This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/bJkqSEyBk_C06J1GLb3ybMWIphE.roa File: bJkqSEyBk_C06J1GLb3ybMWIphE.roa (raw, json) Hash identifier: gpTzVN8vQmg0d/Krpn/tav8Ck304WJ5i9XjSQqIb4QQ= Subject key identifier: 6C:99:2A:48:4C:81:93:F0:B4:E8:9D:46:2D:BD:F2:6C:C5:88:A6:11 Certificate issuer: /CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf Certificate serial: 019B7CEE70A6A30E1EED97756311CE880716 Authority key identifier: 37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/bJkqSEyBk_C06J1GLb3ybMWIphE.roa Signing time: Fri 02 Jan 2026 04:19:19 +0000 ROA not before: Fri 02 Jan 2026 04:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202862 IP address blocks: 185.151.180.0/22 maxlen: 22 185.151.180.0/23 maxlen: 23 185.151.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.mft rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:70:a6:a3:0e:1e:ed:97:75:63:11:ce:88:07:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=372535eac158c026727a25e1ebe46d8a5c9cfbbf Validity Not Before: Jan 2 04:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c992a484c8193f0b4e89d462dbdf26cc588a611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:90:0c:4f:16:6e:95:14:fc:2f:7a:16:4c:89: 86:c9:96:29:54:df:a1:85:89:69:64:3b:e8:d4:5e: c9:26:e6:a0:e4:81:a6:1d:96:be:c4:cd:80:17:90: 79:01:10:9b:53:72:5c:ae:76:df:d1:d6:f6:db:c1: 2c:f1:48:d0:f2:5d:25:77:ba:54:48:74:8b:53:98: 83:43:29:5a:48:3d:27:dd:64:cc:41:37:03:32:fe: 55:2c:e8:88:b2:73:73:c1:04:7e:f2:72:47:09:d4: 93:b1:a9:1c:a1:75:c1:de:1a:ed:fe:2a:58:8b:32: 92:8a:d2:00:ab:f5:25:f4:73:62:e9:2a:01:5b:6b: 4a:54:e1:bf:24:18:e4:74:e6:5d:af:26:85:c4:e1: a0:55:4b:4a:d7:38:f4:86:fe:20:27:13:c0:76:47: 35:7e:45:13:12:77:f0:33:a7:bf:85:63:30:9a:e9: 91:5b:b9:21:16:a1:7a:7a:55:f6:7a:fd:48:1a:a0: 56:33:fd:66:38:ee:29:4d:b6:38:ea:ad:84:b8:8b: 9c:08:91:72:a4:cc:ac:70:3a:3a:72:09:dc:35:2f: 19:8e:2c:e1:b3:a3:e5:50:02:ed:2d:1e:73:ce:53: 49:e1:4f:5b:f8:3e:5c:80:b3:ba:b4:5e:ed:16:43: 10:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:99:2A:48:4C:81:93:F0:B4:E8:9D:46:2D:BD:F2:6C:C5:88:A6:11 X509v3 Authority Key Identifier: keyid:37:25:35:EA:C1:58:C0:26:72:7A:25:E1:EB:E4:6D:8A:5C:9C:FB:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NyU16sFYwCZyeiXh6-Rtilyc-78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/bJkqSEyBk_C06J1GLb3ybMWIphE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5a2919-6d5f-475b-ab0a-dc6315e7ed8b/1/NyU16sFYwCZyeiXh6-Rtilyc-78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.151.180.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:95:dc:91:ea:0b:22:5e:7c:66:11:a6:49:f6:81:38:11:19: d3:d0:19:47:dd:c8:db:77:6b:86:6f:54:24:6d:e6:aa:93:b9: 33:79:fb:98:ae:25:f2:61:7a:8e:14:79:bc:a9:37:13:c1:6c: 20:21:4a:c9:14:b7:a2:d9:be:bb:99:e1:f9:e5:8f:bf:3a:00: 9f:e3:8d:7b:cf:6a:f0:21:b4:23:8b:72:b1:03:36:67:96:7a: 96:14:90:95:92:49:48:81:d3:6c:6e:10:f1:22:65:4b:66:fc: 57:a8:69:a1:4d:60:89:bc:f8:d3:07:3d:9d:f6:6e:df:90:b7: 3d:03:30:2a:43:41:ff:6f:96:10:70:dc:88:d2:13:ba:5e:8c: f1:1a:79:48:97:fc:0d:31:f9:a4:c0:f9:a6:0f:17:76:73:28: b8:e6:ba:4a:5a:4d:d3:27:5e:fb:ae:38:aa:01:9b:40:fd:b2: e0:f6:b8:67:bb:b4:de:d0:33:50:a4:7a:97:5c:52:ce:c1:1b: 6b:94:45:78:03:1b:2c:cf:4a:c1:b5:64:6b:71:9e:6f:0d:ac: 8e:29:b4:d9:94:01:27:9d:ed:5f:40:05:f9:ef:38:e5:67:95: 72:d9:4b:94:6b:e9:22:fa:60:a3:65:8a:0a:f5:da:01:78:32: fe:77:f9:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87nCmow4e7Zd1YxHOiAcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3MjUzNWVhYzE1OGMwMjY3MjdhMjVlMWViZTQ2ZDhhNWM5 Y2ZiYmYwHhcNMjYwMTAyMDQxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Yzk5MmE0ODRjODE5M2YwYjRlODlkNDYyZGJkZjI2Y2M1ODhhNjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpAMTxZulRT8L3oWTImGyZYpVN+h hYlpZDvo1F7JJuag5IGmHZa+xM2AF5B5ARCbU3Jcrnbf0db228Es8UjQ8l0ld7pU SHSLU5iDQylaSD0n3WTMQTcDMv5VLOiIsnNzwQR+8nJHCdSTsakcoXXB3hrt/ipY izKSitIAq/Ul9HNi6SoBW2tKVOG/JBjkdOZdryaFxOGgVUtK1zj0hv4gJxPAdkc1 fkUTEnfwM6e/hWMwmumRW7khFqF6elX2ev1IGqBWM/1mOO4pTbY46q2EuIucCJFy pMyscDo6cgncNS8Zjizhs6PlUALtLR5zzlNJ4U9b+D5cgLO6tF7tFkMQIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGyZKkhMgZPwtOidRi298mzFiKYRMB8GA1UdIwQY MBaAFDclNerBWMAmcnol4evkbYpcnPu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnlVMTZzRll3Q1p5ZWlYaDYtUnRpbHljLTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81YTI5MTktNmQ1Zi00NzViLWFiMGEt ZGM2MzE1ZTdlZDhiLzEvYkprcVNFeUJrX0MwNkoxR0xiM3liTVdJcGhFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81YTI5MTktNmQ1Zi00NzViLWFiMGEtZGM2MzE1ZTdlZDhi LzEvTnlVMTZzRll3Q1p5ZWlYaDYtUnRpbHljLTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZe0MA0G CSqGSIb3DQEBCwUAA4IBAQB7ldyR6gsiXnxmEaZJ9oE4ERnT0BlH3cjbd2uGb1Qk beaqk7kzefuYriXyYXqOFHm8qTcTwWwgIUrJFLei2b67meH55Y+/OgCf4417z2rw IbQji3KxAzZnlnqWFJCVkklIgdNsbhDxImVLZvxXqGmhTWCJvPjTBz2d9m7fkLc9 AzAqQ0H/b5YQcNyI0hO6XozxGnlIl/wNMfmkwPmmDxd2cyi45rpKWk3TJ177rjiq AZtA/bLg9rhnu7Te0DNQpHqXXFLOwRtrlEV4Axssz0rBtWRrcZ5vDayOKbTZlAEn ne1fQAX57zjlZ5Vy2UuUa+ki+mCjZYoK9doBeDL+d/me -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:25 2026 by rpki-client