This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/bjhvb0BbgpYztttOjwclzlXFPK0.roa File: bjhvb0BbgpYztttOjwclzlXFPK0.roa (raw, json) Hash identifier: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw= Subject key identifier: 6E:38:6F:6F:40:5B:82:96:33:B6:DB:4E:8F:07:25:CE:55:C5:3C:AD Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c Certificate serial: 019B797E7072097FA07113D7558E47E66FEC Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/bjhvb0BbgpYztttOjwclzlXFPK0.roa Signing time: Thu 01 Jan 2026 12:18:07 +0000 ROA not before: Thu 01 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 164.18.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:70:72:09:7f:a0:71:13:d7:55:8e:47:e6:6f:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597a01de87e011803f890ae17749020f995f140c Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e386f6f405b829633b6db4e8f0725ce55c53cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:45:4d:b2:bb:fe:ca:0a:c8:3c:7b:7d:0f: 81:4a:7b:5c:2d:55:d5:d8:d8:2c:48:65:b0:f2:24: 1d:8b:64:e4:4c:87:99:fc:d1:1b:b4:5c:8a:99:8a: 2b:c2:f3:9f:f7:39:75:3d:0f:ac:20:64:32:f0:60: 9c:b0:2c:42:e7:39:c2:51:9e:0b:40:2f:48:00:99: a9:d8:e8:97:29:46:07:06:eb:1c:c0:8c:58:ed:0f: fa:c5:96:a6:77:d2:ec:11:31:56:93:8f:0f:da:1f: 68:ae:71:d7:71:69:18:42:cd:98:79:c7:9a:b5:18: c1:c0:3d:57:94:4d:d5:5d:5a:d9:11:0a:84:93:f0: 33:0d:5a:37:7e:d6:e7:36:b6:78:62:78:70:d3:3a: 8b:a1:4a:0a:b9:30:5b:0f:50:65:38:3f:c0:f5:22: 68:93:4c:18:f1:fa:47:69:e6:57:6b:da:11:e8:a6: 2b:8b:8b:c8:c6:f7:e8:2b:a5:6b:68:2a:2f:ef:63: cc:fa:c7:e6:c5:ce:82:6d:f8:5d:f0:ba:27:90:6d: 84:44:3a:ac:c6:c9:d7:aa:a6:6f:18:29:89:28:3c: a9:18:3b:b9:fe:34:12:90:46:fd:75:b0:7b:b0:52: ad:2b:66:87:71:ec:aa:e2:42:5c:47:d5:be:1e:57: 6c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:38:6F:6F:40:5B:82:96:33:B6:DB:4E:8F:07:25:CE:55:C5:3C:AD X509v3 Authority Key Identifier: keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/bjhvb0BbgpYztttOjwclzlXFPK0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.18.48.0/24 Signature Algorithm: sha256WithRSAEncryption 36:33:ff:5b:f1:f3:38:4d:08:58:63:8c:d5:fa:74:ef:ea:83: c9:24:f7:d5:dc:76:92:a1:b3:6e:8e:17:b7:7a:04:a0:8f:d5: 21:0f:60:dd:38:5c:7f:1d:a8:3b:5f:50:52:27:7a:20:f0:58: 5b:0c:aa:51:d3:18:73:ac:13:4f:1d:0d:8a:10:89:ae:53:c5: 2d:31:9f:d9:57:f4:11:f1:10:8a:aa:a7:4b:18:b7:fd:72:8c: 4e:8a:d4:ca:e8:d7:a7:62:d7:ee:c9:bd:b7:51:11:be:2d:3d: 93:60:b6:e3:f3:53:f4:ab:14:d4:56:47:cc:69:32:62:ae:87: 5b:c7:7d:92:a3:ce:7a:fa:65:f7:d6:f2:67:3e:7c:20:25:c4: d3:53:69:f7:10:f2:38:e5:28:88:b0:34:ae:79:04:bf:e8:4c: a4:6f:b8:35:fc:7c:bf:d5:ab:89:d4:5d:f0:b6:3a:9d:27:11: 06:67:d4:00:39:9b:0d:49:b2:49:b7:f3:fc:49:b7:8d:82:6f: e3:21:62:b0:e7:c9:70:5f:25:c9:8d:4c:40:11:3a:59:6d:d5: 21:95:51:3a:38:ef:c0:0d:63:df:39:59:76:ac:13:fe:61:f1: ef:72:73:01:ec:56:8c:a6:4c:74:8d:95:c4:b4:4b:aa:46:14: 1d:fc:62:06 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fnByCX+gcRPXVY5H5m/sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1 ZjE0MGMwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTM4NmY2ZjQwNWI4Mjk2MzNiNmRiNGU4ZjA3MjVjZTU1YzUzY2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpBFTbK7/soKyDx7fQ+BSntcLVXV 2NgsSGWw8iQdi2TkTIeZ/NEbtFyKmYorwvOf9zl1PQ+sIGQy8GCcsCxC5znCUZ4L QC9IAJmp2OiXKUYHBuscwIxY7Q/6xZamd9LsETFWk48P2h9ornHXcWkYQs2Yecea tRjBwD1XlE3VXVrZEQqEk/AzDVo3ftbnNrZ4Ynhw0zqLoUoKuTBbD1BlOD/A9SJo k0wY8fpHaeZXa9oR6KYri4vIxvfoK6VraCov72PM+sfmxc6Cbfhd8LonkG2ERDqs xsnXqqZvGCmJKDypGDu5/jQSkEb9dbB7sFKtK2aHceyq4kJcR9W+HldstQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG44b29AW4KWM7bbTo8HJc5VxTytMB8GA1UdIwQY MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt NzM1MzNkZTA5OWMzLzEvYmpodmIwQmJncFl6dHR0T2p3Y2x6bFhGUEswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApBIwMA0G CSqGSIb3DQEBCwUAA4IBAQA2M/9b8fM4TQhYY4zV+nTv6oPJJPfV3HaSobNujhe3 egSgj9UhD2DdOFx/Hag7X1BSJ3og8FhbDKpR0xhzrBNPHQ2KEImuU8UtMZ/ZV/QR 8RCKqqdLGLf9coxOitTK6NenYtfuyb23URG+LT2TYLbj81P0qxTUVkfMaTJirodb x32So856+mX31vJnPnwgJcTTU2n3EPI45SiIsDSueQS/6Eykb7g1/Hy/1auJ1F3w tjqdJxEGZ9QAOZsNSbJJt/P8SbeNgm/jIWKw58lwXyXJjUxAETpZbdUhlVE6OO/A DWPfOVl2rBP+YfHvcnMB7FaMpkx0jZXEtEuqRhQd/GIG -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:14 2026 by rpki-client