This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa File: BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa (raw, json) Hash identifier: fV8++ofETsZSv7cEY15Mclx0TsoCvuhI2z4S6KFk+Q0= Subject key identifier: 04:A1:31:95:8A:80:87:13:6B:5F:C2:24:C0:09:12:28:88:F6:4A:6F Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e Certificate serial: 019B797EA623E653CF3D51C6B84909A23F86 Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa Signing time: Thu 01 Jan 2026 12:18:21 +0000 ROA not before: Thu 01 Jan 2026 12:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208007 IP address blocks: 45.155.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.mft rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:a6:23:e6:53:cf:3d:51:c6:b8:49:09:a2:3f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e Validity Not Before: Jan 1 12:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04a131958a8087136b5fc224c009122888f64a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f1:7d:32:1d:1b:bb:b0:09:2d:9b:84:55:00: df:73:2b:8f:6b:70:b3:aa:1f:ed:be:7b:d6:71:13: 55:c5:95:cb:ab:19:d3:e9:dc:bd:a8:50:02:7a:38: e0:85:c2:b8:ae:c0:17:8f:ce:ef:db:b0:58:8a:ca: a4:68:44:f9:7e:45:ca:e1:72:7a:ab:91:59:44:ed: cc:e1:8f:41:38:4e:42:68:cb:ec:e0:50:33:8a:28: d4:46:5d:3c:80:e9:ce:0c:88:bd:b5:93:ff:d2:09: 04:8a:09:50:46:f0:09:3b:4d:9a:54:e6:a9:2d:6b: d8:0c:15:68:0a:00:57:91:69:ba:6e:79:f3:e3:d1: 5c:8a:30:91:31:84:67:f3:23:fb:31:ab:81:ef:7b: 63:ea:be:09:d3:df:1b:19:39:72:58:b9:46:13:31: f3:88:13:33:9f:f9:2e:54:bb:a0:b0:ef:52:99:2a: 4c:0a:17:22:c6:02:82:55:2d:cd:87:15:21:4f:d5: 40:d9:69:f3:28:c3:24:9e:ff:ac:0d:e0:43:15:32: f2:f8:1f:57:01:5f:96:97:4b:0b:7f:70:d3:d8:67: f7:89:ae:73:b7:aa:3b:4d:09:41:2d:95:31:de:7f: 8b:72:52:d3:d9:4c:24:48:e9:68:b4:0a:52:b8:ca: f4:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A1:31:95:8A:80:87:13:6B:5F:C2:24:C0:09:12:28:88:F6:4A:6F X509v3 Authority Key Identifier: keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/BKExlYqAhxNrX8IkwAkSKIj2Sm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.155.135.0/24 Signature Algorithm: sha256WithRSAEncryption 79:b6:40:16:5b:21:77:82:64:1b:82:c3:dd:b3:f0:b3:bd:3e: d5:d9:da:e3:26:5b:b4:ac:38:30:84:5a:26:29:9b:c2:f3:d9: 40:89:3f:05:1a:50:c2:f5:ff:24:1c:eb:27:e6:d4:9e:3f:67: 64:59:7e:9e:9b:9e:20:3f:1d:6f:72:1f:f6:0a:a6:39:f1:35: dd:a2:76:cb:7b:06:b2:25:37:75:12:61:c9:9e:a1:91:a3:bf: 5e:88:10:99:27:e7:7a:0e:8b:96:95:c5:78:b9:19:15:59:99: 97:67:20:1e:4e:6f:b4:f4:a0:bd:eb:d2:01:c8:19:b2:01:70: 52:66:8f:d1:0f:47:d0:56:9f:d3:2b:86:de:22:87:5f:c1:2c: 06:a6:39:f9:18:55:5e:03:4d:1e:0c:d9:48:a8:1a:54:8b:89: 00:4f:6f:7d:fa:3d:4e:9a:a0:38:20:75:6f:24:55:04:9a:80: 51:31:71:25:fb:a6:83:0d:f1:de:ec:65:ae:3c:5a:a6:74:6b: 24:31:3b:d2:c5:3b:bb:0b:c0:d6:c0:4e:51:11:10:23:78:0b: 20:5c:b5:79:f9:7d:9e:93:0a:32:9f:54:08:bf:30:43:54:9c: 98:8b:23:2b:53:04:36:ac:a8:0e:23:cb:cb:45:4f:f0:17:cb: 8a:3e:54:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fqYj5lPPPVHGuEkJoj+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MjZkOWIzYTc4NTQzYjY5NjQzMzVlZTE5NDFjYTI5NzFj NTY5NGUwHhcNMjYwMTAxMTIxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGExMzE5NThhODA4NzEzNmI1ZmMyMjRjMDA5MTIyODg4ZjY0YTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPF9Mh0bu7AJLZuEVQDfcyuPa3Cz qh/tvnvWcRNVxZXLqxnT6dy9qFACejjghcK4rsAXj87v27BYisqkaET5fkXK4XJ6 q5FZRO3M4Y9BOE5CaMvs4FAziijURl08gOnODIi9tZP/0gkEiglQRvAJO02aVOap LWvYDBVoCgBXkWm6bnnz49FcijCRMYRn8yP7MauB73tj6r4J098bGTlyWLlGEzHz iBMzn/kuVLugsO9SmSpMChcixgKCVS3NhxUhT9VA2WnzKMMknv+sDeBDFTLy+B9X AV+Wl0sLf3DT2Gf3ia5zt6o7TQlBLZUx3n+LclLT2UwkSOlotApSuMr0zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAShMZWKgIcTa1/CJMAJEiiI9kpvMB8GA1UdIwQY MBaAFEQm2bOnhUO2lkM17hlByilxxWlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQt MGRlNzk2YTRhMzMyLzEvQktFeGxZcUFoeE5yWDhJa3dBa1NLSWoyU204LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC9iOGUzMjMtOTM0OS00NDQ5LWI5NTQtMGRlNzk2YTRhMzMy LzEvUkNiWnM2ZUZRN2FXUXpYdUdVSEtLWEhGYVU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZuHMA0G CSqGSIb3DQEBCwUAA4IBAQB5tkAWWyF3gmQbgsPds/CzvT7V2drjJlu0rDgwhFom KZvC89lAiT8FGlDC9f8kHOsn5tSeP2dkWX6em54gPx1vch/2CqY58TXdonbLeway JTd1EmHJnqGRo79eiBCZJ+d6DouWlcV4uRkVWZmXZyAeTm+09KC969IByBmyAXBS Zo/RD0fQVp/TK4beIodfwSwGpjn5GFVeA00eDNlIqBpUi4kAT299+j1OmqA4IHVv JFUEmoBRMXEl+6aDDfHe7GWuPFqmdGskMTvSxTu7C8DWwE5RERAjeAsgXLV5+X2e kwoyn1QIvzBDVJyYiyMrUwQ2rKgOI8vLRU/wF8uKPlSG -----END CERTIFICATE-----Generated at Mon Jan 26 01:43:42 2026 by rpki-client