This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/BK3tpKOSTXCxYKkOe13Q63MJb9I.roa File: BK3tpKOSTXCxYKkOe13Q63MJb9I.roa (raw, json) Hash identifier: z9SYgCP3ZiLQk0vjMcoJ4vujaJvpOaOHnYotNVtHhjQ= Subject key identifier: 04:AD:ED:A4:A3:92:4D:70:B1:60:A9:0E:7B:5D:D0:EB:73:09:6F:D2 Certificate issuer: /CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0 Certificate serial: 019B7F15A2B70A8A1C46BA8F53536B4E399A Authority key identifier: 8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/BK3tpKOSTXCxYKkOe13Q63MJb9I.roa Signing time: Fri 02 Jan 2026 14:21:22 +0000 ROA not before: Fri 02 Jan 2026 14:21:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3225 IP address blocks: 91.216.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.mft rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:a2:b7:0a:8a:1c:46:ba:8f:53:53:6b:4e:39:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ec0cc08c98e05f4e1fb044008d852a2a4da00f0 Validity Not Before: Jan 2 14:21:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04adeda4a3924d70b160a90e7b5dd0eb73096fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7f:e5:54:e1:5f:29:a5:da:af:cd:1c:00:a3: ac:43:51:79:d8:22:8d:1e:dd:60:d3:0a:83:51:c3: 2c:f3:d3:e1:57:8f:88:d8:a0:5e:05:10:a5:f1:ba: dd:0f:be:d4:4f:e0:77:2e:7a:e0:24:be:78:8d:dd: 0c:f3:27:ee:57:7c:48:d3:f3:f1:74:c7:e6:ac:c0: 93:8e:a6:a8:64:53:2f:8b:41:0b:0a:c6:ae:0c:cf: 0e:46:33:c0:5e:06:e4:e1:c7:84:ee:8f:39:46:bc: cd:e9:ae:7d:af:9f:b8:7e:5f:b3:da:5c:93:ff:6c: f6:02:4d:42:cf:1e:6c:62:c5:6c:06:55:1f:10:ba: 72:ce:dd:b0:a3:97:ee:f1:84:12:d0:cb:85:26:df: ed:ab:c3:42:c3:da:a5:7b:1a:cd:7f:90:b9:c3:54: a7:ae:00:22:ec:4f:c4:02:f2:06:e0:0c:78:62:32: ff:9b:ac:53:39:d9:e8:13:4e:f1:36:50:43:05:ab: 65:88:59:15:46:a7:b2:f4:71:e9:69:e1:fb:cd:b9: 85:f2:3f:1f:54:e2:7f:1a:4e:60:9d:0f:22:b2:b0: f3:a7:83:cd:89:5a:62:2c:92:e9:b2:bb:ae:56:66: c7:58:63:43:5d:47:4c:d9:d7:86:42:d4:4b:59:6c: 07:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AD:ED:A4:A3:92:4D:70:B1:60:A9:0E:7B:5D:D0:EB:73:09:6F:D2 X509v3 Authority Key Identifier: keyid:8E:C0:CC:08:C9:8E:05:F4:E1:FB:04:40:08:D8:52:A2:A4:DA:00:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsDMCMmOBfTh-wRACNhSoqTaAPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/BK3tpKOSTXCxYKkOe13Q63MJb9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/d0be0b-bfa1-46da-bc10-35769f06299a/1/jsDMCMmOBfTh-wRACNhSoqTaAPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.188.0/24 Signature Algorithm: sha256WithRSAEncryption 27:64:7b:20:42:1c:b5:bb:94:7f:78:d7:20:48:a5:18:16:6e: 53:d3:33:7c:d9:7d:1b:5d:7f:0e:b3:90:41:3d:0f:62:32:39: 90:74:9e:6f:00:e0:6d:d7:fa:1e:ae:cb:75:7a:15:45:63:17: 20:21:e4:73:18:77:6f:85:bc:39:f9:00:ca:8c:6b:68:bc:9b: 32:15:40:01:48:53:f7:8b:25:62:9c:9e:2a:67:2e:cf:3c:47: 8d:38:d1:62:55:c1:cb:fe:32:c0:d5:14:3b:69:24:46:9e:54: 5b:7b:86:b1:c0:16:67:89:f2:90:aa:50:08:7f:6b:a8:d1:f1: df:90:04:14:0e:29:1c:ef:37:3d:57:80:62:7f:cf:62:08:eb: 3b:27:eb:82:5b:43:ec:fa:7e:41:fd:80:c6:e8:93:5b:3d:5b: 15:ef:82:73:00:a5:39:31:8d:cd:47:58:d3:80:7d:b6:76:c5: 2b:0b:3b:07:52:41:9a:3c:a8:ac:5d:a0:c5:d6:e0:bd:ac:4f: c7:3b:77:8a:21:5a:d8:85:09:f0:59:94:63:b4:0c:0d:4a:ea: 50:9a:60:98:62:3b:2c:b0:55:b3:24:4d:ec:a7:dd:9b:12:dc: 5e:30:10:17:fe:97:24:59:d3:e6:9e:52:ad:d2:88:3d:a5:c1: 19:1a:33:fa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FaK3CoocRrqPU1NrTjmaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYzBjYzA4Yzk4ZTA1ZjRlMWZiMDQ0MDA4ZDg1MmEyYTRk YTAwZjAwHhcNMjYwMTAyMTQyMTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGFkZWRhNGEzOTI0ZDcwYjE2MGE5MGU3YjVkZDBlYjczMDk2ZmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn/lVOFfKaXar80cAKOsQ1F52CKN Ht1g0wqDUcMs89PhV4+I2KBeBRCl8brdD77UT+B3LnrgJL54jd0M8yfuV3xI0/Px dMfmrMCTjqaoZFMvi0ELCsauDM8ORjPAXgbk4ceE7o85RrzN6a59r5+4fl+z2lyT /2z2Ak1Czx5sYsVsBlUfELpyzt2wo5fu8YQS0MuFJt/tq8NCw9qlexrNf5C5w1Sn rgAi7E/EAvIG4Ax4YjL/m6xTOdnoE07xNlBDBatliFkVRqey9HHpaeH7zbmF8j8f VOJ/Gk5gnQ8isrDzp4PNiVpiLJLpsruuVmbHWGNDXUdM2deGQtRLWWwH8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFASt7aSjkk1wsWCpDntd0OtzCW/SMB8GA1UdIwQY MBaAFI7AzAjJjgX04fsEQAjYUqKk2gDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAt MzU3NjlmMDYyOTlhLzEvQkszdHBLT1NUWEN4WUtrT2UxM1E2M01KYjlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9kMGJlMGItYmZhMS00NmRhLWJjMTAtMzU3NjlmMDYyOTlh LzEvanNETUNNbU9CZlRoLXdSQUNOaFNvcVRhQVBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9i8MA0G CSqGSIb3DQEBCwUAA4IBAQAnZHsgQhy1u5R/eNcgSKUYFm5T0zN82X0bXX8Os5BB PQ9iMjmQdJ5vAOBt1/oerst1ehVFYxcgIeRzGHdvhbw5+QDKjGtovJsyFUABSFP3 iyVinJ4qZy7PPEeNONFiVcHL/jLA1RQ7aSRGnlRbe4axwBZnifKQqlAIf2uo0fHf kAQUDikc7zc9V4Bif89iCOs7J+uCW0Ps+n5B/YDG6JNbPVsV74JzAKU5MY3NR1jT gH22dsUrCzsHUkGaPKisXaDF1uC9rE/HO3eKIVrYhQnwWZRjtAwNSupQmmCYYjss sFWzJE3sp92bEtxeMBAX/pckWdPmnlKt0og9pcEZGjP6 -----END CERTIFICATE-----Generated at Tue Jan 20 09:23:15 2026 by rpki-client