This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/BVYN4mpgVpQOoKQGpc1xRKPLhCo.roa File: BVYN4mpgVpQOoKQGpc1xRKPLhCo.roa (raw, json) Hash identifier: Z4P+UxXaSgUPpz9h0OSP10XtT9KI4gXF8z8dqug7dp4= Subject key identifier: 05:56:0D:E2:6A:60:56:94:0E:A0:A4:06:A5:CD:71:44:A3:CB:84:2A Certificate issuer: /CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182 Certificate serial: 019B791042DDD5E93DBAF8B75A1946919DB5 Authority key identifier: E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/BVYN4mpgVpQOoKQGpc1xRKPLhCo.roa Signing time: Thu 01 Jan 2026 10:17:47 +0000 ROA not before: Thu 01 Jan 2026 10:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 216.162.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.mft rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:42:dd:d5:e9:3d:ba:f8:b7:5a:19:46:91:9d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e93136b445fba1ccc1f43c43590e9bd9a5aa5182 Validity Not Before: Jan 1 10:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05560de26a6056940ea0a406a5cd7144a3cb842a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f2:a7:2b:b8:14:d9:29:20:e7:7b:e7:c3:69: 0a:da:cb:e3:3c:d0:8f:54:fc:67:65:34:ff:ab:cc: a4:e9:37:93:8d:0a:78:7d:43:81:cd:ca:14:da:a7: f0:8c:91:db:26:a5:97:38:e4:f0:bd:eb:14:b1:42: 5c:90:20:53:ff:dd:25:97:76:2c:54:a2:e5:6c:6c: b3:17:60:57:8c:69:82:7a:f3:6e:93:1e:48:1e:b2: df:db:a2:56:5b:8d:ea:79:73:44:07:77:b1:1f:a4: 1a:17:5c:eb:3b:36:ba:40:48:fd:27:f5:b2:7b:7a: c5:30:89:4f:89:b4:19:df:06:c2:0b:73:0f:cd:79: 40:e7:13:8a:64:8f:5c:c5:bf:8a:6f:e0:59:03:cc: 4a:86:61:41:97:b1:76:14:e6:5c:da:fe:19:68:fa: 17:5e:dd:2d:30:e2:fc:24:a7:9b:0d:ff:82:88:75: 28:b0:e7:4c:73:e6:5a:21:e6:fd:a9:fc:ff:e7:f2: 68:dc:e1:96:e1:06:a8:d7:ca:5a:12:af:b9:91:23: 4d:90:09:31:f8:30:5b:c8:24:15:a8:43:fa:a4:63: 5a:ee:65:8f:88:be:05:05:bd:bb:00:67:fc:40:be: d5:25:1a:b8:95:e4:72:bc:d3:47:ca:ca:29:13:c6: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:56:0D:E2:6A:60:56:94:0E:A0:A4:06:A5:CD:71:44:A3:CB:84:2A X509v3 Authority Key Identifier: keyid:E9:31:36:B4:45:FB:A1:CC:C1:F4:3C:43:59:0E:9B:D9:A5:AA:51:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TE2tEX7oczB9DxDWQ6b2aWqUYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/BVYN4mpgVpQOoKQGpc1xRKPLhCo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/db1a47-b264-4d26-9e60-e726d0d98052/1/6TE2tEX7oczB9DxDWQ6b2aWqUYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.162.200.0/24 Signature Algorithm: sha256WithRSAEncryption 66:2e:f6:b4:5e:78:62:6c:c5:eb:a9:0a:ba:20:81:48:86:6d: 3f:84:ac:21:f8:79:23:49:f9:14:1e:bb:7c:fe:c3:77:75:ad: 38:fe:01:42:de:bb:10:e6:a2:f6:b3:b1:7c:a5:7f:56:38:03: 46:76:9a:e5:d5:88:9b:a1:f3:e2:5f:d1:e4:4b:69:16:d2:f0: 4a:b7:f7:a5:f0:2a:9c:f7:62:e6:77:5b:51:ec:d1:81:9f:60: 18:9d:8a:74:c8:95:bd:c1:69:03:61:08:61:ce:00:fa:85:9d: ef:55:51:e3:93:77:ac:1f:8a:89:c4:a0:7c:3d:2d:2e:1f:07: 79:c9:d9:c4:f1:29:a2:64:37:e6:d1:a4:d3:fc:75:e7:06:08: ac:4b:77:bd:a8:7d:2b:f4:78:eb:cd:39:01:4d:8b:69:f3:ca: 9a:82:e7:18:59:a3:49:96:e3:c7:79:10:8d:5b:df:7b:a3:4f: ac:21:b9:61:4f:fa:e8:ce:c9:61:02:06:ba:1c:76:73:ea:98: 13:d5:fe:a4:ad:da:69:8f:3a:61:93:a1:b5:7b:27:17:41:ea: fd:d6:a9:c0:00:01:89:55:17:57:99:dd:5b:59:97:2f:58:a2: d4:c4:9a:3b:78:25:24:9b:34:43:4e:5e:34:46:7c:c6:12:ad: 4c:12:5c:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EELd1ek9uvi3WhlGkZ21MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MzEzNmI0NDVmYmExY2NjMWY0M2M0MzU5MGU5YmQ5YTVh YTUxODIwHhcNMjYwMTAxMTAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTU2MGRlMjZhNjA1Njk0MGVhMGE0MDZhNWNkNzE0NGEzY2I4NDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/KnK7gU2Skg53vnw2kK2svjPNCP VPxnZTT/q8yk6TeTjQp4fUOBzcoU2qfwjJHbJqWXOOTwvesUsUJckCBT/90ll3Ys VKLlbGyzF2BXjGmCevNukx5IHrLf26JWW43qeXNEB3exH6QaF1zrOza6QEj9J/Wy e3rFMIlPibQZ3wbCC3MPzXlA5xOKZI9cxb+Kb+BZA8xKhmFBl7F2FOZc2v4ZaPoX Xt0tMOL8JKebDf+CiHUosOdMc+ZaIeb9qfz/5/Jo3OGW4Qao18paEq+5kSNNkAkx +DBbyCQVqEP6pGNa7mWPiL4FBb27AGf8QL7VJRq4leRyvNNHysopE8ZyWQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAVWDeJqYFaUDqCkBqXNcUSjy4QqMB8GA1UdIwQY MBaAFOkxNrRF+6HMwfQ8Q1kOm9mlqlGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlRFMnRFWDdvY3pCOUR4RFdRNmIyYVdxVVlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kYjFhNDctYjI2NC00ZDI2LTllNjAt ZTcyNmQwZDk4MDUyLzEvQlZZTjRtcGdWcFFPb0tRR3BjMXhSS1BMaENvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9kYjFhNDctYjI2NC00ZDI2LTllNjAtZTcyNmQwZDk4MDUy LzEvNlRFMnRFWDdvY3pCOUR4RFdRNmIyYVdxVVlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2KLIMA0G CSqGSIb3DQEBCwUAA4IBAQBmLva0XnhibMXrqQq6IIFIhm0/hKwh+HkjSfkUHrt8 /sN3da04/gFC3rsQ5qL2s7F8pX9WOANGdprl1YibofPiX9HkS2kW0vBKt/el8Cqc 92Lmd1tR7NGBn2AYnYp0yJW9wWkDYQhhzgD6hZ3vVVHjk3esH4qJxKB8PS0uHwd5 ydnE8SmiZDfm0aTT/HXnBgisS3e9qH0r9HjrzTkBTYtp88qagucYWaNJluPHeRCN W997o0+sIblhT/rozslhAga6HHZz6pgT1f6krdppjzphk6G1eycXQer91qnAAAGJ VRdXmd1bWZcvWKLUxJo7eCUkmzRDTl40RnzGEq1MElx2 -----END CERTIFICATE-----Generated at Fri Jan 9 06:21:11 2026 by rpki-client