This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BKRMPaIbl-sqYEC7s4exKRAQ6Mg.roa File: BKRMPaIbl-sqYEC7s4exKRAQ6Mg.roa (raw, json) Hash identifier: P4op0pTEd9ISa2/rp0GOgj9+3UvBAaOu11lrWxyOtJQ= Subject key identifier: 04:A4:4C:3D:A2:1B:97:EB:2A:60:40:BB:B3:87:B1:29:10:10:E8:C8 Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Certificate serial: 019B7C1397E234621959171DF91A6ABF8128 Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BKRMPaIbl-sqYEC7s4exKRAQ6Mg.roa Signing time: Fri 02 Jan 2026 00:20:17 +0000 ROA not before: Fri 02 Jan 2026 00:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212504 IP address blocks: 185.218.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:97:e2:34:62:19:59:17:1d:f9:1a:6a:bf:81:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf Validity Not Before: Jan 2 00:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04a44c3da21b97eb2a6040bbb387b1291010e8c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:61:07:7b:9f:73:ff:04:04:85:ea:d2:1e:52: 94:89:0b:ed:e9:c7:c4:ab:39:b2:32:a5:fe:28:83: aa:d1:89:0f:fd:74:e9:bc:e8:9b:fe:0e:3e:e0:f7: 6a:94:b9:67:40:d0:2a:a8:76:62:ac:52:6e:f5:fc: 13:35:ce:12:2c:0c:a6:98:7f:06:a4:18:00:af:af: d5:51:fd:de:2c:a2:b1:16:69:28:47:3f:93:d9:64: 9a:3e:a1:0e:0a:6b:fe:ca:c1:a1:31:db:a8:c1:17: d7:5f:f8:69:aa:02:24:38:25:0e:65:5f:3e:dd:78: 6c:2c:d1:20:02:3c:e7:42:6f:ce:4c:5a:72:39:fe: 81:1a:b0:da:eb:e0:ab:0b:b8:f4:4e:63:0e:a2:a1: 2b:67:b8:5e:3d:d1:d2:11:f5:15:b9:b8:63:65:ba: a7:17:14:d1:a8:89:ea:47:0d:39:f2:46:ee:10:27: 4b:0a:88:40:35:13:29:d9:7d:0d:d5:0f:63:83:a3: 5e:2d:18:b2:1f:a0:df:fb:ae:71:ac:ef:f1:d2:3a: fb:3a:f9:03:07:37:e9:52:2b:ab:e9:dc:19:77:93: 56:72:da:6c:69:9c:99:a1:d5:bb:3e:02:03:fe:07: 29:6b:a8:f7:e4:85:53:ab:72:52:0c:fa:f3:0a:9c: ac:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A4:4C:3D:A2:1B:97:EB:2A:60:40:BB:B3:87:B1:29:10:10:E8:C8 X509v3 Authority Key Identifier: keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/BKRMPaIbl-sqYEC7s4exKRAQ6Mg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.218.21.0/24 Signature Algorithm: sha256WithRSAEncryption b3:81:ea:7f:00:52:0a:7b:db:08:9e:17:97:2b:54:da:59:2d: 57:87:87:39:ed:b7:1b:d5:3a:26:d6:19:f5:8b:8e:82:da:5b: 49:e4:e6:5c:a7:2f:44:b9:f7:2f:37:c0:6c:bc:94:00:42:ce: ca:7c:b1:6d:6f:23:6a:4e:0c:0b:c8:b5:c2:bc:9f:bc:67:23: d4:c7:87:07:4c:05:b5:16:a2:43:e3:03:65:da:ea:b7:80:3e: f3:b4:b0:c9:0a:11:02:93:25:bc:d7:80:e6:47:bf:00:95:f6: 2e:64:b6:f1:55:1b:9b:ca:b5:33:63:6c:fb:73:d6:d7:cc:3b: 51:c4:4c:b6:5a:ce:76:05:39:64:61:77:f1:18:d8:56:cc:3b: 7f:2e:52:90:dd:b7:7d:7d:83:c6:e1:dd:ba:00:7e:46:46:ae: b4:2c:c0:9d:07:64:b2:69:db:87:3a:51:62:2a:31:1f:a1:f3: d3:c1:74:47:30:df:b9:ca:67:7d:8f:67:23:79:31:63:c4:2d: 12:f9:01:97:5f:56:87:d1:b1:73:46:73:89:ea:6c:e9:2c:58: 28:b1:7a:ac:f8:ac:7b:8b:ee:0d:a6:61:d3:78:34:67:88:8c: 80:31:96:b1:42:33:5f:90:66:d3:73:de:a4:fd:ef:3e:9a:70: 85:e6:8f:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E5fiNGIZWRcd+Rpqv4EoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx MTRjYWYwHhcNMjYwMTAyMDAyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGE0NGMzZGEyMWI5N2ViMmE2MDQwYmJiMzg3YjEyOTEwMTBlOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmEHe59z/wQEherSHlKUiQvt6cfE qzmyMqX+KIOq0YkP/XTpvOib/g4+4PdqlLlnQNAqqHZirFJu9fwTNc4SLAymmH8G pBgAr6/VUf3eLKKxFmkoRz+T2WSaPqEOCmv+ysGhMduowRfXX/hpqgIkOCUOZV8+ 3XhsLNEgAjznQm/OTFpyOf6BGrDa6+CrC7j0TmMOoqErZ7hePdHSEfUVubhjZbqn FxTRqInqRw058kbuECdLCohANRMp2X0N1Q9jg6NeLRiyH6Df+65xrO/x0jr7OvkD BzfpUiur6dwZd5NWctpsaZyZodW7PgID/gcpa6j35IVTq3JSDPrzCpysKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFASkTD2iG5frKmBAu7OHsSkQEOjIMB8GA1UdIwQY MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt YjQzNDJiYTkxYWJjLzEvQktSTVBhSWJsLXNxWUVDN3M0ZXhLUkFRNk1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudoVMA0G CSqGSIb3DQEBCwUAA4IBAQCzgep/AFIKe9sInheXK1TaWS1Xh4c57bcb1Tom1hn1 i46C2ltJ5OZcpy9EufcvN8BsvJQAQs7KfLFtbyNqTgwLyLXCvJ+8ZyPUx4cHTAW1 FqJD4wNl2uq3gD7ztLDJChECkyW814DmR78AlfYuZLbxVRubyrUzY2z7c9bXzDtR xEy2Ws52BTlkYXfxGNhWzDt/LlKQ3bd9fYPG4d26AH5GRq60LMCdB2SyaduHOlFi KjEfofPTwXRHMN+5ymd9j2cjeTFjxC0S+QGXX1aH0bFzRnOJ6mzpLFgosXqs+Kx7 i+4NpmHTeDRniIyAMZaxQjNfkGbTc96k/e8+mnCF5o8S -----END CERTIFICATE-----Generated at Fri Jan 2 23:48:18 2026 by rpki-client