This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/REtMs1U8A3vNupGfA8YHkLMBg20.roa File: REtMs1U8A3vNupGfA8YHkLMBg20.roa (raw, json) Hash identifier: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ= Subject key identifier: 44:4B:4C:B3:55:3C:03:7B:CD:BA:91:9F:03:C6:07:90:B3:01:83:6D Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 019B79ED50FBE8E7F34ED5D54442C34145B0 Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/REtMs1U8A3vNupGfA8YHkLMBg20.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206092 IP address blocks: 185.118.78.0/24 maxlen: 24 193.68.91.0/24 maxlen: 24 193.68.95.0/24 maxlen: 24 213.21.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:50:fb:e8:e7:f3:4e:d5:d5:44:42:c3:41:45:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=444b4cb3553c037bcdba919f03c60790b301836d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:66:32:a8:26:ba:67:bf:20:38:2b:71:be: ad:b1:a8:7b:53:6b:f1:18:d8:e3:0f:9b:e2:bf:56: f3:4c:6b:db:e1:47:42:bb:b2:e0:44:27:d1:7d:70: 69:eb:d6:36:8f:7b:f0:bf:4d:9d:e3:1f:e8:5c:53: 97:a6:3b:61:ac:eb:d7:ac:a7:d3:46:7b:f9:7b:66: ac:62:82:d0:55:9a:f5:5d:60:03:79:3b:1e:24:c9: 76:b7:82:17:41:bd:60:ef:7c:7e:92:fe:9a:39:ca: d5:9c:be:c3:76:29:aa:3e:35:8f:b3:db:19:fb:6c: 04:c6:5e:35:8c:57:47:ef:4c:d3:f4:8f:e1:ea:71: 36:8a:16:d5:1d:e4:56:fa:78:e8:66:11:9a:46:1f: 10:6a:0d:b3:85:a6:fd:26:5e:9d:94:2e:e1:0c:96: cb:cd:46:f6:d1:52:d0:9e:a1:4a:09:66:6b:50:3b: 37:6e:62:72:8a:1b:ba:55:c8:0b:9e:22:ab:51:b5: 5f:5e:da:f3:6c:87:30:6b:3c:ee:58:72:d6:79:26: 0e:f0:1c:e2:05:7d:3b:d0:98:34:8e:a8:7a:fd:d3: 51:c4:d0:4b:e7:b8:d3:06:32:31:fb:f4:2c:63:7e: 84:7f:7d:46:c8:cd:c2:d9:a1:da:20:53:0e:50:fc: 5e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:4B:4C:B3:55:3C:03:7B:CD:BA:91:9F:03:C6:07:90:B3:01:83:6D X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/REtMs1U8A3vNupGfA8YHkLMBg20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.118.78.0/24 193.68.91.0/24 193.68.95.0/24 213.21.247.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:fe:14:85:26:f2:8c:b5:52:0d:77:97:1f:79:af:44:58:2b: 5a:5c:24:37:49:54:e9:ca:86:05:8a:34:31:2d:16:f9:5e:12: 3f:fa:06:00:f0:3e:37:99:a4:b4:6f:d5:07:2a:8f:9a:a9:59: 03:68:ee:08:bd:24:20:01:5e:a6:64:eb:12:b7:89:5a:4c:b4: 8b:f6:b5:3a:23:13:6e:98:92:e2:30:e6:14:6d:be:a0:97:fd: 29:e2:81:d5:ec:14:aa:7a:42:a6:62:b9:67:7b:88:9c:e7:02: 29:a4:c2:fd:86:fa:c9:cb:55:5e:a9:65:3e:e3:24:73:97:d3: 44:88:f6:16:46:00:a8:75:51:62:7d:3f:be:6e:71:c2:bd:9d: 30:2a:fd:22:f9:02:f7:88:37:b7:64:02:a9:cb:10:13:a8:d8: 09:e6:c5:40:9f:48:aa:8d:3b:2f:74:96:25:75:7a:06:ee:62: bf:3d:69:79:0a:a6:11:dc:de:59:e2:29:25:0f:21:5a:28:c3: d4:15:66:45:b3:e8:fb:c4:47:20:be:e9:30:09:f4:7a:51:68: 90:f3:84:a1:9b:04:42:3a:b7:95:9d:44:63:69:33:5a:06:e3: c8:4a:43:b9:eb:0f:43:7c:e6:f6:dc:32:86:df:ae:af:06:f1: 71:12:d8:80 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt57VD76OfzTtXVRELDQUWwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDRiNGNiMzU1M2MwMzdiY2RiYTkxOWYwM2M2MDc5MGIzMDE4MzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHxmMqgmume/IDgrcb6tsah7U2vx GNjjD5viv1bzTGvb4UdCu7LgRCfRfXBp69Y2j3vwv02d4x/oXFOXpjthrOvXrKfT Rnv5e2asYoLQVZr1XWADeTseJMl2t4IXQb1g73x+kv6aOcrVnL7DdimqPjWPs9sZ +2wExl41jFdH70zT9I/h6nE2ihbVHeRW+njoZhGaRh8Qag2zhab9Jl6dlC7hDJbL zUb20VLQnqFKCWZrUDs3bmJyihu6VcgLniKrUbVfXtrzbIcwazzuWHLWeSYO8Bzi BX070Jg0jqh6/dNRxNBL57jTBjIx+/QsY36Ef31GyM3C2aHaIFMOUPxePwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFERLTLNVPAN7zbqRnwPGB5CzAYNtMB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvUkV0TXMxVThBM3ZOdXBHZkE4WUhrTE1CZzIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuXZOAwQA wURbAwQAwURfAwQA1RX3MA0GCSqGSIb3DQEBCwUAA4IBAQBv/hSFJvKMtVINd5cf ea9EWCtaXCQ3SVTpyoYFijQxLRb5XhI/+gYA8D43maS0b9UHKo+aqVkDaO4IvSQg AV6mZOsSt4laTLSL9rU6IxNumJLiMOYUbb6gl/0p4oHV7BSqekKmYrlne4ic5wIp pML9hvrJy1VeqWU+4yRzl9NEiPYWRgCodVFifT++bnHCvZ0wKv0i+QL3iDe3ZAKp yxATqNgJ5sVAn0iqjTsvdJYldXoG7mK/PWl5CqYR3N5Z4iklDyFaKMPUFWZFs+j7 xEcgvukwCfR6UWiQ84ShmwRCOreVnURjaTNaBuPISkO56w9DfOb23DKG366vBvFx EtiA -----END CERTIFICATE-----Generated at Tue Jan 20 11:09:43 2026 by rpki-client