This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BBIbhmZKg453bpy2hHGkf-MR_8c.roa File: BBIbhmZKg453bpy2hHGkf-MR_8c.roa (raw, json) Hash identifier: Z4D59ll+1M5J2CPdKo6ibrod7QNXYqHhGl3+qcakB2E= Subject key identifier: 04:12:1B:86:66:4A:83:8E:77:6E:9C:B6:84:71:A4:7F:E3:11:FF:C7 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019BC33EF63D13077104EC08052655DA6BC6 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BBIbhmZKg453bpy2hHGkf-MR_8c.roa Signing time: Thu 15 Jan 2026 20:00:41 +0000 ROA not before: Thu 15 Jan 2026 20:00:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56755 IP address blocks: 45.148.118.0/23 maxlen: 24 94.177.122.0/24 maxlen: 24 139.28.99.0/24 maxlen: 24 194.50.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c3:3e:f6:3d:13:07:71:04:ec:08:05:26:55:da:6b:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 15 20:00:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04121b86664a838e776e9cb68471a47fe311ffc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:da:bd:e4:56:9d:8a:d0:e3:98:ec:a9:61:d4: 89:cd:77:be:58:81:18:5d:91:5e:45:5f:0b:41:84: 5c:7f:5f:43:40:52:16:d3:12:35:a9:ed:5c:de:af: 86:33:5c:4a:db:e6:b9:95:80:16:9f:99:35:54:8b: d5:12:e5:33:e2:de:cc:3d:58:59:c9:95:08:db:15: 80:79:fd:58:81:53:da:09:1a:c0:c2:6e:79:95:22: 6f:02:b9:91:16:7d:b6:da:32:f4:fa:5a:ac:e8:5d: 8e:51:f7:b4:a9:6f:ea:9e:40:8c:b3:74:54:11:73: 04:5f:9b:27:9e:fc:9a:b6:2d:48:f2:ee:c1:82:77: 6d:3f:e2:ac:26:9a:21:3b:0d:fa:7e:2e:7a:3c:3b: f5:ec:36:e7:e7:77:74:94:16:e7:f1:20:70:de:00: 59:c2:8a:9f:68:5f:93:5e:d5:33:84:e2:93:dd:e0: e2:9d:c5:3a:31:e5:e4:af:98:c4:8b:2e:a3:ab:c8: 40:df:e1:8c:81:3a:74:5d:4b:2f:99:a1:b9:b0:3b: 51:79:69:90:0a:46:65:02:84:4c:40:c7:b6:7d:3b: bf:4f:a6:21:56:e2:19:68:69:a8:0f:af:75:16:3d: 81:59:50:2e:25:f8:d0:41:bc:46:cd:9e:73:4e:4e: a1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:12:1B:86:66:4A:83:8E:77:6E:9C:B6:84:71:A4:7F:E3:11:FF:C7 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/BBIbhmZKg453bpy2hHGkf-MR_8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.148.118.0/23 94.177.122.0/24 139.28.99.0/24 194.50.94.0/24 Signature Algorithm: sha256WithRSAEncryption aa:fc:5f:d7:bf:f1:45:8d:d6:99:cb:2a:c7:80:2e:b8:22:60: 7b:d9:f8:df:d1:11:0f:b1:2f:e2:a5:71:c5:8b:8b:cf:b9:55: de:89:12:de:b6:bb:e0:ad:12:37:06:16:e0:04:c4:0f:42:94: be:6c:3b:00:c2:03:85:7d:fb:e3:a9:42:c2:74:05:34:cf:7d: 69:f8:23:eb:5f:d3:c1:98:6e:eb:47:52:87:42:70:9e:11:80: 58:a7:e9:36:40:b1:15:fd:a6:36:d8:a0:eb:4b:cb:6e:79:e7: ea:86:18:b2:b2:c8:68:b0:b5:b5:27:ba:6f:91:98:a8:09:86: 9e:4f:3c:3e:89:ca:4f:f2:43:4f:ce:98:66:17:81:ed:58:0c: c3:50:9c:8f:d9:5a:0e:2a:ae:ad:d7:f6:05:1b:94:13:ad:75: 93:10:c7:4f:8f:a1:a0:e1:2f:9e:4b:3d:c7:af:c2:7b:f0:b7: 80:30:08:19:b2:cc:05:55:e6:30:dd:38:cb:71:4c:e2:19:9c: 49:e8:ec:f2:51:e1:39:7d:d9:b1:ac:e8:5f:92:25:06:17:57: 7d:9b:e8:34:59:ad:96:42:ae:f0:d8:dc:c0:c2:b7:8b:61:ae: 18:07:d4:a3:1d:09:54:9b:85:45:ca:fb:0b:1d:55:4b:04:81: 4f:ba:f2:89 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvDPvY9EwdxBOwIBSZV2mvGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTE1MjAwMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDEyMWI4NjY2NGE4MzhlNzc2ZTljYjY4NDcxYTQ3ZmUzMTFmZmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNq95FaditDjmOypYdSJzXe+WIEY XZFeRV8LQYRcf19DQFIW0xI1qe1c3q+GM1xK2+a5lYAWn5k1VIvVEuUz4t7MPVhZ yZUI2xWAef1YgVPaCRrAwm55lSJvArmRFn222jL0+lqs6F2OUfe0qW/qnkCMs3RU EXMEX5snnvyati1I8u7BgndtP+KsJpohOw36fi56PDv17Dbn53d0lBbn8SBw3gBZ woqfaF+TXtUzhOKT3eDincU6MeXkr5jEiy6jq8hA3+GMgTp0XUsvmaG5sDtReWmQ CkZlAoRMQMe2fTu/T6YhVuIZaGmoD691Fj2BWVAuJfjQQbxGzZ5zTk6hvwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAQSG4ZmSoOOd26ctoRxpH/jEf/HMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvQkJJYmhtWktnNDUzYnB5MmhIR2tmLU1SXzhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLZR2AwQA XrF6AwQAixxjAwQAwjJeMA0GCSqGSIb3DQEBCwUAA4IBAQCq/F/Xv/FFjdaZyyrH gC64ImB72fjf0REPsS/ipXHFi4vPuVXeiRLetrvgrRI3BhbgBMQPQpS+bDsAwgOF ffvjqULCdAU0z31p+CPrX9PBmG7rR1KHQnCeEYBYp+k2QLEV/aY22KDrS8tueefq hhiysshosLW1J7pvkZioCYaeTzw+icpP8kNPzphmF4HtWAzDUJyP2VoOKq6t1/YF G5QTrXWTEMdPj6Gg4S+eSz3Hr8J78LeAMAgZsswFVeYw3TjLcUziGZxJ6OzyUeE5 fdmxrOhfkiUGF1d9m+g0Wa2WQq7w2NzAwreLYa4YB9SjHQlUm4VFyvsLHVVLBIFP uvKJ -----END CERTIFICATE-----Generated at Fri Jan 16 03:05:38 2026 by rpki-client