This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BxZHtUOaICw21VwsWTonhOx4IM0.roa File: BxZHtUOaICw21VwsWTonhOx4IM0.roa (raw, json) Hash identifier: VcTO9GREYsM62XbpZvy9BCWnRHkBfwnNm0+tnNC8BHA= Subject key identifier: 07:16:47:B5:43:9A:20:2C:36:D5:5C:2C:59:3A:27:84:EC:78:20:CD Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A31DD2D705C5C0B555DD53831E4D97 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BxZHtUOaICw21VwsWTonhOx4IM0.roa Signing time: Thu 01 Jan 2026 08:18:34 +0000 ROA not before: Thu 01 Jan 2026 08:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198037 IP address blocks: 94.156.117.0/24 maxlen: 24 94.156.122.0/24 maxlen: 24 94.156.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:1d:d2:d7:05:c5:c0:b5:55:dd:53:83:1e:4d:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=071647b5439a202c36d55c2c593a2784ec7820cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cb:fc:a6:25:d0:a4:1a:4f:28:64:7b:3c:84: 34:d9:84:a2:b9:a4:de:3f:0d:3e:b5:1d:ef:fe:7b: 3d:0f:2a:71:1a:79:46:b6:12:76:5a:36:1f:6a:19: dd:3e:15:9c:44:18:b2:f7:65:db:94:0b:88:a5:83: 45:ed:d6:15:96:39:2e:b9:36:92:58:44:40:e7:9a: 74:e4:d6:a5:85:a8:cb:18:ce:cf:46:2f:65:e3:2a: 6e:25:17:58:d0:1e:6d:82:59:13:c9:be:bc:af:45: 81:9c:fa:7f:3b:31:2e:49:d3:de:82:8a:a1:26:4e: 70:66:fc:7d:5c:9d:72:53:c1:c2:c4:db:c1:75:14: 84:b1:1f:8d:bd:08:de:55:b4:12:06:cb:e6:98:80: 35:16:f6:bc:33:d0:4e:d2:9d:c1:3f:ef:81:07:29: 1d:68:8a:ea:a4:7c:e4:43:3f:7c:d2:90:3f:c9:3f: a3:20:34:90:e5:c8:62:7c:3d:bb:7e:c4:55:eb:3a: 63:7f:6e:77:78:49:42:b6:9e:6f:7e:d3:15:bd:e0: bd:de:31:82:db:85:71:95:c3:3d:a2:ff:fa:52:85: 70:e6:66:ad:9f:ea:5b:75:a6:34:ad:5c:14:c2:ad: de:00:86:c7:ba:2c:b6:b4:b8:f3:53:13:4c:68:13: 05:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:16:47:B5:43:9A:20:2C:36:D5:5C:2C:59:3A:27:84:EC:78:20:CD X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/BxZHtUOaICw21VwsWTonhOx4IM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.156.117.0/24 94.156.122.0/24 94.156.131.0/24 Signature Algorithm: sha256WithRSAEncryption 30:8b:9b:f5:1a:89:38:21:b0:47:3e:5e:70:98:25:e4:12:37: b0:e2:29:f0:08:71:15:d7:38:4c:11:d7:87:bf:fd:6e:43:d2: bb:0a:af:01:48:86:e0:51:6e:40:cc:7e:89:ba:f6:81:07:36: 12:36:f5:fe:01:d2:85:aa:dc:40:be:ae:72:e8:8a:4d:59:4f: de:bc:fb:cd:eb:51:32:ce:47:cd:3d:b9:3d:3e:2c:c3:cb:00: e5:e0:e0:96:a8:93:4a:d8:0a:6b:c4:17:f6:48:58:a5:78:92: 1c:95:24:24:5b:f5:46:ce:d1:bb:c3:b9:78:1b:74:f8:7e:ca: cf:ce:7e:d2:1a:21:9c:b6:0c:92:45:98:b3:42:4b:4c:cd:f5: bc:77:4a:39:ad:8c:64:4e:04:2f:7b:59:21:86:65:fc:69:5c: f2:e9:05:aa:35:c0:6d:e4:b5:6a:06:e7:13:08:19:07:9e:62: 63:42:9f:b0:58:a7:52:34:49:0c:f0:05:06:08:78:14:21:3d: 04:ac:bd:51:ce:bc:70:6e:d3:e1:47:f8:e3:c8:9c:14:f4:55: 87:10:45:8c:b7:c6:95:ff:c5:8b:4e:05:4b:21:fb:45:74:bf: 3a:0e:30:56:3a:b2:04:12:46:6d:98:34:92:80:4e:8e:29:bc: 42:16:bc:47 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4ox3S1wXFwLVV3VODHk2XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzE2NDdiNTQzOWEyMDJjMzZkNTVjMmM1OTNhMjc4NGVjNzgyMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48v8piXQpBpPKGR7PIQ02YSiuaTe Pw0+tR3v/ns9DypxGnlGthJ2WjYfahndPhWcRBiy92XblAuIpYNF7dYVljkuuTaS WERA55p05NalhajLGM7PRi9l4ypuJRdY0B5tglkTyb68r0WBnPp/OzEuSdPegoqh Jk5wZvx9XJ1yU8HCxNvBdRSEsR+NvQjeVbQSBsvmmIA1Fva8M9BO0p3BP++BBykd aIrqpHzkQz980pA/yT+jIDSQ5chifD27fsRV6zpjf253eElCtp5vftMVveC93jGC 24VxlcM9ov/6UoVw5matn+pbdaY0rVwUwq3eAIbHuiy2tLjzUxNMaBMFqwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAcWR7VDmiAsNtVcLFk6J4TseCDNMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvQnhaSHRVT2FJQ3cyMVZ3c1dUb25oT3g0SU0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXpx1AwQA Xpx6AwQAXpyDMA0GCSqGSIb3DQEBCwUAA4IBAQAwi5v1Gok4IbBHPl5wmCXkEjew 4inwCHEV1zhMEdeHv/1uQ9K7Cq8BSIbgUW5AzH6JuvaBBzYSNvX+AdKFqtxAvq5y 6IpNWU/evPvN61EyzkfNPbk9PizDywDl4OCWqJNK2AprxBf2SFileJIclSQkW/VG ztG7w7l4G3T4fsrPzn7SGiGctgySRZizQktMzfW8d0o5rYxkTgQve1khhmX8aVzy 6QWqNcBt5LVqBucTCBkHnmJjQp+wWKdSNEkM8AUGCHgUIT0ErL1RzrxwbtPhR/jj yJwU9FWHEEWMt8aV/8WLTgVLIftFdL86DjBWOrIEEkZtmDSSgE6OKbxCFrxH -----END CERTIFICATE-----Generated at Fri Jan 2 12:06:34 2026 by rpki-client