This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/bvjL4ilRFW0KRgukAA7c6bj--pM.roa File: bvjL4ilRFW0KRgukAA7c6bj--pM.roa (raw, json) Hash identifier: NB7wiQjjbBAzpwPNdbh06lraiRIpqpLN7dXPm6C9Qc0= Subject key identifier: 6E:F8:CB:E2:29:51:15:6D:0A:46:0B:A4:00:0E:DC:E9:B8:FE:FA:93 Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb Certificate serial: 019B7F84809FA2AD0991258C1E03602DF9A2 Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/bvjL4ilRFW0KRgukAA7c6bj--pM.roa Signing time: Fri 02 Jan 2026 16:22:28 +0000 ROA not before: Fri 02 Jan 2026 16:22:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.16.97.0/24 maxlen: 24 185.16.98.0/24 maxlen: 24 185.16.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:80:9f:a2:ad:09:91:25:8c:1e:03:60:2d:f9:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb Validity Not Before: Jan 2 16:22:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ef8cbe22951156d0a460ba4000edce9b8fefa93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:23:95:23:26:87:4c:4d:ec:c7:b8:42:e4:7d: a3:0a:f9:8f:a5:50:ba:82:c4:28:17:54:b9:58:cd: e8:21:f0:7d:c5:07:cb:24:f5:67:a6:b6:f2:00:59: 8f:af:1b:a9:58:37:0e:72:99:ce:0a:5b:de:ad:74: 7a:18:c9:9f:ac:4f:c5:19:b2:2f:66:92:36:d7:b1: 0b:5b:2a:94:7b:1d:3f:ed:46:39:e4:ad:5d:29:b3: 47:f8:69:81:13:b7:44:03:28:62:60:46:53:79:c0: c5:4e:9d:0a:b6:63:bb:59:cf:54:d4:16:de:36:e4: 6a:64:9b:ad:f0:58:9f:ba:59:94:11:4b:24:89:de: ff:e7:47:e0:cb:82:c0:39:f5:64:af:73:bc:f8:bd: d6:e8:f3:87:68:2b:55:5c:69:8c:0a:c0:fb:13:15: cf:83:20:29:a3:67:89:a9:a3:1d:76:c7:8e:2d:b7: 29:dc:b5:91:81:1f:67:2b:07:fa:cf:5e:d1:6a:56: 36:30:33:7a:ba:de:09:d7:ef:19:aa:6d:51:ee:11: a6:f5:2c:da:00:ee:66:7f:48:41:1e:b8:b5:b9:d7: cd:49:1c:3c:0e:7b:61:73:de:e7:a4:fc:01:48:e9: 30:df:75:7e:06:96:ac:55:d5:1d:3a:4b:ec:d1:29: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F8:CB:E2:29:51:15:6D:0A:46:0B:A4:00:0E:DC:E9:B8:FE:FA:93 X509v3 Authority Key Identifier: keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/bvjL4ilRFW0KRgukAA7c6bj--pM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.16.97.0-185.16.99.255 Signature Algorithm: sha256WithRSAEncryption 72:24:65:62:48:2b:37:21:1d:44:b9:8d:10:94:3b:a5:7e:4d: 86:16:a3:38:0f:7f:1b:11:83:2d:e5:8c:c7:f3:22:6b:14:23: b0:4f:8d:b8:a8:c6:b6:11:d5:07:80:45:8d:14:ca:d3:cd:a2: 1c:ad:66:36:27:73:9b:44:53:78:f3:fb:85:3e:cc:ae:07:52: 75:f6:4f:54:50:30:9d:be:74:b0:e4:76:36:8c:23:e8:eb:a1: dc:2c:23:10:2a:02:72:45:92:63:96:1d:67:53:1b:23:c7:b9: 22:b7:47:1e:80:54:08:5f:03:cc:7c:f1:80:7b:66:25:a4:06: e5:c7:be:1b:2a:d1:88:c8:91:94:67:f9:32:c8:a7:1d:af:df: 6b:1a:b3:35:32:fc:e3:5a:e0:36:51:a5:f1:16:67:41:da:ac: 54:10:bd:96:f7:b2:c4:91:83:7f:a5:50:26:9d:53:e1:41:75: 23:ac:8c:7e:c6:62:12:ea:3e:e3:77:87:b7:84:ea:5f:3c:44: 3a:fc:26:7a:17:a7:99:04:06:e2:38:79:8f:57:fc:78:50:48: 37:d8:ac:97:9f:3c:ec:af:78:9c:0b:4c:01:06:d8:20:cb:a2: 6c:cd:89:35:10:7e:43:6d:6f:3b:fb:87:5f:74:d7:64:fe:83: 2f:10:5b:01 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/hICfoq0JkSWMHgNgLfmiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlZWIwYWVjNjM5NDlmNDEyNWM3M2FhNjE3N2VhMGI3MjFk NTI3YmIwHhcNMjYwMTAyMTYyMjI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWY4Y2JlMjI5NTExNTZkMGE0NjBiYTQwMDBlZGNlOWI4ZmVmYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiOVIyaHTE3sx7hC5H2jCvmPpVC6 gsQoF1S5WM3oIfB9xQfLJPVnprbyAFmPrxupWDcOcpnOClverXR6GMmfrE/FGbIv ZpI217ELWyqUex0/7UY55K1dKbNH+GmBE7dEAyhiYEZTecDFTp0KtmO7Wc9U1Bbe NuRqZJut8FifulmUEUskid7/50fgy4LAOfVkr3O8+L3W6POHaCtVXGmMCsD7ExXP gyApo2eJqaMddseOLbcp3LWRgR9nKwf6z17RalY2MDN6ut4J1+8Zqm1R7hGm9Sza AO5mf0hBHri1udfNSRw8Dnthc97npPwBSOkw33V+BpasVdUdOkvs0SmrjwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFG74y+IpURVtCkYLpAAO3Om4/vqTMB8GA1UdIwQY MBaAFH7rCuxjlJ9BJcc6phd+oLch1Se7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMt ZDI2ZDdkNGMyNTA1LzEvYnZqTDRpbFJGVzBLUmd1a0FBN2M2YmotLXBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMtZDI2ZDdkNGMyNTA1 LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5EGED BAK5EGAwDQYJKoZIhvcNAQELBQADggEBAHIkZWJIKzchHUS5jRCUO6V+TYYWozgP fxsRgy3ljMfzImsUI7BPjbioxrYR1QeARY0UytPNohytZjYnc5tEU3jz+4U+zK4H UnX2T1RQMJ2+dLDkdjaMI+jrodwsIxAqAnJFkmOWHWdTGyPHuSK3Rx6AVAhfA8x8 8YB7ZiWkBuXHvhsq0YjIkZRn+TLIpx2v32saszUy/ONa4DZRpfEWZ0HarFQQvZb3 ssSRg3+lUCadU+FBdSOsjH7GYhLqPuN3h7eE6l88RDr8JnoXp5kEBuI4eY9X/HhQ SDfYrJefPOyveJwLTAEG2CDLomzNiTUQfkNtbzv7h19012T+gy8QWwE= -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:15 2026 by rpki-client