This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/bkBKpNXnnhiVy0aIIWXvtrC3cuc.roa File: bkBKpNXnnhiVy0aIIWXvtrC3cuc.roa (raw, json) Hash identifier: OmCalx7GnzcLWdPt18F0Wc8hXtQDqYrhzKI8QJ5ZwZY= Subject key identifier: 6E:40:4A:A4:D5:E7:9E:18:95:CB:46:88:21:65:EF:B6:B0:B7:72:E7 Certificate issuer: /CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee Certificate serial: 019B7C1305D5FF6CCFCBB5AB86A163DF8C68 Authority key identifier: C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/bkBKpNXnnhiVy0aIIWXvtrC3cuc.roa Signing time: Fri 02 Jan 2026 00:19:40 +0000 ROA not before: Fri 02 Jan 2026 00:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48685 IP address blocks: 185.119.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.mft rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:05:d5:ff:6c:cf:cb:b5:ab:86:a1:63:df:8c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3ff0489a0641ccf1dc1eb3b674f3f611163baee Validity Not Before: Jan 2 00:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e404aa4d5e79e1895cb46882165efb6b0b772e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:9e:a2:74:07:a1:05:23:b1:e8:1e:b7:f0:95: c0:9f:44:27:04:2e:03:48:bb:ac:bb:af:35:d5:80: 19:07:b6:7c:d6:5f:d0:90:b8:86:5d:af:a6:7d:35: a1:27:91:e8:e0:2d:2a:a5:9e:e6:78:e3:d2:f8:6f: 1c:fb:aa:cd:19:ba:34:f4:fe:08:ba:5f:32:cc:78: 44:76:d6:21:97:3c:90:d3:da:ba:3d:81:38:f7:97: 6b:e4:4d:04:66:7f:e0:81:3d:e2:d2:c5:1d:29:43: 2e:ba:6f:ad:b2:9d:97:ff:e8:e3:b0:5a:83:87:ac: d8:89:fa:a7:0f:d6:62:12:5e:cb:5b:bb:55:84:ea: 29:a8:db:70:ae:c5:d3:45:f7:d8:15:0c:16:66:96: 01:ea:1b:b2:0e:fe:7d:0f:9f:47:ee:8e:ca:2f:70: f5:8b:2a:d5:e1:1c:10:f2:7e:87:aa:6b:9c:ee:19: aa:3d:a0:f1:b0:09:41:32:78:f1:c6:1f:35:ad:57: de:d7:51:cd:f2:e6:ad:b4:69:d7:34:fc:a2:06:2e: a4:91:bc:a2:20:2a:9a:66:68:3b:07:ca:65:84:76: ae:90:9c:ba:69:3f:52:c0:98:5f:2a:f3:e9:2f:7e: 8d:b8:c2:1a:1e:90:ea:b9:12:f9:4a:d0:10:d1:f5: a3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:40:4A:A4:D5:E7:9E:18:95:CB:46:88:21:65:EF:B6:B0:B7:72:E7 X509v3 Authority Key Identifier: keyid:C3:FF:04:89:A0:64:1C:CF:1D:C1:EB:3B:67:4F:3F:61:11:63:BA:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_8EiaBkHM8dwes7Z08_YRFjuu4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/bkBKpNXnnhiVy0aIIWXvtrC3cuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e2767c-e447-4d77-87f0-883e0ebed6bf/1/w_8EiaBkHM8dwes7Z08_YRFjuu4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.119.124.0/22 Signature Algorithm: sha256WithRSAEncryption 42:7b:76:d3:38:f7:27:4d:77:6e:24:9c:95:96:79:f4:de:e4: fb:3e:9c:24:43:b2:8b:2c:64:d4:20:90:73:e3:b4:2e:43:86: ad:cf:27:1a:91:48:7a:2c:3c:3a:39:17:26:71:6c:3e:95:3f: 3c:c3:6c:7c:6c:ab:12:4a:ab:85:6f:7f:ee:92:85:08:c2:f8: 44:2e:2d:88:b4:ee:28:ee:1d:87:04:bc:50:9c:ef:06:91:d6: 79:37:1c:02:cd:cc:78:f5:6a:a9:75:57:81:ca:db:30:d6:7f: 8a:29:44:96:07:5f:2c:d3:b1:ee:eb:f0:5b:cb:02:b4:ca:90: 63:69:a9:e4:16:99:59:2a:95:37:b6:32:af:83:ec:f8:95:39: 6d:50:2a:96:b7:b9:b0:7e:d2:46:7b:a6:b8:47:4c:1a:89:68: 66:f7:7c:6e:cd:3a:3a:2d:a0:b3:10:d7:dc:1b:d6:8d:50:7a: 98:0f:e3:57:af:89:97:94:98:e9:d8:dc:5d:43:07:5d:0e:8d: 53:fb:01:a3:d0:27:6a:43:5d:ae:95:0d:04:e3:eb:4e:b1:63: 4f:8a:77:4b:fb:bb:a1:e1:53:dc:33:2c:13:33:6e:39:f0:df: 09:2d:23:bf:13:0b:15:60:e1:20:0d:b5:20:d9:54:96:47:af: 2f:82:78:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EwXV/2zPy7WrhqFj34xoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmYwNDg5YTA2NDFjY2YxZGMxZWIzYjY3NGYzZjYxMTE2 M2JhZWUwHhcNMjYwMTAyMDAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTQwNGFhNGQ1ZTc5ZTE4OTVjYjQ2ODgyMTY1ZWZiNmIwYjc3MmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArp6idAehBSOx6B638JXAn0QnBC4D SLusu6811YAZB7Z81l/QkLiGXa+mfTWhJ5Ho4C0qpZ7meOPS+G8c+6rNGbo09P4I ul8yzHhEdtYhlzyQ09q6PYE495dr5E0EZn/ggT3i0sUdKUMuum+tsp2X/+jjsFqD h6zYifqnD9ZiEl7LW7tVhOopqNtwrsXTRffYFQwWZpYB6huyDv59D59H7o7KL3D1 iyrV4RwQ8n6Hqmuc7hmqPaDxsAlBMnjxxh81rVfe11HN8uattGnXNPyiBi6kkbyi ICqaZmg7B8plhHaukJy6aT9SwJhfKvPpL36NuMIaHpDquRL5StAQ0fWjOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG5ASqTV554YlctGiCFl77awt3LnMB8GA1UdIwQY MBaAFMP/BImgZBzPHcHrO2dPP2ERY7ruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAt ODgzZTBlYmVkNmJmLzEvYmtCS3BOWG5uaGlWeTBhSUlXWHZ0ckMzY3VjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9lMjc2N2MtZTQ0Ny00ZDc3LTg3ZjAtODgzZTBlYmVkNmJm LzEvd184RWlhQmtITThkd2VzN1owOF9ZUkZqdXU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXd8MA0G CSqGSIb3DQEBCwUAA4IBAQBCe3bTOPcnTXduJJyVlnn03uT7PpwkQ7KLLGTUIJBz 47QuQ4atzycakUh6LDw6ORcmcWw+lT88w2x8bKsSSquFb3/ukoUIwvhELi2ItO4o 7h2HBLxQnO8GkdZ5NxwCzcx49WqpdVeBytsw1n+KKUSWB18s07Hu6/BbywK0ypBj aankFplZKpU3tjKvg+z4lTltUCqWt7mwftJGe6a4R0waiWhm93xuzTo6LaCzENfc G9aNUHqYD+NXr4mXlJjp2NxdQwddDo1T+wGj0CdqQ12ulQ0E4+tOsWNPindL+7uh 4VPcMywTM2458N8JLSO/EwsVYOEgDbUg2VSWR68vgni2 -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:08 2026 by rpki-client