This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/bbj-gHI_NSxgfeUm9R2oZee2H7A.roa File: bbj-gHI_NSxgfeUm9R2oZee2H7A.roa (raw, json) Hash identifier: hYp+ief1ADpooPFUk5v8X2N0IMdf0TC4s8sF6EqLPy4= Subject key identifier: 6D:B8:FE:80:72:3F:35:2C:60:7D:E5:26:F5:1D:A8:65:E7:B6:1F:B0 Certificate issuer: /CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473 Certificate serial: 019B7F152D3CFB9906E90779E5DF30B91ED0 Authority key identifier: FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/bbj-gHI_NSxgfeUm9R2oZee2H7A.roa Signing time: Fri 02 Jan 2026 14:20:52 +0000 ROA not before: Fri 02 Jan 2026 14:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15669 IP address blocks: 91.237.102.0/23 maxlen: 23 2a03:4ba0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.mft rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2d:3c:fb:99:06:e9:07:79:e5:df:30:b9:1e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe0a7919a3ed7b13b5dab39c86e04a7a97231473 Validity Not Before: Jan 2 14:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6db8fe80723f352c607de526f51da865e7b61fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:9b:4c:c2:e2:9b:f0:21:86:02:37:16:39:9b: 05:23:fd:82:47:0f:2c:c5:ff:94:26:14:ce:fb:66: 2b:ce:40:02:f2:ae:c9:14:66:5e:77:bd:b9:88:5d: 4a:2c:63:52:82:c4:05:58:08:be:d0:a8:02:93:dd: 0d:05:ad:e8:ae:17:17:ac:5b:b9:2f:5b:16:09:d2: fd:56:1b:b2:80:25:9e:b0:46:17:7c:ab:5d:4c:8c: 0a:9f:3a:57:70:f8:f9:cd:6f:c9:57:05:1f:76:f7: 62:c8:e5:e9:2f:47:6b:14:93:05:25:33:d1:6b:dc: 92:b9:67:10:8f:5c:66:74:b2:9d:30:60:37:1c:ee: 22:96:79:c9:ab:33:90:d0:63:d2:fb:c6:f9:66:3a: 58:1f:46:22:51:76:73:01:75:1b:92:ad:06:40:90: 32:a2:b7:6c:8f:57:85:dc:25:24:60:6e:ba:c2:c6: c1:ca:be:f5:47:1c:72:56:69:3a:99:fc:cb:04:10: d4:a4:19:f6:5f:85:f5:26:9a:be:af:b5:4a:bd:5d: c1:30:b9:b0:5e:e1:45:ce:5a:52:b7:01:2f:58:30: 4a:ec:1e:d8:ab:cc:ea:bc:54:ac:3b:9a:08:c1:ee: 25:6b:e4:ad:46:af:54:24:4a:74:bd:bb:8d:81:26: 94:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B8:FE:80:72:3F:35:2C:60:7D:E5:26:F5:1D:A8:65:E7:B6:1F:B0 X509v3 Authority Key Identifier: keyid:FE:0A:79:19:A3:ED:7B:13:B5:DA:B3:9C:86:E0:4A:7A:97:23:14:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_gp5GaPtexO12rOchuBKepcjFHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/bbj-gHI_NSxgfeUm9R2oZee2H7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/48506a-33dc-4574-80f3-bde24a2a9ff5/1/_gp5GaPtexO12rOchuBKepcjFHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.102.0/23 IPv6: 2a03:4ba0::/48 Signature Algorithm: sha256WithRSAEncryption aa:98:48:a1:69:f4:67:37:70:cf:27:b1:68:4c:05:10:b2:92: 06:51:a5:67:91:01:3b:46:b3:4c:fb:cb:76:64:db:c6:49:cd: f1:a5:cc:7c:b7:41:47:cc:87:94:45:2c:b6:70:d6:c3:e2:db: a3:17:00:90:ab:3d:f9:cd:98:78:37:75:76:2c:53:d2:35:51: 15:6c:e9:4f:09:e1:62:d7:e8:eb:79:38:31:9a:0e:08:cd:99: c9:85:56:0e:ea:27:20:e8:e2:07:72:fb:8a:96:0f:25:67:8f: 34:9d:99:21:0c:0a:e0:ba:f3:30:dd:bf:c8:60:24:e2:44:1a: 3d:87:0e:52:5f:5c:e6:f7:68:9f:60:c8:d4:3d:1a:a5:50:f1: 3c:3d:5e:33:ad:53:94:3d:87:de:5b:10:cd:3d:c7:41:24:08: 1b:ec:76:8d:c0:c3:dc:18:dc:53:57:e9:ff:47:a2:f2:1e:3f: c5:d3:2e:fd:d3:a1:45:b0:fc:0b:b5:88:a7:3f:b7:98:a9:aa: 95:95:96:6a:8e:82:c0:ce:75:e7:2c:6b:58:24:2e:34:29:74: 40:f2:92:9e:43:40:89:94:6f:c3:a0:02:34:99:a2:0a:d3:e3: 30:55:58:1b:47:26:10:34:25:00:ee:03:ec:1f:0a:25:77:be: 20:cd:a4:57 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/FS08+5kG6Qd55d8wuR7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlMGE3OTE5YTNlZDdiMTNiNWRhYjM5Yzg2ZTA0YTdhOTcy MzE0NzMwHhcNMjYwMTAyMTQyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGI4ZmU4MDcyM2YzNTJjNjA3ZGU1MjZmNTFkYTg2NWU3YjYxZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZtMwuKb8CGGAjcWOZsFI/2CRw8s xf+UJhTO+2YrzkAC8q7JFGZed725iF1KLGNSgsQFWAi+0KgCk90NBa3orhcXrFu5 L1sWCdL9VhuygCWesEYXfKtdTIwKnzpXcPj5zW/JVwUfdvdiyOXpL0drFJMFJTPR a9ySuWcQj1xmdLKdMGA3HO4ilnnJqzOQ0GPS+8b5ZjpYH0YiUXZzAXUbkq0GQJAy ordsj1eF3CUkYG66wsbByr71RxxyVmk6mfzLBBDUpBn2X4X1Jpq+r7VKvV3BMLmw XuFFzlpStwEvWDBK7B7Yq8zqvFSsO5oIwe4la+StRq9UJEp0vbuNgSaUDwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFG24/oByPzUsYH3lJvUdqGXnth+wMB8GA1UdIwQY MBaAFP4KeRmj7XsTtdqznIbgSnqXIxRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS80ODUwNmEtMzNkYy00NTc0LTgwZjMt YmRlMjRhMmE5ZmY1LzEvYmJqLWdISV9OU3hnZmVVbTlSMm9aZWUySDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS80ODUwNmEtMzNkYy00NTc0LTgwZjMtYmRlMjRhMmE5ZmY1 LzEvX2dwNUdhUHRleE8xMnJPY2h1QktlcGNqRkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW+1mMA8E AgACMAkDBwAqA0ugAAAwDQYJKoZIhvcNAQELBQADggEBAKqYSKFp9Gc3cM8nsWhM BRCykgZRpWeRATtGs0z7y3Zk28ZJzfGlzHy3QUfMh5RFLLZw1sPi26MXAJCrPfnN mHg3dXYsU9I1URVs6U8J4WLX6Ot5ODGaDgjNmcmFVg7qJyDo4gdy+4qWDyVnjzSd mSEMCuC68zDdv8hgJOJEGj2HDlJfXOb3aJ9gyNQ9GqVQ8Tw9XjOtU5Q9h95bEM09 x0EkCBvsdo3Aw9wY3FNX6f9HovIeP8XTLv3ToUWw/Au1iKc/t5ipqpWVlmqOgsDO decsa1gkLjQpdEDykp5DQImUb8OgAjSZogrT4zBVWBtHJhA0JQDuA+wfCiV3viDN pFc= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:20 2026 by rpki-client