This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa File: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (raw, json) Hash identifier: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8= Subject key identifier: 04:AB:ED:0F:0F:C8:9A:1C:31:14:D2:35:7A:49:1B:35:89:14:5F:09 Certificate issuer: /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Certificate serial: 019B7EA6A8F7543365FDF7DD4F4C6DA62B00 Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa Signing time: Fri 02 Jan 2026 12:20:10 +0000 ROA not before: Fri 02 Jan 2026 12:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49289 IP address blocks: 62.100.74.0/24 maxlen: 24 62.100.75.0/24 maxlen: 24 62.100.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:a8:f7:54:33:65:fd:f7:dd:4f:4c:6d:a6:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5 Validity Not Before: Jan 2 12:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04abed0f0fc89a1c3114d2357a491b3589145f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:07:67:91:b2:c7:f4:28:bd:ed:46:db:14: 0c:41:79:ba:0b:27:e9:58:86:da:a1:66:1a:90:2e: 58:e0:9a:54:d1:00:6c:a0:e6:20:74:b7:ed:05:21: ec:1e:8f:cf:66:08:7b:1b:89:14:50:1f:d9:49:65: 68:b8:fb:ce:44:83:f2:06:83:25:ba:92:a5:1c:23: 49:91:8e:73:e4:56:15:23:97:5c:c2:c0:42:5c:54: 97:2d:c0:f3:32:a4:9b:01:73:73:35:dc:51:11:9e: 4c:70:0d:c7:e1:c8:00:f8:1f:51:5e:cd:2c:89:5b: d2:52:4d:62:9f:b6:5b:f4:f8:56:97:87:3d:89:49: f9:97:05:d4:46:c9:a2:6a:4c:c4:49:d1:b7:6a:17: 8e:8b:60:f6:99:19:b6:89:cf:3e:9f:8e:a9:d4:6b: 8b:de:84:1d:f6:7c:9e:31:61:b6:24:0d:d5:94:cc: aa:ed:e3:30:a9:66:24:e3:ad:8c:27:01:26:23:42: d7:bf:fd:ca:3d:cf:80:49:d2:d9:6a:50:0d:64:ac: a3:93:8d:a5:fd:b6:89:cc:59:f7:c0:7a:0f:bc:9f: 66:c6:ae:81:20:a9:a3:21:e8:c9:16:57:0a:67:f9: 9c:f2:bc:f1:b6:d6:d5:d1:75:db:23:78:97:9c:a5: db:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:AB:ED:0F:0F:C8:9A:1C:31:14:D2:35:7A:49:1B:35:89:14:5F:09 X509v3 Authority Key Identifier: keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.100.74.0/23 62.100.81.0/24 Signature Algorithm: sha256WithRSAEncryption 68:5c:6c:55:cf:63:e8:13:57:49:e6:fa:41:6e:b1:d7:d6:2f: ca:28:c2:1b:4c:fb:59:20:34:d2:08:28:53:82:55:ca:ff:b5: 86:c9:34:27:2d:3a:42:33:a9:11:a3:91:8d:5c:0d:1f:93:39: 32:d4:83:ee:bf:52:5c:aa:1f:fc:7a:a0:93:60:7f:39:6b:1f: 3a:2b:4b:76:40:a0:4d:11:91:ff:aa:a4:bf:53:40:06:57:82: 9d:2d:59:0f:7a:36:35:c9:bd:e8:c4:8f:31:7c:60:78:5d:c1: 7b:f2:71:83:25:ba:e8:41:34:18:b5:5c:9c:b3:66:f0:84:0f: 34:31:b5:21:f2:c4:72:68:09:8e:61:46:96:b5:5e:3e:f0:08: 34:75:64:17:ac:a1:f3:3f:2d:2b:be:6a:f1:04:a3:94:11:42: 48:5b:58:1b:9e:ba:1e:ba:c6:4c:e0:73:bb:19:b5:40:8c:d6: d8:2b:cd:74:2b:0b:d3:14:cf:5d:1b:1e:5b:03:a6:8c:3a:18: 43:96:34:00:6d:a6:d0:6a:9f:da:94:90:da:2e:7a:3e:b6:30: 76:f1:af:16:ee:1c:ca:6b:8f:11:f5:32:d7:6a:80:47:e7:b2: a7:ae:84:7f:c3:1e:46:e3:b9:c2:a8:c4:76:36:c8:ad:92:5a: f0:90:11:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pqj3VDNl/ffdT0xtpisAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmYzQ5MjdhYjE5NGFlMTIzN2ZkZTJkM2JlZjY5MDM4ODkz ZjBkYzUwHhcNMjYwMTAyMTIyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGFiZWQwZjBmYzg5YTFjMzExNGQyMzU3YTQ5MWIzNTg5MTQ1ZjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucUHZ5Gyx/Qove1G2xQMQXm6Cyfp WIbaoWYakC5Y4JpU0QBsoOYgdLftBSHsHo/PZgh7G4kUUB/ZSWVouPvORIPyBoMl upKlHCNJkY5z5FYVI5dcwsBCXFSXLcDzMqSbAXNzNdxREZ5McA3H4cgA+B9RXs0s iVvSUk1in7Zb9PhWl4c9iUn5lwXURsmiakzESdG3aheOi2D2mRm2ic8+n46p1GuL 3oQd9nyeMWG2JA3VlMyq7eMwqWYk462MJwEmI0LXv/3KPc+ASdLZalANZKyjk42l /baJzFn3wHoPvJ9mxq6BIKmjIejJFlcKZ/mc8rzxttbV0XXbI3iXnKXbPwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFASr7Q8PyJocMRTSNXpJGzWJFF8JMB8GA1UdIwQY MBaAFB/EknqxlK4SN/3i0772kDiJPw3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODIt OGI4YTAxYmQ3NDE0LzEvQkt2dER3X0ltaHd4Rk5JMWVra2JOWWtVWHdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85NDNkNWQtNTYwYy00MzE0LWFmODItOGI4YTAxYmQ3NDE0 LzEvSDhTU2VyR1VyaEkzX2VMVHZ2YVFPSWtfRGNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBPmRKAwQA PmRRMA0GCSqGSIb3DQEBCwUAA4IBAQBoXGxVz2PoE1dJ5vpBbrHX1i/KKMIbTPtZ IDTSCChTglXK/7WGyTQnLTpCM6kRo5GNXA0fkzky1IPuv1Jcqh/8eqCTYH85ax86 K0t2QKBNEZH/qqS/U0AGV4KdLVkPejY1yb3oxI8xfGB4XcF78nGDJbroQTQYtVyc s2bwhA80MbUh8sRyaAmOYUaWtV4+8Ag0dWQXrKHzPy0rvmrxBKOUEUJIW1gbnroe usZM4HO7GbVAjNbYK810KwvTFM9dGx5bA6aMOhhDljQAbabQap/alJDaLno+tjB2 8a8W7hzKa48R9TLXaoBH57KnroR/wx5G47nCqMR2NsitklrwkBF1 -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:02 2026 by rpki-client