This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/V73bm1kSNmHg-C0_nIo7CkeSIXs.roa File: V73bm1kSNmHg-C0_nIo7CkeSIXs.roa (raw, json) Hash identifier: CVQL9co2yo6FCueWNiD8EvSqpDL8q8jnyz+ynK1Hx2E= Subject key identifier: 57:BD:DB:9B:59:12:36:61:E0:F8:2D:3F:9C:8A:3B:0A:47:92:21:7B Certificate issuer: /CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Certificate serial: 019B77C71027DE5C7727A491DBF7530C0939 Authority key identifier: BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/V73bm1kSNmHg-C0_nIo7CkeSIXs.roa Signing time: Thu 01 Jan 2026 04:18:13 +0000 ROA not before: Thu 01 Jan 2026 04:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400810 IP address blocks: 185.240.134.0/23 maxlen: 23 185.240.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.mft rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:10:27:de:5c:77:27:a4:91:db:f7:53:0c:09:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbd84bc44dbda5babfc4940bccc1635e153b24b6 Validity Not Before: Jan 1 04:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=57bddb9b59123661e0f82d3f9c8a3b0a4792217b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:91:55:0a:ef:1e:ff:7f:d5:e1:ed:2c:fb: 98:89:43:98:02:1b:7c:f2:be:75:5a:04:3f:68:2e: c3:8e:91:81:8e:38:05:c2:e8:a5:17:96:31:4c:54: 1a:92:19:e2:15:f6:93:19:6b:e3:19:65:62:89:80: ad:52:ef:51:b8:53:a7:dc:e7:6f:dd:c4:08:46:09: 82:cb:85:b1:8a:eb:71:23:80:11:1d:b0:45:61:32: 93:c4:58:23:40:fc:6f:f2:b0:23:78:3e:5c:4d:e4: ed:ef:bd:35:95:6d:f4:5b:05:22:7c:81:f9:f0:e0: de:6c:86:ee:3e:36:57:3f:10:15:66:85:91:2a:57: b1:dc:7d:d8:83:c8:36:03:f9:b1:d4:0c:6e:a0:9f: 44:db:da:6d:e4:7e:a1:4a:5c:92:54:64:a4:e7:ab: 96:d7:16:82:23:ba:00:1f:b5:c9:4c:b8:cf:a0:42: 66:b5:00:c3:cc:4d:4b:46:1f:ff:2e:ba:25:45:5a: 6a:6d:9d:c6:43:6a:a8:eb:31:e1:49:35:ba:31:bf: a0:28:5d:39:7b:74:b4:e7:76:78:de:da:da:50:cf: 53:25:56:ba:19:7f:86:bb:d4:0d:92:7c:a5:12:55: 5f:46:8f:0f:0a:27:20:5b:53:60:1f:ef:18:19:2f: 78:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:BD:DB:9B:59:12:36:61:E0:F8:2D:3F:9C:8A:3B:0A:47:92:21:7B X509v3 Authority Key Identifier: keyid:BB:D8:4B:C4:4D:BD:A5:BA:BF:C4:94:0B:CC:C1:63:5E:15:3B:24:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9hLxE29pbq_xJQLzMFjXhU7JLY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/V73bm1kSNmHg-C0_nIo7CkeSIXs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/639be4-93e6-4183-ab6f-dfddb1364363/1/u9hLxE29pbq_xJQLzMFjXhU7JLY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.240.134.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:d2:62:27:6b:90:87:ad:2f:b8:5c:bf:18:ec:5e:69:91:d0: ac:b8:ec:df:9a:c4:ba:10:00:04:d1:5e:20:5f:a0:4e:34:7d: bc:0c:51:70:48:93:ae:96:e1:eb:6c:21:e2:0d:d3:8e:10:ce: b4:7c:62:b1:2c:f5:39:b7:5a:6b:29:5a:eb:ee:f7:35:2b:a8: 56:f0:3a:83:b4:b1:ce:ac:47:9c:95:b3:b3:8d:dc:02:d9:bc: f6:b5:5e:c1:5d:41:03:56:bf:17:1a:1f:45:0c:15:b7:71:fb: ac:30:d0:3b:dc:30:c3:30:83:a1:7e:d9:a6:0a:9a:6c:8a:c1: ed:cd:0a:0c:27:61:33:99:42:28:5d:0a:47:ea:e0:40:3f:72: 43:04:bd:07:1a:2a:40:f5:b9:13:97:82:79:a2:c2:65:36:52: 27:ce:82:91:14:37:88:2f:ee:ee:7e:fb:4d:15:fa:1e:92:34: d5:8c:61:47:58:b7:72:81:fe:72:45:1e:19:d9:23:85:81:3a: da:a0:77:69:f9:e4:4e:54:52:f4:b3:88:bc:57:e4:d6:f4:a9: e6:43:fa:60:15:fe:e5:58:1a:9f:62:83:53:c7:43:76:a5:27: 77:94:cf:d7:e5:9a:d5:67:f0:36:8c:22:dd:8b:f5:66:bc:1d: 44:e2:e5:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xxAn3lx3J6SR2/dTDAk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZDg0YmM0NGRiZGE1YmFiZmM0OTQwYmNjYzE2MzVlMTUz YjI0YjYwHhcNMjYwMTAxMDQxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1N2JkZGI5YjU5MTIzNjYxZTBmODJkM2Y5YzhhM2IwYTQ3OTIyMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJKRVQrvHv9/1eHtLPuYiUOYAht8 8r51WgQ/aC7DjpGBjjgFwuilF5YxTFQakhniFfaTGWvjGWViiYCtUu9RuFOn3Odv 3cQIRgmCy4WxiutxI4ARHbBFYTKTxFgjQPxv8rAjeD5cTeTt7701lW30WwUifIH5 8ODebIbuPjZXPxAVZoWRKlex3H3Yg8g2A/mx1AxuoJ9E29pt5H6hSlySVGSk56uW 1xaCI7oAH7XJTLjPoEJmtQDDzE1LRh//LrolRVpqbZ3GQ2qo6zHhSTW6Mb+gKF05 e3S053Z43traUM9TJVa6GX+Gu9QNknylElVfRo8PCicgW1NgH+8YGS94aQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFe925tZEjZh4PgtP5yKOwpHkiF7MB8GA1UdIwQY MBaAFLvYS8RNvaW6v8SUC8zBY14VOyS2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYt ZGZkZGIxMzY0MzYzLzEvVjczYm0xa1NObUhnLUMwX25JbzdDa2VTSVhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS82MzliZTQtOTNlNi00MTgzLWFiNmYtZGZkZGIxMzY0MzYz LzEvdTloTHhFMjlwYnFfeEpRTHpNRmpYaFU3SkxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufCGMA0G CSqGSIb3DQEBCwUAA4IBAQAv0mIna5CHrS+4XL8Y7F5pkdCsuOzfmsS6EAAE0V4g X6BONH28DFFwSJOuluHrbCHiDdOOEM60fGKxLPU5t1prKVrr7vc1K6hW8DqDtLHO rEeclbOzjdwC2bz2tV7BXUEDVr8XGh9FDBW3cfusMNA73DDDMIOhftmmCppsisHt zQoMJ2EzmUIoXQpH6uBAP3JDBL0HGipA9bkTl4J5osJlNlInzoKRFDeIL+7ufvtN FfoekjTVjGFHWLdygf5yRR4Z2SOFgTraoHdp+eROVFL0s4i8V+TW9KnmQ/pgFf7l WBqfYoNTx0N2pSd3lM/X5ZrVZ/A2jCLdi/VmvB1E4uWt -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:31 2026 by rpki-client