This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/BjHa1X3k3VpfH87wEamUFGRGttM.roa File: BjHa1X3k3VpfH87wEamUFGRGttM.roa (raw, json) Hash identifier: HzjcC+9T1MWWBuaDRK2Ju71/whnWv7iH7QTafN9++n4= Subject key identifier: 06:31:DA:D5:7D:E4:DD:5A:5F:1F:CE:F0:11:A9:94:14:64:46:B6:D3 Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Certificate serial: 019B7F854E9F7FCA047A53F3405ABEBFA569 Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/BjHa1X3k3VpfH87wEamUFGRGttM.roa Signing time: Fri 02 Jan 2026 16:23:21 +0000 ROA not before: Fri 02 Jan 2026 16:23:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209963 IP address blocks: 185.147.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:4e:9f:7f:ca:04:7a:53:f3:40:5a:be:bf:a5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8 Validity Not Before: Jan 2 16:23:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0631dad57de4dd5a5f1fcef011a994146446b6d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:30:1c:c5:69:37:55:98:78:dc:0b:4e:3b:5e: be:23:ba:1a:16:67:2c:ab:5f:51:86:9c:1f:04:16: 19:30:dd:14:53:58:29:fa:3e:e4:16:9c:4f:dc:fd: b5:1e:f5:be:68:37:f1:b0:60:67:da:57:36:07:c4: e6:08:89:36:05:17:f4:4f:77:34:10:9a:23:0c:47: a4:d3:1a:64:bb:f5:bf:3f:2a:bf:52:66:b3:4c:9b: 8b:36:7b:5f:18:48:97:65:b1:7e:f6:72:0b:54:69: 85:94:3d:59:83:ed:54:68:d5:54:6b:39:7c:c3:01: 17:0f:6d:59:23:03:dc:d9:05:ad:00:26:10:3c:fe: 79:66:aa:84:27:a8:d7:d2:e9:64:35:32:69:31:49: 99:c6:dd:4b:fc:84:06:c0:53:7f:20:6d:a9:72:0c: ac:07:fd:d5:34:c2:d1:b5:48:5f:86:7a:c7:df:1b: 52:2e:e2:01:c7:01:5c:c6:2a:49:ae:1f:a0:80:c2: 4d:9a:d9:2a:1f:72:3b:3a:fb:ab:0f:1c:b6:e6:5b: 3d:43:27:20:ea:ab:e4:2f:3e:8f:58:64:25:f3:86: 99:69:b3:f9:99:81:20:e7:58:f1:c5:c4:ae:20:4c: 84:ac:8d:ec:af:41:2b:fc:d8:0a:f5:a0:66:aa:37: 3a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:31:DA:D5:7D:E4:DD:5A:5F:1F:CE:F0:11:A9:94:14:64:46:B6:D3 X509v3 Authority Key Identifier: keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/BjHa1X3k3VpfH87wEamUFGRGttM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.147.49.0/24 Signature Algorithm: sha256WithRSAEncryption 27:4c:2f:f0:62:23:ff:95:63:14:9c:17:30:ff:85:b4:31:cc: 4b:e5:57:c1:64:3c:26:72:c7:a7:f2:d8:25:57:f7:ed:9a:d6: 72:e6:88:c8:5f:d9:67:62:42:be:8a:de:bd:b4:1f:09:7d:a9: 4c:ed:f5:95:d7:37:9a:bf:4c:c6:61:6a:93:40:0c:25:c6:97: 6a:59:13:36:e8:e5:3b:2d:93:57:f7:a5:a8:24:a1:b1:d0:76: 27:5a:e2:1a:25:88:19:e0:90:24:02:6e:de:ea:a1:2f:a7:07: 40:c1:d2:20:be:77:89:17:56:be:19:21:6c:e6:75:b0:ef:53: b3:2b:f6:c4:1c:a3:c1:2d:08:98:32:81:60:ac:42:6c:60:8e: 1d:f7:b5:17:c8:17:12:63:fc:0d:2f:e4:b9:b2:a3:0f:83:c0: 4a:3f:73:ba:4e:17:e7:1c:64:f5:f1:12:c2:10:7d:71:23:af: bf:70:0c:81:35:60:bb:03:95:ba:5b:3d:52:86:6d:a9:00:37: 79:e3:b9:f7:13:89:a8:ab:e9:e8:55:2e:97:37:68:46:b7:ae: 83:ee:96:76:15:96:72:ae:67:37:10:6d:0a:65:d6:a4:08:7f: 5f:71:18:68:df:eb:2f:b3:8c:a3:ae:72:7e:47:b4:5d:57:30: f2:97:01:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hU6ff8oEelPzQFq+v6VpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3 MWE5YTgwHhcNMjYwMTAyMTYyMzIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjMxZGFkNTdkZTRkZDVhNWYxZmNlZjAxMWE5OTQxNDY0NDZiNmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zAcxWk3VZh43AtOO16+I7oaFmcs q19RhpwfBBYZMN0UU1gp+j7kFpxP3P21HvW+aDfxsGBn2lc2B8TmCIk2BRf0T3c0 EJojDEek0xpku/W/Pyq/UmazTJuLNntfGEiXZbF+9nILVGmFlD1Zg+1UaNVUazl8 wwEXD21ZIwPc2QWtACYQPP55ZqqEJ6jX0ulkNTJpMUmZxt1L/IQGwFN/IG2pcgys B/3VNMLRtUhfhnrH3xtSLuIBxwFcxipJrh+ggMJNmtkqH3I7OvurDxy25ls9Qycg 6qvkLz6PWGQl84aZabP5mYEg51jxxcSuIEyErI3sr0Er/NgK9aBmqjc6FwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAYx2tV95N1aXx/O8BGplBRkRrbTMB8GA1UdIwQY MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt M2FjOWU1NmMzMDg5LzEvQmpIYTFYM2szVnBmSDg3d0VhbVVGR1JHdHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5 LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZMxMA0G CSqGSIb3DQEBCwUAA4IBAQAnTC/wYiP/lWMUnBcw/4W0McxL5VfBZDwmcsen8tgl V/ftmtZy5ojIX9lnYkK+it69tB8JfalM7fWV1zeav0zGYWqTQAwlxpdqWRM26OU7 LZNX96WoJKGx0HYnWuIaJYgZ4JAkAm7e6qEvpwdAwdIgvneJF1a+GSFs5nWw71Oz K/bEHKPBLQiYMoFgrEJsYI4d97UXyBcSY/wNL+S5sqMPg8BKP3O6ThfnHGT18RLC EH1xI6+/cAyBNWC7A5W6Wz1Shm2pADd547n3E4moq+noVS6XN2hGt66D7pZ2FZZy rmc3EG0KZdakCH9fcRho3+svs4yjrnJ+R7RdVzDylwFS -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:20 2026 by rpki-client