This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/RxKetbkFR1olWLlhrcubK8yceAM.roa File: RxKetbkFR1olWLlhrcubK8yceAM.roa (raw, json) Hash identifier: g3CTp9HnUT7GJeL+1i3uTdVEKFQJlZ/SWysI1PWWzG4= Subject key identifier: 47:12:9E:B5:B9:05:47:5A:25:58:B9:61:AD:CB:9B:2B:CC:9C:78:03 Certificate issuer: /CN=bbd932f7064b1fde9a1225f332779fc22e673239 Certificate serial: 019B7834D4BFC5A4D0B4C2F783542747E838 Authority key identifier: BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/RxKetbkFR1olWLlhrcubK8yceAM.roa Signing time: Thu 01 Jan 2026 06:18:06 +0000 ROA not before: Thu 01 Jan 2026 06:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 81.10.128.0/17 maxlen: 24 86.56.128.0/17 maxlen: 24 90.146.0.0/16 maxlen: 24 185.196.156.0/22 maxlen: 24 212.33.32.0/19 maxlen: 24 212.241.64.0/18 maxlen: 24 2a00:cf8::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:d4:bf:c5:a4:d0:b4:c2:f7:83:54:27:47:e8:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd932f7064b1fde9a1225f332779fc22e673239 Validity Not Before: Jan 1 06:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47129eb5b905475a2558b961adcb9b2bcc9c7803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:3c:fa:aa:21:f6:fc:38:a8:ac:1d:05:d7: 8c:ff:18:1d:84:7b:f7:37:db:b0:5c:c7:f7:ca:c4: f6:27:fb:44:69:46:21:54:8c:b2:1c:3e:47:4a:c1: 45:0e:e8:16:89:0c:45:1c:90:8c:53:2b:2b:d3:84: 6a:dc:71:c7:5f:92:66:97:e4:e0:d9:01:54:d1:48: 0f:39:ff:ac:c4:54:4e:12:08:c9:3c:54:ac:f8:6f: c6:be:40:14:13:e5:af:6e:f4:f6:a1:61:82:2c:d6: 81:70:ed:d4:1a:f8:a4:94:df:4d:2a:cd:ef:bc:b9: 36:1e:aa:07:56:1e:8a:89:d8:63:e2:6a:8a:50:a5: 5f:6a:f4:0d:65:e5:76:33:50:d7:d4:1a:72:a7:4a: 4b:bd:8c:1f:f7:76:19:16:6c:aa:5e:93:e8:31:5c: 01:de:9e:19:86:8c:8e:60:59:db:77:f3:96:9f:7e: ff:d3:d9:5f:fc:54:95:6a:fc:c6:29:31:58:ca:14: 3e:9c:0e:3b:d7:70:ef:c9:fb:8c:a5:a7:bf:79:f0: 01:36:a7:1c:e2:e9:23:1e:6a:b4:72:db:aa:dc:30: f9:d3:07:17:17:21:01:9e:52:72:0c:5a:07:2e:8d: 23:a7:d1:6f:f0:25:8a:66:8d:67:51:13:f2:8c:d2: a9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:12:9E:B5:B9:05:47:5A:25:58:B9:61:AD:CB:9B:2B:CC:9C:78:03 X509v3 Authority Key Identifier: keyid:BB:D9:32:F7:06:4B:1F:DE:9A:12:25:F3:32:77:9F:C2:2E:67:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9ky9wZLH96aEiXzMnefwi5nMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/RxKetbkFR1olWLlhrcubK8yceAM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a58bde-c461-483f-911b-d179881d0618/1/u9ky9wZLH96aEiXzMnefwi5nMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.10.128.0/17 86.56.128.0/17 90.146.0.0/16 185.196.156.0/22 212.33.32.0/19 212.241.64.0/18 IPv6: 2a00:cf8::/32 Signature Algorithm: sha256WithRSAEncryption 89:eb:05:91:0c:ed:fe:71:4c:10:05:2c:a2:6c:bf:5f:98:d9: b8:6c:dd:58:ff:be:68:5b:ec:69:8e:e8:7d:aa:4c:14:d3:19: 2b:ac:5e:30:a4:18:60:22:0a:93:f7:47:94:c4:2b:d9:4b:70: 49:e5:34:6c:9b:21:ad:ac:14:fd:a9:57:c2:fe:66:75:03:8a: 24:a9:1b:e4:74:9d:11:52:79:b5:3c:22:72:37:63:4e:86:ab: a8:e8:06:47:1e:1f:ae:06:b6:ee:89:25:49:db:1c:90:f5:7c: f3:af:45:3b:89:c8:4c:62:ec:37:8c:a9:0c:6e:c9:95:2d:78: f7:2b:93:58:ec:7e:60:61:70:5a:ec:c2:f5:c2:6a:7b:ad:89: fb:d2:dc:7d:13:33:7b:9c:aa:84:27:8f:9d:51:a8:a8:14:4f: bd:39:21:d9:27:96:8a:e9:e2:84:46:09:a4:fc:2d:6b:7f:bb: 80:2f:ae:2d:38:6c:14:39:9e:3f:75:d2:5d:78:52:7b:e6:a0: 5d:2d:b3:91:17:32:e2:8d:78:f8:c6:53:83:c8:d5:f0:fa:da: 07:c0:e5:2a:38:fa:9e:ef:1c:cc:38:fc:50:18:93:11:87:d2: 4c:9f:f3:71:fd:e6:2e:d3:37:4b:70:25:51:86:46:be:40:4c: 8a:f1:68:36 -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt4NNS/xaTQtML3g1QnR+g4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDkzMmY3MDY0YjFmZGU5YTEyMjVmMzMyNzc5ZmMyMmU2 NzMyMzkwHhcNMjYwMTAxMDYxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzEyOWViNWI5MDU0NzVhMjU1OGI5NjFhZGNiOWIyYmNjOWM3ODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9s8+qoh9vw4qKwdBdeM/xgdhHv3 N9uwXMf3ysT2J/tEaUYhVIyyHD5HSsFFDugWiQxFHJCMUysr04Rq3HHHX5Jml+Tg 2QFU0UgPOf+sxFROEgjJPFSs+G/GvkAUE+WvbvT2oWGCLNaBcO3UGviklN9NKs3v vLk2HqoHVh6Kidhj4mqKUKVfavQNZeV2M1DX1Bpyp0pLvYwf93YZFmyqXpPoMVwB 3p4ZhoyOYFnbd/OWn37/09lf/FSVavzGKTFYyhQ+nA4713DvyfuMpae/efABNqcc 4ukjHmq0ctuq3DD50wcXFyEBnlJyDFoHLo0jp9Fv8CWKZo1nURPyjNKpKwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFEcSnrW5BUdaJVi5Ya3LmyvMnHgDMB8GA1UdIwQY MBaAFLvZMvcGSx/emhIl8zJ3n8IuZzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWIt ZDE3OTg4MWQwNjE4LzEvUnhLZXRia0ZSMW9sV0xsaHJjdWJLOHljZUFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hNThiZGUtYzQ2MS00ODNmLTkxMWItZDE3OTg4MWQwNjE4 LzEvdTlreTl3WkxIOTZhRWlYek1uZWZ3aTVuTWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjApBAIAATAjAwQHUQqAAwQH VjiAAwMAWpIDBAK5xJwDBAXUISADBAbU8UAwDQQCAAIwBwMFACoADPgwDQYJKoZI hvcNAQELBQADggEBAInrBZEM7f5xTBAFLKJsv1+Y2bhs3Vj/vmhb7GmO6H2qTBTT GSusXjCkGGAiCpP3R5TEK9lLcEnlNGybIa2sFP2pV8L+ZnUDiiSpG+R0nRFSebU8 InI3Y06Gq6joBkceH64Gtu6JJUnbHJD1fPOvRTuJyExi7DeMqQxuyZUtePcrk1js fmBhcFrswvXCanutifvS3H0TM3ucqoQnj51RqKgUT705Idknlorp4oRGCaT8LWt/ u4Avri04bBQ5nj910l14UnvmoF0ts5EXMuKNePjGU4PI1fD62gfA5So4+p7vHMw4 /FAYkxGH0kyf83H95i7TN0twJVGGRr5ATIrxaDY= -----END CERTIFICATE-----Generated at Wed Jan 21 07:23:28 2026 by rpki-client