This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BK41cxYoWeUcBVCmNPbbQHrYmx0.roa File: BK41cxYoWeUcBVCmNPbbQHrYmx0.roa (raw, json) Hash identifier: 5Uf3M9YP0TLQWv23IIHQHpJ2WyaeVsjN9vYHPk8k/A8= Subject key identifier: 04:AE:35:73:16:28:59:E5:1C:05:50:A6:34:F6:DB:40:7A:D8:9B:1D Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106BA4BB5E464B44D7EF4286D9623F Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BK41cxYoWeUcBVCmNPbbQHrYmx0.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211859 IP address blocks: 78.135.106.0/24 maxlen: 24 78.135.107.0/24 maxlen: 24 188.132.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6b:a4:bb:5e:46:4b:44:d7:ef:42:86:d9:62:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04ae3573162859e51c0550a634f6db407ad89b1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:43:b0:74:db:c5:9a:9e:fd:85:f1:0b:75:0f: 96:ba:0e:9d:97:59:0a:0e:97:8b:19:db:ca:73:d5: 0c:08:2d:c2:ea:fe:69:be:e0:af:dc:20:4a:15:e3: 70:e5:fa:b6:f5:57:7e:2b:ea:4e:ec:da:c7:68:7b: 2a:73:93:20:e3:4c:40:d9:76:1c:ac:34:79:1c:1b: 1d:ad:a3:f1:6b:8c:6e:9e:9b:16:e5:61:c3:36:60: 16:ad:25:b0:5c:11:1b:fc:22:8c:ea:ed:0b:1d:8f: 86:c8:c6:08:37:89:75:64:b4:07:02:da:d8:14:c9: a7:f9:c7:75:2a:27:25:f0:2d:6c:90:d9:95:89:28: e6:4e:84:f7:06:99:14:0c:fd:e5:fe:e6:f8:aa:53: 67:37:54:01:32:f6:71:4b:01:02:8e:a6:65:59:fe: f3:d1:50:12:49:5c:d0:c7:00:07:26:ae:33:83:41: 25:f3:f4:92:af:f0:2a:47:1e:0f:3b:49:3a:62:66: 87:0a:47:51:9e:13:4f:45:35:8b:11:97:b2:bd:85: 62:e8:1f:01:00:2a:81:ad:ce:9a:d7:2e:fe:30:ad: 0e:3e:82:63:d3:9a:69:23:38:f1:59:26:a5:db:cb: 8b:1b:6a:aa:86:67:b6:08:8c:14:3e:fc:fd:39:38: e5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AE:35:73:16:28:59:E5:1C:05:50:A6:34:F6:DB:40:7A:D8:9B:1D X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BK41cxYoWeUcBVCmNPbbQHrYmx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.106.0/23 188.132.200.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:fd:d3:eb:38:71:cf:1b:46:10:53:7b:c2:37:8a:17:3c:4b: 8e:40:fc:87:28:c3:3d:88:fb:22:97:ad:e6:f4:05:0d:2a:85: 5c:ae:c0:2c:e1:4c:ca:df:5e:62:80:ff:b1:76:a9:dc:87:55: 7c:b7:9d:af:e1:d1:24:a8:b9:75:6c:61:1e:c7:47:d6:19:05: 6f:33:a6:13:87:74:d9:96:08:5f:34:dc:af:f0:bd:6f:66:d5: cb:7d:7d:cf:ab:30:08:dc:ff:98:2c:68:72:e2:8f:17:a0:42: cf:c5:bb:23:98:d7:fb:99:29:6e:3e:9c:61:e2:ae:04:16:9c: f7:87:fd:20:f5:12:95:94:a0:8c:96:05:3b:84:c3:0f:1e:4d: ad:ec:71:ad:3a:c2:ac:c8:b0:b1:76:dd:29:d5:85:04:ce:6f: 27:03:01:4f:57:6e:e2:c7:6b:eb:52:28:07:87:cf:25:fb:e8: 76:a5:78:fc:56:eb:4c:6a:01:53:66:57:e3:a7:a5:3d:e1:77: a6:be:3b:14:63:13:00:4b:8f:16:13:fb:2f:35:b5:c1:01:61: 2a:04:d5:23:3b:01:76:c4:ca:51:d5:06:8f:36:7d:5c:56:9c: f6:16:02:ff:91:87:c2:3d:94:37:7a:e4:f3:ff:ef:34:b8:b1: 6c:7c:6a:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EGuku15GS0TX70KG2WI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGFlMzU3MzE2Mjg1OWU1MWMwNTUwYTYzNGY2ZGI0MDdhZDg5YjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUOwdNvFmp79hfELdQ+Wug6dl1kK DpeLGdvKc9UMCC3C6v5pvuCv3CBKFeNw5fq29Vd+K+pO7NrHaHsqc5Mg40xA2XYc rDR5HBsdraPxa4xunpsW5WHDNmAWrSWwXBEb/CKM6u0LHY+GyMYIN4l1ZLQHAtrY FMmn+cd1Kicl8C1skNmViSjmToT3BpkUDP3l/ub4qlNnN1QBMvZxSwECjqZlWf7z 0VASSVzQxwAHJq4zg0El8/SSr/AqRx4PO0k6YmaHCkdRnhNPRTWLEZeyvYVi6B8B ACqBrc6a1y7+MK0OPoJj05ppIzjxWSal28uLG2qqhme2CIwUPvz9OTjl4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFASuNXMWKFnlHAVQpjT220B62JsdMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvQks0MWN4WW9XZVVjQlZDbU5QYmJRSHJZbXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTodqAwQA vITIMA0GCSqGSIb3DQEBCwUAA4IBAQAN/dPrOHHPG0YQU3vCN4oXPEuOQPyHKMM9 iPsil63m9AUNKoVcrsAs4UzK315igP+xdqnch1V8t52v4dEkqLl1bGEex0fWGQVv M6YTh3TZlghfNNyv8L1vZtXLfX3PqzAI3P+YLGhy4o8XoELPxbsjmNf7mSluPpxh 4q4EFpz3h/0g9RKVlKCMlgU7hMMPHk2t7HGtOsKsyLCxdt0p1YUEzm8nAwFPV27i x2vrUigHh88l++h2pXj8VutMagFTZlfjp6U94XemvjsUYxMAS48WE/svNbXBAWEq BNUjOwF2xMpR1QaPNn1cVpz2FgL/kYfCPZQ3euTz/+80uLFsfGo/ -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:46 2026 by rpki-client