This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/B0NZx8wGc2BfFV7HL837EN9xDmk.roa File: B0NZx8wGc2BfFV7HL837EN9xDmk.roa (raw, json) Hash identifier: PhnHNgGL/ecjQNAEqTX4yvFXZgk/h6y3wBnt7UEfO/w= Subject key identifier: 07:43:59:C7:CC:06:73:60:5F:15:5E:C7:2F:CD:FB:10:DF:71:0E:69 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019C2F364B9804EC682933E265455687491B Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/B0NZx8wGc2BfFV7HL837EN9xDmk.roa Signing time: Thu 05 Feb 2026 19:10:13 +0000 ROA not before: Thu 05 Feb 2026 19:10:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 83.147.248.0/22 maxlen: 22 91.186.200.0/23 maxlen: 24 91.186.202.0/23 maxlen: 24 91.186.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Feb 2026 22:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2f:36:4b:98:04:ec:68:29:33:e2:65:45:56:87:49:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Feb 5 19:10:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=074359c7cc0673605f155ec72fcdfb10df710e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:97:36:02:be:0c:40:46:78:ec:e7:64:48: d6:54:08:fc:3b:1b:eb:27:32:9c:da:7d:8f:94:1d: f3:a3:34:c3:ec:09:96:a9:72:f9:26:76:62:86:e1: ed:6d:e7:eb:a5:d4:93:16:92:26:ff:67:cd:07:67: c6:73:a0:2e:f8:7d:13:89:47:1d:68:6f:87:40:6f: d6:07:f8:35:22:54:28:2f:29:18:50:cf:bb:5a:26: 00:12:bd:ed:f9:2e:8b:0b:03:e7:cf:26:9d:1d:15: 35:d7:cc:2e:70:ec:b8:04:f3:59:ed:f3:e4:2b:96: 3c:d2:3b:2c:c0:9f:a2:5f:e7:e7:d1:2f:bf:dc:ec: b6:b1:6f:70:89:94:ce:93:52:22:ae:11:9a:2c:bb: 9f:f3:b4:d6:87:c3:f4:45:d2:a5:68:9a:7d:ab:6b: 80:37:aa:d6:4f:21:be:9a:20:86:b3:d0:50:92:16: fe:7c:eb:10:cf:4c:5a:03:8e:07:90:e7:8b:e8:b8: 8a:34:ab:66:61:00:a6:40:66:bc:d5:cd:7b:16:7e: fb:df:b2:ec:25:50:c6:05:96:00:8c:5a:47:61:2f: 5f:35:91:e0:60:39:c2:ee:3e:2e:cc:ac:34:ed:4b: 0c:fa:2b:1f:9c:d4:8e:06:33:b9:80:ee:b8:f8:f5: cc:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:43:59:C7:CC:06:73:60:5F:15:5E:C7:2F:CD:FB:10:DF:71:0E:69 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/B0NZx8wGc2BfFV7HL837EN9xDmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.248.0/22 91.186.200.0/22 91.186.220.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:4a:e0:1c:a6:55:c8:90:c3:d8:b8:5a:40:7d:aa:f4:db:fb: 03:77:48:75:59:2a:27:2b:4c:8f:0a:b2:be:03:a5:c0:b5:ec: 3d:b2:65:c2:58:a0:34:19:4c:41:03:53:e2:7a:e2:02:82:88: 8e:2e:16:da:f1:9f:82:83:01:fc:19:8d:fe:6e:dd:c9:02:b8: 9f:bb:bf:a2:87:40:62:c8:a1:7e:0f:81:d0:53:42:0b:f6:2d: 0c:90:f9:98:db:23:fb:eb:22:e7:70:37:14:33:de:2e:9b:d9: af:9c:cc:3b:41:95:ed:11:e6:90:4d:1b:86:5e:ae:a6:85:e4: 3a:52:b6:ad:8a:b1:d2:3b:72:4f:04:52:8e:de:b0:58:cf:4c: 22:72:d7:11:62:76:fe:8c:cc:a3:b8:e3:be:7b:85:e8:db:9d: 51:8b:2a:bb:c9:1a:7e:7a:fb:53:5f:ff:98:1a:53:e2:e4:ff: dd:02:72:96:f1:84:e6:b6:e3:cb:60:74:cd:09:ce:09:58:17: 1e:44:eb:b3:9b:f1:c0:33:aa:d7:ab:26:4b:45:7b:29:68:a4: ae:d0:f6:3c:a9:cd:25:10:d3:a0:d1:fc:12:4d:fb:72:87:72: 68:82:7e:0d:d5:b7:48:1f:90:37:40:d8:33:a3:a1:96:3c:61: a5:0c:3c:0a -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwvNkuYBOxoKTPiZUVWh0kbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMjA1MTkxMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzQzNTljN2NjMDY3MzYwNWYxNTVlYzcyZmNkZmIxMGRmNzEwZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+iXNgK+DEBGeOznZEjWVAj8Oxvr JzKc2n2PlB3zozTD7AmWqXL5JnZihuHtbefrpdSTFpIm/2fNB2fGc6Au+H0TiUcd aG+HQG/WB/g1IlQoLykYUM+7WiYAEr3t+S6LCwPnzyadHRU118wucOy4BPNZ7fPk K5Y80jsswJ+iX+fn0S+/3Oy2sW9wiZTOk1IirhGaLLuf87TWh8P0RdKlaJp9q2uA N6rWTyG+miCGs9BQkhb+fOsQz0xaA44HkOeL6LiKNKtmYQCmQGa81c17Fn7737Ls JVDGBZYAjFpHYS9fNZHgYDnC7j4uzKw07UsM+isfnNSOBjO5gO64+PXMcQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAdDWcfMBnNgXxVexy/N+xDfcQ5pMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvQjBOWng4d0djMkJmRlY3SEw4MzdFTjl4RG1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCU5P4AwQC W7rIAwQCW7rcMA0GCSqGSIb3DQEBCwUAA4IBAQALSuAcplXIkMPYuFpAfar02/sD d0h1WSonK0yPCrK+A6XAtew9smXCWKA0GUxBA1PieuICgoiOLhba8Z+CgwH8GY3+ bt3JArifu7+ih0BiyKF+D4HQU0IL9i0MkPmY2yP76yLncDcUM94um9mvnMw7QZXt EeaQTRuGXq6mheQ6UratirHSO3JPBFKO3rBYz0wictcRYnb+jMyjuOO+e4Xo251R iyq7yRp+evtTX/+YGlPi5P/dAnKW8YTmtuPLYHTNCc4JWBceROuzm/HAM6rXqyZL RXspaKSu0PY8qc0lENOg0fwSTftyh3Jogn4N1bdIH5A3QNgzo6GWPGGlDDwK -----END CERTIFICATE-----Generated at Mon Feb 16 06:36:51 2026 by rpki-client