This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/kV_BrjVm5ak2BohajWeFXkU5WnY.roa File: kV_BrjVm5ak2BohajWeFXkU5WnY.roa (raw, json) Hash identifier: gf0jyat4SEAG7hpeZ/XK4zeXtnW9UimqB92MtzK9bjk= Subject key identifier: 91:5F:C1:AE:35:66:E5:A9:36:06:88:5A:8D:67:85:5E:45:39:5A:76 Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Certificate serial: 019B79ED497C6FA71FF68C10DC4DFC5DBD99 Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/kV_BrjVm5ak2BohajWeFXkU5WnY.roa Signing time: Thu 01 Jan 2026 14:19:12 +0000 ROA not before: Thu 01 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213114 IP address blocks: 185.69.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:49:7c:6f:a7:1f:f6:8c:10:dc:4d:fc:5d:bd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13 Validity Not Before: Jan 1 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=915fc1ae3566e5a93606885a8d67855e45395a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:a9:27:c8:97:71:6b:34:2e:8d:ff:41:2e: 6d:22:0f:8e:d6:d6:af:57:d3:4f:50:10:c1:fc:18: a6:51:0b:f3:37:1c:80:3d:22:7e:a2:2a:a2:e8:c9: 99:a7:b0:74:2a:5f:ee:27:48:eb:ab:71:49:12:77: 70:a1:c3:e7:81:09:02:cf:d6:6e:df:a5:bd:ac:2c: e2:31:e0:fa:51:a7:f6:3e:9c:3b:9c:bf:18:58:72: 14:6e:de:13:b5:bb:e8:9b:6e:4d:c7:e3:dd:97:69: 4a:ac:ce:14:8e:7b:fb:ac:fa:9a:cb:52:88:8e:61: dd:6f:92:68:08:81:79:e0:53:64:d7:42:bb:33:28: 4d:75:94:a0:1e:a0:ba:63:d4:4b:d5:fc:cb:c2:d8: d7:18:0f:64:77:eb:86:be:67:78:5c:7d:6e:4e:16: 69:06:9d:60:1f:49:8f:f0:0d:d3:cf:8c:22:9c:59: 72:44:5f:03:31:00:a7:ac:61:5a:ee:b6:11:9d:03: a7:32:fc:21:29:f4:a7:50:71:a0:94:3e:63:65:02: c2:ad:db:69:ec:37:aa:85:3a:ae:ac:8b:42:90:11: fa:be:69:a1:f4:4c:de:b7:5c:3e:a0:f5:6f:85:8c: 21:e3:7c:0d:7a:d9:fc:96:01:6d:f6:f2:21:62:7e: c0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:5F:C1:AE:35:66:E5:A9:36:06:88:5A:8D:67:85:5E:45:39:5A:76 X509v3 Authority Key Identifier: keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/kV_BrjVm5ak2BohajWeFXkU5WnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.69.222.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:87:2c:0d:f5:54:3e:22:f9:91:13:25:23:85:07:4b:32:af: 20:59:06:ae:6c:22:d4:34:9d:80:e2:0f:35:82:f7:75:0e:50: 86:5c:45:30:70:df:f2:50:1a:5c:e9:f4:ec:87:41:fd:bd:c9: 06:e7:69:8e:77:7e:4e:2d:e0:25:f8:63:7d:d0:0e:b4:98:f0: 8d:f8:f3:2f:30:f6:54:b4:16:36:d0:27:bb:b2:df:93:18:92: 83:6e:66:f8:b2:6d:76:b7:95:5d:63:b2:aa:2f:05:94:a4:de: 94:94:e2:57:e4:88:7d:7e:6d:82:72:f7:79:fe:be:13:b5:c8: d4:1f:04:1c:08:a7:ad:ac:11:af:20:4d:e3:de:98:3f:5e:21: d1:bd:ed:37:57:97:94:dc:7f:67:62:46:7f:c1:26:5d:02:26: 33:df:36:f4:d5:63:42:41:a5:a6:3e:f4:67:dc:23:9a:16:f2: 7b:31:4b:1e:ac:eb:7a:c0:5c:db:0a:99:d6:62:6e:79:47:72: eb:90:51:7f:3e:4d:c1:84:10:41:0e:69:a1:d4:69:26:41:81: f1:d1:45:7d:f8:a6:79:0c:51:dc:36:0f:56:3f:fb:e7:16:72: 6f:c6:9f:cc:69:79:46:d1:bb:e9:7c:2e:6b:65:2b:b1:ce:06: ae:e6:a2:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Ul8b6cf9owQ3E38Xb2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5ZWE4OTM2ZjhlNTMwNjNiNGIzYmRmMGYzYjE1YjJhZTY2 N2VmMTMwHhcNMjYwMTAxMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTVmYzFhZTM1NjZlNWE5MzYwNjg4NWE4ZDY3ODU1ZTQ1Mzk1YTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncGpJ8iXcWs0Lo3/QS5tIg+O1tav V9NPUBDB/BimUQvzNxyAPSJ+oiqi6MmZp7B0Kl/uJ0jrq3FJEndwocPngQkCz9Zu 36W9rCziMeD6Uaf2Ppw7nL8YWHIUbt4Ttbvom25Nx+Pdl2lKrM4Ujnv7rPqay1KI jmHdb5JoCIF54FNk10K7MyhNdZSgHqC6Y9RL1fzLwtjXGA9kd+uGvmd4XH1uThZp Bp1gH0mP8A3Tz4winFlyRF8DMQCnrGFa7rYRnQOnMvwhKfSnUHGglD5jZQLCrdtp 7DeqhTqurItCkBH6vmmh9Ezet1w+oPVvhYwh43wNetn8lgFt9vIhYn7A4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJFfwa41ZuWpNgaIWo1nhV5FOVp2MB8GA1UdIwQY MBaAFLnqiTb45TBjtLO98POxWyrmZ+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEt YjI1MDk5N2ZjNzVkLzEva1ZfQnJqVm01YWsyQm9oYWpXZUZYa1U1V25ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9lYzI5ZTItMzQ0MC00MDlhLTk4NmEtYjI1MDk5N2ZjNzVk LzEvdWVxSk52amxNR08wczczdzg3RmJLdVpuN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUXeMA0G CSqGSIb3DQEBCwUAA4IBAQCahywN9VQ+IvmREyUjhQdLMq8gWQaubCLUNJ2A4g81 gvd1DlCGXEUwcN/yUBpc6fTsh0H9vckG52mOd35OLeAl+GN90A60mPCN+PMvMPZU tBY20Ce7st+TGJKDbmb4sm12t5VdY7KqLwWUpN6UlOJX5Ih9fm2Ccvd5/r4TtcjU HwQcCKetrBGvIE3j3pg/XiHRve03V5eU3H9nYkZ/wSZdAiYz3zb01WNCQaWmPvRn 3COaFvJ7MUserOt6wFzbCpnWYm55R3LrkFF/Pk3BhBBBDmmh1GkmQYHx0UV9+KZ5 DFHcNg9WP/vnFnJvxp/MaXlG0bvpfC5rZSuxzgau5qLu -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:03 2026 by rpki-client