This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BvLfeoWp3poCUbyqlLxngypMzvE.roa File: BvLfeoWp3poCUbyqlLxngypMzvE.roa (raw, json) Hash identifier: etwC8W3/rfQMZqiBHGQhq2Aha1k3t4uW0jIRLWZtdlU= Subject key identifier: 06:F2:DF:7A:85:A9:DE:9A:02:51:BC:AA:94:BC:67:83:2A:4C:CE:F1 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B27F57F1AC5A3934E0E9913E67B10 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BvLfeoWp3poCUbyqlLxngypMzvE.roa Signing time: Fri 02 Jan 2026 06:18:04 +0000 ROA not before: Fri 02 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212677 IP address blocks: 79.124.54.0/24 maxlen: 24 79.124.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:27:f5:7f:1a:c5:a3:93:4e:0e:99:13:e6:7b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06f2df7a85a9de9a0251bcaa94bc67832a4ccef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:d2:af:80:cf:ce:0f:05:a2:78:71:a4:36: 66:04:95:19:59:97:85:c7:79:a4:a6:7c:b7:29:4e: f0:a3:2c:e1:4b:b2:78:90:5c:7e:18:ec:51:c2:cf: 88:ae:9e:3d:5d:67:63:9d:58:d9:ef:44:84:bf:cd: 15:64:8c:8e:6d:0f:4b:12:d8:85:bf:35:67:26:e5: f4:d8:4b:d2:cf:a6:79:10:f0:3c:6f:65:d5:92:eb: 07:77:95:2c:d2:3e:5f:c3:df:1b:e3:e0:b2:19:e2: aa:e6:64:6d:eb:f6:b8:2a:62:f0:68:4b:8c:a6:40: 86:06:67:69:6c:f2:45:0b:0e:88:5c:4d:dc:da:73: 43:e6:15:3f:0d:5c:c2:7e:8a:3f:14:54:e4:0e:ee: e1:07:53:ea:e9:6e:c6:d5:b4:52:c8:1c:5b:3f:df: 06:8c:50:22:65:97:e2:2e:66:98:d4:da:2f:96:20: 2e:4e:24:bc:2c:44:4c:b8:65:fb:1a:eb:7e:ad:af: e3:ce:f0:08:82:da:10:1d:51:01:26:51:cd:10:2e: 9d:1e:a3:c9:4f:f1:9f:b0:cf:f7:48:96:38:ac:e3: ca:e0:88:51:02:49:00:71:b1:13:f6:67:09:ce:f1: 94:60:ff:42:a6:5d:94:a8:ae:f8:a9:cd:0c:5f:fe: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F2:DF:7A:85:A9:DE:9A:02:51:BC:AA:94:BC:67:83:2A:4C:CE:F1 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/BvLfeoWp3poCUbyqlLxngypMzvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.124.54.0/24 79.124.61.0/24 Signature Algorithm: sha256WithRSAEncryption ad:b7:bb:13:35:11:da:20:e8:df:5d:78:ee:37:fa:58:26:6f: 11:a3:7b:de:c7:c5:b3:01:8c:e5:70:1c:12:16:e0:e9:05:63: e6:16:80:66:75:35:a7:99:f8:07:fb:c5:6a:60:3f:da:a7:e9: ef:97:bd:d0:06:64:e2:1f:96:ce:fb:c0:db:90:be:58:9b:1b: b4:13:a4:05:80:a0:c6:9e:19:7e:4d:76:1c:7e:6b:70:7d:a4: c8:52:9e:bb:37:be:5d:a9:01:c2:14:fc:83:12:f7:34:2a:cc: 76:3e:d0:58:57:35:cc:49:04:6d:e3:97:ba:f3:fa:15:26:93: 9c:0e:67:6e:cd:2e:47:57:96:55:32:2b:6d:ee:46:fb:be:7e: 98:1a:75:d4:10:b9:74:86:38:ed:52:d3:b7:6f:53:96:28:e9: 15:98:eb:2f:a5:39:90:27:d3:d7:00:fb:5f:61:fa:56:57:1b: 15:cc:76:e4:9b:5b:2a:1d:33:68:94:1b:1d:a4:68:b7:d0:42: 21:7d:b7:24:8d:19:1d:34:17:2a:ae:3c:87:7d:65:82:bd:eb: 73:99:a1:11:23:c1:ee:88:3b:b9:56:d4:c9:67:c7:47:ba:40: c7:5f:84:1d:c4:8a:bb:a7:d0:cc:6a:59:11:86:29:a8:17:6d: b0:ed:11:d6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9Wyf1fxrFo5NODpkT5nsQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmYyZGY3YTg1YTlkZTlhMDI1MWJjYWE5NGJjNjc4MzJhNGNjZWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsybSr4DPzg8FonhxpDZmBJUZWZeF x3mkpny3KU7woyzhS7J4kFx+GOxRws+Irp49XWdjnVjZ70SEv80VZIyObQ9LEtiF vzVnJuX02EvSz6Z5EPA8b2XVkusHd5Us0j5fw98b4+CyGeKq5mRt6/a4KmLwaEuM pkCGBmdpbPJFCw6IXE3c2nND5hU/DVzCfoo/FFTkDu7hB1Pq6W7G1bRSyBxbP98G jFAiZZfiLmaY1NovliAuTiS8LERMuGX7Gut+ra/jzvAIgtoQHVEBJlHNEC6dHqPJ T/GfsM/3SJY4rOPK4IhRAkkAcbET9mcJzvGUYP9Cpl2UqK74qc0MX/5F0QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAby33qFqd6aAlG8qpS8Z4MqTM7xMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvQnZMZmVvV3AzcG9DVWJ5cWxMeG5neXBNenZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT3w2AwQA T3w9MA0GCSqGSIb3DQEBCwUAA4IBAQCtt7sTNRHaIOjfXXjuN/pYJm8Ro3vex8Wz AYzlcBwSFuDpBWPmFoBmdTWnmfgH+8VqYD/ap+nvl73QBmTiH5bO+8DbkL5Ymxu0 E6QFgKDGnhl+TXYcfmtwfaTIUp67N75dqQHCFPyDEvc0Ksx2PtBYVzXMSQRt45e6 8/oVJpOcDmduzS5HV5ZVMitt7kb7vn6YGnXUELl0hjjtUtO3b1OWKOkVmOsvpTmQ J9PXAPtfYfpWVxsVzHbkm1sqHTNolBsdpGi30EIhfbckjRkdNBcqrjyHfWWCvetz maERI8HuiDu5VtTJZ8dHukDHX4QdxIq7p9DMalkRhimoF22w7RHW -----END CERTIFICATE-----Generated at Fri Jan 23 18:48:25 2026 by rpki-client