This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/bRkSXs7HJYfGolIXlp_OUMppLHU.roa File: bRkSXs7HJYfGolIXlp_OUMppLHU.roa (raw, json) Hash identifier: O55vTlV+QjBtTC8WSDYZmRO38cgs2ptGTqF2SkO6B/I= Subject key identifier: 6D:19:12:5E:CE:C7:25:87:C6:A2:52:17:96:9F:CE:50:CA:69:2C:75 Certificate issuer: /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba Certificate serial: 019B797ED37B9307C407A2B4B76E5B70C38D Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/bRkSXs7HJYfGolIXlp_OUMppLHU.roa Signing time: Thu 01 Jan 2026 12:18:33 +0000 ROA not before: Thu 01 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61134 IP address blocks: 109.197.35.0/24 maxlen: 24 194.169.126.0/24 maxlen: 24 195.20.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d3:7b:93:07:c4:07:a2:b4:b7:6e:5b:70:c3:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba Validity Not Before: Jan 1 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d19125ecec72587c6a25217969fce50ca692c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:5e:f5:04:04:9c:c8:5c:f0:60:99:1b:ed:9c: 4f:0c:bc:1f:27:a1:34:b7:d0:ce:0f:1a:f7:7c:dc: 32:b7:3f:18:0a:89:0e:bd:2d:f7:64:71:fa:47:d9: ef:bb:eb:dd:22:cb:65:de:63:89:76:92:73:5f:8a: c6:8c:50:56:62:08:52:4d:ef:9d:e0:2d:20:73:96: 6e:ec:27:ce:c6:f1:bb:36:b0:c6:d2:e8:3a:ef:52: 48:20:a5:77:bb:63:79:63:f7:bf:40:af:4b:ef:ca: 06:19:e2:95:09:79:4d:6f:3b:0c:fa:6e:9a:ca:1d: 8a:a4:aa:c2:73:cd:5b:c9:e8:fa:04:54:f6:28:69: 9a:32:53:8b:87:1a:ea:4a:cb:ad:b8:2d:b0:b8:ba: 62:f9:86:09:26:9b:d5:43:17:57:bb:60:35:e2:26: b0:cc:10:db:55:28:be:21:bd:b6:d2:0f:e8:b6:54: 1f:c5:a0:9d:72:e2:ce:99:27:6b:64:ae:cc:c2:08: 5f:d6:97:d4:51:f7:6a:58:a1:e6:c8:06:b5:6a:de: c2:a1:b7:8c:18:27:e2:34:dc:ea:dc:dd:7d:59:d7: 0c:2a:a8:40:ab:4f:95:d9:b5:b9:14:7b:d8:dc:d2: e6:1b:af:cb:48:5b:fc:93:6d:d9:b2:9d:1f:03:d5: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:19:12:5E:CE:C7:25:87:C6:A2:52:17:96:9F:CE:50:CA:69:2C:75 X509v3 Authority Key Identifier: keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/bRkSXs7HJYfGolIXlp_OUMppLHU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.197.35.0/24 194.169.126.0/24 195.20.212.0/23 Signature Algorithm: sha256WithRSAEncryption 8f:5d:11:9a:b9:83:f5:16:c8:56:ab:81:56:78:52:35:d8:bb: 70:6b:a9:2e:ce:15:c3:12:a6:1a:07:96:fb:20:98:34:65:cf: 5a:25:e9:a6:ff:a4:95:bb:fd:25:db:d6:3a:fe:ca:46:da:28: 41:61:ea:49:36:75:af:e9:f7:3f:d9:07:91:7c:22:d9:3f:2b: d4:44:f6:c1:81:7d:d1:14:66:cb:a5:f2:f1:ed:c4:5c:c6:71: 16:84:b7:33:ee:08:31:0f:e5:9f:47:cb:1c:aa:05:ab:16:8b: 34:df:6a:93:f3:d6:02:3a:9b:cd:c8:43:62:80:42:b9:c6:cb: 28:40:3e:52:18:fa:a0:af:31:1b:2e:1a:1a:04:89:74:93:cf: bb:29:03:a2:90:c8:b3:a6:0f:7e:51:6d:a8:74:0c:f0:21:2c: f9:aa:04:27:61:f0:ac:99:4a:57:58:d5:f3:01:af:49:45:11: c0:c3:b2:fc:fa:ef:57:e5:87:55:b8:4a:cb:39:09:a0:23:b2: 57:a7:d4:fc:86:87:64:61:02:08:cb:7d:0f:05:cd:46:1b:6f: 9d:2e:99:54:2b:68:6c:32:e2:e4:2a:c8:2b:2f:b9:52:1c:ed: 94:14:a9:63:c5:69:45:26:22:c1:93:f2:55:78:f6:9b:ec:c0: ef:ca:0d:38 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5ftN7kwfEB6K0t25bcMONMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYzkxYzUwYmZmOWNhMDU5ZTZlMzhiMmUwYzdlYjg1MmE2 MzBiYmEwHhcNMjYwMTAxMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDE5MTI1ZWNlYzcyNTg3YzZhMjUyMTc5NjlmY2U1MGNhNjkyYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7V71BAScyFzwYJkb7ZxPDLwfJ6E0 t9DODxr3fNwytz8YCokOvS33ZHH6R9nvu+vdIstl3mOJdpJzX4rGjFBWYghSTe+d 4C0gc5Zu7CfOxvG7NrDG0ug671JIIKV3u2N5Y/e/QK9L78oGGeKVCXlNbzsM+m6a yh2KpKrCc81byej6BFT2KGmaMlOLhxrqSsutuC2wuLpi+YYJJpvVQxdXu2A14iaw zBDbVSi+Ib220g/otlQfxaCdcuLOmSdrZK7Mwghf1pfUUfdqWKHmyAa1at7CobeM GCfiNNzq3N19WdcMKqhAq0+V2bW5FHvY3NLmG6/LSFv8k23Zsp0fA9XnAQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG0ZEl7OxyWHxqJSF5afzlDKaSx1MB8GA1UdIwQY MBaAFI3JHFC/+coFnm44suDH64UqYwu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQt NTczMDlkZjY5NjQyLzEvYlJrU1hzN0hKWWZHb2xJWGxwX09VTXBwTEhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9jNjhkNGQtOGI2NC00ZTc1LTllNTQtNTczMDlkZjY5NjQy LzEvamNrY1VMXzV5Z1dlYmppeTRNZnJoU3BqQzdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbcUjAwQA wql+AwQBwxTUMA0GCSqGSIb3DQEBCwUAA4IBAQCPXRGauYP1FshWq4FWeFI12Ltw a6kuzhXDEqYaB5b7IJg0Zc9aJemm/6SVu/0l29Y6/spG2ihBYepJNnWv6fc/2QeR fCLZPyvURPbBgX3RFGbLpfLx7cRcxnEWhLcz7ggxD+WfR8scqgWrFos032qT89YC OpvNyENigEK5xssoQD5SGPqgrzEbLhoaBIl0k8+7KQOikMizpg9+UW2odAzwISz5 qgQnYfCsmUpXWNXzAa9JRRHAw7L8+u9X5YdVuErLOQmgI7JXp9T8hodkYQIIy30P Bc1GG2+dLplUK2hsMuLkKsgrL7lSHO2UFKljxWlFJiLBk/JVePab7MDvyg04 -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:20 2026 by rpki-client