This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/BkXp8AK4gi5wS729-28eNPv2clw.roa File: BkXp8AK4gi5wS729-28eNPv2clw.roa (raw, json) Hash identifier: IGnSob0aivxnivdFv8Ee6hD4F6yznooZSCntFsvJ7T0= Subject key identifier: 06:45:E9:F0:02:B8:82:2E:70:4B:BD:BD:FB:6F:1E:34:FB:F6:72:5C Certificate issuer: /CN=331706b915bab8dac2b5547fbc87adeb61e6aede Certificate serial: 019B7EA48809A9F8AFB6AD4B12A7944201B5 Authority key identifier: 33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/BkXp8AK4gi5wS729-28eNPv2clw.roa Signing time: Fri 02 Jan 2026 12:17:50 +0000 ROA not before: Fri 02 Jan 2026 12:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206564 IP address blocks: 89.110.128.0/18 maxlen: 32 2a05:c700::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:88:09:a9:f8:af:b6:ad:4b:12:a7:94:42:01:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331706b915bab8dac2b5547fbc87adeb61e6aede Validity Not Before: Jan 2 12:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0645e9f002b8822e704bbdbdfb6f1e34fbf6725c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:71:a1:f6:42:75:0f:0e:6b:a5:18:99:54:cb: 35:9b:df:5d:83:e5:77:d6:57:2d:c7:c1:34:3f:c1: d9:8b:0a:c2:60:34:05:d9:9a:19:71:a2:ee:de:90: ba:02:90:73:6e:f3:a3:d2:2a:fe:c6:27:38:13:21: 53:59:11:4b:2f:a5:70:b7:47:6f:65:fe:94:df:82: 72:67:86:70:86:63:4d:b2:5c:1e:db:35:e2:fd:4a: 37:6f:99:ae:fc:af:1e:36:5b:b5:c9:b5:f8:44:06: 4a:cd:7f:6a:b8:d5:11:ea:6f:92:aa:91:6a:47:7f: 6e:5f:22:66:5c:a9:04:a1:8f:e7:8d:ec:49:43:f1: f6:8f:67:09:3f:4e:bf:1b:1d:ab:cc:02:3c:fa:47: fe:d7:32:6e:8e:b3:e0:df:eb:20:f8:ca:d9:ff:6a: d2:52:cd:a2:7c:dd:3d:b7:91:3f:70:3e:07:15:e3: c5:c6:07:21:74:21:03:53:32:23:82:c5:bd:88:4c: 19:35:68:39:1a:80:41:16:90:66:f0:42:9d:5f:63: 58:9e:b5:ba:7e:82:9e:40:13:17:80:f0:99:68:5e: dc:93:e1:fa:98:39:bc:bc:cd:05:0f:ae:51:b1:a6: b5:13:ca:ad:8d:43:17:66:d9:ac:da:b5:ae:8d:6a: ed:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:45:E9:F0:02:B8:82:2E:70:4B:BD:BD:FB:6F:1E:34:FB:F6:72:5C X509v3 Authority Key Identifier: keyid:33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/BkXp8AK4gi5wS729-28eNPv2clw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.110.128.0/18 IPv6: 2a05:c700::/32 Signature Algorithm: sha256WithRSAEncryption 82:43:91:05:9b:f5:a3:da:ed:1e:9b:0c:12:9b:06:97:f4:6e: 13:dc:93:f0:26:aa:14:dc:3f:48:76:84:b9:6a:20:6f:05:f1: d3:5c:7b:16:c1:05:3e:a0:96:9a:ab:8e:76:12:b8:91:02:f6: c9:bb:29:cb:3b:fb:c8:1e:d3:fe:3d:d3:b0:f2:eb:28:16:b1: f7:6b:4b:a7:72:d4:ea:b5:38:06:9b:d8:75:8a:ef:e0:31:fc: b1:a7:25:7e:0f:3b:d2:33:72:cc:e5:98:87:8c:de:6b:58:fe: 62:09:88:f7:bf:a2:c3:31:5c:5f:65:2b:6f:49:76:46:f7:fd: 3b:df:2f:e6:ad:c9:35:2a:f6:46:36:fc:73:d4:fe:50:8a:77: b6:fb:1c:74:14:59:ea:bc:9c:af:d5:a7:de:d0:8b:a1:07:72: 81:da:79:f6:64:33:be:10:b5:21:0c:b3:5b:27:de:d7:74:63: 36:69:37:08:95:1c:a1:d0:2c:85:e7:63:0f:6a:06:64:9a:27: a5:38:ac:ed:56:f6:fe:47:e6:8c:25:47:f2:34:d9:fb:17:7a: 1a:65:eb:be:ac:ed:53:8d:89:83:9c:d8:6d:2f:87:cc:0d:4c: fd:74:32:cd:da:b4:1c:2c:01:c5:26:87:a4:21:e7:2d:8c:34: 56:67:6b:b3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pIgJqfivtq1LEqeUQgG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMTcwNmI5MTViYWI4ZGFjMmI1NTQ3ZmJjODdhZGViNjFl NmFlZGUwHhcNMjYwMTAyMTIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjQ1ZTlmMDAyYjg4MjJlNzA0YmJkYmRmYjZmMWUzNGZiZjY3MjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXGh9kJ1Dw5rpRiZVMs1m99dg+V3 1lctx8E0P8HZiwrCYDQF2ZoZcaLu3pC6ApBzbvOj0ir+xic4EyFTWRFLL6Vwt0dv Zf6U34JyZ4ZwhmNNslwe2zXi/Uo3b5mu/K8eNlu1ybX4RAZKzX9quNUR6m+SqpFq R39uXyJmXKkEoY/njexJQ/H2j2cJP06/Gx2rzAI8+kf+1zJujrPg3+sg+MrZ/2rS Us2ifN09t5E/cD4HFePFxgchdCEDUzIjgsW9iEwZNWg5GoBBFpBm8EKdX2NYnrW6 foKeQBMXgPCZaF7ck+H6mDm8vM0FD65Rsaa1E8qtjUMXZtms2rWujWrtjwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAZF6fACuIIucEu9vftvHjT79nJcMB8GA1UdIwQY MBaAFDMXBrkVurjawrVUf7yHreth5q7eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXhjR3VSVzZ1TnJDdFZSX3ZJZXQ2MkhtcnQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMTJjZTctNzQxNS00YzVkLWE4OTAt ZWM5NTE0OGZkMjM2LzEvQmtYcDhBSzRnaTV3UzcyOS0yOGVOUHYyY2x3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xMTJjZTctNzQxNS00YzVkLWE4OTAtZWM5NTE0OGZkMjM2 LzEvTXhjR3VSVzZ1TnJDdFZSX3ZJZXQ2MkhtcnQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQGWW6AMA0E AgACMAcDBQAqBccAMA0GCSqGSIb3DQEBCwUAA4IBAQCCQ5EFm/Wj2u0emwwSmwaX 9G4T3JPwJqoU3D9IdoS5aiBvBfHTXHsWwQU+oJaaq452EriRAvbJuynLO/vIHtP+ PdOw8usoFrH3a0unctTqtTgGm9h1iu/gMfyxpyV+DzvSM3LM5ZiHjN5rWP5iCYj3 v6LDMVxfZStvSXZG9/073y/mrck1KvZGNvxz1P5Qine2+xx0FFnqvJyv1afe0Iuh B3KB2nn2ZDO+ELUhDLNbJ97XdGM2aTcIlRyh0CyF52MPagZkmielOKztVvb+R+aM JUfyNNn7F3oaZeu+rO1TjYmDnNhtL4fMDUz9dDLN2rQcLAHFJoekIectjDRWZ2uz -----END CERTIFICATE-----Generated at Mon Jan 26 06:56:26 2026 by rpki-client