:5c:f6:93:02:9b:92:13:c6:af:4a:47: 30:ce:16:bd:7c:fa:2b:3b:49:c7:ed:29:79:f7:50: df:92:e8:ba:ad:23:b5:f0:99:3f:2b:5e:63:bf:ff: e2:30:19:ba:c3:f2:94:2a:38:4d:e1:72:6e:5d:85: ba:38:62:7d:56:5b:3b:04:04:b3:f0:ed:93:23:f7: 74:c1:d9:ea:c4:47:05:24:aa:e0:14:1d:b9:62:fe: 35:00:0a:25:a6:e0:2b:65:90:c1:c4:ff:72:e6:3c: fd:93:87:3a:45:d1:3a:01:36:fb:28:fc:52:84:91: 7a:e8:9c:0e:f4:91:38:48:51:aa:14:1e:a8:d1:a1: 67:0a:30:89:d1:2b:33:88:72:e3:87:30:88:0d:a3: 7d:8a:49:40:ba:e0:43:19:f3:48:b8:88:6c:8f:92: 1b:82:43:33:35:2e:6c:99:d5:b9:ed:25:99:ac:33: 27:8e:96:99:63:ab:97:d5:3f:7c:98:2d:6f:58:81: 54:9d:9e:57:d9:6d:24:b7:42:2b:fd:b6:0d:d9:e3: 6e:0c:a3:79:87:b4:6e:1d:3b:f9:52:c1:af:82:ec: 0c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:72:B6:28:75:4B:7D:71:58:66:9A:E8:71:B7:2A:8B:4B:96:9A:F4 X509v3 Authority Key Identifier: keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/BnK2KHVLfXFYZprocbcqi0uWmvQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.140.230.0/24 IPv6: 2001:67c:144::/48 Signature Algorithm: sha256WithRSAEncryption ad:68:84:ab:9d:54:c8:b3:1d:bb:20:66:0c:ae:19:09:92:91: 48:8e:b3:3b:f2:65:18:df:a6:39:d3:4a:38:94:d5:97:60:00: 93:c6:08:01:29:b5:b8:b8:cb:13:a7:d8:9a:8c:0d:32:4b:04: 26:ac:3c:40:88:33:96:53:05:32:4b:0f:64:70:50:61:24:e5: 65:e9:9d:a7:bf:bc:f3:1f:b0:17:93:a5:f1:dd:3a:65:bb:bd: a4:66:34:ff:ac:d5:98:86:5b:48:64:0f:b5:b1:9a:80:c6:34: 22:86:82:32:59:0b:2f:12:c2:f5:de:4f:e4:74:b1:a8:ce:7f: 30:0a:0e:50:f9:c7:7c:a9:41:d5:f7:a3:9d:82:22:cb:d1:74: 26:e7:fb:5d:3f:14:36:eb:b7:c0:18:78:dd:2a:94:9b:47:84: 0a:dc:14:e6:87:98:f7:23:63:5e:aa:56:3e:82:9f:94:1a:29: eb:89:bc:4e:ef:c3:01:f7:26:b8:b0:9a:0b:62:ea:4c:65:d8: c1:01:05:74:36:7e:4c:92:3d:85:38:e1:57:0c:1b:04:c9:3b: ed:66:1a:f7:76:66:fe:63:a8:ac:07:43:c8:dd:0e:0e:b4:3b: 69:f2:3b:48:c6:33:69:81:66:ac:e2:a7:42:dc:1d:24:be:92: b7:4c:1d:70 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/gf57GAq1RMWiYnHSHquQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjdhMGEwNDhiNjhlY2NmYTRkNDllYWI0ZjE2ZGM3OTJj MGQzMTgwHhcNMjYwMTAyMTYxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjcyYjYyODc1NGI3ZDcxNTg2NjlhZTg3MWI3MmE4YjRiOTY5YWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUSMyVxDpTUAk0Ra2D5qJSQ8j85Z wUGVr55hqmanPx/aXPaTApuSE8avSkcwzha9fPorO0nH7Sl591Dfkui6rSO18Jk/ K15jv//iMBm6w/KUKjhN4XJuXYW6OGJ9Vls7BASz8O2TI/d0wdnqxEcFJKrgFB25 Yv41AAolpuArZZDBxP9y5jz9k4c6RdE6ATb7KPxShJF66JwO9JE4SFGqFB6o0aFn CjCJ0SsziHLjhzCIDaN9iklAuuBDGfNIuIhsj5IbgkMzNS5smdW57SWZrDMnjpaZ Y6uX1T98mC1vWIFUnZ5X2W0kt0Ir/bYN2eNuDKN5h7RuHTv5UsGvguwM7wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAZytih1S31xWGaa6HG3KotLlpr0MB8GA1UdIwQY MBaAFL33oKBIto7M+k1J6rTxbceSwNMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgt MzUxNjE5MWE5ZDY4LzEvQm5LMktIVkxmWEZZWnByb2NiY3FpMHVXbXZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgtMzUxNjE5MWE5ZDY4 LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwozmMA8E AgACMAkDBwAgAQZ8AUQwDQYJKoZIhvcNAQELBQADggEBAK1ohKudVMizHbsgZgyu GQmSkUiOszvyZRjfpjnTSjiU1ZdgAJPGCAEptbi4yxOn2JqMDTJLBCasPECIM5ZT BTJLD2RwUGEk5WXpnae/vPMfsBeTpfHdOmW7vaRmNP+s1ZiGW0hkD7WxmoDGNCKG gjJZCy8SwvXeT+R0sajOfzAKDlD5x3ypQdX3o52CIsvRdCbn+10/FDbrt8AYeN0q lJtHhArcFOaHmPcjY16qVj6Cn5QaKeuJvE7vwwH3Jriwmgti6kxl2MEBBXQ2fkyS PYU44VcMGwTJO+1mGvd2Zv5jqKwHQ8jdDg60O2nyO0jGM2mBZqzip0LcHSS+krdM HXA= -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:54 2026 by rpki-client