This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/br-MdcUGAgIJZ2jokAIrGgvBgVg.roa File: br-MdcUGAgIJZ2jokAIrGgvBgVg.roa (raw, json) Hash identifier: nAJrJwXFm0eNNJbUiUMkYMOpV3Mo7gqR8CqVePMN9SA= Subject key identifier: 6E:BF:8C:75:C5:06:02:02:09:67:68:E8:90:02:2B:1A:0B:C1:81:58 Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 019B77C6ECD7247C7AFB3997111CBB8EA7C1 Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/br-MdcUGAgIJZ2jokAIrGgvBgVg.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198154 IP address blocks: 45.135.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ec:d7:24:7c:7a:fb:39:97:11:1c:bb:8e:a7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ebf8c75c5060202096768e890022b1a0bc18158 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a5:b3:13:6e:cb:39:bd:4d:b9:fe:00:84:af: 6b:fc:5d:7c:b9:2c:cf:96:eb:a7:22:72:74:52:78: 75:0d:8b:94:23:96:af:d0:9f:11:5f:1b:9c:7e:31: c7:fa:db:ff:6f:c4:78:18:13:37:2f:fb:d3:16:14: d7:4a:96:8c:47:38:f1:6a:ba:13:4d:9c:2d:96:3f: e7:15:7f:e1:3a:3b:25:78:cb:90:c0:9e:b7:53:08: 4f:ae:65:23:0b:f0:38:cd:4c:be:22:38:81:32:3c: d6:8d:f6:19:39:0e:13:2b:42:c7:dc:03:18:43:16: 9f:dd:8e:bd:83:7a:03:33:d2:66:83:2a:84:eb:68: bf:e8:84:22:7b:23:9f:e5:ae:da:52:d6:20:20:d9: cd:fc:94:1b:9c:57:d4:cd:e4:3d:fa:cf:eb:47:c7: 1e:99:12:e2:d0:51:87:78:58:1d:e1:7f:9b:52:c0: 00:fe:b6:98:97:68:6d:26:b7:e2:17:e6:cb:92:6d: 6b:92:56:b4:2e:31:13:4b:f3:3a:a6:37:cb:fa:28: 03:15:8c:53:7a:37:43:6e:b1:75:2d:03:c9:9e:3c: 6e:74:56:86:30:4a:c1:1c:55:6b:2a:33:12:a5:db: 1a:6f:aa:1a:d3:39:b2:36:32:48:20:68:be:e5:4f: df:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BF:8C:75:C5:06:02:02:09:67:68:E8:90:02:2B:1A:0B:C1:81:58 X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/br-MdcUGAgIJZ2jokAIrGgvBgVg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.195.0/24 Signature Algorithm: sha256WithRSAEncryption 93:41:40:a1:f9:af:bd:26:43:04:03:e5:f5:6e:f6:2a:20:12: e1:92:37:46:b5:81:94:a4:ff:18:21:93:52:c1:e5:3c:ab:ec: 1c:8f:19:b1:64:9d:e9:7d:5c:af:46:1c:21:fa:27:0a:c1:4b: 44:4d:2e:64:ca:cb:86:bd:19:ca:67:81:f1:93:ab:b0:cf:ca: f9:5b:ad:fd:3f:ab:2a:9f:b2:cb:46:86:36:19:7a:2c:f4:8c: 75:77:77:79:41:b2:5f:c8:7c:ed:7d:18:df:7c:da:63:b5:5c: 8c:bf:65:10:61:37:0c:bd:24:9e:41:19:3c:c0:a4:bf:2d:2b: d4:bb:5e:f9:7a:a7:a2:b2:8a:b2:04:9d:ff:2b:49:9b:7f:55: 3a:a4:ac:4a:b0:c3:91:83:fc:8e:07:92:7d:b1:02:c0:fc:b6: 30:eb:79:67:39:18:8f:db:8d:04:55:76:df:05:bd:5c:f7:03: 90:96:87:1d:6b:51:87:30:87:e9:3e:e2:a8:e6:7c:18:49:b6: bf:33:ac:fa:cb:aa:37:e8:4e:61:13:e1:06:e7:51:f5:52:fc: 3f:95:02:50:6c:49:fe:e1:55:86:75:fe:4f:2a:fb:99:c3:87: a5:7f:06:fa:9e:f9:ca:14:68:c7:2c:ce:25:8f:93:8c:1f:c2: 6d:d1:1f:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xuzXJHx6+zmXERy7jqfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWJmOGM3NWM1MDYwMjAyMDk2NzY4ZTg5MDAyMmIxYTBiYzE4MTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKWzE27LOb1Nuf4AhK9r/F18uSzP luunInJ0Unh1DYuUI5av0J8RXxucfjHH+tv/b8R4GBM3L/vTFhTXSpaMRzjxaroT TZwtlj/nFX/hOjsleMuQwJ63UwhPrmUjC/A4zUy+IjiBMjzWjfYZOQ4TK0LH3AMY Qxaf3Y69g3oDM9JmgyqE62i/6IQieyOf5a7aUtYgINnN/JQbnFfUzeQ9+s/rR8ce mRLi0FGHeFgd4X+bUsAA/raYl2htJrfiF+bLkm1rkla0LjETS/M6pjfL+igDFYxT ejdDbrF1LQPJnjxudFaGMErBHFVrKjMSpdsab6oa0zmyNjJIIGi+5U/fwQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG6/jHXFBgICCWdo6JACKxoLwYFYMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEvYnItTWRjVUdBZ0lKWjJqb2tBSXJHZ3ZCZ1ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfDMA0G CSqGSIb3DQEBCwUAA4IBAQCTQUCh+a+9JkMEA+X1bvYqIBLhkjdGtYGUpP8YIZNS weU8q+wcjxmxZJ3pfVyvRhwh+icKwUtETS5kysuGvRnKZ4Hxk6uwz8r5W639P6sq n7LLRoY2GXos9Ix1d3d5QbJfyHztfRjffNpjtVyMv2UQYTcMvSSeQRk8wKS/LSvU u175eqeisoqyBJ3/K0mbf1U6pKxKsMORg/yOB5J9sQLA/LYw63lnORiP240EVXbf Bb1c9wOQlocda1GHMIfpPuKo5nwYSba/M6z6y6o36E5hE+EG51H1Uvw/lQJQbEn+ 4VWGdf5PKvuZw4elfwb6nvnKFGjHLM4lj5OMH8Jt0R9H -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:42 2026 by rpki-client