This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BF2_YBdGt3_GQ2yyAyyhV1gUZ_0.roa File: BF2_YBdGt3_GQ2yyAyyhV1gUZ_0.roa (raw, json) Hash identifier: VIxvGKVyush+13cmRWSrole+XTwG0HvyB5xb/P7LgHk= Subject key identifier: 04:5D:BF:60:17:46:B7:7F:C6:43:6C:B2:03:2C:A1:57:58:14:67:FD Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019B7C12D833D33E370DA34CFE94D7ABBC07 Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BF2_YBdGt3_GQ2yyAyyhV1gUZ_0.roa Signing time: Fri 02 Jan 2026 00:19:28 +0000 ROA not before: Fri 02 Jan 2026 00:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53850 IP address blocks: 5.83.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:d8:33:d3:3e:37:0d:a3:4c:fe:94:d7:ab:bc:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Jan 2 00:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=045dbf601746b77fc6436cb2032ca157581467fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1f:df:bc:a6:60:ff:c3:ff:7a:c2:a2:a7:58: d3:66:c9:0e:a9:e3:d1:ce:e2:3a:df:ed:f8:c6:4b: 32:b0:16:d2:1b:de:d8:30:e4:60:38:de:e6:3b:e4: b3:b0:c6:78:ef:de:d2:ef:59:e9:22:83:58:f4:1e: a0:af:08:4f:26:23:5e:29:5e:35:0f:90:54:42:07: bf:d4:89:73:f7:45:42:8f:d0:67:87:d2:b4:8c:1d: 27:80:dc:d9:af:e4:52:94:3e:04:ec:89:ca:4d:34: 32:c3:3d:c2:a8:b7:87:8f:93:42:89:1d:91:73:fa: aa:3c:41:92:82:33:54:9f:e1:d8:f5:6a:92:fe:25: 9d:3e:8e:7f:3a:a6:2e:fd:d3:e0:bb:da:90:32:b3: b2:5a:8f:33:b4:50:bb:8c:a7:c1:60:d0:ae:ab:4d: 4f:b2:d3:92:b8:c5:6b:1e:6d:f7:e5:c6:45:b5:35: cc:82:20:12:99:31:98:37:cc:00:64:fe:02:8c:4c: b0:d1:76:28:61:09:61:f2:b9:71:b0:7f:04:e9:c7: ad:50:57:a4:9e:dd:83:42:ce:1d:f2:44:2b:f9:af: 30:c1:75:5f:d9:36:93:71:1a:10:46:51:58:43:90: dd:f3:f1:41:3d:06:a2:97:71:2c:0f:95:56:bf:55: 5b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5D:BF:60:17:46:B7:7F:C6:43:6C:B2:03:2C:A1:57:58:14:67:FD X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/BF2_YBdGt3_GQ2yyAyyhV1gUZ_0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.83.144.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:35:99:e0:7c:8f:f5:cf:12:aa:10:81:84:2d:c1:81:51:10: 1e:db:9f:8d:13:a2:a2:e8:23:cc:b8:af:a8:cb:d5:78:28:66: b5:cb:4c:70:6c:15:2e:f7:04:c8:8c:4f:64:74:01:d5:48:b7: 9f:5c:f2:75:76:85:94:85:eb:dc:4b:ca:c1:7a:15:3c:1e:48: b2:d4:5d:1b:e8:1b:02:90:51:2d:01:fb:89:5d:3b:6e:2a:1b: 3e:3c:db:0d:94:35:b5:3c:bc:8d:88:17:a4:0e:2f:a1:43:4f: 07:0a:e5:6c:77:a7:1b:6f:92:2f:02:fb:52:05:a2:62:b2:cd: 06:c0:33:ce:51:57:f6:69:08:e0:de:5f:9a:c3:09:11:65:04: a7:11:30:91:06:aa:6b:83:a8:47:2f:15:6c:72:2e:3b:8a:9c: 16:54:19:bd:70:91:40:5f:e6:11:a1:40:11:fc:a8:96:73:ba: c9:11:7d:8c:a6:52:e7:0b:37:58:c1:d3:63:30:ad:e5:0c:2a: 69:84:f0:c9:dc:9e:b6:e5:5b:59:cf:37:dc:59:fa:7d:2f:eb: 12:50:4c:cb:6d:bd:a6:6a:bc:27:ec:43:26:10:b2:32:9b:db: bf:d0:a7:8c:eb:2a:9c:60:9d:c9:76:69:7d:1a:3b:72:96:9d: 5f:aa:af:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Etgz0z43DaNM/pTXq7wHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjYwMTAyMDAxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDVkYmY2MDE3NDZiNzdmYzY0MzZjYjIwMzJjYTE1NzU4MTQ2N2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx/fvKZg/8P/esKip1jTZskOqePR zuI63+34xksysBbSG97YMORgON7mO+SzsMZ4797S71npIoNY9B6grwhPJiNeKV41 D5BUQge/1Ilz90VCj9Bnh9K0jB0ngNzZr+RSlD4E7InKTTQywz3CqLeHj5NCiR2R c/qqPEGSgjNUn+HY9WqS/iWdPo5/OqYu/dPgu9qQMrOyWo8ztFC7jKfBYNCuq01P stOSuMVrHm335cZFtTXMgiASmTGYN8wAZP4CjEyw0XYoYQlh8rlxsH8E6cetUFek nt2DQs4d8kQr+a8wwXVf2TaTcRoQRlFYQ5Dd8/FBPQail3EsD5VWv1VbbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFARdv2AXRrd/xkNssgMsoVdYFGf9MB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvQkYyX1lCZEd0M19HUTJ5eUF5eWhWMWdVWl8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABVOQMA0G CSqGSIb3DQEBCwUAA4IBAQA9NZngfI/1zxKqEIGELcGBURAe25+NE6Ki6CPMuK+o y9V4KGa1y0xwbBUu9wTIjE9kdAHVSLefXPJ1doWUhevcS8rBehU8Hkiy1F0b6BsC kFEtAfuJXTtuKhs+PNsNlDW1PLyNiBekDi+hQ08HCuVsd6cbb5IvAvtSBaJiss0G wDPOUVf2aQjg3l+awwkRZQSnETCRBqprg6hHLxVsci47ipwWVBm9cJFAX+YRoUAR /KiWc7rJEX2MplLnCzdYwdNjMK3lDCpphPDJ3J625VtZzzfcWfp9L+sSUEzLbb2m arwn7EMmELIym9u/0KeM6yqcYJ3Jdml9Gjtylp1fqq+h -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:14 2026 by rpki-client