This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BRxkRpHzupZKBzK09t9oI_abRhc.roa File: BRxkRpHzupZKBzK09t9oI_abRhc.roa (raw, json) Hash identifier: N9vrwIIDhmJb8nnxRNd2O2zOSQbnJ/7RN1QYfynOncc= Subject key identifier: 05:1C:64:46:91:F3:BA:96:4A:07:32:B4:F6:DF:68:23:F6:9B:46:17 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C77E073DF3B9CEC820884AC12EAA3E Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BRxkRpHzupZKBzK09t9oI_abRhc.roa Signing time: Thu 01 Jan 2026 04:18:41 +0000 ROA not before: Thu 01 Jan 2026 04:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209456 IP address blocks: 185.22.25.0/24 maxlen: 24 2a02:330:8::/48 maxlen: 48 2a02:330:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:7e:07:3d:f3:b9:ce:c8:20:88:4a:c1:2e:aa:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=051c644691f3ba964a0732b4f6df6823f69b4617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c1:31:8a:df:49:b3:bf:b3:37:17:63:ee:54: 9b:a2:d4:5f:df:cb:92:f8:20:cb:8d:fe:b5:3f:cf: 10:50:d8:53:ee:9e:d5:b7:5b:06:4d:2e:8c:69:4e: 23:49:4c:fe:f5:d6:c1:fd:52:5b:df:0d:a0:0c:e9: 83:87:b1:30:a7:c8:a9:31:9f:98:1f:1d:49:0f:e3: af:6b:de:fd:09:fd:2a:78:0e:e9:75:a3:6b:0f:00: 4d:83:2a:4b:d8:9c:0f:14:7d:53:e3:2a:ce:57:6c: cf:a6:d3:c7:13:0e:59:40:9c:84:c9:9b:79:a2:c4: 16:41:8f:84:d9:cd:38:20:27:7e:3c:74:dd:49:47: c6:cf:6f:11:fb:be:13:25:ef:48:94:4f:96:85:24: 3e:f8:8c:90:3a:7d:ea:de:53:80:a2:8b:8a:71:8e: 48:16:f5:af:65:71:91:da:7c:27:cb:d5:7f:35:9d: bc:d2:1a:d6:0a:85:e1:e6:10:2b:a8:3c:f2:12:9b: 68:9d:2a:89:d3:55:29:7c:81:61:95:c8:3f:05:60: 6c:b0:10:b0:e2:70:e3:71:17:ab:41:03:2d:80:41: f6:09:74:c7:c2:67:0d:63:5f:8d:63:ea:4d:f8:24: e0:fc:47:4a:ec:3a:f6:f3:76:e2:f4:4f:f4:f4:42: 7f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1C:64:46:91:F3:BA:96:4A:07:32:B4:F6:DF:68:23:F6:9B:46:17 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/BRxkRpHzupZKBzK09t9oI_abRhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.25.0/24 IPv6: 2a02:330:8::/47 Signature Algorithm: sha256WithRSAEncryption 32:ef:1e:dd:06:20:8e:14:68:5d:19:a3:6b:36:31:8e:8b:e9: dc:88:84:1d:e3:05:16:1e:af:ee:32:0b:31:ba:7b:60:0f:66: 50:f8:e6:80:99:5d:12:63:1c:ab:71:0e:af:db:eb:23:5c:92: 3b:4c:50:10:b9:95:7a:2c:fd:47:76:1d:51:77:e6:51:e9:4d: 0d:c6:6e:8a:9b:c5:a8:7f:c6:58:a8:fa:fc:da:55:3f:94:aa: a5:09:39:4a:9d:c8:44:30:eb:0f:19:9e:d3:5b:2a:67:6f:23: 86:3a:2c:bf:87:21:53:d4:b7:ac:ed:40:97:ee:3a:ba:b2:c6: 4a:28:4a:40:76:6f:30:ae:6e:d3:43:5e:76:52:d1:3a:88:52: ad:7d:a4:e0:65:12:93:9a:39:26:66:13:91:bf:96:4b:be:df: 1e:ec:b2:3c:db:14:cc:52:8e:63:33:93:ed:69:4d:f3:7d:08: 50:7c:f0:6a:4e:fa:0a:3e:c6:11:60:85:c5:12:bc:99:34:c4: 4d:37:1e:f7:ca:75:56:8a:c6:ff:96:20:b0:ad:7a:e0:fb:d3: a8:1d:28:de:ed:28:73:db:d3:22:a0:91:e3:89:18:af:fe:87: f7:96:8e:06:d7:17:68:d3:bc:7c:d5:45:52:46:52:23:06:54: 38:41:73:3a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt3x34HPfO5zsggiErBLqo+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTFjNjQ0NjkxZjNiYTk2NGEwNzMyYjRmNmRmNjgyM2Y2OWI0NjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMExit9Js7+zNxdj7lSbotRf38uS +CDLjf61P88QUNhT7p7Vt1sGTS6MaU4jSUz+9dbB/VJb3w2gDOmDh7Ewp8ipMZ+Y Hx1JD+Ova979Cf0qeA7pdaNrDwBNgypL2JwPFH1T4yrOV2zPptPHEw5ZQJyEyZt5 osQWQY+E2c04ICd+PHTdSUfGz28R+74TJe9IlE+WhSQ++IyQOn3q3lOAoouKcY5I FvWvZXGR2nwny9V/NZ280hrWCoXh5hArqDzyEptonSqJ01UpfIFhlcg/BWBssBCw 4nDjcRerQQMtgEH2CXTHwmcNY1+NY+pN+CTg/EdK7Dr283bi9E/09EJ/WwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAUcZEaR87qWSgcytPbfaCP2m0YXMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvQlJ4a1JwSHp1cFpLQnpLMDl0OW9JX2FiUmhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuRYZMA8E AgACMAkDBwEqAgMwAAgwDQYJKoZIhvcNAQELBQADggEBADLvHt0GII4UaF0Zo2s2 MY6L6dyIhB3jBRYer+4yCzG6e2APZlD45oCZXRJjHKtxDq/b6yNckjtMUBC5lXos /Ud2HVF35lHpTQ3Gboqbxah/xlio+vzaVT+UqqUJOUqdyEQw6w8ZntNbKmdvI4Y6 LL+HIVPUt6ztQJfuOrqyxkooSkB2bzCubtNDXnZS0TqIUq19pOBlEpOaOSZmE5G/ lku+3x7ssjzbFMxSjmMzk+1pTfN9CFB88GpO+go+xhFghcUSvJk0xE03HvfKdVaK xv+WILCteuD706gdKN7tKHPb0yKgkeOJGK/+h/eWjgbXF2jTvHzVRVJGUiMGVDhB czo= -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:48 2026 by rpki-client