This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/BbwIiJ0dE-v7C232paq9FAoO3W4.roa File: BbwIiJ0dE-v7C232paq9FAoO3W4.roa (raw, json) Hash identifier: WYFi/4LJa1Z0T8GMuSQAQGpR48GKoJ2nZUJN8YeKMtE= Subject key identifier: 05:BC:08:88:9D:1D:13:EB:FB:0B:6D:F6:A5:AA:BD:14:0A:0E:DD:6E Certificate issuer: /CN=317067e81a61a21fdc148598ef6ba59757fa0380 Certificate serial: 019B7B354C53A1E06B475E292E52DC437C65 Authority key identifier: 31:70:67:E8:1A:61:A2:1F:DC:14:85:98:EF:6B:A5:97:57:FA:03:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/BbwIiJ0dE-v7C232paq9FAoO3W4.roa Signing time: Thu 01 Jan 2026 20:17:29 +0000 ROA not before: Thu 01 Jan 2026 20:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209440 IP address blocks: 92.118.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.mft rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:4c:53:a1:e0:6b:47:5e:29:2e:52:dc:43:7c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=317067e81a61a21fdc148598ef6ba59757fa0380 Validity Not Before: Jan 1 20:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05bc08889d1d13ebfb0b6df6a5aabd140a0edd6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:34:cf:29:00:3a:97:ca:22:6f:37:d8:7d: ac:3e:48:f9:61:50:f4:4f:20:dd:d2:0c:9e:09:e3: 3b:03:b6:12:04:7f:b6:d8:95:20:11:b8:71:c0:2e: 71:9d:f3:cd:01:7b:1f:54:2e:9f:b6:94:a4:3d:46: 8d:d1:78:fb:2c:5b:74:48:f2:a2:4f:99:4a:3f:d6: 3b:4a:e8:4d:83:27:5e:30:99:b1:e5:7a:50:85:42: b6:79:7c:3b:1b:39:ee:a0:10:6b:16:57:9a:8c:af: ae:70:8f:04:8e:c5:8c:6c:63:13:7e:8f:1f:95:55: 7a:ad:ee:f4:37:7d:56:53:93:fc:55:82:8f:f3:55: a2:a4:8a:95:5e:32:2e:4c:8a:64:8a:c2:17:85:26: 86:c1:99:cb:b2:fd:12:0a:56:9b:81:ad:85:04:3a: 80:d7:1b:43:f7:11:a1:6e:76:ae:bf:b3:8e:c1:ad: 03:f4:e1:28:0c:d5:02:6b:64:8c:22:00:c0:4a:76: b0:51:2d:ce:cb:16:56:b1:d7:51:3a:22:a8:72:6e: 24:ea:55:5e:df:61:7d:8b:94:74:33:92:aa:00:5b: 4c:f2:32:72:8d:d1:96:f9:24:b2:74:b0:5e:9c:09: b7:5a:99:bd:de:0e:31:c7:5f:f4:ed:66:7a:2e:15: 8e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BC:08:88:9D:1D:13:EB:FB:0B:6D:F6:A5:AA:BD:14:0A:0E:DD:6E X509v3 Authority Key Identifier: keyid:31:70:67:E8:1A:61:A2:1F:DC:14:85:98:EF:6B:A5:97:57:FA:03:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXBn6Bphoh_cFIWY72ull1f6A4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/BbwIiJ0dE-v7C232paq9FAoO3W4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/58a4e1-dfc1-4d81-b2c6-216597e03f11/1/MXBn6Bphoh_cFIWY72ull1f6A4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.118.109.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:1b:da:71:61:73:c8:01:bf:9d:d5:3e:82:5a:e3:22:5e:26: 97:06:f1:18:59:ef:94:68:55:c2:5d:eb:a8:fc:28:91:8d:b1: b3:cc:aa:26:07:8b:7e:bf:d8:b8:e3:ec:59:34:a8:4f:4f:22: 14:fe:45:92:51:26:2a:d3:d3:66:18:51:a6:26:26:21:fb:e6: cb:61:f7:f8:51:ef:68:c9:df:25:bc:55:79:c1:23:5a:4e:7f: a8:d8:42:eb:92:39:9c:19:39:03:90:d2:f2:5d:a1:7e:84:66: 2e:ae:5b:52:2f:1d:33:ef:78:08:ea:b2:1f:12:ae:05:e0:7c: a4:90:db:88:5d:14:1e:e2:23:67:f8:e0:c4:58:84:3f:d8:6c: 02:2d:dd:86:ef:5a:c9:2a:b6:1f:89:e2:aa:92:38:26:23:cf: 9c:21:67:84:f3:ef:02:07:d4:b1:15:77:31:8c:62:ad:bc:c1: 7f:d8:06:6a:07:99:71:85:df:a8:da:4d:f6:2b:06:05:3b:0d: 00:d5:18:dd:35:c9:07:b4:53:92:67:c3:a8:a7:77:56:05:af: 20:ef:35:ac:66:db:ec:5f:f8:d4:81:f4:ab:7d:0b:09:1c:48: 43:98:ce:d7:75:ad:ed:0c:75:3e:90:3d:21:d8:9b:6a:9e:e5: e0:d2:29:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NUxToeBrR14pLlLcQ3xlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxNzA2N2U4MWE2MWEyMWZkYzE0ODU5OGVmNmJhNTk3NTdm YTAzODAwHhcNMjYwMTAxMjAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWJjMDg4ODlkMWQxM2ViZmIwYjZkZjZhNWFhYmQxNDBhMGVkZDZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsw0zykAOpfKIm832H2sPkj5YVD0 TyDd0gyeCeM7A7YSBH+22JUgEbhxwC5xnfPNAXsfVC6ftpSkPUaN0Xj7LFt0SPKi T5lKP9Y7SuhNgydeMJmx5XpQhUK2eXw7GznuoBBrFleajK+ucI8EjsWMbGMTfo8f lVV6re70N31WU5P8VYKP81WipIqVXjIuTIpkisIXhSaGwZnLsv0SClabga2FBDqA 1xtD9xGhbnauv7OOwa0D9OEoDNUCa2SMIgDASnawUS3OyxZWsddROiKocm4k6lVe 32F9i5R0M5KqAFtM8jJyjdGW+SSydLBenAm3Wpm93g4xx1/07WZ6LhWOVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAW8CIidHRPr+wtt9qWqvRQKDt1uMB8GA1UdIwQY MBaAFDFwZ+gaYaIf3BSFmO9rpZdX+gOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVhCbjZCcGhvaF9jRklXWTcydWxsMWY2QTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81OGE0ZTEtZGZjMS00ZDgxLWIyYzYt MjE2NTk3ZTAzZjExLzEvQmJ3SWlKMGRFLXY3QzIzMnBhcTlGQW9PM1c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi81OGE0ZTEtZGZjMS00ZDgxLWIyYzYtMjE2NTk3ZTAzZjEx LzEvTVhCbjZCcGhvaF9jRklXWTcydWxsMWY2QTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXHZtMA0G CSqGSIb3DQEBCwUAA4IBAQB9G9pxYXPIAb+d1T6CWuMiXiaXBvEYWe+UaFXCXeuo /CiRjbGzzKomB4t+v9i44+xZNKhPTyIU/kWSUSYq09NmGFGmJiYh++bLYff4Ue9o yd8lvFV5wSNaTn+o2ELrkjmcGTkDkNLyXaF+hGYurltSLx0z73gI6rIfEq4F4Hyk kNuIXRQe4iNn+ODEWIQ/2GwCLd2G71rJKrYfieKqkjgmI8+cIWeE8+8CB9SxFXcx jGKtvMF/2AZqB5lxhd+o2k32KwYFOw0A1RjdNckHtFOSZ8Oop3dWBa8g7zWsZtvs X/jUgfSrfQsJHEhDmM7Xda3tDHU+kD0h2JtqnuXg0ikC -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:45 2026 by rpki-client