This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/BUknE4dJDeD5HjGFniT3fnLAhv0.roa File: BUknE4dJDeD5HjGFniT3fnLAhv0.roa (raw, json) Hash identifier: a5CdpzT2aONtxkLGd5PfzQHnCFKmhNSZXfhV1Zd1R0w= Subject key identifier: 05:49:27:13:87:49:0D:E0:F9:1E:31:85:9E:24:F7:7E:72:C0:86:FD Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Certificate serial: 019B79EBD736A4C932B1D888E79452F8427A Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/BUknE4dJDeD5HjGFniT3fnLAhv0.roa Signing time: Thu 01 Jan 2026 14:17:37 +0000 ROA not before: Thu 01 Jan 2026 14:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8562 IP address blocks: 84.20.184.0/22 maxlen: 22 90.152.128.0/17 maxlen: 17 176.66.64.0/18 maxlen: 18 185.157.248.0/23 maxlen: 23 188.45.192.0/18 maxlen: 18 193.154.144.0/20 maxlen: 20 217.76.160.0/20 maxlen: 20 2001:890:c000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:d7:36:a4:c9:32:b1:d8:88:e7:94:52:f8:42:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725 Validity Not Before: Jan 1 14:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0549271387490de0f91e31859e24f77e72c086fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:83:92:ce:75:75:19:6b:73:35:66:84:9f: 58:c3:37:7c:cf:00:a6:63:51:97:64:c3:9a:c4:2b: a1:2b:7d:b1:10:1d:e8:f9:d1:9d:f1:a5:f3:08:a0: ef:e7:39:18:96:85:90:9a:90:80:c9:4f:9c:d7:74: c6:6e:1c:af:e8:cc:da:ca:77:de:16:1e:d0:ea:af: cf:cd:ca:fb:a5:ad:e4:e4:eb:46:ed:7f:b8:d2:c9: 3a:9c:1f:5a:98:f6:0b:b3:44:66:d8:7a:16:38:bb: ab:86:88:b4:a3:f1:44:a7:fb:0b:b1:e9:e2:5e:ed: dd:11:10:52:72:3f:80:f1:2d:78:a5:2e:96:38:07: fa:c9:d1:3a:37:20:db:90:80:24:bb:17:49:e4:ef: 59:9b:cd:29:13:a2:77:e5:10:12:f1:ba:b6:67:50: 1a:37:1a:79:c3:4e:ca:8b:67:19:48:12:41:ab:4b: ff:d5:bb:b7:1c:4b:25:57:9e:04:66:a1:b1:dc:b4: 8c:f9:2f:28:6b:76:fe:3c:62:5a:87:47:15:3b:f5: 9f:7e:5f:78:73:3a:4b:c9:27:94:0c:70:e3:65:7d: 23:92:6e:97:67:2e:52:c3:b8:77:5b:6f:8e:d4:c0: e1:27:fd:fa:2c:2f:d2:00:05:69:1a:d9:6f:74:26: 4b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:49:27:13:87:49:0D:E0:F9:1E:31:85:9E:24:F7:7E:72:C0:86:FD X509v3 Authority Key Identifier: keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/BUknE4dJDeD5HjGFniT3fnLAhv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.20.184.0/22 90.152.128.0/17 176.66.64.0/18 185.157.248.0/23 188.45.192.0/18 193.154.144.0/20 217.76.160.0/20 IPv6: 2001:890:c000::/34 Signature Algorithm: sha256WithRSAEncryption 52:0b:63:a5:fc:f2:cf:80:e7:3d:bc:1f:8a:24:f3:5b:fc:f9: 6d:41:fa:0a:be:6a:3c:d4:34:b2:78:fe:72:70:d8:70:f7:10: df:d6:15:87:13:55:d4:14:1d:5e:8f:90:df:2b:d3:f4:eb:5d: 88:45:70:64:87:6d:51:8f:e0:ca:e8:72:df:d4:72:7c:48:3e: f3:f0:17:05:ab:3f:e6:dd:67:f0:5b:fd:b4:5f:b7:71:3a:8d: ea:af:d9:39:35:8d:35:d1:cb:82:08:2d:31:47:c7:e6:af:f4: 13:fc:c0:c3:65:1e:68:37:26:d4:c8:f7:16:c9:28:a4:4c:08: 96:f0:da:e0:9c:3b:2a:8a:ec:d3:bd:67:55:f6:db:a9:a2:53: fb:de:2e:c2:53:05:53:0e:38:8f:96:5e:c5:f9:13:f6:72:77: 3c:69:cb:c4:52:e5:cd:bc:b4:51:64:93:73:bd:47:e6:d7:d5: 37:bf:c7:4e:35:88:99:bd:9f:54:d9:98:5d:4e:26:ee:ac:55: ce:2a:38:c8:b8:ab:ac:c5:c6:8c:36:d1:e7:86:ad:6f:bd:29: 6f:13:da:20:a8:3d:80:f1:4f:04:34:f2:30:f7:75:95:e7:d4: 69:50:0b:d3:f5:bc:34:1a:e2:52:01:23:ee:3c:58:66:46:10: 9b:c4:9a:06 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt569c2pMkysdiI55RS+EJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4 NzE3MjUwHhcNMjYwMTAxMTQxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTQ5MjcxMzg3NDkwZGUwZjkxZTMxODU5ZTI0Zjc3ZTcyYzA4NmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pyDks51dRlrczVmhJ9Ywzd8zwCm Y1GXZMOaxCuhK32xEB3o+dGd8aXzCKDv5zkYloWQmpCAyU+c13TGbhyv6Mzaynfe Fh7Q6q/Pzcr7pa3k5OtG7X+40sk6nB9amPYLs0Rm2HoWOLurhoi0o/FEp/sLseni Xu3dERBScj+A8S14pS6WOAf6ydE6NyDbkIAkuxdJ5O9Zm80pE6J35RAS8bq2Z1Aa Nxp5w07Ki2cZSBJBq0v/1bu3HEslV54EZqGx3LSM+S8oa3b+PGJah0cVO/Wffl94 czpLySeUDHDjZX0jkm6XZy5Sw7h3W2+O1MDhJ/36LC/SAAVpGtlvdCZLdwIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFAVJJxOHSQ3g+R4xhZ4k935ywIb9MB8GA1UdIwQY MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt ODQ5ZDNhNmI5YzJkLzEvQlVrbkU0ZEpEZUQ1SGpHRm5pVDNmbkxBaHYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAwBAIAATAqAwQCVBS4AwQH WpiAAwQGsEJAAwQBuZ34AwQGvC3AAwQEwZqQAwQE2UygMA4EAgACMAgDBgYgAQiQ wDANBgkqhkiG9w0BAQsFAAOCAQEAUgtjpfzyz4DnPbwfiiTzW/z5bUH6Cr5qPNQ0 snj+cnDYcPcQ39YVhxNV1BQdXo+Q3yvT9OtdiEVwZIdtUY/gyuhy39RyfEg+8/AX Bas/5t1n8Fv9tF+3cTqN6q/ZOTWNNdHLgggtMUfH5q/0E/zAw2UeaDcm1Mj3Fsko pEwIlvDa4Jw7Kors071nVfbbqaJT+94uwlMFUw44j5ZexfkT9nJ3PGnLxFLlzby0 UWSTc71H5tfVN7/HTjWImb2fVNmYXU4m7qxVzio4yLirrMXGjDbR54atb70pbxPa IKg9gPFPBDTyMPd1lefUaVAL0/W8NBriUgEj7jxYZkYQm8SaBg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:40 2026 by rpki-client