This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/bEr1knk29A1thJBkv70_tj5F5_4.roa File: bEr1knk29A1thJBkv70_tj5F5_4.roa (raw, json) Hash identifier: HBKJUp0spY1+ZHU4KZ7GZ9vGaUpCij2jKbgcOJbWUBI= Subject key identifier: 6C:4A:F5:92:79:36:F4:0D:6D:84:90:64:BF:BD:3F:B6:3E:45:E7:FE Certificate issuer: /CN=10771dd7dea22e35fdaf19b51b839f43721270ba Certificate serial: 019B7AC7E1700DE409AAF9F5B02AEECCE410 Authority key identifier: 10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/bEr1knk29A1thJBkv70_tj5F5_4.roa Signing time: Thu 01 Jan 2026 18:17:58 +0000 ROA not before: Thu 01 Jan 2026 18:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201863 IP address blocks: 212.146.132.0/24 maxlen: 24 212.146.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.mft rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:e1:70:0d:e4:09:aa:f9:f5:b0:2a:ee:cc:e4:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10771dd7dea22e35fdaf19b51b839f43721270ba Validity Not Before: Jan 1 18:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c4af5927936f40d6d849064bfbd3fb63e45e7fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:52:22:eb:50:ef:ef:22:61:7e:1d:fa:3c: ac:b3:d8:64:fa:63:66:77:f1:72:c3:74:90:b5:bb: c2:57:bc:d7:ac:61:dd:cf:db:3e:36:ec:79:83:c9: bc:5f:1a:c5:f4:a8:34:4a:92:42:d1:4d:89:47:c5: cf:0b:35:77:2f:bf:b6:a2:5a:92:f9:ce:16:50:9a: c6:59:31:f8:3d:7b:7a:dc:6a:f7:e5:e2:c1:b6:02: 9a:27:71:92:2b:10:9d:78:77:a6:55:c9:4a:c1:17: a2:17:4f:18:c6:fc:f0:92:25:1a:b5:0c:c4:12:01: 5f:e0:ef:35:33:e2:78:5e:a8:45:96:8b:ed:34:80: 68:d7:33:bc:76:af:5c:8f:cb:36:77:16:2b:09:b7: 44:29:cc:ac:eb:93:52:7d:e3:f6:80:70:9e:ac:32: ef:a3:d4:c0:24:a5:4d:d6:c5:d8:3b:4e:4f:b3:ba: d2:99:f1:24:d7:da:a6:a1:d9:53:51:70:08:5f:ae: 45:58:61:af:47:3b:b7:6d:e6:57:75:2b:75:d4:da: 3b:60:6d:59:cb:77:b2:18:b4:48:8b:96:40:53:fe: 95:d1:90:91:64:cd:3e:00:2a:3a:0b:c8:9b:f7:69: 95:8f:0e:9c:a5:f0:7f:51:16:ad:57:67:cc:56:83: 9b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:4A:F5:92:79:36:F4:0D:6D:84:90:64:BF:BD:3F:B6:3E:45:E7:FE X509v3 Authority Key Identifier: keyid:10:77:1D:D7:DE:A2:2E:35:FD:AF:19:B5:1B:83:9F:43:72:12:70:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EHcd196iLjX9rxm1G4OfQ3IScLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/bEr1knk29A1thJBkv70_tj5F5_4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/75148a-e40e-409f-8a0b-da851a715fa4/1/EHcd196iLjX9rxm1G4OfQ3IScLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.146.132.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:59:e0:92:9c:6a:9a:95:33:25:a2:1a:43:56:93:ea:b7:fd: 04:78:d4:f2:10:fc:fb:22:c8:25:73:29:eb:77:d8:c9:84:50: 16:fa:46:f3:62:31:b2:6a:7e:6e:3d:d9:9a:fd:13:86:a5:6d: eb:9d:23:7e:38:1d:94:46:7e:52:ed:95:66:e0:61:c2:71:9a: 12:28:e9:c5:73:e7:04:e2:d3:98:d0:83:d4:71:a7:d3:80:9b: 47:95:97:53:45:83:75:af:c4:4d:04:45:5b:b4:6c:39:df:00: bb:f8:0b:07:9b:3f:c1:60:68:18:88:61:24:f8:69:7c:7d:61: c3:19:64:52:3e:29:30:4b:2d:cf:ea:0c:12:60:82:48:92:f0: 53:e7:62:50:15:30:51:62:55:df:63:be:40:62:24:ce:37:20: a0:b6:ad:7b:d7:38:2b:c5:be:83:0c:c8:54:5e:d5:84:0e:53: 20:cc:ec:40:cd:87:a4:af:b4:3a:25:2c:a6:92:72:fc:3b:72: 73:4d:0f:8f:70:0f:ce:62:e2:7d:de:79:56:66:c9:c0:4d:9a: 90:b0:38:ee:31:9c:d5:22:29:99:1b:a2:09:8a:34:af:e5:a7: 58:99:6f:42:cf:7a:8b:e8:6b:29:9d:75:07:fd:14:7b:07:c1: 02:57:e0:18 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x+FwDeQJqvn1sCruzOQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNzcxZGQ3ZGVhMjJlMzVmZGFmMTliNTFiODM5ZjQzNzIx MjcwYmEwHhcNMjYwMTAxMTgxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzRhZjU5Mjc5MzZmNDBkNmQ4NDkwNjRiZmJkM2ZiNjNlNDVlN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uVSIutQ7+8iYX4d+jyss9hk+mNm d/Fyw3SQtbvCV7zXrGHdz9s+Nux5g8m8XxrF9Kg0SpJC0U2JR8XPCzV3L7+2olqS +c4WUJrGWTH4PXt63Gr35eLBtgKaJ3GSKxCdeHemVclKwReiF08YxvzwkiUatQzE EgFf4O81M+J4XqhFlovtNIBo1zO8dq9cj8s2dxYrCbdEKcys65NSfeP2gHCerDLv o9TAJKVN1sXYO05Ps7rSmfEk19qmodlTUXAIX65FWGGvRzu3beZXdSt11No7YG1Z y3eyGLRIi5ZAU/6V0ZCRZM0+ACo6C8ib92mVjw6cpfB/URatV2fMVoObCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGxK9ZJ5NvQNbYSQZL+9P7Y+Ref+MB8GA1UdIwQY MBaAFBB3Hdfeoi41/a8ZtRuDn0NyEnC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGIt ZGE4NTFhNzE1ZmE0LzEvYkVyMWtuazI5QTF0aEpCa3Y3MF90ajVGNV80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83NTE0OGEtZTQwZS00MDlmLThhMGItZGE4NTFhNzE1ZmE0 LzEvRUhjZDE5NmlMalg5cnhtMUc0T2ZRM0lTY0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1JKEMA0G CSqGSIb3DQEBCwUAA4IBAQAaWeCSnGqalTMlohpDVpPqt/0EeNTyEPz7Isglcynr d9jJhFAW+kbzYjGyan5uPdma/ROGpW3rnSN+OB2URn5S7ZVm4GHCcZoSKOnFc+cE 4tOY0IPUcafTgJtHlZdTRYN1r8RNBEVbtGw53wC7+AsHmz/BYGgYiGEk+Gl8fWHD GWRSPikwSy3P6gwSYIJIkvBT52JQFTBRYlXfY75AYiTONyCgtq171zgrxb6DDMhU XtWEDlMgzOxAzYekr7Q6JSymknL8O3JzTQ+PcA/OYuJ93nlWZsnATZqQsDjuMZzV IimZG6IJijSv5adYmW9Cz3qL6GspnXUH/RR7B8ECV+AY -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:50 2026 by rpki-client