This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bKBwv63eR8XPazIwvq3XtVxLa38.roa File: bKBwv63eR8XPazIwvq3XtVxLa38.roa (raw, json) Hash identifier: 5//uiO+XpWDK/D5XfTWSRUuD37y0nTX/Y7Xx1IDtZSY= Subject key identifier: 6C:A0:70:BF:AD:DE:47:C5:CF:6B:32:30:BE:AD:D7:B5:5C:4B:6B:7F Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791050E5B60E9BBEA549B5B854CAD904 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bKBwv63eR8XPazIwvq3XtVxLa38.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47721 IP address blocks: 78.135.77.0/24 maxlen: 24 78.135.90.0/24 maxlen: 24 188.132.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:50:e5:b6:0e:9b:be:a5:49:b5:b8:54:ca:d9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ca070bfadde47c5cf6b3230beadd7b55c4b6b7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:fb:36:2f:6a:3d:c3:43:82:45:a6:19:37: f6:3b:41:61:5b:45:43:ca:62:15:cc:91:21:a5:53: 99:7f:1e:fe:41:ae:4d:a8:6b:f7:d6:69:92:8d:39: 2b:93:4c:7f:8b:b4:37:2f:f1:6b:b8:be:8c:c7:01: bb:18:00:37:20:79:0d:3c:8a:62:53:03:43:7c:b6: 11:7a:88:72:44:9c:28:8e:48:81:5a:6f:4e:5d:e6: b1:00:ed:cc:b1:73:fc:30:65:ff:a4:1f:3a:30:02: e7:52:e8:1e:5a:36:c2:b2:a0:d2:99:b6:08:04:08: 66:b5:0f:00:13:f7:a5:42:20:90:96:8c:bf:f5:a9: 06:2f:66:75:fc:64:bd:29:e4:ab:93:c3:ab:37:00: 63:a1:c8:86:65:38:0e:1a:5a:20:4f:d4:59:82:60: f4:36:a2:4f:43:b4:b4:5d:6b:2a:8d:e7:3b:5d:db: f2:f3:fc:92:f2:b2:3a:4e:83:8b:bd:66:7e:f5:ae: b1:85:80:2a:f3:2c:64:68:87:95:0c:de:53:ab:81: c0:10:95:83:64:29:1f:56:21:e9:d1:33:a5:8b:9a: 4d:65:93:34:78:b6:4a:59:74:ef:12:37:12:94:88: 5b:b0:c3:53:88:79:45:43:65:e6:ce:f1:e8:92:74: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A0:70:BF:AD:DE:47:C5:CF:6B:32:30:BE:AD:D7:B5:5C:4B:6B:7F X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bKBwv63eR8XPazIwvq3XtVxLa38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.77.0/24 78.135.90.0/24 188.132.174.0/24 Signature Algorithm: sha256WithRSAEncryption 31:07:0b:46:15:ba:ac:86:10:ed:5a:2e:51:6a:54:95:73:62: 97:62:7d:3d:d3:a3:35:0a:11:96:29:f9:2e:ab:5d:ce:22:bc: 6b:16:1c:08:4b:39:86:3b:d8:95:1b:15:5e:b5:2b:a8:b6:5d: 78:46:fb:75:bd:ef:97:de:9a:90:67:0a:e7:df:5f:56:55:7b: 30:2c:59:1e:46:89:c6:39:39:2a:7c:dc:f9:d8:1c:6f:eb:f5: 44:b6:43:2f:6a:be:19:98:7a:f4:d4:9e:cf:ee:9a:d5:8e:a7: 73:e3:92:68:37:5b:79:c0:69:59:75:de:bd:fd:42:08:4a:64: df:ad:1a:20:ba:98:52:b3:69:fe:16:95:74:19:59:0d:d9:97: e1:af:26:a3:bc:69:e7:ef:d5:21:72:d2:98:15:08:1e:57:94: 5e:1b:8a:c0:7b:a7:09:ad:e2:80:f6:09:3c:71:1c:e9:d8:15: 92:00:af:6a:f2:71:b5:2d:2d:b3:99:15:f5:36:5f:01:d6:e0: 08:07:86:06:bd:38:95:90:dc:0a:a7:a6:9f:cc:49:5b:75:a5: 5b:e1:2b:6e:48:09:19:ca:d7:20:40:6a:06:55:9a:a3:4a:0f: 3d:ec:f7:ed:10:c2:b8:3f:7b:0d:cf:a6:52:e5:41:89:8a:b6: 25:dd:1a:90 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5EFDltg6bvqVJtbhUytkEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2EwNzBiZmFkZGU0N2M1Y2Y2YjMyMzBiZWFkZDdiNTVjNGI2YjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPL7Ni9qPcNDgkWmGTf2O0FhW0VD ymIVzJEhpVOZfx7+Qa5NqGv31mmSjTkrk0x/i7Q3L/FruL6MxwG7GAA3IHkNPIpi UwNDfLYReohyRJwojkiBWm9OXeaxAO3MsXP8MGX/pB86MALnUugeWjbCsqDSmbYI BAhmtQ8AE/elQiCQloy/9akGL2Z1/GS9KeSrk8OrNwBjociGZTgOGlogT9RZgmD0 NqJPQ7S0XWsqjec7Xdvy8/yS8rI6ToOLvWZ+9a6xhYAq8yxkaIeVDN5Tq4HAEJWD ZCkfViHp0TOli5pNZZM0eLZKWXTvEjcSlIhbsMNTiHlFQ2XmzvHoknT9kQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGygcL+t3kfFz2syML6t17VcS2t/MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvYktCd3Y2M2VSOFhQYXpJd3ZxM1h0VnhMYTM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATodNAwQA TodaAwQAvISuMA0GCSqGSIb3DQEBCwUAA4IBAQAxBwtGFbqshhDtWi5RalSVc2KX Yn0906M1ChGWKfkuq13OIrxrFhwISzmGO9iVGxVetSuotl14Rvt1ve+X3pqQZwrn 319WVXswLFkeRonGOTkqfNz52Bxv6/VEtkMvar4ZmHr01J7P7prVjqdz45JoN1t5 wGlZdd69/UIISmTfrRoguphSs2n+FpV0GVkN2ZfhryajvGnn79UhctKYFQgeV5Re G4rAe6cJreKA9gk8cRzp2BWSAK9q8nG1LS2zmRX1Nl8B1uAIB4YGvTiVkNwKp6af zElbdaVb4StuSAkZytcgQGoGVZqjSg897PftEMK4P3sNz6ZS5UGJirYl3RqQ -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:07 2026 by rpki-client