This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa File: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (raw, json) Hash identifier: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8= Subject key identifier: 06:44:68:34:67:55:A3:76:D9:98:84:21:0E:25:CA:C7:25:59:88:06 Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Certificate serial: 019B7C80BEF3BEBDE3EEDA598DE9902E37F4 Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa Signing time: Fri 02 Jan 2026 02:19:30 +0000 ROA not before: Fri 02 Jan 2026 02:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44118 IP address blocks: 95.169.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:be:f3:be:bd:e3:ee:da:59:8d:e9:90:2e:37:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97 Validity Not Before: Jan 2 02:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=064468346755a376d99884210e25cac725598806 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:2f:f3:2d:03:d4:9b:6f:9d:73:32:35:c1: 4f:4e:5c:97:32:00:a7:b9:87:6a:e3:e0:17:ec:c6: 1f:e7:21:48:e3:c6:7e:11:e1:c0:fd:f3:7a:32:c2: ad:d8:30:c4:ef:8b:48:b1:b8:bf:40:e2:ff:9e:f6: 8a:76:72:6e:da:8f:fb:23:37:44:61:3d:a9:0e:ad: 5f:2d:90:30:b7:3b:a9:7d:88:66:8f:16:35:f6:cf: ff:bb:c4:c5:c4:55:6c:f4:1a:50:43:e8:2a:d0:87: 9c:cb:36:3d:1c:33:94:c6:65:e8:08:07:a2:1c:67: 20:67:46:14:b9:56:07:2d:dc:f8:3e:94:88:3e:c0: 69:03:98:c3:bb:74:da:7b:a9:0d:6c:06:08:a9:dd: 2d:9b:d6:28:81:1f:20:bb:87:07:5e:cb:3b:fe:22: be:db:dc:03:e0:f1:ee:bd:64:fd:45:99:08:99:48: 9a:ba:79:41:bf:0f:5f:f9:5c:55:df:04:50:69:82: 9b:fc:19:40:62:4f:25:54:6f:a6:97:b6:81:7e:57: d9:00:60:a7:03:a0:a1:e5:a3:92:32:06:7c:82:71: 7b:ed:45:f1:e6:99:69:ec:4d:63:12:da:75:bd:fb: 18:df:4c:f6:db:2a:8a:a8:ab:77:17:fc:94:9d:33: 7e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:44:68:34:67:55:A3:76:D9:98:84:21:0E:25:CA:C7:25:59:88:06 X509v3 Authority Key Identifier: keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.169.194.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:7c:1e:9d:95:78:eb:50:fc:6f:8e:d6:00:0d:c0:40:1e:4d: 7d:d5:ee:01:d1:db:a1:68:40:36:62:b1:52:85:83:e8:2b:5e: 6a:db:80:39:d4:b1:36:b8:34:67:80:8f:39:72:e8:3d:6d:65: 1a:2c:35:33:65:b6:c1:81:79:26:3e:70:03:cc:f4:16:0d:19: f5:5f:bc:9d:02:95:3c:a8:a8:98:4e:71:bb:96:4f:04:d0:28: 68:5b:06:6c:0e:bd:9f:24:30:f1:84:54:bf:e6:62:5b:8f:d1: 2c:5e:6e:24:c2:76:2e:bd:b8:4b:77:70:db:b4:46:1b:ab:48: 5f:07:35:ac:e1:f0:54:9d:62:10:c7:fc:69:35:94:c9:fc:4d: 95:cd:80:ee:89:e8:c9:1a:5b:4f:d7:a6:b5:ad:03:14:1c:ef: 81:64:9e:33:76:2a:4f:0d:f5:ec:13:11:f4:79:71:32:b8:a5: 71:00:7f:10:65:63:ae:1d:ca:1a:00:4e:59:9c:52:18:15:7a: aa:67:79:52:f0:4b:61:38:cf:a8:9e:44:65:4e:88:ec:6e:c4: e4:27:6e:e6:25:8a:e7:ec:38:df:ef:01:64:75:ca:4e:b0:8a: ac:8f:9c:ac:90:c9:13:f6:30:62:a3:65:e3:d8:dd:96:07:a8: 3e:b4:c1:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gL7zvr3j7tpZjemQLjf0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1N2IwYWMxMGI4NjQyYTI3ZGQzZDc0ZWQ2Y2I1ZWUwNDVl NjdiOTcwHhcNMjYwMTAyMDIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjQ0NjgzNDY3NTVhMzc2ZDk5ODg0MjEwZTI1Y2FjNzI1NTk4ODA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjUv8y0D1JtvnXMyNcFPTlyXMgCn uYdq4+AX7MYf5yFI48Z+EeHA/fN6MsKt2DDE74tIsbi/QOL/nvaKdnJu2o/7IzdE YT2pDq1fLZAwtzupfYhmjxY19s//u8TFxFVs9BpQQ+gq0IecyzY9HDOUxmXoCAei HGcgZ0YUuVYHLdz4PpSIPsBpA5jDu3Tae6kNbAYIqd0tm9YogR8gu4cHXss7/iK+ 29wD4PHuvWT9RZkImUiaunlBvw9f+VxV3wRQaYKb/BlAYk8lVG+ml7aBflfZAGCn A6Ch5aOSMgZ8gnF77UXx5plp7E1jEtp1vfsY30z22yqKqKt3F/yUnTN+swIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAZEaDRnVaN22ZiEIQ4lysclWYgGMB8GA1UdIwQY MBaAFFV7CsELhkKifdPXTtbLXuBF5nuXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYt ZmJlMWEwZDBhYTk4LzEvQmtSb05HZFZvM2JabUlRaERpWEt4eVZaaUFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi81ZTVjMzAtOGFhNC00N2U4LWJkOGYtZmJlMWEwZDBhYTk4 LzEvVlhzS3dRdUdRcUo5MDlkTzFzdGU0RVhtZTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6nCMA0G CSqGSIb3DQEBCwUAA4IBAQCKfB6dlXjrUPxvjtYADcBAHk191e4B0duhaEA2YrFS hYPoK15q24A51LE2uDRngI85cug9bWUaLDUzZbbBgXkmPnADzPQWDRn1X7ydApU8 qKiYTnG7lk8E0ChoWwZsDr2fJDDxhFS/5mJbj9EsXm4kwnYuvbhLd3DbtEYbq0hf BzWs4fBUnWIQx/xpNZTJ/E2VzYDuiejJGltP16a1rQMUHO+BZJ4zdipPDfXsExH0 eXEyuKVxAH8QZWOuHcoaAE5ZnFIYFXqqZ3lS8EthOM+onkRlTojsbsTkJ27mJYrn 7Djf7wFkdcpOsIqsj5yskMkT9jBio2Xj2N2WB6g+tMGm -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:16 2026 by rpki-client