This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/bQVjKkmobhkw7mkwIs0nkBnkqic.roa File: bQVjKkmobhkw7mkwIs0nkBnkqic.roa (raw, json) Hash identifier: 8Om2d8lOTV+LsZTeylJMIewyhtQBsCBhqCI89TKYwM0= Subject key identifier: 6D:05:63:2A:49:A8:6E:19:30:EE:69:30:22:CD:27:90:19:E4:AA:27 Certificate issuer: /CN=991e4b179e0953b9ecc585ad9859a00be3568001 Certificate serial: 019B76EB90206624243E4ADCCA0709A845E7 Authority key identifier: 99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/bQVjKkmobhkw7mkwIs0nkBnkqic.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200094 IP address blocks: 81.21.206.0/24 maxlen: 24 185.73.60.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.mft rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:90:20:66:24:24:3e:4a:dc:ca:07:09:a8:45:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=991e4b179e0953b9ecc585ad9859a00be3568001 Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d05632a49a86e1930ee693022cd279019e4aa27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:be:4e:ce:16:4c:0a:89:47:45:44:cc:4d: f6:b9:df:97:72:ad:a6:84:9b:99:f4:44:f8:b6:ca: 5e:53:79:c8:17:e6:05:aa:42:94:36:78:9e:d1:e1: d5:50:3c:57:38:bf:5d:d0:91:e2:0b:66:61:3d:ef: 61:1d:6f:17:cb:3f:46:cc:c9:75:e1:45:19:73:37: fd:46:46:c3:09:82:6a:20:33:af:4f:e5:5d:5c:44: a2:a7:e1:c8:71:d1:f8:31:0e:df:04:36:05:bd:8d: 1d:91:1f:de:ba:c6:a4:b5:49:c1:11:f9:8c:f5:9a: 6a:0f:7b:0b:47:ca:ff:ee:f0:d5:f5:85:c2:ab:20: dc:88:42:cb:ec:b6:b7:18:f1:16:05:e6:39:61:72: 22:f4:94:f6:a3:0d:03:d9:7f:ba:71:94:e6:57:e5: 0a:f6:6a:f0:93:0b:ba:e4:cf:62:a7:05:66:0b:1a: e0:fb:80:0c:fe:65:d3:f4:3b:b2:17:f9:eb:c2:6a: 4a:ee:ec:0e:02:44:00:ee:b6:24:f3:3d:bb:77:f8: cf:b8:b5:a5:be:37:21:f8:fe:62:0c:64:52:12:67: 79:6a:d3:5f:67:1a:b2:28:7f:c1:47:88:b2:5d:2e: db:78:28:85:5b:83:63:9e:90:69:8b:2d:7a:7f:a8: 3b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:05:63:2A:49:A8:6E:19:30:EE:69:30:22:CD:27:90:19:E4:AA:27 X509v3 Authority Key Identifier: keyid:99:1E:4B:17:9E:09:53:B9:EC:C5:85:AD:98:59:A0:0B:E3:56:80:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mR5LF54JU7nsxYWtmFmgC-NWgAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/bQVjKkmobhkw7mkwIs0nkBnkqic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bfdda9-2742-4b2f-85b6-ef9c95276932/1/mR5LF54JU7nsxYWtmFmgC-NWgAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.21.206.0/24 185.73.60.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:21:8d:bf:b6:5b:be:86:a7:ed:85:9b:8b:b9:18:69:cb:7d: ec:46:6a:fa:89:b4:91:c5:3e:49:b9:53:ca:94:5c:72:2a:67: 76:d9:f2:51:26:be:85:53:d4:63:ec:d5:06:7e:5d:a7:4e:80: 97:eb:3b:a3:26:e9:04:55:67:15:ce:f3:9a:f1:e7:01:70:d0: fa:a6:7b:44:39:4b:5e:f2:86:9a:0b:85:88:33:ed:09:84:57: 7f:7f:8d:67:af:10:69:9d:37:48:49:b5:60:6b:8d:af:0d:c4: 1f:ec:08:73:bb:3e:07:02:b6:17:c4:f0:3f:2b:83:62:63:10: 8d:b7:5b:35:7d:2c:ee:ac:c9:58:5b:66:89:77:aa:82:b8:33: 15:08:4a:06:9a:50:16:95:74:eb:71:d3:7d:69:e3:6a:da:ad: df:d0:9f:2f:ac:d7:fa:34:27:e7:46:a9:36:cb:f1:76:d6:ee: 5f:7e:01:91:13:83:5c:dd:da:e7:db:b6:7a:e4:64:29:61:19: 6f:71:ee:b5:d4:f5:3a:94:06:21:d0:3e:ff:9b:06:e3:4b:78: 6f:c3:13:64:18:e3:6d:46:e4:6d:fe:45:86:d4:74:c6:c9:eb: 5f:c2:7b:6e:ca:63:bc:30:25:15:d1:39:99:a0:a8:07:ac:54: a3:31:9e:ee -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt265AgZiQkPkrcygcJqEXnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MWU0YjE3OWUwOTUzYjllY2M1ODVhZDk4NTlhMDBiZTM1 NjgwMDEwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDA1NjMyYTQ5YTg2ZTE5MzBlZTY5MzAyMmNkMjc5MDE5ZTRhYTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLK+Ts4WTAqJR0VEzE32ud+Xcq2m hJuZ9ET4tspeU3nIF+YFqkKUNnie0eHVUDxXOL9d0JHiC2ZhPe9hHW8Xyz9GzMl1 4UUZczf9RkbDCYJqIDOvT+VdXESip+HIcdH4MQ7fBDYFvY0dkR/eusaktUnBEfmM 9ZpqD3sLR8r/7vDV9YXCqyDciELL7La3GPEWBeY5YXIi9JT2ow0D2X+6cZTmV+UK 9mrwkwu65M9ipwVmCxrg+4AM/mXT9DuyF/nrwmpK7uwOAkQA7rYk8z27d/jPuLWl vjch+P5iDGRSEmd5atNfZxqyKH/BR4iyXS7beCiFW4NjnpBpiy16f6g7LwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG0FYypJqG4ZMO5pMCLNJ5AZ5KonMB8GA1UdIwQY MBaAFJkeSxeeCVO57MWFrZhZoAvjVoABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYt ZWY5Yzk1Mjc2OTMyLzEvYlFWaktrbW9iaGt3N21rd0lzMG5rQm5rcWljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZmRkYTktMjc0Mi00YjJmLTg1YjYtZWY5Yzk1Mjc2OTMy LzEvbVI1TEY1NEpVN25zeFlXdG1GbWdDLU5XZ0FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAURXOAwQC uUk8MA0GCSqGSIb3DQEBCwUAA4IBAQBbIY2/tlu+hqfthZuLuRhpy33sRmr6ibSR xT5JuVPKlFxyKmd22fJRJr6FU9Rj7NUGfl2nToCX6zujJukEVWcVzvOa8ecBcND6 pntEOUte8oaaC4WIM+0JhFd/f41nrxBpnTdISbVga42vDcQf7Ahzuz4HArYXxPA/ K4NiYxCNt1s1fSzurMlYW2aJd6qCuDMVCEoGmlAWlXTrcdN9aeNq2q3f0J8vrNf6 NCfnRqk2y/F21u5ffgGRE4Nc3drn27Z65GQpYRlvce611PU6lAYh0D7/mwbjS3hv wxNkGONtRuRt/kWG1HTGyetfwntuymO8MCUV0TmZoKgHrFSjMZ7u -----END CERTIFICATE-----Generated at Tue Jan 27 04:24:18 2026 by rpki-client