This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa File: v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa (raw, json) Hash identifier: btWBp9iO8STmT4P+DcwKknpMMsc20/dgw5WRtt6GDJ4= Subject key identifier: BF:B1:F1:2F:7C:A6:F8:94:86:62:72:79:38:B2:BF:2D:62:84:93:09 Certificate issuer: /CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0 Certificate serial: 019B7F1557FA4F5C5D70F0F7FC98A2E500D5 Authority key identifier: 25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa Signing time: Fri 02 Jan 2026 14:21:03 +0000 ROA not before: Fri 02 Jan 2026 14:21:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 93.174.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.mft rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 02:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:57:fa:4f:5c:5d:70:f0:f7:fc:98:a2:e5:00:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515e8792a424ff72cc1792978e2cd4cdbeda4d0 Validity Not Before: Jan 2 14:21:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfb1f12f7ca6f8948662727938b2bf2d62849309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cc:59:74:d2:3c:30:c4:d8:51:21:05:ac:7a: 92:f4:46:2a:d5:23:5c:92:c3:94:23:1e:ce:97:23: c2:59:1c:92:68:b2:7c:c2:2a:8f:ef:d3:3a:1e:e5: c0:d8:4d:7c:bc:18:82:64:03:f2:ad:b3:1b:e9:93: 39:a6:6e:81:3c:25:72:4a:09:94:97:a0:43:d9:43: 3a:d5:ec:a8:a5:81:97:b2:4c:1b:07:ba:66:33:45: a0:56:34:cd:5a:85:ef:b1:b3:1e:d9:3b:23:57:f5: 52:47:35:3b:71:8f:3d:0f:c0:cd:0d:11:07:06:3e: 90:a3:34:ed:1a:bc:72:c9:d8:b9:9d:ec:91:ec:c5: 33:89:28:9f:82:1b:5c:01:ee:09:1b:d0:26:75:fe: c5:70:79:7f:1a:58:2f:ea:1b:94:90:5e:99:03:60: 5a:cb:fc:08:57:22:ce:51:b6:7c:6a:90:29:22:3d: 6e:40:f9:d1:b2:58:fa:f4:02:8c:aa:4d:49:6c:fc: b1:0f:a3:89:bb:c4:eb:9b:4d:65:d1:eb:6d:2c:c9: f2:bd:22:cc:c7:30:f8:e2:b6:64:6c:c8:14:a8:d4: 7c:cc:95:2b:40:1e:e0:4b:3f:b7:e9:71:bc:54:12: 87:26:5e:ae:ea:2e:ca:0f:5f:74:9f:9f:37:39:0d: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:B1:F1:2F:7C:A6:F8:94:86:62:72:79:38:B2:BF:2D:62:84:93:09 X509v3 Authority Key Identifier: keyid:25:15:E8:79:2A:42:4F:F7:2C:C1:79:29:78:E2:CD:4C:DB:ED:A4:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JRXoeSpCT_cswXkpeOLNTNvtpNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/v7HxL3ym-JSGYnJ5OLK_LWKEkwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/3d0f40-a7dd-4689-bc32-9eed9d75c0d1/1/JRXoeSpCT_cswXkpeOLNTNvtpNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.174.96.0/24 Signature Algorithm: sha256WithRSAEncryption 27:71:57:38:0f:e8:5c:fd:cb:83:05:5b:7c:56:5c:7f:3a:bc: 7f:da:6c:01:22:30:41:23:d1:1d:5e:ba:1c:f4:d6:8d:1a:3f: e3:69:f5:aa:b8:f0:ae:be:3e:1e:f3:e9:bd:46:25:2b:45:c5: 16:5b:77:c5:19:20:87:04:bd:5b:06:28:1a:f4:15:3c:af:a1: 68:2c:9e:70:0a:6f:a8:81:6f:fb:c5:26:2e:1d:1f:e9:a1:4a: 99:40:30:a1:40:b1:08:37:02:e0:4d:d4:15:7d:14:7e:08:5c: 09:79:eb:ac:79:a9:20:65:4c:83:81:9a:a5:28:3e:cc:36:cf: 50:82:d7:02:36:b8:7c:57:27:0d:57:ec:d7:2b:f3:07:08:0a: 4e:32:0f:7e:06:48:55:12:bb:1d:e9:84:cf:1f:b5:85:d6:7a: cb:fa:13:b9:58:4f:b0:f5:a2:ea:4f:e2:8b:04:e7:a1:b1:c2: 80:08:a6:bd:54:dc:53:a8:96:9e:3b:47:f4:b3:59:26:cf:8b: 67:7f:42:90:92:2f:ed:78:2e:39:2d:2e:dd:bd:72:ff:de:27: 89:79:50:49:8e:08:aa:f2:ea:e0:75:2d:70:01:f9:da:53:30: d4:6f:d3:84:0a:48:43:ec:a6:e6:95:e3:21:e8:b3:9f:d2:eb: 09:e2:ef:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FVf6T1xdcPD3/Jii5QDVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1MTVlODc5MmE0MjRmZjcyY2MxNzkyOTc4ZTJjZDRjZGJl ZGE0ZDAwHhcNMjYwMTAyMTQyMTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmIxZjEyZjdjYTZmODk0ODY2MjcyNzkzOGIyYmYyZDYyODQ5MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8xZdNI8MMTYUSEFrHqS9EYq1SNc ksOUIx7OlyPCWRySaLJ8wiqP79M6HuXA2E18vBiCZAPyrbMb6ZM5pm6BPCVySgmU l6BD2UM61eyopYGXskwbB7pmM0WgVjTNWoXvsbMe2TsjV/VSRzU7cY89D8DNDREH Bj6QozTtGrxyydi5neyR7MUziSifghtcAe4JG9Amdf7FcHl/Glgv6huUkF6ZA2Ba y/wIVyLOUbZ8apApIj1uQPnRslj69AKMqk1JbPyxD6OJu8Trm01l0ettLMnyvSLM xzD44rZkbMgUqNR8zJUrQB7gSz+36XG8VBKHJl6u6i7KD190n583OQ29dwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL+x8S98pviUhmJyeTiyvy1ihJMJMB8GA1UdIwQY MBaAFCUV6HkqQk/3LMF5KXjizUzb7aTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzIt OWVlZDlkNzVjMGQxLzEvdjdIeEwzeW0tSlNHWW5KNU9MS19MV0tFa3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8zZDBmNDAtYTdkZC00Njg5LWJjMzItOWVlZDlkNzVjMGQx LzEvSlJYb2VTcENUX2Nzd1hrcGVPTE5UTnZ0cE5BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXa5gMA0G CSqGSIb3DQEBCwUAA4IBAQAncVc4D+hc/cuDBVt8Vlx/Orx/2mwBIjBBI9EdXroc 9NaNGj/jafWquPCuvj4e8+m9RiUrRcUWW3fFGSCHBL1bBiga9BU8r6FoLJ5wCm+o gW/7xSYuHR/poUqZQDChQLEINwLgTdQVfRR+CFwJeeuseakgZUyDgZqlKD7MNs9Q gtcCNrh8VycNV+zXK/MHCApOMg9+BkhVErsd6YTPH7WF1nrL+hO5WE+w9aLqT+KL BOehscKACKa9VNxTqJaeO0f0s1kmz4tnf0KQki/teC45LS7dvXL/3ieJeVBJjgiq 8urgdS1wAfnaUzDUb9OECkhD7KbmleMh6LOf0usJ4u/c -----END CERTIFICATE-----Generated at Sat Jan 17 08:23:42 2026 by rpki-client