This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/bk8tPJ9EOMV75C2mivaFUdSxCIg.roa File: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (raw, json) Hash identifier: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs= Subject key identifier: 6E:4F:2D:3C:9F:44:38:C5:7B:E4:2D:A6:8A:F6:85:51:D4:B1:08:88 Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b Certificate serial: 019B77C6B166271ADEF69022A9162A366D0B Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/bk8tPJ9EOMV75C2mivaFUdSxCIg.roa Signing time: Thu 01 Jan 2026 04:17:48 +0000 ROA not before: Thu 01 Jan 2026 04:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50182 IP address blocks: 194.247.190.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b1:66:27:1a:de:f6:90:22:a9:16:2a:36:6d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b Validity Not Before: Jan 1 04:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e4f2d3c9f4438c57be42da68af68551d4b10888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:77:bb:d3:fb:a1:8c:f4:38:c9:dc:7d:9b:42: c7:16:47:6e:50:20:19:1d:ea:d3:74:21:05:e8:74: 90:f9:c9:da:e3:ab:bf:e1:a6:69:b1:75:f9:25:bf: c9:5f:90:b2:3f:30:7d:7a:5e:29:6f:a4:5b:1c:ad: c1:d8:a2:17:77:e0:9f:bd:1d:f3:c9:83:8c:1b:de: c1:16:5c:51:98:5b:1e:77:c3:de:47:b7:3b:27:94: 47:57:f0:58:7f:d2:f1:09:83:4f:36:bc:ff:31:b3: 0f:2b:76:e5:e6:bd:4b:42:9c:a1:5b:15:4e:a0:ee: 9d:04:b1:20:2f:e7:b7:ff:bb:a1:19:85:b7:21:13: 69:05:16:cd:72:e1:fe:c1:c8:81:b9:3d:ef:ee:78: 62:d0:2c:04:4c:28:68:2d:de:0e:cf:a9:1a:85:8b: c1:b5:8e:ab:42:89:f8:68:4d:fa:c9:5d:4c:4f:42: fe:c3:58:bc:96:1c:33:79:1d:2b:7c:c1:32:0c:78: 85:7d:bd:2b:91:56:f5:dd:53:74:63:c9:e7:6e:22: cd:4f:5a:2f:9a:f8:fb:7d:3b:e4:4c:82:d8:a5:d2: a2:f4:0a:4e:58:83:42:96:27:b1:83:8e:15:ab:0c: 83:ad:64:d8:e8:0b:52:71:4e:bd:c6:17:ad:99:11: 3e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4F:2D:3C:9F:44:38:C5:7B:E4:2D:A6:8A:F6:85:51:D4:B1:08:88 X509v3 Authority Key Identifier: keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/bk8tPJ9EOMV75C2mivaFUdSxCIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.247.190.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:81:ca:fe:01:3f:31:dd:f5:88:cc:88:18:cc:14:fd:51:c6: 79:ed:13:3e:6d:80:3f:db:a1:e6:35:33:1d:c7:24:67:3b:ee: 91:17:de:20:e1:f3:c6:da:13:b0:08:a3:8f:55:90:b5:6a:d0: bb:8c:3b:cb:e2:a2:69:87:df:e9:4e:9c:fc:fc:b4:88:eb:4d: fa:ed:eb:2b:37:d9:97:f4:40:4a:f8:2d:e1:a3:1b:36:7e:95: 99:20:ae:b8:26:ee:e6:db:42:82:a1:11:a6:7c:d8:4f:84:09: f6:c8:26:dc:50:48:3c:d5:5a:a5:e8:53:da:dd:d9:13:d0:14: 6a:a6:a8:31:b9:cc:1e:2a:1d:56:bf:98:a7:7f:21:17:c5:71: b8:ea:cc:57:c0:df:57:24:c1:2d:60:79:7c:66:f9:a0:e2:5b: 43:8d:6c:ae:0b:51:e2:82:e8:ad:82:21:9d:5e:75:48:cb:32: f5:5b:d3:48:fa:6f:0c:7b:e7:f6:01:2b:1d:5f:a2:1a:97:e6: c4:29:1e:9a:26:07:73:2f:f8:18:8e:44:0b:98:93:2c:13:d6: 14:2a:26:68:fe:43:85:62:62:47:13:c4:ce:6f:03:a5:82:e3: 34:3c:ea:25:66:d1:d1:bb:4e:2d:b1:ee:86:02:84:e9:fc:74: 41:6c:3e:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrFmJxre9pAiqRYqNm0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzYjFlYWJiZTVlZTBjMDQ5NjgwZTJhYmM5NTUzNDM5ZWM2 NDNjMGIwHhcNMjYwMTAxMDQxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTRmMmQzYzlmNDQzOGM1N2JlNDJkYTY4YWY2ODU1MWQ0YjEwODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xe70/uhjPQ4ydx9m0LHFkduUCAZ HerTdCEF6HSQ+cna46u/4aZpsXX5Jb/JX5CyPzB9el4pb6RbHK3B2KIXd+CfvR3z yYOMG97BFlxRmFsed8PeR7c7J5RHV/BYf9LxCYNPNrz/MbMPK3bl5r1LQpyhWxVO oO6dBLEgL+e3/7uhGYW3IRNpBRbNcuH+wciBuT3v7nhi0CwETChoLd4Oz6kahYvB tY6rQon4aE36yV1MT0L+w1i8lhwzeR0rfMEyDHiFfb0rkVb13VN0Y8nnbiLNT1ov mvj7fTvkTILYpdKi9ApOWINCliexg44VqwyDrWTY6AtScU69xhetmRE+IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG5PLTyfRDjFe+Qtpor2hVHUsQiIMB8GA1UdIwQY MBaAFJOx6rvl7gwEloDiq8lVNDnsZDwLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xYjUxMmItMjE1OS00ZjljLWEwYmYt OWQyOGJmNWVmM2MxLzEvYms4dFBKOUVPTVY3NUMybWl2YUZVZFN4Q0lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi8xYjUxMmItMjE1OS00ZjljLWEwYmYtOWQyOGJmNWVmM2Mx LzEvazdIcXUtWHVEQVNXZ09LcnlWVTBPZXhrUEFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwve+MA0G CSqGSIb3DQEBCwUAA4IBAQALgcr+AT8x3fWIzIgYzBT9UcZ57RM+bYA/26HmNTMd xyRnO+6RF94g4fPG2hOwCKOPVZC1atC7jDvL4qJph9/pTpz8/LSI60367esrN9mX 9EBK+C3hoxs2fpWZIK64Ju7m20KCoRGmfNhPhAn2yCbcUEg81Vql6FPa3dkT0BRq pqgxucweKh1Wv5infyEXxXG46sxXwN9XJMEtYHl8Zvmg4ltDjWyuC1HiguitgiGd XnVIyzL1W9NI+m8Me+f2ASsdX6Ial+bEKR6aJgdzL/gYjkQLmJMsE9YUKiZo/kOF YmJHE8TObwOlguM0POolZtHRu04tse6GAoTp/HRBbD5B -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:28 2026 by rpki-client