This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/BKEbuwMgtraLYD7tz_bOlWvPTyU.roa File: BKEbuwMgtraLYD7tz_bOlWvPTyU.roa (raw, json) Hash identifier: 4+VeGIyK69ig1zU9o8l43jPylF7T3GhRdlEeEiB531Q= Subject key identifier: 04:A1:1B:BB:03:20:B6:B6:8B:60:3E:ED:CF:F6:CE:95:6B:CF:4F:25 Certificate issuer: /CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec Certificate serial: 019B7F851AACCCEDBDA8AB28FC81B4D807E0 Authority key identifier: B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/BKEbuwMgtraLYD7tz_bOlWvPTyU.roa Signing time: Fri 02 Jan 2026 16:23:08 +0000 ROA not before: Fri 02 Jan 2026 16:23:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 89.37.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.mft rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:1a:ac:cc:ed:bd:a8:ab:28:fc:81:b4:d8:07:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d14ce18a8f1d05a6a35390af4aec8ce6cc56ec Validity Not Before: Jan 2 16:23:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04a11bbb0320b6b68b603eedcff6ce956bcf4f25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f8:ad:6c:f6:ce:0a:c1:d7:f1:40:14:01:a0: 89:7c:4b:e3:d0:89:39:b2:1b:95:30:07:09:7d:8b: f9:eb:61:60:00:e2:0a:ea:91:86:4a:54:19:f9:f0: e8:96:4f:a2:3a:c4:a8:73:2a:63:da:86:7e:50:8b: 4f:cb:f1:28:c1:be:78:ad:95:e2:33:6c:d5:0a:76: 25:21:eb:ce:eb:06:67:d9:a9:29:39:db:e9:1a:3a: c9:79:e7:7d:03:75:25:03:61:91:d6:a0:b1:7e:8f: 16:3f:ed:0e:39:d6:7f:17:59:a1:6e:62:bd:b3:d5: a3:f4:c5:8c:ac:e6:4d:da:99:f4:08:18:89:1d:ae: fa:eb:3a:e3:3b:a3:3d:5c:70:5b:50:55:e4:7f:5b: 1e:a8:db:b3:ba:27:41:c6:40:60:50:3a:67:b7:7d: fd:a2:4f:17:86:22:42:29:83:b1:44:65:b1:1f:87: 1a:29:6e:d1:d9:0d:41:b8:b5:57:7c:ed:ac:6c:0b: e1:f1:46:6a:80:71:a5:53:44:fb:38:79:5f:2f:7f: 85:89:f8:7b:92:d9:af:df:58:b5:d5:20:2a:a8:9a: 19:d0:d3:90:45:61:64:16:b4:37:01:57:ed:d7:49: 94:f0:c7:f4:33:fe:9e:88:c7:ef:3e:d3:47:a5:cc: 60:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A1:1B:BB:03:20:B6:B6:8B:60:3E:ED:CF:F6:CE:95:6B:CF:4F:25 X509v3 Authority Key Identifier: keyid:B3:D1:4C:E1:8A:8F:1D:05:A6:A3:53:90:AF:4A:EC:8C:E6:CC:56:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9FM4YqPHQWmo1OQr0rsjObMVuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/BKEbuwMgtraLYD7tz_bOlWvPTyU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/10303c-43d5-4033-808a-52c699d386cd/1/s9FM4YqPHQWmo1OQr0rsjObMVuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.135.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:b4:20:d0:fa:46:61:d0:0c:e4:fe:ef:86:30:5f:34:92:70: 70:4c:aa:cc:ca:d5:60:aa:53:be:51:3c:c0:6f:21:bc:bf:6c: 37:35:b7:ab:ea:33:61:a1:b9:74:89:db:05:df:e1:72:b4:80: 19:a2:64:38:0c:7b:0b:fd:c0:0f:73:fb:b2:98:78:85:c9:00: 22:ba:51:1c:06:0a:a7:4c:3f:7a:89:58:6b:d4:ee:6e:f9:a3: 0f:30:76:b9:4b:2c:30:23:28:f5:3a:47:b7:d2:5a:96:61:a5: 7d:ec:32:b2:4e:f1:f4:c3:82:a5:81:f4:dc:71:03:98:7e:d1: 32:62:7f:2b:80:5a:10:d7:d8:67:9a:1d:97:9f:3a:7c:74:49: e2:79:50:24:4a:aa:60:f4:2c:cd:64:08:02:e6:6e:f2:0c:b1: f9:e5:94:ce:0d:12:6b:6f:67:05:d3:6c:c0:3a:ad:bd:f5:3b: 93:e9:ee:84:69:11:26:3d:e2:0c:b7:c0:4b:ab:ad:4d:a4:a5: f2:de:5e:89:16:c7:c4:88:70:fd:40:cc:fa:6a:ea:4e:8e:f1: ad:8d:1a:b1:c4:1a:a5:30:b1:70:1c:a9:cc:8e:ed:13:2d:84: 1f:8b:b6:58:d6:98:cf:1e:c5:0e:69:20:ed:f0:9c:97:a7:3a: 06:09:3a:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRqszO29qKso/IG02AfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDE0Y2UxOGE4ZjFkMDVhNmEzNTM5MGFmNGFlYzhjZTZj YzU2ZWMwHhcNMjYwMTAyMTYyMzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGExMWJiYjAzMjBiNmI2OGI2MDNlZWRjZmY2Y2U5NTZiY2Y0ZjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfitbPbOCsHX8UAUAaCJfEvj0Ik5 shuVMAcJfYv562FgAOIK6pGGSlQZ+fDolk+iOsSocypj2oZ+UItPy/Eowb54rZXi M2zVCnYlIevO6wZn2akpOdvpGjrJeed9A3UlA2GR1qCxfo8WP+0OOdZ/F1mhbmK9 s9Wj9MWMrOZN2pn0CBiJHa766zrjO6M9XHBbUFXkf1seqNuzuidBxkBgUDpnt339 ok8XhiJCKYOxRGWxH4caKW7R2Q1BuLVXfO2sbAvh8UZqgHGlU0T7OHlfL3+Fifh7 ktmv31i11SAqqJoZ0NOQRWFkFrQ3AVft10mU8Mf0M/6eiMfvPtNHpcxg6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAShG7sDILa2i2A+7c/2zpVrz08lMB8GA1UdIwQY MBaAFLPRTOGKjx0FpqNTkK9K7IzmzFbsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEt NTJjNjk5ZDM4NmNkLzEvQktFYnV3TWd0cmFMWUQ3dHpfYk9sV3ZQVHlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8xMDMwM2MtNDNkNS00MDMzLTgwOGEtNTJjNjk5ZDM4NmNk LzEvczlGTTRZcVBIUVdtbzFPUXIwcnNqT2JNVnV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSWHMA0G CSqGSIb3DQEBCwUAA4IBAQBNtCDQ+kZh0Azk/u+GMF80knBwTKrMytVgqlO+UTzA byG8v2w3Nber6jNhobl0idsF3+FytIAZomQ4DHsL/cAPc/uymHiFyQAiulEcBgqn TD96iVhr1O5u+aMPMHa5SywwIyj1Oke30lqWYaV97DKyTvH0w4KlgfTccQOYftEy Yn8rgFoQ19hnmh2Xnzp8dEnieVAkSqpg9CzNZAgC5m7yDLH55ZTODRJrb2cF02zA Oq299TuT6e6EaREmPeIMt8BLq61NpKXy3l6JFsfEiHD9QMz6aupOjvGtjRqxxBql MLFwHKnMju0TLYQfi7ZY1pjPHsUOaSDt8JyXpzoGCTpd -----END CERTIFICATE-----Generated at Mon Jan 26 14:14:38 2026 by rpki-client