This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/bpCdtlID1rH2DrjVzMcBmork2aQ.roa File: bpCdtlID1rH2DrjVzMcBmork2aQ.roa (raw, json) Hash identifier: BSKDPkYhU8I5fR9wBcNo+U5cc/fHr2mCsZj2Lep7Q84= Subject key identifier: 6E:90:9D:B6:52:03:D6:B1:F6:0E:B8:D5:CC:C7:01:9A:8A:E4:D9:A4 Certificate issuer: /CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f Certificate serial: 019B7758E4450799BBD1A77C02C12D07245B Authority key identifier: CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/bpCdtlID1rH2DrjVzMcBmork2aQ.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47564 IP address blocks: 91.204.200.0/22 maxlen: 22 176.107.226.0/23 maxlen: 23 176.107.228.0/23 maxlen: 23 176.107.232.0/23 maxlen: 23 176.107.234.0/24 maxlen: 24 176.107.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.mft rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e4:45:07:99:bb:d1:a7:7c:02:c1:2d:07:24:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfd3a3f1069fcd512da514f66d6ee34ba3debb0f Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e909db65203d6b1f60eb8d5ccc7019a8ae4d9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c7:31:b0:ac:0b:54:f7:af:3f:3f:c3:c6:55: 68:74:a9:cb:51:a2:09:63:92:0f:62:a9:85:b6:83: 6a:4f:0d:35:de:81:9e:f0:91:37:93:f8:9a:ec:d3: ef:86:73:f4:d0:e6:63:5a:1c:85:23:ea:c0:a3:f2: 2b:d9:01:5a:1d:20:e8:95:a2:1b:2c:74:92:81:44: 5f:18:e1:9f:fd:2d:8d:07:ac:7a:d9:e0:94:69:ae: f4:5a:2e:6b:6a:8e:97:70:30:41:66:b6:ce:0c:2f: 6a:d7:28:05:5e:0a:22:63:9a:75:a9:f7:23:8e:9f: da:82:6f:96:71:bd:14:22:32:b5:f9:ff:89:ad:13: a8:f8:59:74:32:fd:b9:f1:4f:30:c1:d1:a0:12:23: 6e:c4:88:e9:4d:51:5a:c9:43:06:cd:82:fb:cd:b1: a4:52:7c:33:b7:59:9b:64:73:b9:4a:b1:6a:13:54: 5b:63:7f:bb:1c:1e:9f:97:13:23:56:77:61:29:cd: a0:df:29:98:fb:5b:a5:92:09:d3:72:90:00:a9:00: 6b:49:8d:db:c0:88:bc:c2:73:88:df:2c:18:06:05: 98:27:06:f4:e9:55:be:e7:2d:eb:3f:d9:d8:62:c3: 6d:6b:1b:39:5c:28:5e:c0:5f:e4:c0:26:35:91:ca: 27:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:90:9D:B6:52:03:D6:B1:F6:0E:B8:D5:CC:C7:01:9A:8A:E4:D9:A4 X509v3 Authority Key Identifier: keyid:CF:D3:A3:F1:06:9F:CD:51:2D:A5:14:F6:6D:6E:E3:4B:A3:DE:BB:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9Oj8QafzVEtpRT2bW7jS6Peuw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/bpCdtlID1rH2DrjVzMcBmork2aQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/b3f825-da38-4989-9629-382920155ffb/1/z9Oj8QafzVEtpRT2bW7jS6Peuw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.200.0/22 176.107.226.0-176.107.229.255 176.107.232.0-176.107.234.255 176.107.236.0/23 Signature Algorithm: sha256WithRSAEncryption 07:cc:91:88:da:55:56:0b:08:b4:8d:5f:e0:49:f8:75:09:79: e2:9d:97:7a:5c:9f:98:6b:67:a8:8c:01:44:b1:4e:2d:7c:58: 8b:be:2d:d6:f4:ca:a5:66:94:da:69:b0:ca:3c:67:42:19:67: 4b:68:bb:41:3f:fb:07:5b:1f:94:ea:bc:3d:bc:bc:a7:13:60: 36:cd:77:5b:86:55:0b:76:34:ea:ca:c6:65:ab:4a:85:b9:80: f2:43:65:76:f6:b5:ea:01:d1:40:41:e9:73:e2:34:ee:bc:e3: 8a:9c:e4:51:70:96:d4:f7:71:45:a9:6a:58:06:9b:01:04:20: cb:4f:9b:d4:02:f8:21:25:c9:45:44:df:84:65:50:e5:bd:22: 16:e0:48:09:85:37:40:dc:ad:d7:3f:da:0d:10:26:4b:48:26: 74:81:b8:43:d4:10:9b:21:c4:16:7d:7b:ef:2e:2a:3f:d1:17: 3f:8c:ca:d7:60:50:7b:20:b4:74:d5:fa:1f:90:0b:06:fd:74: a6:cc:b2:ea:c0:a7:91:38:f7:87:0a:30:09:39:f6:ab:19:06: dd:54:b1:8d:f9:17:39:31:c3:88:80:50:ef:a4:34:8b:79:4a: fc:50:c0:5a:81:23:a7:5f:a3:e7:a3:8f:2d:99:c4:f8:53:7d: 4a:6d:c6:4b -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt3WORFB5m70ad8AsEtByRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZDNhM2YxMDY5ZmNkNTEyZGE1MTRmNjZkNmVlMzRiYTNk ZWJiMGYwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTkwOWRiNjUyMDNkNmIxZjYwZWI4ZDVjY2M3MDE5YThhZTRkOWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsccxsKwLVPevPz/DxlVodKnLUaIJ Y5IPYqmFtoNqTw013oGe8JE3k/ia7NPvhnP00OZjWhyFI+rAo/Ir2QFaHSDolaIb LHSSgURfGOGf/S2NB6x62eCUaa70Wi5rao6XcDBBZrbODC9q1ygFXgoiY5p1qfcj jp/agm+Wcb0UIjK1+f+JrROo+Fl0Mv258U8wwdGgEiNuxIjpTVFayUMGzYL7zbGk Unwzt1mbZHO5SrFqE1RbY3+7HB6flxMjVndhKc2g3ymY+1ulkgnTcpAAqQBrSY3b wIi8wnOI3ywYBgWYJwb06VW+5y3rP9nYYsNtaxs5XChewF/kwCY1kconPwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFG6QnbZSA9ax9g641czHAZqK5NmkMB8GA1UdIwQY MBaAFM/To/EGn81RLaUU9m1u40uj3rsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2Mjkt MzgyOTIwMTU1ZmZiLzEvYnBDZHRsSUQxckgyRHJqVnpNY0Jtb3JrMmFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iM2Y4MjUtZGEzOC00OTg5LTk2MjktMzgyOTIwMTU1ZmZi LzEvejlPajhRYWZ6VkV0cFJUMmJXN2pTNlBldXc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQCW8zIMAwD BAGwa+IDBAGwa+QwDAMEA7Br6AMEALBr6gMEAbBr7DANBgkqhkiG9w0BAQsFAAOC AQEAB8yRiNpVVgsItI1f4En4dQl54p2XelyfmGtnqIwBRLFOLXxYi74t1vTKpWaU 2mmwyjxnQhlnS2i7QT/7B1sflOq8Pby8pxNgNs13W4ZVC3Y06srGZatKhbmA8kNl dva16gHRQEHpc+I07rzjipzkUXCW1PdxRalqWAabAQQgy0+b1AL4ISXJRUTfhGVQ 5b0iFuBICYU3QNyt1z/aDRAmS0gmdIG4Q9QQmyHEFn177y4qP9EXP4zK12BQeyC0 dNX6H5ALBv10psyy6sCnkTj3hwowCTn2qxkG3VSxjfkXOTHDiIBQ76Q0i3lK/FDA WoEjp1+j56OPLZnE+FN9Sm3GSw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:31 2026 by rpki-client