This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/bMn_23nrCl28y9SYIcSyjUBIZLU.roa File: bMn_23nrCl28y9SYIcSyjUBIZLU.roa (raw, json) Hash identifier: CTefdSkQHU087fuAHIXzkavwf4EoaAetVJZcdLfAn7c= Subject key identifier: 6C:C9:FF:DB:79:EB:0A:5D:BC:CB:D4:98:21:C4:B2:8D:40:48:64:B5 Certificate issuer: /CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Certificate serial: 019B7758BA073DCACD881CF1E254678DC8CA Authority key identifier: 8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/bMn_23nrCl28y9SYIcSyjUBIZLU.roa Signing time: Thu 01 Jan 2026 02:17:42 +0000 ROA not before: Thu 01 Jan 2026 02:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209287 IP address blocks: 82.199.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.mft rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ba:07:3d:ca:cd:88:1c:f1:e2:54:67:8d:c8:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7f325f9aaeb93a83c39e78145c41937d586b77 Validity Not Before: Jan 1 02:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cc9ffdb79eb0a5dbccbd49821c4b28d404864b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:02:4d:35:15:5c:94:0d:68:b0:3f:08:4b:af: 19:e6:a2:6a:e9:76:c5:7d:97:be:b9:00:be:91:2e: 55:09:f6:4d:a7:5a:34:17:c2:e3:60:7e:ae:87:69: c7:65:d9:2b:b0:f8:bd:cb:e6:22:6e:0e:73:f0:16: 85:c6:3a:d6:0e:5f:51:50:75:d8:f0:ca:0e:a9:d7: c6:22:32:e8:d8:90:01:51:75:06:09:db:cb:3d:94: 69:9d:2a:87:50:b1:14:ba:19:a9:7a:cb:9d:3e:d0: ba:17:ff:cb:8e:76:ed:46:86:01:3c:d3:89:8b:ba: 18:d8:86:9b:35:f6:72:40:eb:35:d5:86:f6:20:6a: a4:1d:ae:2a:a0:fe:ba:72:ca:fc:a0:05:c9:ad:89: 3a:af:81:c2:27:f1:42:26:1b:e1:53:92:1c:c9:25: 24:79:86:5f:d3:0e:64:eb:c3:d5:38:7c:17:4a:6f: ac:50:b1:ba:4a:d6:cc:e2:c7:08:29:32:f5:d5:a5: 1c:29:0a:fb:89:1e:07:e5:cf:5c:0e:58:d2:60:0b: 41:38:22:93:e3:0b:66:e8:59:01:c5:23:d0:83:6a: 2b:b5:87:b0:78:70:37:23:cb:e4:c0:26:02:ee:d3: 7e:7c:8a:de:90:75:65:93:f0:3b:96:0a:70:37:16: 4e:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C9:FF:DB:79:EB:0A:5D:BC:CB:D4:98:21:C4:B2:8D:40:48:64:B5 X509v3 Authority Key Identifier: keyid:8C:7F:32:5F:9A:AE:B9:3A:83:C3:9E:78:14:5C:41:93:7D:58:6B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jH8yX5quuTqDw554FFxBk31Ya3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/bMn_23nrCl28y9SYIcSyjUBIZLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/a4c294-6b52-484e-8265-fc2f5fa77555/1/jH8yX5quuTqDw554FFxBk31Ya3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.199.62.0/24 Signature Algorithm: sha256WithRSAEncryption 63:21:fa:7d:4b:05:0c:d7:10:4d:7a:c6:fe:17:75:0b:3d:ca: c9:0c:32:33:5b:03:57:82:37:b8:5c:fe:ba:a5:24:91:07:ab: e4:3f:6f:b1:55:23:57:2b:8d:b7:d0:73:52:5c:11:33:a0:f1: ef:a3:d1:aa:61:24:24:3b:8d:df:ce:da:63:1c:63:05:eb:c9: 44:d1:89:88:3d:6e:33:2e:b6:04:8a:6f:1d:d2:ed:8b:94:9e: 30:d5:18:8a:9d:44:83:a0:5b:92:ad:18:f4:69:e0:fa:b0:4d: eb:b0:b6:04:0b:56:fd:f3:77:85:cd:eb:4e:0c:a4:d4:2f:21: 37:7f:2d:ab:5d:cf:94:11:4a:e1:d4:58:31:d0:a0:ec:e2:a7: 9f:b0:92:b9:b9:90:d7:46:e8:d6:47:39:d5:d8:0f:ef:b9:1a: 80:98:ed:32:f4:2e:89:83:f0:49:69:52:f4:bd:83:33:7f:07: 92:89:4d:7b:20:20:73:f0:83:0f:16:34:b6:61:96:d8:d7:ec: 01:3d:96:fa:e6:71:c5:44:13:70:af:81:58:c8:14:62:f9:41: 1f:ab:72:eb:b4:f5:bf:75:35:26:47:6f:01:b4:bd:df:32:2c: b0:19:90:07:cf:d2:74:05:9d:12:e8:f7:ca:05:60:72:fc:8a: ad:33:a1:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WLoHPcrNiBzx4lRnjcjKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2YzMjVmOWFhZWI5M2E4M2MzOWU3ODE0NWM0MTkzN2Q1 ODZiNzcwHhcNMjYwMTAxMDIxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2M5ZmZkYjc5ZWIwYTVkYmNjYmQ0OTgyMWM0YjI4ZDQwNDg2NGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAJNNRVclA1osD8IS68Z5qJq6XbF fZe+uQC+kS5VCfZNp1o0F8LjYH6uh2nHZdkrsPi9y+Yibg5z8BaFxjrWDl9RUHXY 8MoOqdfGIjLo2JABUXUGCdvLPZRpnSqHULEUuhmpesudPtC6F//LjnbtRoYBPNOJ i7oY2IabNfZyQOs11Yb2IGqkHa4qoP66csr8oAXJrYk6r4HCJ/FCJhvhU5IcySUk eYZf0w5k68PVOHwXSm+sULG6StbM4scIKTL11aUcKQr7iR4H5c9cDljSYAtBOCKT 4wtm6FkBxSPQg2ortYeweHA3I8vkwCYC7tN+fIrekHVlk/A7lgpwNxZODQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGzJ/9t56wpdvMvUmCHEso1ASGS1MB8GA1UdIwQY MBaAFIx/Ml+arrk6g8OeeBRcQZN9WGt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUt ZmMyZjVmYTc3NTU1LzEvYk1uXzIzbnJDbDI4eTlTWUljU3lqVUJJWkxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9hNGMyOTQtNmI1Mi00ODRlLTgyNjUtZmMyZjVmYTc3NTU1 LzEvakg4eVg1cXV1VHFEdzU1NEZGeEJrMzFZYTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsc+MA0G CSqGSIb3DQEBCwUAA4IBAQBjIfp9SwUM1xBNesb+F3ULPcrJDDIzWwNXgje4XP66 pSSRB6vkP2+xVSNXK4230HNSXBEzoPHvo9GqYSQkO43fztpjHGMF68lE0YmIPW4z LrYEim8d0u2LlJ4w1RiKnUSDoFuSrRj0aeD6sE3rsLYEC1b983eFzetODKTULyE3 fy2rXc+UEUrh1Fgx0KDs4qefsJK5uZDXRujWRznV2A/vuRqAmO0y9C6Jg/BJaVL0 vYMzfweSiU17ICBz8IMPFjS2YZbY1+wBPZb65nHFRBNwr4FYyBRi+UEfq3LrtPW/ dTUmR28BtL3fMiywGZAHz9J0BZ0S6PfKBWBy/IqtM6Gk -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:49 2026 by rpki-client