This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/bv7crWXlDlytvYkySG7c5NmMUkA.roa File: bv7crWXlDlytvYkySG7c5NmMUkA.roa (raw, json) Hash identifier: hgMG06MlwTq9Qr8spukEtgFAVFOnQKq96lFNbYV3uWw= Subject key identifier: 6E:FE:DC:AD:65:E5:0E:5C:AD:BD:89:32:48:6E:DC:E4:D9:8C:52:40 Certificate issuer: /CN=391c5d3331145ec8e271876f8042207b9d00cb64 Certificate serial: 019B7BA4E9A50B09E3F2A4B064230624D40A Authority key identifier: 39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/bv7crWXlDlytvYkySG7c5NmMUkA.roa Signing time: Thu 01 Jan 2026 22:19:23 +0000 ROA not before: Thu 01 Jan 2026 22:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204352 IP address blocks: 185.249.104.0/24 maxlen: 24 185.249.105.0/24 maxlen: 24 185.249.106.0/24 maxlen: 24 185.249.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:e9:a5:0b:09:e3:f2:a4:b0:64:23:06:24:d4:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391c5d3331145ec8e271876f8042207b9d00cb64 Validity Not Before: Jan 1 22:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6efedcad65e50e5cadbd8932486edce4d98c5240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d5:ad:ce:ac:18:0d:dd:4b:d4:7b:4f:03:e6: fd:d2:84:f0:27:32:60:ca:94:cb:70:df:af:9c:fa: ca:cd:49:5a:49:b9:85:9a:0c:f1:dc:a2:5e:6e:d2: 93:01:15:94:45:f1:cf:0f:3d:89:a1:65:34:5e:06: ea:4b:5e:ef:98:67:20:a7:54:50:81:53:67:e7:78: 1d:ee:d7:68:60:8d:fa:d8:02:b3:12:18:e2:50:f3: 1c:87:6e:46:4b:19:69:ab:6a:52:82:d9:3a:60:a6: 61:38:5d:65:f3:40:06:2d:25:aa:bf:c3:7c:c4:eb: 1b:fb:4e:19:ff:53:88:1f:47:52:a1:dd:cb:2b:96: ff:91:2d:ed:81:3e:f5:3e:b5:f6:40:00:6e:67:7e: 51:47:e0:89:96:c6:6f:9d:93:02:1a:3e:20:db:1b: ac:62:54:b1:48:55:1c:03:25:40:01:cb:f8:51:8b: 71:41:5d:6e:82:27:95:4a:cf:d7:c8:59:cc:f4:0a: 21:72:8c:92:02:c6:52:2a:a5:73:65:a9:ae:b6:18: c5:f6:60:c7:37:29:c9:ff:02:77:a0:3c:2d:41:b9: 8c:e7:cc:c5:4f:dc:df:1a:0c:a0:bc:e3:a7:9b:3f: b8:da:13:9d:10:c7:d2:d6:f7:ef:4e:29:14:85:37: 0b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FE:DC:AD:65:E5:0E:5C:AD:BD:89:32:48:6E:DC:E4:D9:8C:52:40 X509v3 Authority Key Identifier: keyid:39:1C:5D:33:31:14:5E:C8:E2:71:87:6F:80:42:20:7B:9D:00:CB:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORxdMzEUXsjicYdvgEIge50Ay2Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/bv7crWXlDlytvYkySG7c5NmMUkA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/058624-de77-4224-b540-ca3350e760cb/1/ORxdMzEUXsjicYdvgEIge50Ay2Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.104.0/22 Signature Algorithm: sha256WithRSAEncryption 12:10:53:91:a4:62:3b:e0:69:d8:ee:76:b7:c1:8d:90:d4:40: 2c:09:6f:aa:13:ed:c4:a9:4c:c6:4b:84:ce:d3:d8:95:ad:12: b7:15:17:3b:82:df:8f:1a:b7:8c:f5:ff:7f:d9:47:7e:9a:b9: 53:fc:8e:1c:4e:29:8c:4d:de:0b:96:74:31:e5:51:17:39:2c: ca:e1:dd:14:d7:48:13:2d:f8:43:1f:6d:76:d7:09:d8:ff:ea: 87:71:24:2a:9d:62:42:e0:58:3a:fc:17:4a:f5:f7:51:4f:43: c7:12:52:31:29:40:c4:f6:66:57:d5:9c:51:21:ae:74:d8:ce: 44:6d:29:fb:73:10:cc:c9:a9:c1:1a:23:e5:41:f0:aa:d0:76: 4e:76:16:6b:d8:c9:62:5a:f2:1c:40:4a:9e:8d:69:12:e8:8a: ac:c3:41:ef:2a:4f:c4:4f:72:4e:54:85:1e:02:4e:2e:53:32: 9d:61:bf:d7:12:fd:52:fc:05:8a:74:6b:e3:1f:ba:db:96:bb: 04:7c:c1:a8:01:d8:c2:67:bb:6f:75:2f:68:f2:30:36:db:48: 95:1b:a5:bb:92:18:20:77:41:f4:c6:87:f5:9b:63:a1:f0:ed: 71:ad:f9:b7:13:02:38:b2:65:c6:2f:56:50:49:8f:64:7d:de: 14:02:0f:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pOmlCwnj8qSwZCMGJNQKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MWM1ZDMzMzExNDVlYzhlMjcxODc2ZjgwNDIyMDdiOWQw MGNiNjQwHhcNMjYwMTAxMjIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWZlZGNhZDY1ZTUwZTVjYWRiZDg5MzI0ODZlZGNlNGQ5OGM1MjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9WtzqwYDd1L1HtPA+b90oTwJzJg ypTLcN+vnPrKzUlaSbmFmgzx3KJebtKTARWURfHPDz2JoWU0XgbqS17vmGcgp1RQ gVNn53gd7tdoYI362AKzEhjiUPMch25GSxlpq2pSgtk6YKZhOF1l80AGLSWqv8N8 xOsb+04Z/1OIH0dSod3LK5b/kS3tgT71PrX2QABuZ35RR+CJlsZvnZMCGj4g2xus YlSxSFUcAyVAAcv4UYtxQV1ugieVSs/XyFnM9AohcoySAsZSKqVzZamuthjF9mDH NynJ/wJ3oDwtQbmM58zFT9zfGgygvOOnmz+42hOdEMfS1vfvTikUhTcLwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG7+3K1l5Q5crb2JMkhu3OTZjFJAMB8GA1UdIwQY MBaAFDkcXTMxFF7I4nGHb4BCIHudAMtkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAt Y2EzMzUwZTc2MGNiLzEvYnY3Y3JXWGxEbHl0dllreVNHN2M1Tm1NVWtBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8wNTg2MjQtZGU3Ny00MjI0LWI1NDAtY2EzMzUwZTc2MGNi LzEvT1J4ZE16RVVYc2ppY1lkdmdFSWdlNTBBeTJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufloMA0G CSqGSIb3DQEBCwUAA4IBAQASEFORpGI74GnY7na3wY2Q1EAsCW+qE+3EqUzGS4TO 09iVrRK3FRc7gt+PGreM9f9/2Ud+mrlT/I4cTimMTd4LlnQx5VEXOSzK4d0U10gT LfhDH2121wnY/+qHcSQqnWJC4Fg6/BdK9fdRT0PHElIxKUDE9mZX1ZxRIa502M5E bSn7cxDMyanBGiPlQfCq0HZOdhZr2MliWvIcQEqejWkS6Iqsw0HvKk/ET3JOVIUe Ak4uUzKdYb/XEv1S/AWKdGvjH7rblrsEfMGoAdjCZ7tvdS9o8jA220iVG6W7khgg d0H0xof1m2Oh8O1xrfm3EwI4smXGL1ZQSY9kfd4UAg9D -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:23 2026 by rpki-client