This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa File: bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa (raw, json) Hash identifier: uKcVytuQYuouml3wIVfkbst8oBdAm0iOGlIFW2AnouI= Subject key identifier: 6C:E0:A4:77:5F:00:C9:BE:5B:70:8F:06:E9:85:41:AB:B3:C8:51:CC Certificate issuer: /CN=485f76274c805d25b115a3adba1d2ea154deead7 Certificate serial: 019B783468FEDFB53DACC4B7F656C34BE9E3 Authority key identifier: 48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa Signing time: Thu 01 Jan 2026 06:17:39 +0000 ROA not before: Thu 01 Jan 2026 06:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202799 IP address blocks: 91.220.163.0/24 maxlen: 24 194.26.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.mft rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 15:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:68:fe:df:b5:3d:ac:c4:b7:f6:56:c3:4b:e9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485f76274c805d25b115a3adba1d2ea154deead7 Validity Not Before: Jan 1 06:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ce0a4775f00c9be5b708f06e98541abb3c851cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:bc:fd:ea:b3:0d:b7:34:ff:13:08:59:9e:f4: 03:6a:9c:86:82:0e:53:7b:99:3c:a8:6e:16:27:38: 9e:eb:40:31:80:67:3a:a8:a6:81:76:15:2d:ef:13: 01:f0:c6:6c:8b:39:40:0a:f2:3b:6d:7f:43:f5:af: 58:06:c3:6d:50:db:cd:82:ed:e6:e0:03:6e:33:fb: 62:92:84:29:a0:32:14:34:0d:e7:2d:d6:6b:24:23: ca:62:48:85:25:f5:aa:7f:31:b8:bd:fe:0a:5c:d2: 67:a6:e5:ca:33:ad:1a:82:6b:04:86:25:92:7a:8b: 69:d6:a5:18:e7:9f:8c:18:79:7a:63:0d:a2:d2:be: 5d:d2:1d:b3:1e:73:2c:d9:21:c0:91:b4:26:f6:b2: f3:d5:d8:69:9d:b2:d2:72:44:c7:6c:8d:45:cf:87: 5f:be:b9:c6:e9:fe:d0:85:d4:8b:7b:57:9e:f0:52: 54:be:08:cf:5f:33:a5:5f:03:25:c4:e0:3f:f5:79: a0:bb:31:90:dd:b3:86:cc:44:34:98:92:4a:e4:66: 8b:3a:26:31:e8:a3:ea:65:89:cb:d1:05:3e:26:cb: f5:9e:6f:2c:37:7d:ca:c1:c9:5b:31:eb:0c:a3:8d: 4b:7b:91:14:d6:69:70:61:d7:39:20:d9:10:75:1b: d4:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E0:A4:77:5F:00:C9:BE:5B:70:8F:06:E9:85:41:AB:B3:C8:51:CC X509v3 Authority Key Identifier: keyid:48:5F:76:27:4C:80:5D:25:B1:15:A3:AD:BA:1D:2E:A1:54:DE:EA:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF92J0yAXSWxFaOtuh0uoVTe6tc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/bOCkd18Ayb5bcI8G6YVBq7PIUcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/685b53-6f11-41db-bead-43eaf7567caa/1/SF92J0yAXSWxFaOtuh0uoVTe6tc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.220.163.0/24 194.26.25.0/24 Signature Algorithm: sha256WithRSAEncryption 87:04:70:de:27:0c:35:5f:9f:b4:5c:07:49:50:5b:ad:52:38: 8e:c4:93:44:b9:b2:21:87:2e:92:6b:83:9c:f9:ab:07:dd:43: d2:57:06:06:82:4c:8a:22:81:ba:6e:15:58:b2:54:71:ab:94: 48:4d:3a:ec:6e:44:db:0e:86:ce:44:e2:7e:f8:f2:82:c2:4e: 8e:da:b9:f9:9c:16:8a:9c:1c:5b:43:54:b2:57:91:f9:1f:43: 6b:36:02:53:03:f3:ca:0e:18:1b:50:c1:b5:bc:4e:bd:94:74: ee:29:0d:9b:5e:fa:09:f2:79:1f:2d:90:5e:fa:d8:13:4c:d6: 2a:3f:79:1d:1c:92:e4:19:f0:74:b4:eb:a5:a6:63:18:70:0a: 3d:6d:a8:26:50:9a:b6:80:70:24:34:97:aa:dc:b3:52:72:d5: 10:0b:03:37:e4:60:c2:17:71:d6:2e:af:4b:20:d3:eb:bf:6d: 3f:b0:35:15:5e:50:75:56:ca:9b:35:ad:02:4c:f8:2a:aa:ec: 60:d6:b1:58:39:1b:66:9a:2a:19:d0:36:04:14:38:17:cc:48: d4:20:50:8a:26:0e:c9:ec:9b:f8:4a:c0:95:b9:49:31:17:61: 13:e2:e8:9d:f8:e6:42:82:85:57:c0:50:da:26:d5:ab:71:75: 6a:56:b6:83 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NGj+37U9rMS39lbDS+njMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NWY3NjI3NGM4MDVkMjViMTE1YTNhZGJhMWQyZWExNTRk ZWVhZDcwHhcNMjYwMTAxMDYxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2UwYTQ3NzVmMDBjOWJlNWI3MDhmMDZlOTg1NDFhYmIzYzg1MWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Lz96rMNtzT/EwhZnvQDapyGgg5T e5k8qG4WJzie60AxgGc6qKaBdhUt7xMB8MZsizlACvI7bX9D9a9YBsNtUNvNgu3m 4ANuM/tikoQpoDIUNA3nLdZrJCPKYkiFJfWqfzG4vf4KXNJnpuXKM60agmsEhiWS eotp1qUY55+MGHl6Yw2i0r5d0h2zHnMs2SHAkbQm9rLz1dhpnbLSckTHbI1Fz4df vrnG6f7QhdSLe1ee8FJUvgjPXzOlXwMlxOA/9XmguzGQ3bOGzEQ0mJJK5GaLOiYx 6KPqZYnL0QU+Jsv1nm8sN33KwclbMesMo41Le5EU1mlwYdc5INkQdRvUuQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGzgpHdfAMm+W3CPBumFQauzyFHMMB8GA1UdIwQY MBaAFEhfdidMgF0lsRWjrbodLqFU3urXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQt NDNlYWY3NTY3Y2FhLzEvYk9Da2QxOEF5YjViY0k4RzZZVkJxN1BJVWN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC82ODViNTMtNmYxMS00MWRiLWJlYWQtNDNlYWY3NTY3Y2Fh LzEvU0Y5MkoweUFYU1d4RmFPdHVoMHVvVlRlNnRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9yjAwQA whoZMA0GCSqGSIb3DQEBCwUAA4IBAQCHBHDeJww1X5+0XAdJUFutUjiOxJNEubIh hy6Sa4Oc+asH3UPSVwYGgkyKIoG6bhVYslRxq5RITTrsbkTbDobOROJ++PKCwk6O 2rn5nBaKnBxbQ1SyV5H5H0NrNgJTA/PKDhgbUMG1vE69lHTuKQ2bXvoJ8nkfLZBe +tgTTNYqP3kdHJLkGfB0tOulpmMYcAo9bagmUJq2gHAkNJeq3LNSctUQCwM35GDC F3HWLq9LINPrv20/sDUVXlB1VsqbNa0CTPgqquxg1rFYORtmmioZ0DYEFDgXzEjU IFCKJg7J7Jv4SsCVuUkxF2ET4uid+OZCgoVXwFDaJtWrcXVqVraD -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:35 2026 by rpki-client