This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/bfl5i33VnepKTSpVlMowIB4zyhs.roa File: bfl5i33VnepKTSpVlMowIB4zyhs.roa (raw, json) Hash identifier: RXCvBsy+xbb7UmylguLxwJtnEQD65NrGc/0bgE6XrUo= Subject key identifier: 6D:F9:79:8B:7D:D5:9D:EA:4A:4D:2A:55:94:CA:30:20:1E:33:CA:1B Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EC16B2E4FEC2EB1A2428FE062703A Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/bfl5i33VnepKTSpVlMowIB4zyhs.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51383 IP address blocks: 195.34.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c1:6b:2e:4f:ec:2e:b1:a2:42:8f:e0:62:70:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6df9798b7dd59dea4a4d2a5594ca30201e33ca1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:88:fe:82:89:27:c4:cf:9d:d7:c4:a9:57:92: a4:4b:15:85:54:b7:75:75:16:20:2c:87:76:4c:42: 47:3b:02:87:f7:a9:4d:c7:7e:f5:30:69:1d:7b:aa: 99:93:b2:6d:82:00:f6:f3:a8:31:43:4a:4c:b6:46: 57:45:8b:13:68:0a:53:25:ed:41:f5:3c:40:82:47: 6d:16:52:95:75:81:e1:b8:cd:04:ea:80:f1:9e:64: 94:2d:a8:ba:10:ef:58:4b:5a:a1:bb:f7:fc:d3:e6: 9d:c5:bf:bb:1e:60:2a:85:73:0f:e8:df:5c:c1:b5: 37:fd:1d:c7:9a:b9:81:be:13:9d:39:bc:8f:c4:b5: b2:db:e9:c3:b0:57:0f:3f:0f:8d:7b:97:7e:06:4f: 58:91:5e:78:e8:fd:3a:b9:f9:4d:a3:a9:c7:7a:93: e2:35:19:02:2d:87:d8:d3:24:39:b7:d3:ea:70:00: d8:64:75:d8:11:5e:d1:17:9f:54:34:11:dd:21:b6: b7:4b:f6:e3:d8:f3:19:9b:82:dd:f7:21:d8:0e:28: 1c:f9:02:cf:68:a0:85:92:22:8d:e4:6d:1b:23:6b: b1:df:7d:bc:41:94:03:65:dd:eb:4b:64:fe:c5:a2: 9e:c4:d3:b2:5d:c2:d5:72:32:ea:13:20:f6:9c:00: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F9:79:8B:7D:D5:9D:EA:4A:4D:2A:55:94:CA:30:20:1E:33:CA:1B X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/bfl5i33VnepKTSpVlMowIB4zyhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.34.97.0/24 Signature Algorithm: sha256WithRSAEncryption 23:74:3e:33:2d:1d:55:2d:27:6c:00:b0:2d:4c:1c:56:ce:16: 8b:90:13:e5:68:34:d4:b9:54:11:bb:a2:ce:b4:28:1d:33:5f: 63:95:4b:3e:fe:a6:73:ee:22:19:d3:c0:d3:4f:0e:49:95:4d: 5d:2d:aa:76:3b:26:82:51:c2:c1:20:fe:c2:f4:1a:e0:a6:5a: e4:64:58:69:18:2c:90:58:79:b0:f5:89:20:2b:6b:07:35:3d: 16:80:0f:bf:68:7f:09:bf:18:81:3f:91:4e:27:ac:cc:7b:dc: 82:42:92:a7:e8:9a:ff:49:8a:de:c1:a0:4f:89:69:64:b5:a7: 80:02:4a:0e:93:9d:ff:9d:0e:54:11:19:a7:a6:ef:36:f9:27: ce:9c:b5:5e:56:42:37:dd:ee:c5:37:cb:90:19:ec:15:df:f5: 55:1d:16:c8:2b:81:15:5a:26:76:98:f1:63:13:92:0b:de:aa: 40:fb:fc:2a:6c:26:6c:79:70:ee:2f:89:b3:4b:f4:7a:89:09: a7:59:85:1b:11:48:a0:b0:ea:f3:02:99:04:91:3d:63:99:51: de:11:2e:6a:e5:c0:89:ec:bf:67:f8:62:23:13:f8:d1:47:1d: 70:cd:28:42:23:49:7a:5a:46:8e:8c:e7:c7:df:a2:59:e0:2a: d6:a9:d1:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fsFrLk/sLrGiQo/gYnA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGY5Nzk4YjdkZDU5ZGVhNGE0ZDJhNTU5NGNhMzAyMDFlMzNjYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYj+goknxM+d18SpV5KkSxWFVLd1 dRYgLId2TEJHOwKH96lNx371MGkde6qZk7JtggD286gxQ0pMtkZXRYsTaApTJe1B 9TxAgkdtFlKVdYHhuM0E6oDxnmSULai6EO9YS1qhu/f80+adxb+7HmAqhXMP6N9c wbU3/R3HmrmBvhOdObyPxLWy2+nDsFcPPw+Ne5d+Bk9YkV546P06uflNo6nHepPi NRkCLYfY0yQ5t9PqcADYZHXYEV7RF59UNBHdIba3S/bj2PMZm4Ld9yHYDigc+QLP aKCFkiKN5G0bI2ux3328QZQDZd3rS2T+xaKexNOyXcLVcjLqEyD2nADgfQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG35eYt91Z3qSk0qVZTKMCAeM8obMB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvYmZsNWkzM1ZuZXBLVFNwVmxNb3dJQjR6eWhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyJhMA0G CSqGSIb3DQEBCwUAA4IBAQAjdD4zLR1VLSdsALAtTBxWzhaLkBPlaDTUuVQRu6LO tCgdM19jlUs+/qZz7iIZ08DTTw5JlU1dLap2OyaCUcLBIP7C9BrgplrkZFhpGCyQ WHmw9YkgK2sHNT0WgA+/aH8JvxiBP5FOJ6zMe9yCQpKn6Jr/SYrewaBPiWlktaeA AkoOk53/nQ5UERmnpu82+SfOnLVeVkI33e7FN8uQGewV3/VVHRbIK4EVWiZ2mPFj E5IL3qpA+/wqbCZseXDuL4mzS/R6iQmnWYUbEUigsOrzApkEkT1jmVHeES5q5cCJ 7L9n+GIjE/jRRx1wzShCI0l6WkaOjOfH36JZ4CrWqdFU -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:31 2026 by rpki-client