This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/bKjdtdZf1MexZvwsZU8GG9nJ2Bc.roa File: bKjdtdZf1MexZvwsZU8GG9nJ2Bc.roa (raw, json) Hash identifier: X9PwP1YC3aYFvLjsNt6hJsaqgdzN4NS80AzewvXraLM= Subject key identifier: 6C:A8:DD:B5:D6:5F:D4:C7:B1:66:FC:2C:65:4F:06:1B:D9:C9:D8:17 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B7834544C578EAA88D112A7757DFBA091 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/bKjdtdZf1MexZvwsZU8GG9nJ2Bc.roa Signing time: Thu 01 Jan 2026 06:17:33 +0000 ROA not before: Thu 01 Jan 2026 06:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137263 IP address blocks: 185.122.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 09:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:54:4c:57:8e:aa:88:d1:12:a7:75:7d:fb:a0:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ca8ddb5d65fd4c7b166fc2c654f061bd9c9d817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:0d:89:5f:2c:5c:d3:fa:45:1d:d3:cf:1b:8f: eb:19:8e:b7:80:5e:6d:7d:1e:a9:59:94:de:d6:46: ec:4e:7c:f1:f8:ae:5b:29:83:38:6f:2f:aa:7b:4c: f9:48:86:9d:a6:3d:ac:c4:b7:04:bc:a1:1e:18:fa: 32:f5:05:a4:a9:e7:f4:ab:62:c1:03:60:4b:31:f5: 2d:86:7f:d8:f9:cb:d7:93:70:68:b3:c1:10:d4:c3: e4:2b:ea:0d:cb:0f:70:e2:bc:98:ad:bb:69:b3:29: 0b:ff:ee:68:b7:a2:d9:63:c0:2e:de:5c:c3:a0:64: 19:1a:98:e7:28:3b:53:76:47:10:ba:e6:d2:d2:11: fa:06:83:65:64:7b:a7:ca:95:12:05:5a:d2:db:71: d1:00:73:6e:ab:5c:4e:ea:62:5d:d5:b7:36:0e:f3: 3c:37:56:2c:24:d8:35:c1:a9:c5:60:2f:e0:be:3d: f0:2a:b2:be:3b:3e:ca:19:18:14:3f:d1:2b:6d:cc: 78:86:6a:a5:04:ce:a6:5e:30:05:69:bd:fb:35:00: 8d:6c:5b:4a:6c:31:8e:8b:ff:24:eb:af:91:73:51: c7:96:2c:11:75:ca:38:0a:59:c8:fa:59:3a:72:97: 74:73:6e:c1:a1:be:be:0a:e2:e5:f5:2a:1a:52:6e: 2c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:A8:DD:B5:D6:5F:D4:C7:B1:66:FC:2C:65:4F:06:1B:D9:C9:D8:17 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/bKjdtdZf1MexZvwsZU8GG9nJ2Bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.122.207.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:5a:38:fd:72:0e:eb:f8:86:fa:68:13:3b:d6:7d:02:0a:05: 65:c6:33:b7:f8:99:65:8c:9c:02:38:05:21:de:eb:33:a4:66: 0f:de:86:94:0e:e1:8f:b4:3e:53:6f:40:ec:6e:5f:e5:51:44: ed:9c:65:6e:b3:b0:d0:0b:d5:b5:bc:71:bb:99:4f:f4:0c:60: 1c:38:cd:e7:8f:2d:5b:5d:4a:48:86:b3:46:26:1d:f1:00:81: 80:ad:2f:68:4c:99:ab:6a:7a:97:0a:29:00:72:bd:f3:72:f9: 78:0d:84:ca:a4:e0:9d:69:dd:66:33:7d:32:9c:3c:03:62:99: 08:06:eb:b6:57:9e:a9:1f:ed:fb:fb:c9:8d:d0:d2:a6:3b:47: d9:90:33:ae:ff:dc:82:ff:26:42:81:17:64:66:3b:25:be:c2: ab:b3:0a:76:7b:6a:22:9e:9c:8d:85:c5:e7:13:6c:b6:12:73: 03:32:ac:47:c5:ea:52:25:9b:4f:2a:b1:67:6d:08:5b:47:d1: 42:50:4c:18:97:4b:54:61:3c:5b:1a:59:16:ee:79:14:92:77: 38:c9:b0:25:bd:28:a8:8b:05:27:c5:b1:04:a2:04:5c:6b:f4: 48:a3:d7:11:59:6b:f6:bd:90:b3:f9:53:93:33:3a:1b:64:1c: bf:b8:cb:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFRMV46qiNESp3V9+6CRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2E4ZGRiNWQ2NWZkNGM3YjE2NmZjMmM2NTRmMDYxYmQ5YzlkODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmg2JXyxc0/pFHdPPG4/rGY63gF5t fR6pWZTe1kbsTnzx+K5bKYM4by+qe0z5SIadpj2sxLcEvKEeGPoy9QWkqef0q2LB A2BLMfUthn/Y+cvXk3Bos8EQ1MPkK+oNyw9w4ryYrbtpsykL/+5ot6LZY8Au3lzD oGQZGpjnKDtTdkcQuubS0hH6BoNlZHunypUSBVrS23HRAHNuq1xO6mJd1bc2DvM8 N1YsJNg1wanFYC/gvj3wKrK+Oz7KGRgUP9Erbcx4hmqlBM6mXjAFab37NQCNbFtK bDGOi/8k66+Rc1HHliwRdco4ClnI+lk6cpd0c27Bob6+CuLl9SoaUm4sVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGyo3bXWX9THsWb8LGVPBhvZydgXMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvYktqZHRkWmYxTWV4WnZ3c1pVOEdHOW5KMkJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXrPMA0G CSqGSIb3DQEBCwUAA4IBAQBbWjj9cg7r+Ib6aBM71n0CCgVlxjO3+JlljJwCOAUh 3uszpGYP3oaUDuGPtD5Tb0Dsbl/lUUTtnGVus7DQC9W1vHG7mU/0DGAcOM3njy1b XUpIhrNGJh3xAIGArS9oTJmranqXCikAcr3zcvl4DYTKpOCdad1mM30ynDwDYpkI Buu2V56pH+37+8mN0NKmO0fZkDOu/9yC/yZCgRdkZjslvsKrswp2e2oinpyNhcXn E2y2EnMDMqxHxepSJZtPKrFnbQhbR9FCUEwYl0tUYTxbGlkW7nkUknc4ybAlvSio iwUnxbEEogRca/RIo9cRWWv2vZCz+VOTMzobZBy/uMvf -----END CERTIFICATE-----Generated at Tue Jan 20 14:14:19 2026 by rpki-client