This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/BBKAblizkGIJV_f06RIh70XLtr0.roa File: BBKAblizkGIJV_f06RIh70XLtr0.roa (raw, json) Hash identifier: EDuWd1ayZXpmIRskDvDc511OzhDthWRGsbu0u3My31o= Subject key identifier: 04:12:80:6E:58:B3:90:62:09:57:F7:F4:E9:12:21:EF:45:CB:B6:BD Certificate issuer: /CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80 Certificate serial: 019B78A36E1DBA5A5C63301552B7A40D5AC8 Authority key identifier: D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/BBKAblizkGIJV_f06RIh70XLtr0.roa Signing time: Thu 01 Jan 2026 08:18:55 +0000 ROA not before: Thu 01 Jan 2026 08:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41907 IP address blocks: 194.34.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.mft rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:6e:1d:ba:5a:5c:63:30:15:52:b7:a4:0d:5a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1b4beb0a6a7e1284abf4385348cf486100b9f80 Validity Not Before: Jan 1 08:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0412806e58b390620957f7f4e91221ef45cbb6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8e:28:4b:2b:c9:99:86:ff:6c:e3:b3:bf:e4: 26:d7:2c:20:fc:65:ce:04:8a:88:f0:6b:41:ec:0d: 22:74:47:50:e0:de:05:90:5d:41:03:6b:1a:c3:ba: ee:20:64:98:86:e0:14:91:d4:ad:f0:73:1a:5d:6a: c3:be:74:e8:58:a3:6d:53:76:46:5c:0d:13:73:35: f6:23:1d:59:f4:ca:02:86:61:a1:10:50:fd:2f:77: 99:0f:5c:bf:54:e6:c6:a3:b6:36:5d:d9:1c:06:73: cd:91:ec:62:e2:07:7e:59:72:eb:f6:46:0f:e4:d9: 7b:be:d4:33:63:14:87:ea:50:2d:61:e3:c5:48:75: 5a:32:7b:a4:e5:a4:e7:99:a6:32:7c:c7:fc:a4:44: 57:e2:19:ca:a0:bf:1d:d8:27:ad:5a:18:8e:ba:ac: 49:29:a3:2d:f7:3c:df:f7:ab:22:68:e9:33:09:cb: 9c:86:2c:ec:82:95:64:7e:46:75:b6:d7:5d:48:ec: 89:c0:25:ee:fd:d0:9c:13:b7:67:96:be:7f:4d:bd: 39:3b:3f:ea:54:ea:92:ac:1c:92:27:3c:12:41:1f: 73:4f:2c:97:6a:1c:65:e2:28:18:ec:5d:c9:f7:ae: 7c:39:5d:43:7b:0e:74:fb:6d:a3:93:94:b1:68:ba: dd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:12:80:6E:58:B3:90:62:09:57:F7:F4:E9:12:21:EF:45:CB:B6:BD X509v3 Authority Key Identifier: keyid:D1:B4:BE:B0:A6:A7:E1:28:4A:BF:43:85:34:8C:F4:86:10:0B:9F:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bS-sKan4ShKv0OFNIz0hhALn4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/BBKAblizkGIJV_f06RIh70XLtr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8d98d-1ffe-4639-b373-9ba1172a68c0/1/0bS-sKan4ShKv0OFNIz0hhALn4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.34.198.0/24 Signature Algorithm: sha256WithRSAEncryption c1:7b:d8:71:ad:1e:e2:19:5f:3b:fc:40:a3:1f:18:58:05:17: f1:ed:a5:8f:d8:9d:97:b1:6a:ec:7b:b5:f6:f2:94:45:a7:9c: 19:43:7e:f6:ec:fd:41:11:86:97:85:6b:80:4d:99:ed:a6:4c: 34:26:9f:f7:24:35:d1:fa:6a:e6:0b:ec:ba:57:a3:35:a7:17: d2:12:f7:f4:d3:e2:a1:db:33:c1:f7:63:21:26:f0:cd:fe:1e: 59:31:0b:04:83:56:d8:0c:c0:51:0a:70:85:83:b5:4f:d4:73: 40:68:9e:59:5b:cc:6c:17:c2:1e:44:f7:88:8a:2c:dd:22:a3: 03:a1:19:b4:e9:f3:9e:d3:36:2e:4f:7c:d4:35:46:c7:fd:6e: cb:aa:94:a6:c6:18:fd:58:15:01:e3:ff:35:cf:29:0e:b3:d3: 71:80:0a:75:3b:72:e0:dd:8f:48:7d:b3:23:22:e4:54:31:94: 76:1d:71:76:4e:47:ea:d3:38:f1:f1:f5:45:0a:48:d7:9e:2a: e2:ca:1d:84:6b:19:16:92:ae:8f:8b:4c:96:07:4c:e5:fe:96: f9:e8:27:4f:ca:e3:63:84:05:a6:5e:8e:36:ee:7b:ee:c1:6c: 52:66:df:72:ec:dc:11:0a:bd:ff:32:c4:46:b3:c0:b4:3a:15: 38:55:0c:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o24dulpcYzAVUrekDVrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYjRiZWIwYTZhN2UxMjg0YWJmNDM4NTM0OGNmNDg2MTAw YjlmODAwHhcNMjYwMTAxMDgxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDEyODA2ZTU4YjM5MDYyMDk1N2Y3ZjRlOTEyMjFlZjQ1Y2JiNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY4oSyvJmYb/bOOzv+Qm1ywg/GXO BIqI8GtB7A0idEdQ4N4FkF1BA2saw7ruIGSYhuAUkdSt8HMaXWrDvnToWKNtU3ZG XA0TczX2Ix1Z9MoChmGhEFD9L3eZD1y/VObGo7Y2XdkcBnPNkexi4gd+WXLr9kYP 5Nl7vtQzYxSH6lAtYePFSHVaMnuk5aTnmaYyfMf8pERX4hnKoL8d2CetWhiOuqxJ KaMt9zzf96siaOkzCcuchizsgpVkfkZ1ttddSOyJwCXu/dCcE7dnlr5/Tb05Oz/q VOqSrBySJzwSQR9zTyyXahxl4igY7F3J9658OV1Dew50+22jk5SxaLrdiQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAQSgG5Ys5BiCVf39OkSIe9Fy7a9MB8GA1UdIwQY MBaAFNG0vrCmp+EoSr9DhTSM9IYQC5+AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9mOGQ5OGQtMWZmZS00NjM5LWIzNzMt OWJhMTE3MmE2OGMwLzEvQkJLQWJsaXprR0lKVl9mMDZSSWg3MFhMdHIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9mOGQ5OGQtMWZmZS00NjM5LWIzNzMtOWJhMTE3MmE2OGMw LzEvMGJTLXNLYW40U2hLdjBPRk5JejBoaEFMbjRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiLGMA0G CSqGSIb3DQEBCwUAA4IBAQDBe9hxrR7iGV87/ECjHxhYBRfx7aWP2J2XsWrse7X2 8pRFp5wZQ3727P1BEYaXhWuATZntpkw0Jp/3JDXR+mrmC+y6V6M1pxfSEvf00+Kh 2zPB92MhJvDN/h5ZMQsEg1bYDMBRCnCFg7VP1HNAaJ5ZW8xsF8IeRPeIiizdIqMD oRm06fOe0zYuT3zUNUbH/W7LqpSmxhj9WBUB4/81zykOs9NxgAp1O3Lg3Y9IfbMj IuRUMZR2HXF2Tkfq0zjx8fVFCkjXniriyh2EaxkWkq6Pi0yWB0zl/pb56CdPyuNj hAWmXo427nvuwWxSZt9y7NwRCr3/MsRGs8C0OhU4VQzj -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:32 2026 by rpki-client