This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/BeJNk9n8DYGbjTquSZbOtIDrziM.roa File: BeJNk9n8DYGbjTquSZbOtIDrziM.roa (raw, json) Hash identifier: Zutqy3F5GANTK963UN96Wios5HRE6QVmB+2x04QKDnI= Subject key identifier: 05:E2:4D:93:D9:FC:0D:81:9B:8D:3A:AE:49:96:CE:B4:80:EB:CE:23 Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a Certificate serial: 019B76EB1758FA554748D5A5B0301E040B0B Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/BeJNk9n8DYGbjTquSZbOtIDrziM.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 185.97.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:17:58:fa:55:47:48:d5:a5:b0:30:1e:04:0b:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05e24d93d9fc0d819b8d3aae4996ceb480ebce23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3a:3c:24:5e:6b:c6:07:ad:36:98:5f:b6:15: 3d:26:d2:a3:10:a9:85:0b:94:b5:74:55:a5:23:8d: 18:0e:e0:f2:7b:a4:36:2f:b6:ce:f0:ca:03:24:29: 3a:41:47:75:c5:0d:b1:c1:4f:1d:b7:99:9d:02:58: 2d:ef:73:14:4f:52:7c:ec:d2:59:60:26:ad:f0:8a: f5:23:30:aa:0b:a8:97:7e:8c:da:d9:96:bf:be:4d: c1:47:e8:d4:7e:72:00:71:ae:d5:a8:fc:13:91:b3: 4a:92:4f:14:c3:70:f7:32:4e:1e:9c:32:88:c6:6e: 66:22:8b:c8:fc:57:a2:a2:ef:ad:f9:25:7c:4f:31: af:c2:e4:3d:57:98:06:79:47:e8:89:7c:72:4d:ff: d4:17:04:31:f0:7d:b6:5d:35:71:19:c8:f7:26:e6: 70:fe:85:a3:00:7a:3e:0d:c8:3c:63:10:77:10:8d: 66:a8:1f:33:bf:03:42:83:cf:23:6c:d1:b6:d8:25: 09:06:0a:49:19:67:24:e0:bf:06:a3:5e:2c:c7:07: 8b:24:4a:5b:2f:22:b6:d5:9c:30:fd:f1:9f:bc:fc: 46:15:7b:f1:de:14:6a:84:d2:9d:14:a6:68:f3:85: 5b:07:38:71:b6:37:5e:6d:e2:78:16:ab:95:18:68: 92:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E2:4D:93:D9:FC:0D:81:9B:8D:3A:AE:49:96:CE:B4:80:EB:CE:23 X509v3 Authority Key Identifier: keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/BeJNk9n8DYGbjTquSZbOtIDrziM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.97.10.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:0a:ec:e0:82:06:c9:1a:03:01:15:7c:ad:c9:97:26:26:07: 1f:d2:1c:49:d1:d6:73:12:d1:45:98:4b:d5:a7:4a:e1:06:d6: 23:94:f8:eb:bf:5c:ac:ff:5d:5d:5b:f1:9e:4f:b6:ce:e7:90: 61:7e:a5:b5:9e:0a:18:37:1c:88:50:ca:60:42:97:0b:86:d6: c3:10:b4:2a:99:50:36:64:88:40:f3:5d:8a:9a:9e:66:87:9c: 9c:64:7c:14:0a:df:fc:41:cc:56:5a:a2:94:c1:bd:48:a8:dc: b4:6a:03:d6:a1:cb:e9:9b:c4:d6:1c:43:35:69:74:17:78:f6: f5:c4:83:15:01:a4:b7:24:69:cd:bc:f9:e5:8e:12:e8:5c:5c: 81:e8:70:e6:eb:2b:ff:1c:87:4f:f4:e2:a1:7c:68:9a:36:b0: d7:04:48:7c:7d:14:42:e6:13:14:9b:f8:ad:34:b9:49:e0:90: 8a:19:42:fc:45:da:69:68:a7:3a:08:3b:b2:3b:da:cf:f0:73: 10:31:73:db:0b:aa:d6:5a:ed:fe:5f:76:f0:2d:d9:a4:3e:96: 71:9b:d2:8f:aa:33:79:a9:70:fa:ea:21:c3:09:10:b4:76:96: 40:22:92:1e:1e:21:a5:51:e8:77:00:57:65:f4:57:a5:1c:b2: 1d:13:2e:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xdY+lVHSNWlsDAeBAsLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllMDM3NGQ3MWJjNTdkYjk2ZGMzOTNlOTFmZWJiOWU5ZDU5 ZmVmOWEwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWUyNGQ5M2Q5ZmMwZDgxOWI4ZDNhYWU0OTk2Y2ViNDgwZWJjZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Do8JF5rxgetNphfthU9JtKjEKmF C5S1dFWlI40YDuDye6Q2L7bO8MoDJCk6QUd1xQ2xwU8dt5mdAlgt73MUT1J87NJZ YCat8Ir1IzCqC6iXfoza2Za/vk3BR+jUfnIAca7VqPwTkbNKkk8Uw3D3Mk4enDKI xm5mIovI/Feiou+t+SV8TzGvwuQ9V5gGeUfoiXxyTf/UFwQx8H22XTVxGcj3JuZw /oWjAHo+Dcg8YxB3EI1mqB8zvwNCg88jbNG22CUJBgpJGWck4L8Go14sxweLJEpb LyK21Zww/fGfvPxGFXvx3hRqhNKdFKZo84VbBzhxtjdebeJ4FquVGGiS9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAXiTZPZ/A2Bm406rkmWzrSA684jMB8GA1UdIwQY MBaAFJ4DdNcbxX25bcOT6R/ruenVn++aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2Et ODE3ZDg0ZTUzZDUzLzEvQmVKTms5bjhEWUdialRxdVNaYk90SURyemlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jNDNhNzUtYTMyNi00YzZkLTg3Y2EtODE3ZDg0ZTUzZDUz LzEvbmdOMDF4dkZmYmx0dzVQcEgtdTU2ZFdmNzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWEKMA0G CSqGSIb3DQEBCwUAA4IBAQBvCuzgggbJGgMBFXytyZcmJgcf0hxJ0dZzEtFFmEvV p0rhBtYjlPjrv1ys/11dW/GeT7bO55BhfqW1ngoYNxyIUMpgQpcLhtbDELQqmVA2 ZIhA812Kmp5mh5ycZHwUCt/8QcxWWqKUwb1IqNy0agPWocvpm8TWHEM1aXQXePb1 xIMVAaS3JGnNvPnljhLoXFyB6HDm6yv/HIdP9OKhfGiaNrDXBEh8fRRC5hMUm/it NLlJ4JCKGUL8RdppaKc6CDuyO9rP8HMQMXPbC6rWWu3+X3bwLdmkPpZxm9KPqjN5 qXD66iHDCRC0dpZAIpIeHiGlUeh3AFdl9FelHLIdEy7i -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:18 2026 by rpki-client