This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/BKA_pskraOwHcChlhz1zzkoM_tQ.roa File: BKA_pskraOwHcChlhz1zzkoM_tQ.roa (raw, json) Hash identifier: 4fcprLVa8yLO38Zivt4EsuXS/oNoQPPcjI0Cc2hnyvI= Subject key identifier: 04:A0:3F:A6:C9:2B:68:EC:07:70:28:65:87:3D:73:CE:4A:0C:FE:D4 Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895 Certificate serial: 019B783443DB097A936208EDF01F9486D937 Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/BKA_pskraOwHcChlhz1zzkoM_tQ.roa Signing time: Thu 01 Jan 2026 06:17:29 +0000 ROA not before: Thu 01 Jan 2026 06:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50925 IP address blocks: 185.188.236.0/24 maxlen: 24 185.188.237.0/24 maxlen: 24 185.188.238.0/23 maxlen: 23 185.188.238.0/24 maxlen: 24 185.188.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:43:db:09:7a:93:62:08:ed:f0:1f:94:86:d9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895 Validity Not Before: Jan 1 06:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04a03fa6c92b68ec07702865873d73ce4a0cfed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dd:64:3f:8e:84:e3:b0:2b:21:04:ea:62:b3: f3:a0:10:f6:b7:fa:22:f1:4a:60:cf:25:f0:53:57: 57:c1:91:74:75:0c:e6:ab:f9:99:7e:1e:a2:d7:3f: bd:21:10:e4:6f:d9:7d:0c:ce:3f:12:1a:f2:39:6e: 0c:a1:6e:78:99:5e:27:4b:7d:34:74:bd:fa:9f:4d: 8e:7d:13:2d:79:a1:0a:db:fd:5c:05:73:f4:87:c7: 94:b7:00:d4:4e:1f:e5:80:93:76:02:50:1e:c4:c8: cb:8c:af:ed:6d:00:a5:c8:af:17:9c:79:7d:18:15: 80:41:e2:23:1b:e5:9f:84:5e:91:4a:f7:72:fa:7a: 9c:d5:de:86:53:b9:c0:f4:f7:9d:72:4a:c5:9e:d5: dd:84:86:81:4f:43:fb:56:1d:74:2a:cf:61:83:98: 3e:a8:0b:4f:92:59:2b:20:87:da:ff:63:c5:18:42: 92:28:c2:07:8d:82:65:fe:ff:69:f5:a4:51:89:fc: 98:8e:3f:90:6e:20:a1:4b:59:94:aa:b3:0f:8e:83: 32:91:47:48:49:5e:2b:d3:96:ce:72:7e:10:31:f7: bf:b8:d2:a7:43:e2:f0:fd:f0:ff:66:01:a9:c7:6c: 34:06:c9:7e:6c:5c:67:00:bf:91:31:5f:3e:ea:85: ff:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A0:3F:A6:C9:2B:68:EC:07:70:28:65:87:3D:73:CE:4A:0C:FE:D4 X509v3 Authority Key Identifier: keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/BKA_pskraOwHcChlhz1zzkoM_tQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.188.236.0/22 Signature Algorithm: sha256WithRSAEncryption 65:79:01:4d:b7:07:5a:4d:9d:44:92:26:48:94:78:90:0a:27: 0b:55:4d:c3:f2:90:74:92:99:31:2c:66:09:47:41:b1:9f:60: 7f:0f:0c:1e:36:a5:3a:89:f3:76:20:83:a5:af:0a:6e:44:98: 40:d5:fb:e7:6d:c9:f3:2e:60:e8:a1:f2:1a:a9:0d:3e:69:96: 8e:99:14:25:b5:96:c6:d0:d9:f0:66:f5:5c:79:d5:4b:83:76: cb:50:d7:9c:26:d3:66:67:fc:ed:3b:2d:01:8d:fa:e3:ec:f1: 5a:b2:3f:53:f1:19:6d:3d:40:9a:f9:7c:72:c8:69:63:bc:94: 40:b5:21:23:f6:7b:1b:e5:1c:b1:f6:3b:4f:6b:0a:18:1d:52: fe:d0:f7:69:25:66:ce:6e:dd:c3:84:22:e2:b1:a6:fa:fd:30: 62:51:ce:50:af:97:73:5e:1b:f4:88:0e:c9:0b:e5:f6:32:18: b4:8f:3c:2c:2a:07:fa:b3:01:65:e1:1c:5b:bc:54:b5:ca:e6: 08:1b:75:36:36:b5:19:e8:6c:92:1a:71:57:14:2a:80:ee:12: cb:73:62:bf:f5:ae:66:97:01:b5:e0:82:82:ea:91:a9:4f:3c: c7:e7:b3:6b:a2:4b:83:5d:b1:d4:f2:1b:dc:89:ec:d3:ee:3c: 32:96:f0:67 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NEPbCXqTYgjt8B+Uhtk3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNDUzYzA5MWY2YzBjYTRiMDJiMWM0Y2ExN2JiNjVkMWRl MTY4OTUwHhcNMjYwMTAxMDYxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGEwM2ZhNmM5MmI2OGVjMDc3MDI4NjU4NzNkNzNjZTRhMGNmZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt1kP46E47ArIQTqYrPzoBD2t/oi 8UpgzyXwU1dXwZF0dQzmq/mZfh6i1z+9IRDkb9l9DM4/EhryOW4MoW54mV4nS300 dL36n02OfRMteaEK2/1cBXP0h8eUtwDUTh/lgJN2AlAexMjLjK/tbQClyK8XnHl9 GBWAQeIjG+WfhF6RSvdy+nqc1d6GU7nA9PedckrFntXdhIaBT0P7Vh10Ks9hg5g+ qAtPklkrIIfa/2PFGEKSKMIHjYJl/v9p9aRRifyYjj+QbiChS1mUqrMPjoMykUdI SV4r05bOcn4QMfe/uNKnQ+Lw/fD/ZgGpx2w0Bsl+bFxnAL+RMV8+6oX/GwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFASgP6bJK2jsB3AoZYc9c85KDP7UMB8GA1UdIwQY MBaAFGxFPAkfbAyksCscTKF7tl0d4WiVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xOThkZjctNzk5Mi00NGRmLWE2Y2Et YmVjMGU5ZWU0YTI1LzEvQktBX3Bza3JhT3dIY0NobGh6MXp6a29NX3RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xOThkZjctNzk5Mi00NGRmLWE2Y2EtYmVjMGU5ZWU0YTI1 LzEvYkVVOENSOXNES1N3S3h4TW9YdTJYUjNoYUpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubzsMA0G CSqGSIb3DQEBCwUAA4IBAQBleQFNtwdaTZ1EkiZIlHiQCicLVU3D8pB0kpkxLGYJ R0Gxn2B/DwweNqU6ifN2IIOlrwpuRJhA1fvnbcnzLmDoofIaqQ0+aZaOmRQltZbG 0NnwZvVcedVLg3bLUNecJtNmZ/ztOy0Bjfrj7PFasj9T8RltPUCa+XxyyGljvJRA tSEj9nsb5Ryx9jtPawoYHVL+0PdpJWbObt3DhCLisab6/TBiUc5Qr5dzXhv0iA7J C+X2Mhi0jzwsKgf6swFl4RxbvFS1yuYIG3U2NrUZ6GySGnFXFCqA7hLLc2K/9a5m lwG14IKC6pGpTzzH57NrokuDXbHU8hvciezT7jwylvBn -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:55 2026 by rpki-client