This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/BfkIMDedHvkhA2THdLsjdvt92Lg.roa File: BfkIMDedHvkhA2THdLsjdvt92Lg.roa (raw, json) Hash identifier: ltzWWyb9KbJKCS0qvZNQB+aDHpJjbdvCT6eRcpViW3Y= Subject key identifier: 05:F9:08:30:37:9D:1E:F9:21:03:64:C7:74:BB:23:76:FB:7D:D8:B8 Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e Certificate serial: 019B775876A2936EF724EB59070EEDD92C35 Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/BfkIMDedHvkhA2THdLsjdvt92Lg.roa Signing time: Thu 01 Jan 2026 02:17:24 +0000 ROA not before: Thu 01 Jan 2026 02:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51487 IP address blocks: 185.160.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:76:a2:93:6e:f7:24:eb:59:07:0e:ed:d9:2c:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e Validity Not Before: Jan 1 02:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05f90830379d1ef9210364c774bb2376fb7dd8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:37:f2:a8:79:40:d6:b0:ad:6f:04:4b:9b:a4: 10:bc:ec:3a:6b:76:fc:53:62:e7:6f:ce:bf:cc:71: db:ea:61:42:a1:c8:fe:7d:ec:b5:a5:70:21:1d:b1: 0d:48:79:ee:9a:da:8c:48:31:cd:e1:56:91:74:c4: df:79:12:2a:08:15:06:9b:a2:cd:af:41:40:80:fd: bc:cf:5c:41:e0:cf:3e:d3:17:9e:ef:5e:ff:be:0c: c9:b5:1e:b3:09:e8:56:3d:f6:ab:72:bd:be:fc:01: c3:e8:5e:c1:8b:7b:8c:3c:c2:b0:6c:be:fa:6d:64: 99:e7:f8:96:f5:bf:f2:8e:fc:36:87:16:0a:a7:44: 4e:55:bd:c6:24:f3:b7:86:8d:f8:98:09:0a:9e:aa: c9:80:c7:fc:ff:ba:dd:72:8d:b4:33:ad:c6:32:a9: 65:43:5a:bd:f3:8e:0a:ea:c0:cb:80:bf:3b:41:e0: 3a:bd:9c:0b:5b:58:b1:63:af:5a:2c:dd:c8:30:ee: c6:26:bd:64:c2:12:c7:2a:73:53:7d:10:a9:16:e0: b8:55:cb:4f:b8:3c:70:d6:d1:cf:61:71:67:b5:9b: cd:a6:9a:fe:44:25:b4:1f:25:8d:82:28:35:ea:11: 3f:22:a2:e1:e6:0c:f8:05:e6:1e:0e:66:0a:5d:c0: 3c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F9:08:30:37:9D:1E:F9:21:03:64:C7:74:BB:23:76:FB:7D:D8:B8 X509v3 Authority Key Identifier: keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/BfkIMDedHvkhA2THdLsjdvt92Lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.154.0/24 Signature Algorithm: sha256WithRSAEncryption da:43:6d:b1:da:25:a0:58:dc:9d:8f:18:71:c9:2c:a3:ac:39: 12:16:42:10:a8:94:95:7d:56:3d:6e:21:c5:e0:49:01:86:21: 1c:33:27:04:d9:1d:41:38:5a:b5:cd:db:cf:97:90:c0:22:fe: b1:45:7c:be:0b:e0:d1:26:e6:f1:11:c8:89:d1:1f:8e:77:8c: 14:10:ef:2b:0d:b3:cd:fa:16:13:98:0f:83:83:d6:96:a7:b7: 7c:56:fb:73:fa:76:aa:82:65:28:39:01:3a:30:e9:c6:04:3d: c0:f9:5e:19:ac:21:17:92:32:47:c1:c0:da:48:55:a7:fa:22: 21:37:61:3b:56:62:a0:ef:d0:2d:5a:25:f4:d8:96:e5:2b:f8: 03:56:c5:d7:38:20:99:53:d4:f3:48:f7:10:e6:60:80:06:66: ec:d3:50:92:0b:10:26:b4:a2:3a:a5:46:4e:ea:76:75:92:8e: c1:7f:31:f7:e5:72:d3:1a:aa:c9:19:02:be:70:b3:ef:51:e4: c6:c8:83:7d:d9:04:f1:b9:14:98:55:6c:49:85:90:cc:c4:40: 20:74:39:c0:7d:6c:47:e5:46:f8:0f:69:93:34:24:9d:67:46: ab:8f:b8:a7:fe:55:e2:40:30:76:0a:bb:63:6f:26:61:52:6f: 19:96:1e:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WHaik273JOtZBw7t2Sw1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxODFkMGM0MDk1MWE0ZjkwMGU0ZDlkZDljMjBlNDg1NjM1 MDkyMGUwHhcNMjYwMTAxMDIxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWY5MDgzMDM3OWQxZWY5MjEwMzY0Yzc3NGJiMjM3NmZiN2RkOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDfyqHlA1rCtbwRLm6QQvOw6a3b8 U2Lnb86/zHHb6mFCocj+fey1pXAhHbENSHnumtqMSDHN4VaRdMTfeRIqCBUGm6LN r0FAgP28z1xB4M8+0xee717/vgzJtR6zCehWPfarcr2+/AHD6F7Bi3uMPMKwbL76 bWSZ5/iW9b/yjvw2hxYKp0ROVb3GJPO3ho34mAkKnqrJgMf8/7rdco20M63GMqll Q1q9844K6sDLgL87QeA6vZwLW1ixY69aLN3IMO7GJr1kwhLHKnNTfRCpFuC4VctP uDxw1tHPYXFntZvNppr+RCW0HyWNgig16hE/IqLh5gz4BeYeDmYKXcA8+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAX5CDA3nR75IQNkx3S7I3b7fdi4MB8GA1UdIwQY MBaAFNGB0MQJUaT5AOTZ3Zwg5IVjUJIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEt Mzg4YjgxYzBjOTBjLzEvQmZrSU1EZWRIdmtoQTJUSGRMc2pkdnQ5MkxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEtMzg4YjgxYzBjOTBj LzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuaCaMA0G CSqGSIb3DQEBCwUAA4IBAQDaQ22x2iWgWNydjxhxySyjrDkSFkIQqJSVfVY9biHF 4EkBhiEcMycE2R1BOFq1zdvPl5DAIv6xRXy+C+DRJubxEciJ0R+Od4wUEO8rDbPN +hYTmA+Dg9aWp7d8Vvtz+naqgmUoOQE6MOnGBD3A+V4ZrCEXkjJHwcDaSFWn+iIh N2E7VmKg79AtWiX02JblK/gDVsXXOCCZU9TzSPcQ5mCABmbs01CSCxAmtKI6pUZO 6nZ1ko7BfzH35XLTGqrJGQK+cLPvUeTGyIN92QTxuRSYVWxJhZDMxEAgdDnAfWxH 5Ub4D2mTNCSdZ0arj7in/lXiQDB2CrtjbyZhUm8Zlh6H -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:42 2026 by rpki-client