This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/Bv5Sg8vgi9S842H6dRuR7sJxzko.roa File: Bv5Sg8vgi9S842H6dRuR7sJxzko.roa (raw, json) Hash identifier: hT9sbrvQRiXid7sYPnl4Iixs+zdMa4hm1hg6rDtrIYs= Subject key identifier: 06:FE:52:83:CB:E0:8B:D4:BC:E3:61:FA:75:1B:91:EE:C2:71:CE:4A Certificate issuer: /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29 Certificate serial: 019B7F1548D845D36DC4567D13C376796BF5 Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/Bv5Sg8vgi9S842H6dRuR7sJxzko.roa Signing time: Fri 02 Jan 2026 14:20:59 +0000 ROA not before: Fri 02 Jan 2026 14:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7754 IP address blocks: 185.212.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 14:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:48:d8:45:d3:6d:c4:56:7d:13:c3:76:79:6b:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29 Validity Not Before: Jan 2 14:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06fe5283cbe08bd4bce361fa751b91eec271ce4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:08:b8:dd:d9:ec:32:31:26:41:c8:75:91:96: 2a:91:2d:30:6c:86:16:c1:e6:16:98:c8:17:04:d5: 50:18:ed:83:dd:0b:b3:93:b3:a5:66:00:ce:5e:ad: c2:f8:80:bd:d8:15:07:dd:68:36:f4:05:fe:ee:30: a3:03:f3:ed:30:02:30:c9:43:80:41:63:f7:c1:88: a9:69:ef:f3:82:78:ed:57:40:c9:04:3c:ca:22:26: 9a:d4:7f:c0:47:d3:71:40:f9:83:66:fa:a5:48:18: df:aa:74:e1:53:99:2b:ab:b6:1a:eb:ba:fb:21:ab: 8b:f3:cc:2e:fe:e3:81:69:e9:8e:03:12:c9:1f:ef: 6a:87:70:ab:0e:4f:e6:9d:61:72:a1:b1:d6:0c:b8: f0:ae:69:f1:6d:77:31:11:a0:f7:73:cb:ac:43:9a: 98:e9:51:a8:48:05:a2:a6:98:27:ae:a8:52:11:70: bb:34:d9:33:d9:76:54:54:15:38:26:62:8e:5a:6a: 5b:52:b1:66:cd:43:bd:f5:a7:2c:17:1d:f1:9b:88: 43:35:85:84:a3:55:53:36:5a:a2:04:88:8c:db:04: 5d:3f:76:4c:26:5a:cd:1d:39:6f:a3:1a:af:ef:84: 75:8b:81:a2:5c:4c:75:10:cc:d5:17:4a:da:25:5c: 98:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FE:52:83:CB:E0:8B:D4:BC:E3:61:FA:75:1B:91:EE:C2:71:CE:4A X509v3 Authority Key Identifier: keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/Bv5Sg8vgi9S842H6dRuR7sJxzko.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.212.104.0/24 Signature Algorithm: sha256WithRSAEncryption a2:e1:1e:23:8f:e7:66:ff:8b:b7:58:d3:b7:7b:7b:32:59:66: 7b:07:96:da:8d:9a:b6:d4:16:04:56:e3:86:29:03:e3:12:d2: ed:93:c3:e2:7b:52:1c:77:c7:31:c7:9b:98:ae:89:ae:34:6e: 88:49:8c:38:4a:fd:ac:71:45:4e:96:fb:38:ff:dd:e3:01:83: 62:48:1e:4c:5f:2d:7b:45:55:76:36:52:c7:0b:f6:ff:98:a0: ac:7d:3b:92:40:73:98:a9:d0:9f:ae:ef:50:fa:cc:fb:37:0c: 73:eb:2e:73:c6:22:cb:64:fa:c6:24:94:5f:5d:1c:59:71:e0: 9c:f3:02:b1:9b:4b:50:27:86:f6:62:43:c7:71:28:40:c1:b6: b3:6b:16:37:f5:c4:8f:42:ea:31:15:b7:f2:1d:ba:e8:e1:27: d9:ce:55:25:b5:89:12:8d:d1:97:f2:0d:72:8e:bf:e7:16:1a: d9:be:fc:ac:2f:dc:a2:48:8d:3b:c7:9f:24:34:63:34:78:0f: 6f:a1:2a:01:23:a6:27:d7:ba:9a:f7:30:03:82:b9:1a:0f:57: 3e:c9:dc:f5:50:ef:a8:44:0d:1d:a4:46:5d:a7:c2:d3:70:16: fb:ea:f0:c5:1d:49:d1:f0:27:3d:e8:0c:2a:9b:3d:94:6a:f1: 26:fd:66:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FUjYRdNtxFZ9E8N2eWv1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZmJkNTg3NjYxM2VkYzU2ZTBmNWRlNDY4Y2NlNWViMjg4 NWZmMjkwHhcNMjYwMTAyMTQyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmZlNTI4M2NiZTA4YmQ0YmNlMzYxZmE3NTFiOTFlZWMyNzFjZTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAi43dnsMjEmQch1kZYqkS0wbIYW weYWmMgXBNVQGO2D3Quzk7OlZgDOXq3C+IC92BUH3Wg29AX+7jCjA/PtMAIwyUOA QWP3wYipae/zgnjtV0DJBDzKIiaa1H/AR9NxQPmDZvqlSBjfqnThU5krq7Ya67r7 IauL88wu/uOBaemOAxLJH+9qh3CrDk/mnWFyobHWDLjwrmnxbXcxEaD3c8usQ5qY 6VGoSAWippgnrqhSEXC7NNkz2XZUVBU4JmKOWmpbUrFmzUO99acsFx3xm4hDNYWE o1VTNlqiBIiM2wRdP3ZMJlrNHTlvoxqv74R1i4GiXEx1EMzVF0raJVyYqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAb+UoPL4IvUvONh+nUbke7Ccc5KMB8GA1UdIwQY MBaAFMD71YdmE+3Fbg9d5GjM5esohf8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1B2VmgyWVQ3Y1Z1RDEza2FNemw2eWlGX3lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wMWViYzItODRkMC00YWUzLWEyYzIt YTNiNmJlNGE5ZTliLzEvQnY1U2c4dmdpOVM4NDJINmRSdVI3c0p4emtvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wMWViYzItODRkMC00YWUzLWEyYzItYTNiNmJlNGE5ZTli LzEvd1B2VmgyWVQ3Y1Z1RDEza2FNemw2eWlGX3lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudRoMA0G CSqGSIb3DQEBCwUAA4IBAQCi4R4jj+dm/4u3WNO3e3syWWZ7B5bajZq21BYEVuOG KQPjEtLtk8Pie1Icd8cxx5uYromuNG6ISYw4Sv2scUVOlvs4/93jAYNiSB5MXy17 RVV2NlLHC/b/mKCsfTuSQHOYqdCfru9Q+sz7Nwxz6y5zxiLLZPrGJJRfXRxZceCc 8wKxm0tQJ4b2YkPHcShAwbazaxY39cSPQuoxFbfyHbro4SfZzlUltYkSjdGX8g1y jr/nFhrZvvysL9yiSI07x58kNGM0eA9voSoBI6Yn17qa9zADgrkaD1c+ydz1UO+o RA0dpEZdp8LTcBb76vDFHUnR8Cc96Awqmz2UavEm/WaF -----END CERTIFICATE-----Generated at Sun Jan 11 23:54:09 2026 by rpki-client