This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/bRKnz6AwD1XfyLGZob58d8icW2I.roa File: bRKnz6AwD1XfyLGZob58d8icW2I.roa (raw, json) Hash identifier: h8iO3jw7vnUn96rCOaCL+fzZYX1R9IrS//wzYnSu/i8= Subject key identifier: 6D:12:A7:CF:A0:30:0F:55:DF:C8:B1:99:A1:BE:7C:77:C8:9C:5B:62 Certificate issuer: /CN=588cabf6f523f26e267db03b524347841aaaa465 Certificate serial: 019B77589E9D2E5CF4117E5BCD9E0854E09E Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/bRKnz6AwD1XfyLGZob58d8icW2I.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12859 IP address blocks: 86.109.16.0/22 maxlen: 24 2a0d:7980:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9e:9d:2e:5c:f4:11:7e:5b:cd:9e:08:54:e0:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d12a7cfa0300f55dfc8b199a1be7c77c89c5b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b3:61:d9:34:5b:94:2b:cb:29:da:8b:d9:5d: d8:57:ee:61:17:20:bf:e9:73:52:ae:e0:2f:c2:c6: 38:83:22:5c:f4:05:f9:d9:f6:13:a6:b0:95:32:39: 4f:53:3b:76:a6:17:c8:95:c8:04:d7:4d:43:63:ac: 11:cc:2a:3d:f2:4c:ed:37:1c:90:e8:0b:bd:f9:84: a4:92:e3:20:05:f8:9d:f8:3f:87:c1:82:c1:e3:43: 4f:e3:d7:71:87:67:cb:54:a7:3b:1b:58:f0:d5:94: 04:52:4a:5e:f2:01:2b:b3:1f:7d:b3:99:38:bc:2d: f1:25:55:d6:d6:17:fa:7a:83:70:11:40:19:6e:62: 33:be:56:fe:b2:02:6b:6f:3c:5b:1f:f2:82:9d:72: c9:6b:32:98:54:93:52:ef:95:ab:ca:0f:4b:3d:8b: fc:fc:06:c7:c1:a9:89:6a:0b:72:84:04:ad:99:3d: e6:25:19:7f:4d:5f:6b:c0:39:d7:6e:b6:2f:20:9e: 63:f8:45:10:cc:5d:19:5b:9c:61:5a:3f:d9:b8:91: 3d:8d:e0:c1:55:9e:38:b0:5e:ed:f5:8b:93:d5:88: b0:d3:66:24:03:70:f2:82:40:98:4e:f3:c3:0f:c3: e3:91:d9:86:b7:6f:ac:78:08:33:50:67:21:c4:93: ff:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:12:A7:CF:A0:30:0F:55:DF:C8:B1:99:A1:BE:7C:77:C8:9C:5B:62 X509v3 Authority Key Identifier: keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/bRKnz6AwD1XfyLGZob58d8icW2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.109.16.0/22 IPv6: 2a0d:7980:1::/48 Signature Algorithm: sha256WithRSAEncryption a1:92:5f:d0:94:c1:2f:15:e8:ae:0b:4f:da:e5:e6:69:4d:73: 02:76:ab:ea:39:00:82:4c:39:d2:03:b1:a7:59:4d:5e:79:3d: cd:a2:50:32:99:5d:48:d9:49:ae:41:6c:aa:46:44:35:cd:46: 26:f6:fb:c3:bb:19:15:d8:27:76:cb:02:dd:2b:11:96:56:a5: 40:23:fa:ca:0c:d0:f2:ae:75:5c:d4:46:b6:be:2a:0b:a8:68: 4c:1e:2f:73:8f:25:54:de:e3:2a:d4:2e:8d:23:67:62:e5:81: 9b:b8:ad:ea:56:20:59:03:ab:97:bb:c7:d0:32:69:98:cc:27: ee:45:40:c9:56:1d:79:49:d6:d4:3c:04:14:32:40:09:e6:2e: 6c:9c:b7:87:95:32:75:ad:37:f6:b6:b0:fd:bd:cb:89:ee:69: 82:25:f6:af:ea:d8:21:61:f0:cc:cf:38:0a:aa:1c:12:9c:49: 34:be:02:ba:1b:c1:9e:35:52:bf:61:26:47:b7:16:a9:6a:5c: f8:4f:54:c3:d5:3b:d5:33:8f:fc:10:a2:6b:da:33:80:31:4b: fb:1f:c3:5f:4b:a0:48:e2:aa:a1:00:22:98:85:a0:b6:2a:49: 95:d3:e4:52:8b:d3:bf:36:e6:74:56:38:3d:a6:a5:3e:e6:6a: d9:5b:85:54 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3WJ6dLlz0EX5bzZ4IVOCeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGNhYmY2ZjUyM2YyNmUyNjdkYjAzYjUyNDM0Nzg0MWFh YWE0NjUwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDEyYTdjZmEwMzAwZjU1ZGZjOGIxOTlhMWJlN2M3N2M4OWM1YjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLNh2TRblCvLKdqL2V3YV+5hFyC/ 6XNSruAvwsY4gyJc9AX52fYTprCVMjlPUzt2phfIlcgE101DY6wRzCo98kztNxyQ 6Au9+YSkkuMgBfid+D+HwYLB40NP49dxh2fLVKc7G1jw1ZQEUkpe8gErsx99s5k4 vC3xJVXW1hf6eoNwEUAZbmIzvlb+sgJrbzxbH/KCnXLJazKYVJNS75Wryg9LPYv8 /AbHwamJagtyhAStmT3mJRl/TV9rwDnXbrYvIJ5j+EUQzF0ZW5xhWj/ZuJE9jeDB VZ44sF7t9YuT1Yiw02YkA3DygkCYTvPDD8PjkdmGt2+seAgzUGchxJP/SQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG0Sp8+gMA9V38ixmaG+fHfInFtiMB8GA1UdIwQY MBaAFFiMq/b1I/JuJn2wO1JDR4QaqqRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQt NmFkMzI1MmExNDI3LzEvYlJLbno2QXdEMVhmeUxHWm9iNThkOGljVzJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQtNmFkMzI1MmExNDI3 LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCVm0QMA8E AgACMAkDBwAqDXmAAAEwDQYJKoZIhvcNAQELBQADggEBAKGSX9CUwS8V6K4LT9rl 5mlNcwJ2q+o5AIJMOdIDsadZTV55Pc2iUDKZXUjZSa5BbKpGRDXNRib2+8O7GRXY J3bLAt0rEZZWpUAj+soM0PKudVzURra+KguoaEweL3OPJVTe4yrULo0jZ2LlgZu4 repWIFkDq5e7x9AyaZjMJ+5FQMlWHXlJ1tQ8BBQyQAnmLmyct4eVMnWtN/a2sP29 y4nuaYIl9q/q2CFh8MzPOAqqHBKcSTS+ArobwZ41Ur9hJke3FqlqXPhPVMPVO9Uz j/wQomvaM4AxS/sfw19LoEjiqqEAIpiFoLYqSZXT5FKL07825nRWOD2mpT7matlb hVQ= -----END CERTIFICATE-----Generated at Sun Jan 25 16:36:23 2026 by rpki-client