This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa File: BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa (raw, json) Hash identifier: Eq+302MtaECvEBDa/YpMg5c4RklP5Ti22QL+CNoSaAQ= Subject key identifier: 04:1F:F3:E2:76:56:49:12:90:60:6A:06:C4:2D:E2:B9:A0:37:60:49 Certificate issuer: /CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e Certificate serial: 019B797E7A0843EE2B800E28603808C81258 Authority key identifier: 32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa Signing time: Thu 01 Jan 2026 12:18:10 +0000 ROA not before: Thu 01 Jan 2026 12:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8823 IP address blocks: 77.76.192.0/18 maxlen: 18 185.45.240.0/22 maxlen: 22 212.63.64.0/19 maxlen: 19 213.137.192.0/19 maxlen: 19 213.214.0.0/19 maxlen: 19 2001:ad8::/29 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.mft rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:7a:08:43:ee:2b:80:0e:28:60:38:08:c8:12:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3250d58d77b0fa5dcec4f42ae96f347bc80daa3e Validity Not Before: Jan 1 12:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=041ff3e27656491290606a06c42de2b9a0376049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f1:ec:cc:e3:12:f0:e3:21:b4:f8:54:76:ae: 28:01:3a:30:0e:c0:bf:70:82:f7:34:b0:c3:06:25: 18:d5:97:5c:a0:92:ec:65:71:01:37:f5:bb:6e:9f: 69:b6:2b:22:a6:d8:95:c7:af:29:a2:6f:8a:0e:0b: a7:8b:1c:62:eb:8d:94:50:86:5c:96:25:f5:1b:39: 53:09:ad:8e:d0:d1:f0:31:6b:df:8f:a1:57:53:26: a3:bf:5f:41:59:2d:f2:23:75:4a:0b:e1:51:14:9c: 3d:7f:8c:cd:a0:76:ae:a1:d9:45:7c:37:d0:6a:d3: 77:8b:f5:0d:50:8e:df:49:4b:45:f9:96:17:22:1d: 33:a5:88:75:05:f0:68:3f:1f:13:cc:a1:07:b3:e6: 96:c7:45:23:66:3c:86:86:50:6a:9b:45:bb:cf:b6: 80:66:15:a0:bf:93:fb:62:fa:c0:3d:b8:46:fd:71: e7:19:fb:3b:08:a0:be:48:ea:5c:0d:c0:33:99:c6: 5e:e9:14:89:68:43:42:b0:0c:6d:25:fd:a1:77:c7: fb:8a:a4:ee:ec:0f:38:fc:77:c4:d4:b0:11:a6:c6: e5:33:09:42:f5:8d:28:fa:8b:33:fd:c7:5b:f4:75: 66:65:05:b1:2d:ac:ee:b1:d4:20:55:fd:50:8a:7e: 74:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1F:F3:E2:76:56:49:12:90:60:6A:06:C4:2D:E2:B9:A0:37:60:49 X509v3 Authority Key Identifier: keyid:32:50:D5:8D:77:B0:FA:5D:CE:C4:F4:2A:E9:6F:34:7B:C8:0D:AA:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlDVjXew-l3OxPQq6W80e8gNqj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/BB_z4nZWSRKQYGoGxC3iuaA3YEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b9fce7-0927-4847-b605-3e30a4c4b826/1/MlDVjXew-l3OxPQq6W80e8gNqj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.76.192.0/18 185.45.240.0/22 212.63.64.0/19 213.137.192.0/19 213.214.0.0/19 IPv6: 2001:ad8::/29 Signature Algorithm: sha256WithRSAEncryption 35:3e:c7:b8:a5:f7:b8:af:5a:04:01:6b:a2:2e:27:ad:4a:c4: 17:84:f8:83:9a:49:cd:32:d2:58:ee:8d:bc:51:d3:a6:e6:aa: 76:6e:cb:89:9a:27:3b:73:a1:da:38:e2:6d:29:94:68:4e:cc: 39:2f:94:01:5a:0f:dd:47:7a:5e:a8:d6:8c:81:c6:25:d7:fe: 66:e3:f7:e6:6f:9e:27:29:71:34:31:ad:ae:f5:97:5e:79:99: 28:d4:7c:e3:4a:71:c5:1c:5f:0f:0b:7b:a9:30:5c:33:f2:95: e4:79:be:f2:1a:b8:8d:03:aa:8f:0e:60:3f:b2:9e:b1:cc:9d: c4:65:e8:69:aa:6b:5e:07:15:6f:a3:3f:f3:a5:3b:4d:7c:45: d5:cf:65:9a:9a:89:04:8d:c4:ab:69:27:19:ac:4f:be:66:9a: 64:57:2e:fa:63:5b:8f:bd:92:48:c3:f4:7a:d1:19:56:57:98: da:2c:51:7f:fb:7b:0e:41:dd:29:d9:9a:39:74:57:ac:8d:9a: 1e:45:e5:04:53:a5:c7:69:09:e8:47:58:87:d6:11:4e:48:2c: 85:1f:f1:da:6b:52:87:7b:b7:fd:65:49:81:fc:fe:fa:a8:f8: b0:96:b4:60:ff:86:0b:0a:9a:ba:e0:e7:09:a6:90:f9:86:42: 1f:95:fb:ee -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt5fnoIQ+4rgA4oYDgIyBJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTBkNThkNzdiMGZhNWRjZWM0ZjQyYWU5NmYzNDdiYzgw ZGFhM2UwHhcNMjYwMTAxMTIxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDFmZjNlMjc2NTY0OTEyOTA2MDZhMDZjNDJkZTJiOWEwMzc2MDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvHszOMS8OMhtPhUdq4oATowDsC/ cIL3NLDDBiUY1ZdcoJLsZXEBN/W7bp9ptisiptiVx68pom+KDgunixxi642UUIZc liX1GzlTCa2O0NHwMWvfj6FXUyajv19BWS3yI3VKC+FRFJw9f4zNoHauodlFfDfQ atN3i/UNUI7fSUtF+ZYXIh0zpYh1BfBoPx8TzKEHs+aWx0UjZjyGhlBqm0W7z7aA ZhWgv5P7YvrAPbhG/XHnGfs7CKC+SOpcDcAzmcZe6RSJaENCsAxtJf2hd8f7iqTu 7A84/HfE1LARpsblMwlC9Y0o+osz/cdb9HVmZQWxLazusdQgVf1Qin50pwIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFAQf8+J2VkkSkGBqBsQt4rmgN2BJMB8GA1UdIwQY MBaAFDJQ1Y13sPpdzsT0KulvNHvIDao+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUt M2UzMGE0YzRiODI2LzEvQkJfejRuWldTUktRWUdvR3hDM2l1YUEzWUVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9iOWZjZTctMDkyNy00ODQ3LWI2MDUtM2UzMGE0YzRiODI2 LzEvTWxEVmpYZXctbDNPeFBRcTZXODBlOGdOcWo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQGTUzAAwQC uS3wAwQF1D9AAwQF1YnAAwQF1dYAMA0EAgACMAcDBQMgAQrYMA0GCSqGSIb3DQEB CwUAA4IBAQA1Pse4pfe4r1oEAWuiLietSsQXhPiDmknNMtJY7o28UdOm5qp2bsuJ mic7c6HaOOJtKZRoTsw5L5QBWg/dR3peqNaMgcYl1/5m4/fmb54nKXE0Ma2u9Zde eZko1HzjSnHFHF8PC3upMFwz8pXkeb7yGriNA6qPDmA/sp6xzJ3EZehpqmteBxVv oz/zpTtNfEXVz2WamokEjcSraScZrE++ZppkVy76Y1uPvZJIw/R60RlWV5jaLFF/ +3sOQd0p2Zo5dFesjZoeReUEU6XHaQnoR1iH1hFOSCyFH/Haa1KHe7f9ZUmB/P76 qPiwlrRg/4YLCpq64OcJppD5hkIflfvu -----END CERTIFICATE-----Generated at Mon Feb 9 20:02:51 2026 by rpki-client