This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa
File: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (raw, json)
Hash identifier: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=
Subject key identifier: 05:CD:43:49:EC:61:44:18:99:05:03:A0:55:00:25:4D:D9:21:5F:74
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019B7F15CD23E11A07225FF18066FFA98A55
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa
Signing time: Fri 02 Jan 2026 14:21:33 +0000
ROA not before: Fri 02 Jan 2026 14:21:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 78.40.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:cd:23:e1:1a:07:22:5f:f1:80:66:ff:a9:8a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 14:21:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05cd4349ec614418990503a05500254dd9215f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ce:23:5a:01:b4:14:6d:cc:03:05:e4:80:e1:
c1:4a:54:62:05:3d:c5:c8:a9:20:37:ab:6d:34:d1:
7b:88:fe:70:bf:5e:72:50:d6:6b:31:1b:e0:e2:a3:
9d:12:1b:bf:88:51:7f:54:f7:29:e1:df:8e:71:81:
5c:72:20:fc:cd:69:b3:5f:c5:7c:5d:7c:99:f9:5c:
82:1a:66:3e:62:51:c1:90:d1:c6:1a:0c:77:72:73:
9b:ea:9a:9a:c8:7e:72:7a:04:f5:53:8e:99:15:df:
b2:e0:b3:f3:fc:3f:cb:01:32:99:93:3f:a9:05:90:
50:78:cc:3e:07:11:9b:3e:b3:18:49:da:54:49:da:
0d:68:70:fd:a2:38:e8:49:bc:4b:9c:a1:42:a2:1d:
0e:51:60:01:d8:0d:c4:11:d0:cc:bd:73:ee:45:56:
64:ef:e3:3c:3a:f3:50:7e:da:c1:82:10:86:5e:cf:
13:2c:4c:f2:75:1e:9c:61:de:e7:80:d8:8f:df:c8:
a5:8f:1d:99:0d:36:11:8e:42:ee:69:54:12:66:dd:
97:c2:08:f2:50:e9:90:03:09:a2:b0:27:c0:05:2c:
1b:c4:ca:14:9a:53:41:44:96:64:b3:06:c9:6d:aa:
5f:b9:5f:60:97:85:9c:5d:54:1e:68:7c:e9:02:e4:
23:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CD:43:49:EC:61:44:18:99:05:03:A0:55:00:25:4D:D9:21:5F:74
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.40.209.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:a9:b5:af:15:9d:c4:cf:58:de:1b:96:62:37:23:95:56:e7:
b2:5f:42:bd:76:1a:c5:e6:fd:7c:7f:53:9b:52:79:46:33:05:
10:70:df:03:a6:bc:44:5e:1f:6c:c2:9c:7d:68:50:63:a0:b8:
65:92:3c:35:69:35:04:d3:f4:b2:dc:c5:2a:1f:6e:b0:77:ee:
d5:f5:cd:26:c8:be:4b:ce:7a:5a:af:93:48:d7:ed:22:23:b2:
aa:6d:54:08:76:d5:b7:7b:6b:a5:5a:b4:13:a5:e1:54:de:f5:
d6:6a:90:c6:d9:d3:eb:d5:3f:31:07:d5:6e:e8:df:36:7c:b4:
66:dd:a6:3b:0d:49:1a:53:77:46:4b:aa:af:55:9f:1e:14:39:
0b:ef:c2:59:35:a7:ad:63:89:cd:29:a2:d6:7c:e0:02:13:59:
87:a0:35:48:58:6a:10:d2:ff:65:fa:f9:96:1c:de:32:c2:93:
7d:19:fb:84:c6:95:cc:eb:07:99:9b:0f:ea:b4:5a:98:75:b5:
0d:cf:65:fb:86:34:7c:22:13:c6:58:47:87:25:78:ed:97:83:
cb:e6:ce:a7:51:c2:49:29:2a:93:e5:bc:f6:e9:8a:bc:75:f7:
9f:d1:9f:fd:42:4b:4a:05:d8:49:1f:86:42:8f:f4:04:16:35:
59:eb:69:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:31:11 2026 by rpki-client