This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/Bw0LYZeYa4YiK1Zwav9M2CIs7yc.roa File: Bw0LYZeYa4YiK1Zwav9M2CIs7yc.roa (raw, json) Hash identifier: Og9dej6zdeYfUEuKlPyDfibsivF+zi1xumhqKFbtAHA= Subject key identifier: 07:0D:0B:61:97:98:6B:86:22:2B:56:70:6A:FF:4C:D8:22:2C:EF:27 Certificate issuer: /CN=0c4579a4028829d37acac65f66c056063251e57e Certificate serial: 019B7D5D158403A7FE77D2A642E3248D3FBA Authority key identifier: 0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/Bw0LYZeYa4YiK1Zwav9M2CIs7yc.roa Signing time: Fri 02 Jan 2026 06:20:10 +0000 ROA not before: Fri 02 Jan 2026 06:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6424 IP address blocks: 82.215.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.mft rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:15:84:03:a7:fe:77:d2:a6:42:e3:24:8d:3f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4579a4028829d37acac65f66c056063251e57e Validity Not Before: Jan 2 06:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=070d0b6197986b86222b56706aff4cd8222cef27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:2a:d0:2d:34:75:15:a0:9a:46:8e:89:7f: 24:9e:73:3a:c2:d2:6d:f7:74:6c:93:93:5f:22:0e: bc:e6:45:3a:f3:a9:13:91:c9:ff:d2:ed:cc:da:7c: 08:77:1f:42:57:bd:b9:2e:2a:0a:c2:be:d5:a8:ba: 35:84:7a:68:4b:b2:d3:0b:56:58:3b:71:48:6a:ba: 64:31:0f:bc:bf:76:03:e9:73:23:27:f4:94:73:1e: 86:82:d2:d2:db:8e:fa:3a:c5:a5:4d:36:a4:d3:a7: 53:4b:40:5c:4d:48:a7:db:38:a3:15:e5:38:a5:b9: 90:40:42:18:63:5e:0d:ca:4d:4d:94:ab:58:75:61: c1:9d:c7:95:e2:86:aa:4d:17:d4:16:2e:2f:5d:c1: 7d:25:bd:0e:be:0d:f3:27:1e:31:bd:0d:8f:25:2d: 0b:99:b3:73:3b:41:f4:ef:83:62:00:b4:99:82:d6: de:95:52:4d:e1:57:00:8e:ef:35:8a:aa:32:d0:76: 92:79:58:e7:fa:76:51:2a:ea:7b:30:d1:98:3f:c6: 6b:a5:12:cc:e3:09:01:b6:01:7b:c5:5e:cd:61:81: 98:c4:d6:c9:09:d3:ed:19:9e:e9:e6:91:5c:ab:79: 23:16:91:87:9b:3e:4b:c4:a9:e2:96:de:2a:c9:b0: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0D:0B:61:97:98:6B:86:22:2B:56:70:6A:FF:4C:D8:22:2C:EF:27 X509v3 Authority Key Identifier: keyid:0C:45:79:A4:02:88:29:D3:7A:CA:C6:5F:66:C0:56:06:32:51:E5:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEV5pAKIKdN6ysZfZsBWBjJR5X4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/Bw0LYZeYa4YiK1Zwav9M2CIs7yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/edaeb5-5e6e-411b-99cb-3c50180780b0/1/DEV5pAKIKdN6ysZfZsBWBjJR5X4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.215.71.0/24 Signature Algorithm: sha256WithRSAEncryption 76:53:55:ea:28:58:13:17:b0:86:97:85:d1:17:3a:75:65:c0: f2:41:e6:26:91:39:14:a6:1e:97:db:f4:b2:bf:62:e3:a8:86: ca:7c:07:57:31:91:06:0f:96:f1:0f:de:61:7d:88:ce:50:9d: 9b:17:e7:d1:ef:09:7e:2a:96:cd:b2:96:66:e7:63:47:a7:34: 43:67:a2:b1:b7:52:c4:31:24:72:5c:0f:0d:e6:13:d6:dd:30: b2:2d:4c:61:fc:f5:37:ed:ed:84:5b:55:a1:ca:d6:3c:59:dc: 72:e6:87:11:5e:8b:2b:8a:f1:f6:3e:a8:54:5f:95:37:45:1f: 76:73:30:26:a1:f1:ec:e5:79:fb:2b:7c:11:5e:63:b5:0d:00: d3:f7:34:ee:15:64:ae:ff:91:03:22:41:2b:4d:73:80:0c:4b: 73:0b:c1:ea:a2:87:06:9a:0a:5f:7a:34:39:1f:d9:ef:ce:c6: 1a:c9:43:1b:0f:61:d5:b1:24:67:2b:9b:bf:a2:f5:f9:b6:5e: 44:2f:a9:0a:64:26:64:47:ae:9f:e7:fe:77:b9:f2:2b:9b:03: ed:02:a8:87:1d:ab:d0:68:77:8d:8e:40:d5:1d:5e:22:64:a4: b1:5d:12:f1:65:99:bf:d1:f9:fd:28:62:38:24:d8:3b:c1:b4: ef:74:63:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XRWEA6f+d9KmQuMkjT+6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDU3OWE0MDI4ODI5ZDM3YWNhYzY1ZjY2YzA1NjA2MzI1 MWU1N2UwHhcNMjYwMTAyMDYyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzBkMGI2MTk3OTg2Yjg2MjIyYjU2NzA2YWZmNGNkODIyMmNlZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymQq0C00dRWgmkaOiX8knnM6wtJt 93Rsk5NfIg685kU686kTkcn/0u3M2nwIdx9CV725LioKwr7VqLo1hHpoS7LTC1ZY O3FIarpkMQ+8v3YD6XMjJ/SUcx6GgtLS2476OsWlTTak06dTS0BcTUin2zijFeU4 pbmQQEIYY14Nyk1NlKtYdWHBnceV4oaqTRfUFi4vXcF9Jb0Ovg3zJx4xvQ2PJS0L mbNzO0H074NiALSZgtbelVJN4VcAju81iqoy0HaSeVjn+nZRKup7MNGYP8ZrpRLM 4wkBtgF7xV7NYYGYxNbJCdPtGZ7p5pFcq3kjFpGHmz5LxKnilt4qybBHbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAcNC2GXmGuGIitWcGr/TNgiLO8nMB8GA1UdIwQY MBaAFAxFeaQCiCnTesrGX2bAVgYyUeV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2It M2M1MDE4MDc4MGIwLzEvQncwTFlaZVlhNFlpSzFad2F2OU0yQ0lzN3ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9lZGFlYjUtNWU2ZS00MTFiLTk5Y2ItM2M1MDE4MDc4MGIw LzEvREVWNXBBS0lLZE42eXNaZlpzQldCakpSNVg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUtdHMA0G CSqGSIb3DQEBCwUAA4IBAQB2U1XqKFgTF7CGl4XRFzp1ZcDyQeYmkTkUph6X2/Sy v2LjqIbKfAdXMZEGD5bxD95hfYjOUJ2bF+fR7wl+KpbNspZm52NHpzRDZ6Kxt1LE MSRyXA8N5hPW3TCyLUxh/PU37e2EW1WhytY8Wdxy5ocRXosrivH2PqhUX5U3RR92 czAmofHs5Xn7K3wRXmO1DQDT9zTuFWSu/5EDIkErTXOADEtzC8HqoocGmgpfejQ5 H9nvzsYayUMbD2HVsSRnK5u/ovX5tl5EL6kKZCZkR66f5/53ufIrmwPtAqiHHavQ aHeNjkDVHV4iZKSxXRLxZZm/0fn9KGI4JNg7wbTvdGOz -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:17 2026 by rpki-client