This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/BsDV5gEChvqJlOEUL1parquidSQ.roa File: BsDV5gEChvqJlOEUL1parquidSQ.roa (raw, json) Hash identifier: 66XQpURFVhssGT5jkMQej1bzbdrps7y8gPjFudVSOts= Subject key identifier: 06:C0:D5:E6:01:02:86:FA:89:94:E1:14:2F:5A:5A:AE:AB:A2:75:24 Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a Certificate serial: 019B7910BBABFFE3F7172BAF2652A9C06422 Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/BsDV5gEChvqJlOEUL1parquidSQ.roa Signing time: Thu 01 Jan 2026 10:18:18 +0000 ROA not before: Thu 01 Jan 2026 10:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198149 IP address blocks: 77.246.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:bb:ab:ff:e3:f7:17:2b:af:26:52:a9:c0:64:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a Validity Not Before: Jan 1 10:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06c0d5e6010286fa8994e1142f5a5aaeaba27524 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e3:55:2d:7b:70:4b:a6:a3:72:50:cd:dc:b3: ee:8d:c7:89:ee:2c:21:74:9a:fa:cc:65:cb:05:c1: 92:16:bb:fe:8c:6d:a4:8b:67:46:ee:8a:a0:b5:5e: 3b:4d:5f:b0:78:db:2b:a1:08:49:d1:68:bd:d0:60: 90:16:fa:c1:78:20:de:f2:63:1c:51:10:58:d0:86: da:55:5f:b3:3d:65:63:5e:5d:57:f2:14:bd:2f:ab: 23:ac:e9:a0:e0:7d:86:3b:e6:bf:59:1a:b4:35:9c: d5:8e:2b:6d:1e:9a:31:38:32:f5:56:3b:4d:33:7a: 1b:8f:4d:61:92:7a:5a:6c:7d:49:08:73:e1:e9:2e: 4d:64:f1:f0:2f:4e:db:8f:3c:0a:ec:87:a1:7a:46: 15:0c:f6:fd:f5:03:eb:ea:d5:a0:e5:f1:16:bd:75: 27:4e:d2:b9:d6:0e:2e:35:2b:b7:48:5c:4a:ec:e0: 7a:55:66:1a:48:9f:f9:ae:42:da:5b:9f:f2:a8:6f: f0:83:11:39:39:c0:b3:3e:72:e4:8b:7d:fb:2e:15: 77:fd:09:7e:97:41:a8:9e:fe:36:a6:e9:7e:9d:98: 19:16:51:e0:81:bb:d0:a3:fd:07:f3:11:7a:47:db: 77:18:10:27:af:0b:13:e5:a7:c4:2a:9a:41:82:14: 73:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C0:D5:E6:01:02:86:FA:89:94:E1:14:2F:5A:5A:AE:AB:A2:75:24 X509v3 Authority Key Identifier: keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/BsDV5gEChvqJlOEUL1parquidSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.246.177.0/24 Signature Algorithm: sha256WithRSAEncryption bc:ae:55:27:ab:29:80:80:d9:65:3a:df:20:19:ac:ed:de:c2: 35:be:8c:88:68:91:97:40:57:9e:2a:0b:7b:e1:8c:81:72:b0: b3:1e:22:c1:f8:d9:a0:95:d8:90:7c:6b:9f:d7:44:53:91:ee: 1d:a3:54:b0:88:98:30:f1:00:ee:2b:80:45:fc:37:77:b6:2f: a8:f2:03:92:f2:a8:20:b1:7d:02:26:2e:5d:b7:96:d1:56:bb: 33:27:7a:4d:1c:78:63:5c:9e:0c:e4:19:e4:03:89:ec:d4:e6: 6f:a4:06:e7:17:02:3a:4e:2c:b0:e9:35:da:2f:86:a1:72:ec: 4b:87:3e:90:3c:3d:aa:92:c1:ef:52:74:fa:f1:20:2a:e3:a3: 25:a2:3a:97:a1:b1:49:21:0f:f4:86:e7:5d:64:7b:24:96:7b: d6:6d:36:6d:0e:1a:ad:45:f3:04:53:12:42:0b:16:f3:e5:a5: 2a:5b:6b:2e:a6:2d:2d:7d:45:c0:13:41:58:56:b9:03:15:d7: 1e:01:7c:b7:d5:b3:01:4f:2a:b4:93:aa:44:36:32:a1:ac:22: f5:ff:04:9b:76:d5:e8:e3:93:12:9f:09:05:d3:3a:e9:d2:24: d4:a1:68:61:30:ee:9b:47:7b:11:68:8d:f4:e8:d1:2a:73:34: 96:e9:7e:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ELur/+P3FyuvJlKpwGQiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MDBiMjA2MDYzMTQ4NThhN2IzZjJhOTc1ZThlOWQ5MTll Yzc1M2EwHhcNMjYwMTAxMTAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmMwZDVlNjAxMDI4NmZhODk5NGUxMTQyZjVhNWFhZWFiYTI3NTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+NVLXtwS6ajclDN3LPujceJ7iwh dJr6zGXLBcGSFrv+jG2ki2dG7oqgtV47TV+weNsroQhJ0Wi90GCQFvrBeCDe8mMc URBY0IbaVV+zPWVjXl1X8hS9L6sjrOmg4H2GO+a/WRq0NZzVjittHpoxODL1VjtN M3obj01hknpabH1JCHPh6S5NZPHwL07bjzwK7IehekYVDPb99QPr6tWg5fEWvXUn TtK51g4uNSu3SFxK7OB6VWYaSJ/5rkLaW5/yqG/wgxE5OcCzPnLki337LhV3/Ql+ l0Gonv42pul+nZgZFlHggbvQo/0H8xF6R9t3GBAnrwsT5afEKppBghRzNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAbA1eYBAob6iZThFC9aWq6ronUkMB8GA1UdIwQY MBaAFCQAsgYGMUhYp7PyqXXo6dkZ7HU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTkt OWM1ZTFkZWIyYzMzLzEvQnNEVjVnRUNodnFKbE9FVUwxcGFycXVpZFNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9kYmQ5NTEtMjU5Yi00NzU5LWE1MTktOWM1ZTFkZWIyYzMz LzEvSkFDeUJnWXhTRmluc19LcGRlanAyUm5zZFRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfaxMA0G CSqGSIb3DQEBCwUAA4IBAQC8rlUnqymAgNllOt8gGazt3sI1voyIaJGXQFeeKgt7 4YyBcrCzHiLB+NmgldiQfGuf10RTke4do1SwiJgw8QDuK4BF/Dd3ti+o8gOS8qgg sX0CJi5dt5bRVrszJ3pNHHhjXJ4M5BnkA4ns1OZvpAbnFwI6Tiyw6TXaL4ahcuxL hz6QPD2qksHvUnT68SAq46MlojqXobFJIQ/0huddZHsklnvWbTZtDhqtRfMEUxJC Cxbz5aUqW2supi0tfUXAE0FYVrkDFdceAXy31bMBTyq0k6pENjKhrCL1/wSbdtXo 45MSnwkF0zrp0iTUoWhhMO6bR3sRaI306NEqczSW6X4O -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:34 2026 by rpki-client