This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/BkKBPihquQKqSH7m5QGPwWadRUc.roa File: BkKBPihquQKqSH7m5QGPwWadRUc.roa (raw, json) Hash identifier: qo3k4ZbWsxiyID0p5/iO1VNo9C8XPua8Kf4TKnBGlWc= Subject key identifier: 06:42:81:3E:28:6A:B9:02:AA:48:7E:E6:E5:01:8F:C1:66:9D:45:47 Certificate issuer: /CN=3d1cc402349e191392d1ec7469c1bc8243634439 Certificate serial: 019B79114F0174A8D7F0BA87541E654459C2 Authority key identifier: 3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/BkKBPihquQKqSH7m5QGPwWadRUc.roa Signing time: Thu 01 Jan 2026 10:18:56 +0000 ROA not before: Thu 01 Jan 2026 10:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205400 IP address blocks: 85.132.136.0/22 maxlen: 22 185.219.164.0/22 maxlen: 22 2a0b:e7c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.mft rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:4f:01:74:a8:d7:f0:ba:87:54:1e:65:44:59:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1cc402349e191392d1ec7469c1bc8243634439 Validity Not Before: Jan 1 10:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0642813e286ab902aa487ee6e5018fc1669d4547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:45:8d:cd:24:38:dc:a5:92:fc:8c:b6:fe:95: cd:3b:31:22:ff:a6:6c:31:a8:a7:73:c5:1f:f2:dd: 17:cb:c3:7a:91:22:ba:cf:44:6e:66:b9:59:5d:fa: 91:44:63:4e:fa:3a:5b:ea:ae:fe:19:06:ad:f7:4a: a8:5a:ae:b5:1a:10:1c:c6:65:f3:ee:93:5c:cb:49: b6:b1:b7:9c:84:30:c3:ff:d4:56:e7:e9:87:8c:7f: a2:a2:47:2b:00:b6:79:9e:2e:78:0d:cf:a5:01:e6: 78:49:d8:b4:58:35:0a:6a:c9:af:5c:f3:f1:09:43: 01:e6:e0:ed:12:c6:d9:53:c9:ea:23:20:e5:48:20: da:39:20:c2:41:90:a0:1d:7b:33:12:cd:3c:06:ed: a2:e0:84:b8:82:90:92:08:96:46:eb:c1:cf:ca:a6: 17:6f:a1:ef:12:f6:02:9c:4e:68:22:a8:7a:73:72: f0:13:9e:b0:5d:bd:7a:b9:cf:bc:17:b5:60:34:30: 5b:fe:e8:65:fa:61:6b:07:ce:b0:1e:31:dd:7e:ab: ff:bc:4b:9b:9e:9b:9e:21:13:66:a8:98:f6:d5:eb: 36:61:d9:e2:b2:6a:ec:38:35:b1:83:04:16:8a:6d: 67:e2:aa:65:81:45:9d:81:85:2c:15:dc:77:27:22: fd:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:42:81:3E:28:6A:B9:02:AA:48:7E:E6:E5:01:8F:C1:66:9D:45:47 X509v3 Authority Key Identifier: keyid:3D:1C:C4:02:34:9E:19:13:92:D1:EC:74:69:C1:BC:82:43:63:44:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRzEAjSeGROS0ex0acG8gkNjRDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/BkKBPihquQKqSH7m5QGPwWadRUc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/23de06-fc9a-43d3-ac95-37e64c07cc86/1/PRzEAjSeGROS0ex0acG8gkNjRDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.132.136.0/22 185.219.164.0/22 IPv6: 2a0b:e7c0::/29 Signature Algorithm: sha256WithRSAEncryption 9a:a7:75:97:5c:35:06:ba:1a:3d:7e:10:71:bf:c1:b3:4d:4b: ad:cd:fb:50:e6:70:fa:e8:a0:84:d1:9a:54:80:eb:a4:b6:28: 76:c5:e6:87:41:97:c7:88:dd:07:ca:d7:5b:26:87:ca:18:e4: 0e:4d:b1:95:66:61:3f:2e:de:9b:1a:ce:9d:74:ee:b0:cb:23: 2e:d1:b7:9b:6c:e9:38:84:cb:64:c3:a2:10:95:4c:92:b0:09: bd:1b:93:1e:a7:f0:73:07:39:e2:bf:14:87:b5:ca:5e:8e:4c: 44:dd:df:4d:8b:6c:84:93:e5:99:f0:4b:a3:f0:2a:61:45:bc: 82:99:80:be:95:e4:54:09:27:42:36:f5:85:34:83:18:8e:15: cf:b3:8e:ad:1d:c8:9a:ac:0b:63:eb:a2:dc:59:72:8a:be:af: 5a:c7:4a:d8:61:e7:4f:08:1d:a8:b5:66:35:6e:7e:be:6c:21: 82:a3:c3:d0:46:6d:e3:bb:5e:55:99:08:31:fb:78:cc:d9:6e: 1f:92:a7:2b:b8:37:57:c5:61:2f:ed:29:da:95:2f:7d:31:1f: c5:5c:04:b4:aa:45:3f:b5:84:88:32:43:6b:a4:a4:d0:af:fb: 91:d0:ff:c5:dd:e6:b3:57:96:b7:42:ba:66:d9:8d:60:9b:49: b3:11:36:07 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt5EU8BdKjX8LqHVB5lRFnCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkMWNjNDAyMzQ5ZTE5MTM5MmQxZWM3NDY5YzFiYzgyNDM2 MzQ0MzkwHhcNMjYwMTAxMTAxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjQyODEzZTI4NmFiOTAyYWE0ODdlZTZlNTAxOGZjMTY2OWQ0NTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokWNzSQ43KWS/Iy2/pXNOzEi/6Zs Mainc8Uf8t0Xy8N6kSK6z0RuZrlZXfqRRGNO+jpb6q7+GQat90qoWq61GhAcxmXz 7pNcy0m2sbechDDD/9RW5+mHjH+iokcrALZ5ni54Dc+lAeZ4Sdi0WDUKasmvXPPx CUMB5uDtEsbZU8nqIyDlSCDaOSDCQZCgHXszEs08Bu2i4IS4gpCSCJZG68HPyqYX b6HvEvYCnE5oIqh6c3LwE56wXb16uc+8F7VgNDBb/uhl+mFrB86wHjHdfqv/vEub npueIRNmqJj21es2YdnismrsODWxgwQWim1n4qplgUWdgYUsFdx3JyL9HQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAZCgT4oarkCqkh+5uUBj8FmnUVHMB8GA1UdIwQY MBaAFD0cxAI0nhkTktHsdGnBvIJDY0Q5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yM2RlMDYtZmM5YS00M2QzLWFjOTUt MzdlNjRjMDdjYzg2LzEvQmtLQlBpaHF1UUtxU0g3bTVRR1B3V2FkUlVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yM2RlMDYtZmM5YS00M2QzLWFjOTUtMzdlNjRjMDdjYzg2 LzEvUFJ6RUFqU2VHUk9TMGV4MGFjRzhna05qUkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCVYSIAwQC udukMA0EAgACMAcDBQMqC+fAMA0GCSqGSIb3DQEBCwUAA4IBAQCap3WXXDUGuho9 fhBxv8GzTUutzftQ5nD66KCE0ZpUgOuktih2xeaHQZfHiN0HytdbJofKGOQOTbGV ZmE/Lt6bGs6ddO6wyyMu0bebbOk4hMtkw6IQlUySsAm9G5Mep/BzBznivxSHtcpe jkxE3d9Ni2yEk+WZ8Euj8CphRbyCmYC+leRUCSdCNvWFNIMYjhXPs46tHciarAtj 66LcWXKKvq9ax0rYYedPCB2otWY1bn6+bCGCo8PQRm3ju15VmQgx+3jM2W4fkqcr uDdXxWEv7SnalS99MR/FXAS0qkU/tYSIMkNrpKTQr/uR0P/F3eazV5a3Qrpm2Y1g m0mzETYH -----END CERTIFICATE-----Generated at Mon Jan 19 09:50:49 2026 by rpki-client