This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa File: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (raw, json) Hash identifier: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM= Subject key identifier: 05:50:1B:6F:2E:27:E2:77:D5:25:F5:D6:AD:1E:59:97:C7:8A:08:DC Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 019B7AC82FD785FD75F3809344A1F1CCE011 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa Signing time: Thu 01 Jan 2026 18:18:18 +0000 ROA not before: Thu 01 Jan 2026 18:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 194.110.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 08:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:2f:d7:85:fd:75:f3:80:93:44:a1:f1:cc:e0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Jan 1 18:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05501b6f2e27e277d525f5d6ad1e5997c78a08dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1a:3d:d4:c5:cd:0d:13:03:bb:4c:3c:e9:43: ec:eb:8d:46:71:c1:b6:28:54:e8:b1:03:0c:9b:09: 9d:05:a7:0c:82:bc:51:14:42:cf:14:7e:77:e3:c2: 6f:6a:c5:70:b3:3a:e1:f1:c3:c5:ff:e2:0a:8a:aa: d7:af:f5:31:62:3f:50:e4:06:5c:e7:c3:04:29:44: 11:ed:f9:a9:41:1e:ee:af:46:91:4b:64:a1:dd:7f: 6b:1b:6b:c6:b1:2b:91:85:1e:16:77:7e:ef:ee:01: ca:cb:f4:10:dc:e6:be:9a:94:d9:7c:6d:ab:82:27: 7e:15:88:95:5f:85:00:dc:cf:44:33:7a:a0:74:75: 27:53:cc:eb:be:d6:66:6a:cc:a3:85:9a:a8:b2:68: 4a:7e:9b:f7:47:34:89:9b:09:51:a8:f8:61:d4:95: c5:b7:75:c2:ab:f7:14:8b:38:fe:e4:d5:a3:26:c0: 4a:4a:d4:24:80:dd:b8:ab:31:f9:fb:57:24:8e:36: ba:f1:93:3d:48:3a:b6:99:95:c3:9e:46:51:0d:dc: 45:e2:1d:b2:e4:d2:9c:f2:eb:5f:ac:ca:ec:10:11: a8:84:38:f5:1d:6d:1e:e0:ca:a5:f4:da:52:d1:12: b9:17:4f:9c:46:5f:f0:2a:91:69:6d:a4:48:a2:bb: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:50:1B:6F:2E:27:E2:77:D5:25:F5:D6:AD:1E:59:97:C7:8A:08:DC X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.110.246.0/24 Signature Algorithm: sha256WithRSAEncryption 21:31:4d:61:1d:a8:65:b9:2f:ce:0e:23:27:20:4e:dc:82:4e: ed:2a:1b:a7:84:a1:0d:74:18:cf:79:29:93:91:25:8c:65:65: 83:7f:ab:7a:3f:85:22:7f:6c:79:f2:c9:34:97:d8:9d:77:ac: 23:bd:65:7f:9d:9d:68:fe:d1:cb:66:a4:99:fc:06:4d:c0:bc: d0:03:8e:3f:af:9e:9d:17:69:9f:cc:c1:22:21:54:82:3a:f2: c5:e2:32:04:9a:92:c1:2c:b7:50:35:ad:21:74:a1:55:4c:3e: 2b:3b:0a:9c:cd:81:a8:48:c4:cc:fc:6e:49:7b:e2:7c:7a:42: 98:8d:1f:73:b4:a3:61:c6:a5:de:be:dc:14:82:d5:a3:ea:4d: a7:d6:e9:e8:51:46:4a:75:9a:b9:93:2b:6c:25:23:7d:60:bc: 9c:4f:b1:6b:a9:70:73:73:48:ac:02:cf:ce:02:2b:27:f2:5c: fa:98:fd:97:55:28:44:5f:2e:1d:01:83:24:b6:0b:d5:87:be: 89:2e:d1:f6:fb:19:f9:de:b0:56:30:9b:e2:be:9a:e8:fc:ea: e3:2c:2e:e0:f0:84:53:57:20:03:15:cc:28:7f:47:03:1b:36: 27:30:f3:9d:dc:b4:de:0a:82:c0:da:0e:bd:f3:2f:32:85:15: 39:07:54:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yC/Xhf1184CTRKHxzOARMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwMTAxMTgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTUwMWI2ZjJlMjdlMjc3ZDUyNWY1ZDZhZDFlNTk5N2M3OGEwOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRo91MXNDRMDu0w86UPs641GccG2 KFTosQMMmwmdBacMgrxRFELPFH5348JvasVwszrh8cPF/+IKiqrXr/UxYj9Q5AZc 58MEKUQR7fmpQR7ur0aRS2Sh3X9rG2vGsSuRhR4Wd37v7gHKy/QQ3Oa+mpTZfG2r gid+FYiVX4UA3M9EM3qgdHUnU8zrvtZmasyjhZqosmhKfpv3RzSJmwlRqPhh1JXF t3XCq/cUizj+5NWjJsBKStQkgN24qzH5+1ckjja68ZM9SDq2mZXDnkZRDdxF4h2y 5NKc8utfrMrsEBGohDj1HW0e4Mql9NpS0RK5F0+cRl/wKpFpbaRIorvZCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAVQG28uJ+J31SX11q0eWZfHigjcMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvQlZBYmJ5NG40bmZWSmZYV3JSNVpsOGVLQ053LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm72MA0G CSqGSIb3DQEBCwUAA4IBAQAhMU1hHahluS/ODiMnIE7cgk7tKhunhKENdBjPeSmT kSWMZWWDf6t6P4Uif2x58sk0l9idd6wjvWV/nZ1o/tHLZqSZ/AZNwLzQA44/r56d F2mfzMEiIVSCOvLF4jIEmpLBLLdQNa0hdKFVTD4rOwqczYGoSMTM/G5Je+J8ekKY jR9ztKNhxqXevtwUgtWj6k2n1unoUUZKdZq5kytsJSN9YLycT7FrqXBzc0isAs/O Aisn8lz6mP2XVShEXy4dAYMktgvVh76JLtH2+xn53rBWMJvivpro/OrjLC7g8IRT VyADFcwof0cDGzYnMPOd3LTeCoLA2g698y8yhRU5B1T5 -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:15 2026 by rpki-client