This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bvLtQRYE1FbI6RtykoXAClaFuJo.roa File: bvLtQRYE1FbI6RtykoXAClaFuJo.roa (raw, json) Hash identifier: JekazEByf3DQoJwUA/PlkFkJ7jur0WZOR7Wf17JBXLE= Subject key identifier: 6E:F2:ED:41:16:04:D4:56:C8:E9:1B:72:92:85:C0:0A:56:85:B8:9A Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78347680BA04666A493A157476D56F32 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bvLtQRYE1FbI6RtykoXAClaFuJo.roa Signing time: Thu 01 Jan 2026 06:17:42 +0000 ROA not before: Thu 01 Jan 2026 06:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198549 IP address blocks: 192.36.36.0/24 maxlen: 24 192.36.214.0/23 maxlen: 24 192.71.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:76:80:ba:04:66:6a:49:3a:15:74:76:d5:6f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ef2ed411604d456c8e91b729285c00a5685b89a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:98:65:70:a8:00:4c:04:08:fe:6e:e0:92:28: 5e:20:0c:e7:4e:14:f3:7d:03:50:ec:57:bf:cd:92: be:4a:1b:08:ea:f3:98:98:2c:e7:b4:62:b8:19:de: 44:b8:d9:50:82:0e:b2:64:bc:dd:28:76:8e:f3:53: a6:63:6d:25:8c:c7:52:e1:6e:1e:e5:6b:2f:5d:9d: 2f:80:ba:c9:6d:c0:41:67:cc:01:aa:47:a4:2a:b1: d0:79:aa:4c:01:61:47:f9:d8:e6:33:7a:38:c3:bc: 50:cd:34:79:8d:c2:7c:77:fe:05:01:61:ed:d7:8a: 31:ae:c2:28:17:81:d3:03:41:6e:cb:a9:19:b7:e2: 5c:7e:2e:0e:25:e6:b1:f7:89:2c:e5:23:17:2e:07: fe:35:d0:0e:02:a2:a0:27:31:6b:7d:8d:68:1d:ec: c2:16:f7:5e:29:6b:db:e9:02:b8:94:e8:6a:57:fb: 2a:aa:7f:9c:44:16:73:9e:66:ab:93:c9:f0:41:db: 8a:e2:b7:71:2d:60:a4:f1:28:53:b2:44:21:d4:cd: fb:4d:be:a0:a1:0d:1d:c1:85:a5:2e:05:d8:8b:b2: 2d:a3:ed:0b:3b:98:4e:0a:c2:cb:15:9b:48:a5:03: b3:0a:c8:48:84:e5:e9:62:7c:1b:57:c1:d2:3b:27: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F2:ED:41:16:04:D4:56:C8:E9:1B:72:92:85:C0:0A:56:85:B8:9A X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/bvLtQRYE1FbI6RtykoXAClaFuJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.36.36.0/24 192.36.214.0/23 192.71.199.0/24 Signature Algorithm: sha256WithRSAEncryption 65:28:63:21:5b:53:fa:0e:c8:cd:48:69:5b:76:74:04:99:12: 2b:f0:e4:cc:40:77:8e:90:53:40:5a:65:4c:a9:9d:72:13:ec: 3d:08:fe:75:2b:00:8f:53:4e:45:7c:03:2b:70:88:cb:5e:2f: 76:d3:d2:9a:bb:21:ba:7e:48:99:c6:1d:2d:e8:a0:73:ae:4f: e8:23:69:67:f9:c9:06:a6:92:9d:19:c6:74:60:79:13:53:5c: 32:46:0f:c9:62:5b:17:6d:42:ad:69:6e:02:2d:8d:4c:50:af: 0d:b2:31:d5:93:c8:b9:ea:75:b9:65:d3:0f:72:c4:83:84:ff: 23:58:8d:b0:be:6a:db:55:98:4b:00:6f:22:90:f0:8c:88:15: b1:5c:dd:d1:d3:30:3e:6c:6c:f3:19:6f:4f:ed:ba:96:6b:e7: 06:7c:94:21:38:76:93:04:37:b3:ad:78:5b:ea:ae:0b:37:da: 7a:33:7a:05:39:d9:8e:2c:3c:3b:f2:de:23:d2:2f:40:44:24: 49:b9:89:17:a7:d1:57:68:50:70:73:dc:fc:87:22:16:a0:64: d4:7f:35:1b:2b:92:2b:18:89:ab:34:b3:87:b5:64:9b:44:e9: 84:26:94:c1:4a:bb:58:4b:60:06:1c:f1:5d:49:cc:af:d1:8c: b1:ec:2e:31 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4NHaAugRmakk6FXR21W8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWYyZWQ0MTE2MDRkNDU2YzhlOTFiNzI5Mjg1YzAwYTU2ODViODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0phlcKgATAQI/m7gkiheIAznThTz fQNQ7Fe/zZK+ShsI6vOYmCzntGK4Gd5EuNlQgg6yZLzdKHaO81OmY20ljMdS4W4e 5WsvXZ0vgLrJbcBBZ8wBqkekKrHQeapMAWFH+djmM3o4w7xQzTR5jcJ8d/4FAWHt 14oxrsIoF4HTA0Fuy6kZt+Jcfi4OJeax94ks5SMXLgf+NdAOAqKgJzFrfY1oHezC FvdeKWvb6QK4lOhqV/sqqn+cRBZznmark8nwQduK4rdxLWCk8ShTskQh1M37Tb6g oQ0dwYWlLgXYi7Ito+0LO5hOCsLLFZtIpQOzCshIhOXpYnwbV8HSOydNEQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG7y7UEWBNRWyOkbcpKFwApWhbiaMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvYnZMdFFSWUUxRmJJNlJ0eWtvWEFDbGFGdUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwCQkAwQB wCTWAwQAwEfHMA0GCSqGSIb3DQEBCwUAA4IBAQBlKGMhW1P6DsjNSGlbdnQEmRIr 8OTMQHeOkFNAWmVMqZ1yE+w9CP51KwCPU05FfAMrcIjLXi9209KauyG6fkiZxh0t 6KBzrk/oI2ln+ckGppKdGcZ0YHkTU1wyRg/JYlsXbUKtaW4CLY1MUK8NsjHVk8i5 6nW5ZdMPcsSDhP8jWI2wvmrbVZhLAG8ikPCMiBWxXN3R0zA+bGzzGW9P7bqWa+cG fJQhOHaTBDezrXhb6q4LN9p6M3oFOdmOLDw78t4j0i9ARCRJuYkXp9FXaFBwc9z8 hyIWoGTUfzUbK5IrGImrNLOHtWSbROmEJpTBSrtYS2AGHPFdScyv0Yyx7C4x -----END CERTIFICATE-----Generated at Sun Jan 25 10:27:49 2026 by rpki-client