This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/k1dO5v20V18ZdNp1zmkc6LIciGg.roa File: k1dO5v20V18ZdNp1zmkc6LIciGg.roa (raw, json) Hash identifier: 438dqyns6emIjrk0QOOi1yUCaMjxkliDFNzKcc/PdRA= Subject key identifier: 93:57:4E:E6:FD:B4:57:5F:19:74:DA:75:CE:69:1C:E8:B2:1C:88:68 Certificate issuer: /CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Certificate serial: 019B7E38EF5E1193F7BE98085BE89FE6E491 Authority key identifier: BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/k1dO5v20V18ZdNp1zmkc6LIciGg.roa Signing time: Fri 02 Jan 2026 10:20:19 +0000 ROA not before: Fri 02 Jan 2026 10:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 185.236.16.0/22 maxlen: 24 185.236.16.0/23 maxlen: 23 185.236.18.0/23 maxlen: 23 185.236.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.mft rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:ef:5e:11:93:f7:be:98:08:5b:e8:9f:e6:e4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfc470e9b58e557ea8c1dbedaeb9c6a5fc455125 Validity Not Before: Jan 2 10:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=93574ee6fdb4575f1974da75ce691ce8b21c8868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:c8:69:25:11:46:3e:e4:74:41:4b:b0:b1: d5:a0:3c:a3:e8:b2:38:13:83:b5:13:de:45:cc:a9: f5:55:43:02:73:9b:47:d5:52:54:0d:52:39:00:66: 50:37:54:00:b5:19:cf:71:8a:d2:08:d8:a2:29:93: c7:f9:ee:cf:49:7d:4f:60:09:c7:ee:ab:61:d7:66: 8c:a7:e5:0f:b1:85:06:a6:d5:cf:49:70:8a:39:0b: 9c:a0:ac:f8:53:17:2d:11:09:05:35:cc:e4:b1:0a: a0:9c:ae:34:04:af:a5:bc:9d:91:fe:40:fa:e4:b1: e7:7c:46:e4:63:3d:cb:03:25:f7:90:d6:5c:32:87: 7d:1b:f7:2b:52:ad:c5:51:8e:83:77:17:d8:0a:dc: 63:4e:19:35:07:66:e6:64:02:14:1a:3b:ef:ea:5a: ef:62:c3:24:65:86:82:94:e2:99:4d:a7:7d:17:ed: ce:5e:da:b3:57:0b:27:65:bb:e3:c7:d7:a8:86:c6: cf:46:d0:02:d9:04:e8:63:06:df:a1:13:46:c6:62: e0:a6:3f:c1:de:60:fd:e6:9c:ec:2a:50:f1:fc:c6: d7:4a:9e:70:86:cd:e7:0b:39:b4:4b:e8:77:1f:ff: a0:e9:36:1b:2d:75:ce:61:1b:c6:83:a4:bb:88:ed: 49:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:57:4E:E6:FD:B4:57:5F:19:74:DA:75:CE:69:1C:E8:B2:1C:88:68 X509v3 Authority Key Identifier: keyid:BF:C4:70:E9:B5:8E:55:7E:A8:C1:DB:ED:AE:B9:C6:A5:FC:45:51:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v8Rw6bWOVX6owdvtrrnGpfxFUSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/k1dO5v20V18ZdNp1zmkc6LIciGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/27b39b-0449-4c64-ba79-a2aa6540f875/1/v8Rw6bWOVX6owdvtrrnGpfxFUSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.16.0/22 Signature Algorithm: sha256WithRSAEncryption 11:25:d9:9f:f3:34:2a:51:8f:58:dc:8d:c3:cb:25:06:e0:f4: f9:a1:e0:30:fb:b2:fc:93:01:3a:17:52:78:74:fa:a0:0b:b8: 4a:e3:2f:a5:c7:59:d4:cb:2a:7e:0c:16:61:54:62:5c:bb:80: ac:89:33:e9:61:d3:fc:ed:a3:88:82:76:bf:f3:10:e0:81:c7: 0b:a8:b8:45:fd:90:aa:90:ae:8e:d0:f1:3e:00:58:c4:10:9f: 79:9b:38:08:41:00:35:13:77:5a:68:d7:9f:22:70:d5:7b:26: 0a:08:d2:a9:42:28:97:31:21:dc:5a:5a:4c:22:77:c4:2e:0f: e9:e3:f6:7f:e7:a0:63:98:68:84:78:42:db:e0:44:02:8b:62: ce:c9:73:22:be:00:d8:c7:94:26:03:d0:53:d1:97:e6:2f:b7: 84:83:4f:4e:39:00:5c:85:cd:71:c0:e8:44:6e:61:82:b7:2e: c7:52:3b:05:49:60:35:ab:45:39:3b:b4:74:b2:8b:40:35:0b: b5:45:3d:74:00:34:3f:0d:8f:31:59:e0:4b:65:e2:0d:9a:ed: 7e:c3:b8:df:13:a7:56:fb:9d:74:26:b6:04:ad:d2:46:15:15: 0c:24:2e:f8:25:1a:fa:a0:b4:e0:c2:16:fa:1d:94:08:eb:7e: bf:1d:10:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OO9eEZP3vpgIW+if5uSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYzQ3MGU5YjU4ZTU1N2VhOGMxZGJlZGFlYjljNmE1ZmM0 NTUxMjUwHhcNMjYwMTAyMTAyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MzU3NGVlNmZkYjQ1NzVmMTk3NGRhNzVjZTY5MWNlOGIyMWM4ODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9XIaSURRj7kdEFLsLHVoDyj6LI4 E4O1E95FzKn1VUMCc5tH1VJUDVI5AGZQN1QAtRnPcYrSCNiiKZPH+e7PSX1PYAnH 7qth12aMp+UPsYUGptXPSXCKOQucoKz4UxctEQkFNczksQqgnK40BK+lvJ2R/kD6 5LHnfEbkYz3LAyX3kNZcMod9G/crUq3FUY6DdxfYCtxjThk1B2bmZAIUGjvv6lrv YsMkZYaClOKZTad9F+3OXtqzVwsnZbvjx9eohsbPRtAC2QToYwbfoRNGxmLgpj/B 3mD95pzsKlDx/MbXSp5whs3nCzm0S+h3H/+g6TYbLXXOYRvGg6S7iO1J7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJNXTub9tFdfGXTadc5pHOiyHIhoMB8GA1UdIwQY MBaAFL/EcOm1jlV+qMHb7a65xqX8RVElMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzkt YTJhYTY1NDBmODc1LzEvazFkTzV2MjBWMThaZE5wMXpta2M2TEljaUdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi8yN2IzOWItMDQ0OS00YzY0LWJhNzktYTJhYTY1NDBmODc1 LzEvdjhSdzZiV09WWDZvd2R2dHJybkdwZnhGVVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuewQMA0G CSqGSIb3DQEBCwUAA4IBAQARJdmf8zQqUY9Y3I3DyyUG4PT5oeAw+7L8kwE6F1J4 dPqgC7hK4y+lx1nUyyp+DBZhVGJcu4CsiTPpYdP87aOIgna/8xDggccLqLhF/ZCq kK6O0PE+AFjEEJ95mzgIQQA1E3daaNefInDVeyYKCNKpQiiXMSHcWlpMInfELg/p 4/Z/56BjmGiEeELb4EQCi2LOyXMivgDYx5QmA9BT0ZfmL7eEg09OOQBchc1xwOhE bmGCty7HUjsFSWA1q0U5O7R0sotANQu1RT10ADQ/DY8xWeBLZeINmu1+w7jfE6dW +510JrYErdJGFRUMJC74JRr6oLTgwhb6HZQI636/HRCa -----END CERTIFICATE-----Generated at Sat Jan 3 04:59:31 2026 by rpki-client