This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bzKkX54-acMSVwHsUvk5N2NJV4g.roa File: bzKkX54-acMSVwHsUvk5N2NJV4g.roa (raw, json) Hash identifier: 1nuZ6gIBtf/oF6MUAwwdwz2SrCSsDcNXs6etpB1mypA= Subject key identifier: 6F:32:A4:5F:9E:3E:69:C3:12:57:01:EC:52:F9:39:37:63:49:57:88 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106F20E6D8B78D233E122C67AB4649 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bzKkX54-acMSVwHsUvk5N2NJV4g.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213588 IP address blocks: 31.210.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6f:20:e6:d8:b7:8d:23:3e:12:2c:67:ab:46:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f32a45f9e3e69c3125701ec52f9393763495788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7f:4c:56:e4:39:1a:1f:9d:a1:3f:93:69:54: ef:3a:5b:80:0b:bc:73:62:52:e3:48:7b:ca:67:a6: 16:1a:94:2d:a3:0a:a0:07:d2:35:ba:49:15:b6:b1: 07:d6:a9:e3:f1:02:d5:9e:d6:ca:f5:10:85:a4:d7: 62:f9:95:cf:c4:48:dc:ee:b5:a5:94:9b:8a:fa:2c: 94:f0:fc:c5:1e:b3:95:70:d9:9c:dc:76:65:73:c3: 81:ee:8a:3f:27:f2:54:44:93:78:90:95:fb:ef:24: 7a:5a:90:4f:a3:c3:48:42:fd:fd:77:47:6b:d5:ab: 79:6b:04:fc:ef:1e:29:b5:56:fb:7d:67:04:d2:77: 6e:34:bc:e8:1f:40:91:cd:fd:ea:12:84:d3:7c:ae: d9:bd:2f:73:a9:61:7a:40:53:dd:4f:eb:a2:bd:da: 37:9c:c9:cc:85:4a:a2:bd:b3:71:b7:0c:c7:be:9e: 92:dc:a2:0c:03:73:43:53:a7:f4:3c:ac:e8:a2:16: 84:0b:0c:5f:6a:6c:12:52:7c:a9:b1:60:2d:be:3f: 6b:1d:be:10:6d:52:a2:b3:63:f7:fd:70:12:ed:b4: f5:4d:04:53:95:78:ea:a9:90:ad:80:ae:0d:80:9f: cf:f5:32:9a:da:08:8f:1d:39:b9:45:c8:f5:02:cc: ab:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:32:A4:5F:9E:3E:69:C3:12:57:01:EC:52:F9:39:37:63:49:57:88 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/bzKkX54-acMSVwHsUvk5N2NJV4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.45.0/24 Signature Algorithm: sha256WithRSAEncryption 24:fd:91:ef:96:35:17:06:ee:18:b3:16:1c:43:b3:b8:2f:02: fd:c6:fa:1e:b1:c4:de:d9:bc:5b:dd:34:3f:a9:29:e6:a9:c3: 05:62:d2:42:f7:2e:21:a0:db:e8:50:09:2d:8c:8a:dc:24:5d: ab:59:c3:92:22:57:7b:a7:00:70:5a:52:9d:79:a8:cb:98:40: e2:ad:98:cd:e8:93:16:f1:ad:a1:b9:48:e5:81:5d:71:4f:ab: 54:79:69:92:d2:1f:a9:a4:81:e8:1f:bd:2a:6e:e6:73:8e:ef: 77:0c:2d:8a:66:da:74:cc:8a:f9:71:e0:ff:a2:30:ee:de:0d: 26:15:7e:d8:7a:a2:93:33:3f:b2:e7:78:07:0f:27:d3:87:82: e9:67:7a:65:8e:b9:07:99:03:1d:48:5e:fe:26:02:f6:87:83: 8c:87:27:74:46:aa:25:b3:94:1e:a9:54:10:9f:de:8c:00:10: e9:9b:be:4d:f6:04:86:f3:fc:d0:12:b6:4c:b8:d3:ad:cd:03: 63:cb:c8:19:bc:a7:61:a1:4c:da:66:34:9a:48:75:ee:40:1d: 77:e8:dd:f2:61:9b:51:59:f0:4c:a3:6d:8c:ca:ab:02:e3:99: 6c:05:e4:5d:7b:5f:72:6e:ce:7f:1e:bc:fd:0f:b7:c7:b0:1f: a5:25:9b:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EG8g5ti3jSM+Eixnq0ZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjMyYTQ1ZjllM2U2OWMzMTI1NzAxZWM1MmY5MzkzNzYzNDk1Nzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr39MVuQ5Gh+doT+TaVTvOluAC7xz YlLjSHvKZ6YWGpQtowqgB9I1ukkVtrEH1qnj8QLVntbK9RCFpNdi+ZXPxEjc7rWl lJuK+iyU8PzFHrOVcNmc3HZlc8OB7oo/J/JURJN4kJX77yR6WpBPo8NIQv39d0dr 1at5awT87x4ptVb7fWcE0nduNLzoH0CRzf3qEoTTfK7ZvS9zqWF6QFPdT+uivdo3 nMnMhUqivbNxtwzHvp6S3KIMA3NDU6f0PKzoohaECwxfamwSUnypsWAtvj9rHb4Q bVKis2P3/XAS7bT1TQRTlXjqqZCtgK4NgJ/P9TKa2giPHTm5Rcj1Asyr9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG8ypF+ePmnDElcB7FL5OTdjSVeIMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvYnpLa1g1NC1hY01TVndIc1V2azVOMk5KVjRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9ItMA0G CSqGSIb3DQEBCwUAA4IBAQAk/ZHvljUXBu4YsxYcQ7O4LwL9xvoescTe2bxb3TQ/ qSnmqcMFYtJC9y4hoNvoUAktjIrcJF2rWcOSIld7pwBwWlKdeajLmEDirZjN6JMW 8a2huUjlgV1xT6tUeWmS0h+ppIHoH70qbuZzju93DC2KZtp0zIr5ceD/ojDu3g0m FX7YeqKTMz+y53gHDyfTh4LpZ3pljrkHmQMdSF7+JgL2h4OMhyd0Rqols5QeqVQQ n96MABDpm75N9gSG8/zQErZMuNOtzQNjy8gZvKdhoUzaZjSaSHXuQB136N3yYZtR WfBMo22MyqsC45lsBeRde19ybs5/Hrz9D7fHsB+lJZuZ -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:56 2026 by rpki-client