This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/BP73BKF5mJwPLLJxOSLVxLOWrtk.roa File: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (raw, json) Hash identifier: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s= Subject key identifier: 04:FE:F7:04:A1:79:98:9C:0F:2C:B2:71:39:22:D5:C4:B3:96:AE:D9 Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Certificate serial: 019BC6C811278CB2B133F324C6F5C1E8F18E Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/BP73BKF5mJwPLLJxOSLVxLOWrtk.roa Signing time: Fri 16 Jan 2026 12:29:18 +0000 ROA not before: Fri 16 Jan 2026 12:29:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 185.23.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:c8:11:27:8c:b2:b1:33:f3:24:c6:f5:c1:e8:f1:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Validity Not Before: Jan 16 12:29:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04fef704a179989c0f2cb2713922d5c4b396aed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:08:7d:e8:ab:2c:08:9d:33:1f:a8:9d:5d:83: e6:fb:5a:01:ab:41:7d:ed:12:d2:e3:73:1e:3e:53: 38:e0:8e:ff:b8:e0:7d:47:31:88:ce:1f:74:16:21: a8:3e:ae:03:95:68:40:af:e4:47:fc:ad:e6:f8:bb: ea:c5:08:ac:36:e0:51:a6:93:1b:ff:72:8c:62:da: 6b:1f:fb:41:c3:9d:81:10:df:7b:c5:88:c8:5c:c3: 8a:3f:47:66:c0:f4:5e:43:33:7b:42:2b:d4:71:9f: 63:62:fc:65:6e:28:9b:67:b2:97:ef:76:25:84:37: 8e:f3:d2:67:88:a2:de:89:18:ea:b8:8e:5d:10:73: 7b:01:4f:2f:84:80:8f:ba:d5:b4:88:19:27:68:eb: fc:2d:29:80:f4:71:10:14:f3:ba:f2:f8:34:3d:85: e1:d2:aa:d7:ae:40:f1:94:0f:1c:2b:2c:86:05:be: e7:74:4a:c4:7f:d5:b6:a1:f4:05:02:ea:46:9b:a6: 64:fe:9e:fc:14:42:7d:36:2f:48:48:46:cf:07:d5: 68:05:4c:58:4c:89:08:e0:01:b7:c0:cd:62:57:06: 18:bb:80:8d:7b:e1:5c:d0:0d:3d:31:c4:63:17:a6: 93:bf:ff:bb:6a:e7:c6:d8:94:9b:15:78:ce:cc:59: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FE:F7:04:A1:79:98:9C:0F:2C:B2:71:39:22:D5:C4:B3:96:AE:D9 X509v3 Authority Key Identifier: keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/BP73BKF5mJwPLLJxOSLVxLOWrtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.18.0/24 Signature Algorithm: sha256WithRSAEncryption 89:ad:6b:9b:58:cc:66:55:9b:3c:b0:66:bc:5f:a4:b2:f2:1c: ca:74:b7:f4:f4:ff:3f:74:d6:a8:3f:aa:63:d8:e8:2b:d7:5d: c7:69:26:53:b5:c3:4d:f5:5f:da:4c:fc:45:f6:6b:84:3c:ad: 99:57:d7:05:12:3e:3b:26:e2:94:c0:35:04:1e:2a:f7:bf:0c: 53:3a:f5:80:05:11:7e:6b:51:27:2c:2f:55:4a:8c:ca:27:a5: 9b:0b:e5:26:f9:f8:82:a2:b6:10:c0:99:a1:41:97:f0:6c:f0: 4a:8e:d3:c3:4d:50:9b:59:ed:6b:1a:b8:b4:d2:b2:02:1b:aa: 3e:5d:6d:e6:a9:8b:08:4e:b2:32:e6:29:ad:61:40:52:20:67: 07:e3:16:93:5b:5b:2a:5f:42:79:e5:9f:22:41:cb:8d:4b:85: c0:a8:0b:64:3d:38:9d:36:77:da:7c:4c:20:eb:ae:76:0b:8f: 8d:4e:81:5a:4d:22:81:56:9b:b8:75:26:65:fd:de:a7:7d:0b: 67:4f:27:0b:71:82:ce:5f:31:51:b5:83:3c:39:59:78:d9:ad: 65:4a:3b:a2:18:e4:25:b8:fa:a0:49:53:2b:90:d1:58:77:0f: b2:2a:e8:ea:9d:6a:9f:5e:d0:1c:ac:e0:ba:5f:56:7a:46:bf: 59:e5:6a:b1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvGyBEnjLKxM/MkxvXB6PGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl ZTdlZjcwHhcNMjYwMTE2MTIyOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGZlZjcwNGExNzk5ODljMGYyY2IyNzEzOTIyZDVjNGIzOTZhZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQh96KssCJ0zH6idXYPm+1oBq0F9 7RLS43MePlM44I7/uOB9RzGIzh90FiGoPq4DlWhAr+RH/K3m+LvqxQisNuBRppMb /3KMYtprH/tBw52BEN97xYjIXMOKP0dmwPReQzN7QivUcZ9jYvxlbiibZ7KX73Yl hDeO89JniKLeiRjquI5dEHN7AU8vhICPutW0iBknaOv8LSmA9HEQFPO68vg0PYXh 0qrXrkDxlA8cKyyGBb7ndErEf9W2ofQFAupGm6Zk/p78FEJ9Ni9ISEbPB9VoBUxY TIkI4AG3wM1iVwYYu4CNe+Fc0A09McRjF6aTv/+7aufG2JSbFXjOzFkCnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAT+9wSheZicDyyycTki1cSzlq7ZMB8GA1UdIwQY MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt ZjRmMWY5M2UwNDY3LzEvQlA3M0JLRjVtSndQTExKeE9TTFZ4TE9XcnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3 LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRcSMA0G CSqGSIb3DQEBCwUAA4IBAQCJrWubWMxmVZs8sGa8X6Sy8hzKdLf09P8/dNaoP6pj 2Ogr113HaSZTtcNN9V/aTPxF9muEPK2ZV9cFEj47JuKUwDUEHir3vwxTOvWABRF+ a1EnLC9VSozKJ6WbC+Um+fiCorYQwJmhQZfwbPBKjtPDTVCbWe1rGri00rICG6o+ XW3mqYsITrIy5imtYUBSIGcH4xaTW1sqX0J55Z8iQcuNS4XAqAtkPTidNnfafEwg 6652C4+NToFaTSKBVpu4dSZl/d6nfQtnTycLcYLOXzFRtYM8OVl42a1lSjuiGOQl uPqgSVMrkNFYdw+yKujqnWqfXtAcrOC6X1Z6Rr9Z5Wqx -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:33 2026 by rpki-client