This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/BRqvv0WLo99f8-G6ZIvnAk91o6g.roa File: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (raw, json) Hash identifier: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs= Subject key identifier: 05:1A:AF:BF:45:8B:A3:DF:5F:F3:E1:BA:64:8B:E7:02:4F:75:A3:A8 Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e Certificate serial: 019B7A5ABF00CC83D1BA5982BD001D92AD0D Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/BRqvv0WLo99f8-G6ZIvnAk91o6g.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62371 IP address blocks: 185.205.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:bf:00:cc:83:d1:ba:59:82:bd:00:1d:92:ad:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=051aafbf458ba3df5ff3e1ba648be7024f75a3a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:4e:9a:7f:35:b7:21:1e:e6:b2:14:4d:15: 6d:93:4e:f3:5f:41:41:32:1a:b4:74:66:fc:50:49: 03:f2:57:b1:e7:e6:f4:83:a7:bd:e2:b4:b7:81:f7: 10:2f:6d:ff:cd:16:92:6e:38:8e:93:b4:6c:34:5f: 24:f0:2a:45:3c:8f:45:31:38:68:b8:64:1d:24:06: 87:03:ae:9a:c7:76:47:7d:68:24:bb:3d:db:7f:3b: 2e:9d:1e:c8:35:e9:00:83:38:bb:15:29:da:92:70: e6:d4:11:d4:7f:2a:9e:fb:09:5c:8c:a3:7f:e9:70: 10:fa:ab:3d:38:7d:4d:71:78:8d:a2:4c:cc:3c:85: 3f:2a:c6:45:ff:5b:3a:d4:1b:38:0e:ea:e0:b5:87: c1:a5:93:5c:ce:98:89:d3:ee:8d:19:c7:58:d5:bb: da:d8:f3:c2:fa:f9:c3:4f:f9:0d:f9:4b:8d:46:21: 0c:3e:95:05:30:26:9b:fb:26:cd:64:56:29:65:70: f7:87:6d:3e:23:20:41:99:0b:d5:94:06:1b:82:dc: 45:32:16:21:a4:d7:11:f2:4f:6c:5a:82:f4:ee:75: 2c:b2:6f:c7:c5:3b:b8:63:63:fd:1e:e8:e0:ff:cc: b8:0a:52:6c:94:50:b7:8f:7a:3e:e8:f9:0d:75:3b: 91:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1A:AF:BF:45:8B:A3:DF:5F:F3:E1:BA:64:8B:E7:02:4F:75:A3:A8 X509v3 Authority Key Identifier: keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/BRqvv0WLo99f8-G6ZIvnAk91o6g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.205.70.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ab:ea:21:b2:ae:42:50:c2:05:0b:5a:d3:f4:a2:94:3e:e9: a7:cd:63:a0:a8:9b:b1:f4:be:21:fb:16:62:13:8f:94:eb:52: 43:d2:14:11:68:85:ad:6f:c6:a0:3c:01:b0:df:e8:09:99:d3: 6d:e4:c4:51:3a:71:3d:25:9d:04:de:1b:1d:4f:4f:a6:90:c4: da:e2:bc:6f:67:b1:a1:31:e9:00:1a:43:0c:04:6a:4f:61:b4: b9:ce:e6:ff:5a:ba:10:6d:74:35:3b:6a:30:ab:fe:a8:48:48: bb:2b:1c:3b:1f:c7:c3:a8:3f:e9:fc:39:55:75:73:ff:0c:cb: 38:bd:2f:41:0f:3f:36:2c:3c:ee:6e:d2:67:e5:89:37:8d:83: a3:11:cc:19:e4:4b:8b:a8:eb:70:b2:ce:f5:42:e4:57:ae:f6: d3:de:24:87:0d:81:6e:0a:a1:a1:c6:72:34:cf:9b:0b:41:81: c3:d8:3d:a2:a4:d5:87:c7:9a:73:10:9f:2a:f4:74:b7:df:b5: 9c:49:3d:e7:30:17:86:e6:91:87:f3:09:81:d4:ee:31:a4:09: e0:e6:03:c2:3f:89:d5:2a:c7:13:95:77:88:e5:a7:d3:01:99: d7:3b:07:5e:fd:2e:7e:8e:5b:b7:e7:53:6b:96:da:e0:dd:e9: 0e:ab:81:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wr8AzIPRulmCvQAdkq0NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZTc1MWExMWMxYTc4ODhmYTU4ZGJmYzMyYzg5NTliYzk0 NjMwM2UwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTFhYWZiZjQ1OGJhM2RmNWZmM2UxYmE2NDhiZTcwMjRmNzVhM2E4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouJOmn81tyEe5rIUTRVtk07zX0FB Mhq0dGb8UEkD8lex5+b0g6e94rS3gfcQL23/zRaSbjiOk7RsNF8k8CpFPI9FMTho uGQdJAaHA66ax3ZHfWgkuz3bfzsunR7INekAgzi7FSnaknDm1BHUfyqe+wlcjKN/ 6XAQ+qs9OH1NcXiNokzMPIU/KsZF/1s61Bs4DurgtYfBpZNczpiJ0+6NGcdY1bva 2PPC+vnDT/kN+UuNRiEMPpUFMCab+ybNZFYpZXD3h20+IyBBmQvVlAYbgtxFMhYh pNcR8k9sWoL07nUssm/HxTu4Y2P9Hujg/8y4ClJslFC3j3o+6PkNdTuRgwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAUar79Fi6PfX/PhumSL5wJPdaOoMB8GA1UdIwQY MBaAFDfnUaEcGniI+ljb/DLIlZvJRjA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTi1kUm9Sd2FlSWo2V052OE1zaVZtOGxHTUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82YjAzNDQtODIyOS00ZDI1LWI0OTgt OGNlN2M0ZmM1ZTBiLzEvQlJxdnYwV0xvOTlmOC1HNlpJdm5BazkxbzZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS82YjAzNDQtODIyOS00ZDI1LWI0OTgtOGNlN2M0ZmM1ZTBi LzEvTi1kUm9Sd2FlSWo2V052OE1zaVZtOGxHTUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuc1GMA0G CSqGSIb3DQEBCwUAA4IBAQBFq+ohsq5CUMIFC1rT9KKUPumnzWOgqJux9L4h+xZi E4+U61JD0hQRaIWtb8agPAGw3+gJmdNt5MRROnE9JZ0E3hsdT0+mkMTa4rxvZ7Gh MekAGkMMBGpPYbS5zub/WroQbXQ1O2owq/6oSEi7Kxw7H8fDqD/p/DlVdXP/DMs4 vS9BDz82LDzubtJn5Yk3jYOjEcwZ5EuLqOtwss71QuRXrvbT3iSHDYFuCqGhxnI0 z5sLQYHD2D2ipNWHx5pzEJ8q9HS337WcST3nMBeG5pGH8wmB1O4xpAng5gPCP4nV KscTlXeI5afTAZnXOwde/S5+jlu351Nrltrg3ekOq4HL -----END CERTIFICATE-----Generated at Sun Jan 25 18:07:53 2026 by rpki-client