This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/bjGLD3ovB-bfvIknnpZ0Lbe-TsE.roa File: bjGLD3ovB-bfvIknnpZ0Lbe-TsE.roa (raw, json) Hash identifier: 4P/0oP6KrZeB/0pCl0SqvxvPAOXuMv82h87HkIeA7+0= Subject key identifier: 6E:31:8B:0F:7A:2F:07:E6:DF:BC:89:27:9E:96:74:2D:B7:BE:4E:C1 Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33 Certificate serial: 019B797EF2C199A150F5E90BEDE08A5632F1 Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/bjGLD3ovB-bfvIknnpZ0Lbe-TsE.roa Signing time: Thu 01 Jan 2026 12:18:41 +0000 ROA not before: Thu 01 Jan 2026 12:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48214 IP address blocks: 185.154.190.0/24 maxlen: 24 2a13:1640::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:f2:c1:99:a1:50:f5:e9:0b:ed:e0:8a:56:32:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33 Validity Not Before: Jan 1 12:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e318b0f7a2f07e6dfbc89279e96742db7be4ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9e:84:b3:04:97:45:be:6b:0f:37:c3:e4:90: 45:5a:7a:c6:b2:23:39:41:fb:8f:b1:17:53:e1:0b: a5:d7:41:3d:1d:62:d1:4a:24:cb:12:7e:3c:6a:58: 99:7b:fd:c8:f4:10:f9:dd:8b:e8:ff:30:de:0e:fe: e8:88:1e:99:67:6e:3d:22:69:45:68:36:4d:e3:03: 5e:f7:88:60:35:8e:28:76:85:ac:fe:03:cc:12:8b: 17:cc:c3:4f:e1:9f:cb:d4:c5:1c:46:b8:42:b3:59: 1d:eb:65:92:d2:31:09:e2:5c:c7:b1:55:e4:38:7c: 35:20:f5:ba:f8:40:aa:22:98:58:05:2c:bf:ff:49: 1e:35:91:5e:5a:88:31:19:a9:62:83:f0:90:08:28: cd:98:d6:b1:03:d0:ad:26:e9:af:b4:bd:26:cc:d1: 05:fa:36:f5:42:6a:2d:c0:90:e2:03:ed:83:25:67: 19:a3:2a:05:de:d8:61:48:62:0d:66:51:2b:69:94: 2c:52:59:b3:04:02:67:10:56:92:dc:a6:88:43:9e: 77:36:b8:74:8d:d1:32:73:b6:84:33:0b:d5:46:56: b2:22:73:31:1b:51:bb:b8:6a:a1:ac:4e:a0:67:e5: 27:02:88:57:43:cd:26:e4:ef:4d:84:da:97:f3:6f: 0c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:31:8B:0F:7A:2F:07:E6:DF:BC:89:27:9E:96:74:2D:B7:BE:4E:C1 X509v3 Authority Key Identifier: keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/bjGLD3ovB-bfvIknnpZ0Lbe-TsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.154.190.0/24 IPv6: 2a13:1640::/29 Signature Algorithm: sha256WithRSAEncryption 31:36:18:21:e3:84:b8:ba:80:a2:4f:1d:3b:2d:8b:64:7c:7e: 69:d0:42:2d:03:81:af:14:94:aa:9e:79:b5:49:81:10:6c:36: 56:6d:1f:bd:dd:11:b7:33:16:79:06:11:66:17:4e:fa:48:9f: 9e:b1:35:ac:8d:bf:85:ac:39:ae:6f:dc:bf:b6:df:6a:90:58: a3:4a:c4:3c:5b:22:f7:b4:c1:7f:24:18:09:31:63:d1:68:f1: f7:d9:d0:e1:ba:ee:3a:7a:be:0a:18:30:aa:56:fe:62:75:ff: 9e:e0:5b:4e:db:50:6c:29:14:f6:f2:fe:d9:cb:3c:34:b5:48: 30:b5:6e:93:f8:31:7e:7a:b7:20:c4:7e:a3:52:c6:df:d3:49: 7f:8a:56:45:6c:92:b9:57:bf:cd:9c:a2:e4:95:98:61:04:c0: 6f:ac:a3:be:a4:a6:e7:55:01:bc:47:91:df:ee:0f:f5:1b:0e: 23:69:2e:0a:31:26:01:7d:be:ea:50:1f:80:b1:84:2f:0e:7b: a4:4f:4d:71:71:6a:0d:8b:23:a8:ef:a0:99:6e:47:8d:b4:51: 48:d7:cd:83:c4:e9:fe:29:b7:62:ca:80:cb:ed:7f:85:5f:53: 74:44:fa:26:fb:6c:b1:08:30:7b:e9:f3:f1:e9:79:8c:1c:01: 09:dd:5a:1e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5fvLBmaFQ9ekL7eCKVjLxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxZThiN2NhYjUyMWU4OGU4MDIyYTM2NDI0NTQ0MTg1NTM4 YTdiMzMwHhcNMjYwMTAxMTIxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTMxOGIwZjdhMmYwN2U2ZGZiYzg5Mjc5ZTk2NzQyZGI3YmU0ZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA756EswSXRb5rDzfD5JBFWnrGsiM5 QfuPsRdT4Qul10E9HWLRSiTLEn48aliZe/3I9BD53Yvo/zDeDv7oiB6ZZ249ImlF aDZN4wNe94hgNY4odoWs/gPMEosXzMNP4Z/L1MUcRrhCs1kd62WS0jEJ4lzHsVXk OHw1IPW6+ECqIphYBSy//0keNZFeWogxGalig/CQCCjNmNaxA9CtJumvtL0mzNEF +jb1QmotwJDiA+2DJWcZoyoF3thhSGINZlEraZQsUlmzBAJnEFaS3KaIQ553Nrh0 jdEyc7aEMwvVRlayInMxG1G7uGqhrE6gZ+UnAohXQ80m5O9NhNqX828MFQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG4xiw96Lwfm37yJJ56WdC23vk7BMB8GA1UdIwQY MBaAFOHot8q1IeiOgCKjZCRUQYVTinszMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYt MjFjNTg0NzBiOGQyLzEvYmpHTEQzb3ZCLWJmdklrbm5wWjBMYmUtVHNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8xNGYyYzUtNDZmZS00NjcwLTlkZDYtMjFjNTg0NzBiOGQy LzEvNGVpM3lyVWg2STZBSXFOa0pGUkJoVk9LZXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuZq+MA0E AgACMAcDBQMqExZAMA0GCSqGSIb3DQEBCwUAA4IBAQAxNhgh44S4uoCiTx07LYtk fH5p0EItA4GvFJSqnnm1SYEQbDZWbR+93RG3MxZ5BhFmF076SJ+esTWsjb+FrDmu b9y/tt9qkFijSsQ8WyL3tMF/JBgJMWPRaPH32dDhuu46er4KGDCqVv5idf+e4FtO 21BsKRT28v7Zyzw0tUgwtW6T+DF+ercgxH6jUsbf00l/ilZFbJK5V7/NnKLklZhh BMBvrKO+pKbnVQG8R5Hf7g/1Gw4jaS4KMSYBfb7qUB+AsYQvDnukT01xcWoNiyOo 76CZbkeNtFFI182DxOn+KbdiyoDL7X+FX1N0RPom+2yxCDB76fPx6XmMHAEJ3Voe -----END CERTIFICATE-----Generated at Mon Jan 26 02:13:29 2026 by rpki-client