This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/BzcIlfSqWBkxCx6sQahLAYgQl9U.roa File: BzcIlfSqWBkxCx6sQahLAYgQl9U.roa (raw, json) Hash identifier: iEU6LtcxUGPF+befnk/JbzTRId/51aZ7BTsMTWVBJf8= Subject key identifier: 07:37:08:95:F4:AA:58:19:31:0B:1E:AC:41:A8:4B:01:88:10:97:D5 Certificate issuer: /CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce Certificate serial: 019B7E376ACC40BABCF368C5BC2D84016C26 Authority key identifier: CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/BzcIlfSqWBkxCx6sQahLAYgQl9U.roa Signing time: Fri 02 Jan 2026 10:18:39 +0000 ROA not before: Fri 02 Jan 2026 10:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12611 IP address blocks: 193.23.119.0/24 maxlen: 24 194.150.226.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.mft rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:6a:cc:40:ba:bc:f3:68:c5:bc:2d:84:01:6c:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd2d0e39d78fc6202255a5b4adb54583d9deddce Validity Not Before: Jan 2 10:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07370895f4aa5819310b1eac41a84b01881097d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:74:4f:81:69:a7:df:8a:04:c1:f1:a3:01:f2: a0:f2:73:49:64:0a:92:60:f6:be:d7:b5:b8:6f:2f: 9d:f5:d4:2f:9e:54:f6:39:bf:be:a7:8d:d1:fa:71: 2b:40:e8:99:a4:f5:78:90:ca:36:93:b0:19:c1:7e: a4:b7:9c:1d:ad:b2:e8:be:a7:ce:8f:24:8e:80:3b: f5:76:88:65:b6:34:51:4c:b7:da:5b:77:c3:b1:96: d8:7e:9b:ad:51:9b:fb:74:82:63:ed:0a:fe:45:99: 78:1a:73:79:89:83:01:78:91:97:9d:b6:66:63:c2: 7e:d7:9e:3e:40:da:d4:76:55:09:eb:e8:0d:f8:dd: ca:0a:4e:19:6d:37:50:a4:5a:cf:72:c8:5c:ec:59: ee:fd:02:b4:fb:6a:de:a8:1a:26:ce:e2:73:28:1d: da:68:33:eb:78:2e:61:18:ab:7b:d0:21:b8:2d:c7: b1:cf:12:f3:5d:d7:0a:44:e1:16:e4:40:d7:0c:a6: f1:85:14:87:a5:af:5b:33:08:6a:62:16:4a:8b:18: 12:7b:54:76:6d:9f:12:e7:2e:95:11:f5:8d:13:12: a0:d2:82:33:3b:b4:99:69:95:70:57:e1:a2:1b:49: 1f:36:87:d3:3e:50:11:e5:a0:0a:73:8c:60:b9:17: 47:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:37:08:95:F4:AA:58:19:31:0B:1E:AC:41:A8:4B:01:88:10:97:D5 X509v3 Authority Key Identifier: keyid:CD:2D:0E:39:D7:8F:C6:20:22:55:A5:B4:AD:B5:45:83:D9:DE:DD:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zS0OOdePxiAiVaW0rbVFg9ne3c4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/BzcIlfSqWBkxCx6sQahLAYgQl9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/51885b-5693-4892-a1d4-1a19792a1d26/1/zS0OOdePxiAiVaW0rbVFg9ne3c4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.23.119.0/24 194.150.226.0/23 Signature Algorithm: sha256WithRSAEncryption 2f:d7:89:da:4e:97:6e:7c:2f:b3:f3:bf:de:e3:4e:99:f1:10: db:42:d9:9e:c3:f6:df:51:2b:24:f7:e6:da:f4:9c:14:7a:53: 43:6f:96:28:09:c9:1f:d3:0f:1f:12:17:3d:c2:34:9a:dc:42: 40:d3:4d:20:4b:dc:31:63:62:04:7e:3c:48:af:ff:3c:63:52: 62:f0:44:ca:d2:d0:dc:57:eb:0c:03:75:e4:1c:f8:72:2c:4d: c1:4f:2a:48:9d:51:9e:24:ab:6c:10:7c:5a:e1:dd:be:ac:cb: 9a:fc:56:2a:1c:62:43:1b:28:50:90:39:96:6c:56:b4:fb:b0: 6f:80:5d:8a:b8:b1:bd:20:e7:73:9a:ea:0b:07:af:b7:e5:c3: d8:42:d0:de:63:0c:a6:35:17:93:7c:5f:16:17:94:c8:3d:81: 4f:21:b7:8e:c3:b3:22:c4:4f:b7:1f:00:bb:38:3b:40:8c:03: 14:17:3c:19:b4:0b:8d:9b:e0:e5:f2:0e:5b:49:87:f1:93:6e: 75:a6:e2:ec:82:fb:5d:e8:2f:b7:64:eb:76:c6:07:bb:08:e3: ca:6e:53:84:26:26:2e:86:62:8e:56:85:d9:67:17:42:da:09: 20:34:b5:2c:48:f5:13:7c:07:bf:c1:f8:6a:8b:51:0c:1a:28: 5a:3f:1d:a3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N2rMQLq882jFvC2EAWwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMmQwZTM5ZDc4ZmM2MjAyMjU1YTViNGFkYjU0NTgzZDlk ZWRkY2UwHhcNMjYwMTAyMTAxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzM3MDg5NWY0YWE1ODE5MzEwYjFlYWM0MWE4NGIwMTg4MTA5N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHRPgWmn34oEwfGjAfKg8nNJZAqS YPa+17W4by+d9dQvnlT2Ob++p43R+nErQOiZpPV4kMo2k7AZwX6kt5wdrbLovqfO jySOgDv1dohltjRRTLfaW3fDsZbYfputUZv7dIJj7Qr+RZl4GnN5iYMBeJGXnbZm Y8J+154+QNrUdlUJ6+gN+N3KCk4ZbTdQpFrPcshc7Fnu/QK0+2reqBomzuJzKB3a aDPreC5hGKt70CG4LcexzxLzXdcKROEW5EDXDKbxhRSHpa9bMwhqYhZKixgSe1R2 bZ8S5y6VEfWNExKg0oIzO7SZaZVwV+GiG0kfNofTPlAR5aAKc4xguRdH5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAc3CJX0qlgZMQserEGoSwGIEJfVMB8GA1UdIwQY MBaAFM0tDjnXj8YgIlWltK21RYPZ3t3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS81MTg4NWItNTY5My00ODkyLWExZDQt MWExOTc5MmExZDI2LzEvQnpjSWxmU3FXQmt4Q3g2c1FhaExBWWdRbDlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS81MTg4NWItNTY5My00ODkyLWExZDQtMWExOTc5MmExZDI2 LzEvelMwT09kZVB4aUFpVmFXMHJiVkZnOW5lM2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRd3AwQB wpbiMA0GCSqGSIb3DQEBCwUAA4IBAQAv14naTpdufC+z87/e406Z8RDbQtmew/bf USsk9+ba9JwUelNDb5YoCckf0w8fEhc9wjSa3EJA000gS9wxY2IEfjxIr/88Y1Ji 8ETK0tDcV+sMA3XkHPhyLE3BTypInVGeJKtsEHxa4d2+rMua/FYqHGJDGyhQkDmW bFa0+7BvgF2KuLG9IOdzmuoLB6+35cPYQtDeYwymNReTfF8WF5TIPYFPIbeOw7Mi xE+3HwC7ODtAjAMUFzwZtAuNm+Dl8g5bSYfxk251puLsgvtd6C+3ZOt2xge7COPK blOEJiYuhmKOVoXZZxdC2gkgNLUsSPUTfAe/wfhqi1EMGihaPx2j -----END CERTIFICATE-----Generated at Mon Feb 9 21:21:14 2026 by rpki-client