This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BRgsRBX9-cbNy4seZFC6Y63Iges.roa File: BRgsRBX9-cbNy4seZFC6Y63Iges.roa (raw, json) Hash identifier: G6JZHHvfbREY7R0V9+cg7XwtpDdCCY8JULl4rGLiec0= Subject key identifier: 05:18:2C:44:15:FD:F9:C6:CD:CB:8B:1E:64:50:BA:63:AD:C8:81:EB Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019AFAFCE8E2B54EDE8494E9D9D518B8CABD Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BRgsRBX9-cbNy4seZFC6Y63Iges.roa Signing time: Sun 07 Dec 2025 22:44:29 +0000 ROA not before: Sun 07 Dec 2025 22:44:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 51722 IP address blocks: 77.92.153.0/24 maxlen: 24 78.135.73.0/24 maxlen: 24 185.17.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:54:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fa:fc:e8:e2:b5:4e:de:84:94:e9:d9:d5:18:b8:ca:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Dec 7 22:44:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=05182c4415fdf9c6cdcb8b1e6450ba63adc881eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:04:c3:b1:1f:92:33:da:ba:20:a9:92:86:7b: 4f:f4:44:7b:43:bd:de:24:e3:52:a7:c3:7a:4d:50: 19:44:7a:50:7a:aa:2c:04:a5:5b:a9:61:0f:03:7f: 42:35:79:1f:2b:c1:3f:0a:17:df:26:91:6a:48:33: 71:7e:ee:19:d1:b0:00:c1:b1:44:fa:a0:2f:0e:ca: 6a:31:e3:b6:0b:5d:4a:50:87:ef:91:87:9a:96:00: a6:10:0d:6a:d5:74:65:65:12:82:a9:0b:99:9e:1b: 99:0d:69:c1:b5:af:bc:13:24:23:9f:22:12:0f:1d: 8c:81:8c:1b:df:4a:3c:c9:0e:07:d3:6f:d8:fb:7b: 80:3f:df:36:f8:35:fa:7d:a7:4c:36:57:b1:1f:f5: d7:ef:38:f4:cd:2c:4a:14:fe:61:57:1e:f8:8a:d8: 06:20:d9:ec:37:e3:5f:a5:e5:8c:0f:d2:0f:4d:75: fc:d0:00:5a:d9:7f:69:00:2e:02:94:58:84:44:0f: f7:1f:4a:d0:41:58:23:b3:df:e0:e6:85:5d:a8:3c: 5c:61:d2:8e:5a:67:68:ab:7e:cd:fd:94:d8:f6:fa: f1:a0:13:db:35:94:8b:c1:b4:87:e7:4e:8f:90:29: ed:83:a2:9e:58:ae:8a:2b:3f:36:53:1d:92:92:ff: c9:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:18:2C:44:15:FD:F9:C6:CD:CB:8B:1E:64:50:BA:63:AD:C8:81:EB X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/BRgsRBX9-cbNy4seZFC6Y63Iges.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.92.153.0/24 78.135.73.0/24 185.17.136.0/24 Signature Algorithm: sha256WithRSAEncryption 44:68:c0:95:24:a1:57:65:15:b4:3f:a1:ff:04:f1:58:f0:c8: fb:11:2b:6b:c3:b5:d3:f4:97:a1:9e:95:53:91:94:00:54:80: 16:ed:3d:7a:7d:b4:58:64:94:17:b8:f5:23:31:b6:f2:2f:62: 48:18:5a:2d:03:e7:36:1f:30:2a:bf:50:ae:dc:f9:38:1e:5c: 15:5c:d8:1d:5e:8d:60:eb:09:2d:7f:3c:6f:fc:df:9b:aa:5d: 7a:c1:e2:df:9e:d0:eb:e0:95:ee:df:32:ac:82:3e:0b:fe:a8: d9:c7:d0:e4:7c:45:e5:77:6b:ca:1c:89:47:e1:8c:0c:07:2a: d9:35:c5:fe:9f:1b:68:0d:c9:80:1a:fe:44:28:05:83:20:1b: 4b:f6:4c:9a:87:45:58:88:8f:be:e1:31:02:4f:fe:9a:47:a2: 19:8f:dc:9b:67:21:b2:5f:f8:b8:5d:e4:ba:b5:fa:03:4f:3c: 48:ed:cf:9b:98:c6:a1:6a:6a:48:2c:55:54:e8:9a:c8:5c:cb: d6:57:7e:9b:32:c5:d8:a6:79:de:a1:c2:7f:07:34:74:cf:38: e7:e3:10:76:31:c1:59:68:6e:1d:0a:6b:c3:d3:6d:a6:e8:a7: f4:b5:2e:90:1e:b7:6e:f1:69:85:de:82:c4:cb:f1:8d:90:80: ed:ee:af:95 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZr6/OjitU7ehJTp2dUYuMq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMjA3MjI0NDI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTE4MmM0NDE1ZmRmOWM2Y2RjYjhiMWU2NDUwYmE2M2FkYzg4MWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjATDsR+SM9q6IKmShntP9ER7Q73e JONSp8N6TVAZRHpQeqosBKVbqWEPA39CNXkfK8E/ChffJpFqSDNxfu4Z0bAAwbFE +qAvDspqMeO2C11KUIfvkYealgCmEA1q1XRlZRKCqQuZnhuZDWnBta+8EyQjnyIS Dx2MgYwb30o8yQ4H02/Y+3uAP982+DX6fadMNlexH/XX7zj0zSxKFP5hVx74itgG INnsN+NfpeWMD9IPTXX80ABa2X9pAC4ClFiERA/3H0rQQVgjs9/g5oVdqDxcYdKO Wmdoq37N/ZTY9vrxoBPbNZSLwbSH506PkCntg6KeWK6KKz82Ux2Skv/JGwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAUYLEQV/fnGzcuLHmRQumOtyIHrMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvQlJnc1JCWDktY2JOeTRzZVpGQzZZNjNJZ2VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVyZAwQA TodJAwQAuRGIMA0GCSqGSIb3DQEBCwUAA4IBAQBEaMCVJKFXZRW0P6H/BPFY8Mj7 EStrw7XT9JehnpVTkZQAVIAW7T16fbRYZJQXuPUjMbbyL2JIGFotA+c2HzAqv1Cu 3Pk4HlwVXNgdXo1g6wktfzxv/N+bql16weLfntDr4JXu3zKsgj4L/qjZx9DkfEXl d2vKHIlH4YwMByrZNcX+nxtoDcmAGv5EKAWDIBtL9kyah0VYiI++4TECT/6aR6IZ j9ybZyGyX/i4XeS6tfoDTzxI7c+bmMahampILFVU6JrIXMvWV36bMsXYpnneocJ/ BzR0zzjn4xB2McFZaG4dCmvD022m6Kf0tS6QHrdu8WmF3oLEy/GNkIDt7q+V -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:16 2025 by rpki-client