This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa File: BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa (raw, json) Hash identifier: Q2q3HL2ikSVxapYF8tEqUbGc2dsp+tUqOuJvpkTfgSw= Subject key identifier: 06:44:72:1F:C0:5A:F9:75:59:C9:32:0A:52:BD:06:D6:AB:B8:C0:9A Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Certificate serial: 019B7CEDCEC12870A9CC7C08899FF05B0431 Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 88.80.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ce:c1:28:70:a9:cc:7c:08:89:9f:f0:5b:04:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0644721fc05af97559c9320a52bd06d6abb8c09a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:07:d5:99:0b:c3:08:82:59:97:e9:c6:17:38: f4:fc:5d:5c:6f:3c:52:e1:e8:f3:24:31:01:ac:4d: c8:8b:83:49:45:a4:81:22:31:02:44:37:af:21:08: 73:62:71:87:2f:34:a6:75:77:be:48:e1:ca:14:77: cf:a6:94:bb:fc:63:54:8c:2b:05:fa:9a:3c:26:0b: 0f:b1:f2:1e:66:9a:1c:57:10:dd:6d:6a:c3:81:92: a2:00:72:2d:b8:2e:96:80:39:d1:6b:74:5e:ff:ff: 1e:20:f2:68:75:75:9d:7c:44:da:aa:72:2a:b3:e0: 87:01:e3:f7:3d:12:ed:bb:d0:2f:ce:ba:a6:25:87: b3:34:9c:6b:8a:15:fe:c2:ea:d5:d9:e1:9b:bb:2c: 82:c6:79:e7:d5:a8:d1:88:56:93:29:fc:d8:8a:b5: c8:aa:14:ac:35:2e:93:0f:c2:27:0e:02:f8:48:d1: b5:b1:7c:0f:56:54:66:2e:c0:03:cf:60:af:0b:6c: 0b:da:a8:a0:a1:49:95:1a:98:a4:67:73:54:b9:49: 0b:40:2f:73:07:c5:c2:23:11:21:92:57:3f:e8:01: fb:7e:39:ed:71:26:9b:91:18:01:c5:40:77:81:5c: c2:60:c6:0f:7d:61:8f:15:dd:9c:37:43:21:d2:82: 81:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:44:72:1F:C0:5A:F9:75:59:C9:32:0A:52:BD:06:D6:AB:B8:C0:9A X509v3 Authority Key Identifier: keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/BkRyH8Ba-XVZyTIKUr0G1qu4wJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 88.80.138.0/24 Signature Algorithm: sha256WithRSAEncryption 81:12:fb:55:4f:a0:f5:af:aa:6e:c3:9e:78:97:25:bc:36:cb: 34:74:d5:c2:09:6e:81:75:93:26:bd:ed:23:5a:d3:05:ce:e0: 3e:55:43:72:7e:68:df:34:09:61:53:7f:f2:42:53:14:c8:7b: cc:ee:b0:9a:ad:07:a8:86:fd:91:fa:9e:6d:5a:c8:08:be:c4: 5c:fe:fa:d7:a3:b3:72:84:dd:ba:d1:14:63:8a:e3:34:2e:00: 41:9f:3d:7c:bb:88:b1:d6:6b:de:fe:86:e5:6c:a1:0d:14:9c: c8:97:5e:3f:62:69:eb:4d:48:ca:6c:01:78:11:df:08:a9:c8: 81:dc:00:51:3e:82:82:cf:c0:02:fc:24:fc:dd:ef:60:26:26: 87:b8:e2:d9:25:4d:11:4c:cb:f6:14:61:e2:19:a5:3f:00:85: fc:22:f7:eb:15:f8:60:74:da:b3:60:82:36:0d:01:6a:84:da: e2:4f:b3:57:d3:cf:6a:a9:47:34:23:c1:eb:e6:d9:c3:8c:76: ec:9b:dd:60:9f:46:42:be:05:8d:41:66:22:24:2d:04:6c:63: 10:b4:ab:74:bd:62:db:61:e3:3a:4f:62:2b:68:fa:4a:39:43: 64:32:88:2e:2f:d7:6b:44:6d:e6:28:84:6a:14:6f:58:20:4f: 73:6c:fb:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87c7BKHCpzHwIiZ/wWwQxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2 MzFiZmIwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjQ0NzIxZmMwNWFmOTc1NTljOTMyMGE1MmJkMDZkNmFiYjhjMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAfVmQvDCIJZl+nGFzj0/F1cbzxS 4ejzJDEBrE3Ii4NJRaSBIjECRDevIQhzYnGHLzSmdXe+SOHKFHfPppS7/GNUjCsF +po8JgsPsfIeZpocVxDdbWrDgZKiAHItuC6WgDnRa3Re//8eIPJodXWdfETaqnIq s+CHAeP3PRLtu9AvzrqmJYezNJxrihX+wurV2eGbuyyCxnnn1ajRiFaTKfzYirXI qhSsNS6TD8InDgL4SNG1sXwPVlRmLsADz2CvC2wL2qigoUmVGpikZ3NUuUkLQC9z B8XCIxEhklc/6AH7fjntcSabkRgBxUB3gVzCYMYPfWGPFd2cN0Mh0oKB3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAZEch/AWvl1WckyClK9BtaruMCaMB8GA1UdIwQY MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt YWI4ZjFmMzM4N2VlLzEvQmtSeUg4QmEtWFZaeVRJS1VyMEcxcXU0d0pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCKMA0G CSqGSIb3DQEBCwUAA4IBAQCBEvtVT6D1r6puw554lyW8Nss0dNXCCW6BdZMmve0j WtMFzuA+VUNyfmjfNAlhU3/yQlMUyHvM7rCarQeohv2R+p5tWsgIvsRc/vrXo7Ny hN260RRjiuM0LgBBnz18u4ix1mve/oblbKENFJzIl14/YmnrTUjKbAF4Ed8IqciB 3ABRPoKCz8AC/CT83e9gJiaHuOLZJU0RTMv2FGHiGaU/AIX8IvfrFfhgdNqzYII2 DQFqhNriT7NX089qqUc0I8Hr5tnDjHbsm91gn0ZCvgWNQWYiJC0EbGMQtKt0vWLb YeM6T2IraPpKOUNkMoguL9drRG3mKIRqFG9YIE9zbPsi -----END CERTIFICATE-----Generated at Mon Jan 19 14:22:31 2026 by rpki-client