This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/bze-DpbDaFlTujNEYrBpzXK9-lM.roa File: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (raw, json) Hash identifier: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0= Subject key identifier: 6F:37:BE:0E:96:C3:68:59:53:BA:33:44:62:B0:69:CD:72:BD:FA:53 Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428 Certificate serial: 019B7834602381F4945B42D47A801E5AEE23 Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/bze-DpbDaFlTujNEYrBpzXK9-lM.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 91.216.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:60:23:81:f4:94:5b:42:d4:7a:80:1e:5a:ee:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428 Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f37be0e96c3685953ba334462b069cd72bdfa53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c6:fb:9c:12:67:c0:1d:df:80:ba:58:fa:ba: d8:ea:63:63:3f:0c:22:7f:fd:62:d0:42:8e:a6:db: 5a:99:e7:fc:ee:e3:8d:f8:dc:36:78:ed:21:70:97: b2:7c:02:e7:87:83:13:77:cd:e0:79:e0:fb:13:43: 8c:81:bf:ed:5e:a6:8e:30:24:f5:12:8d:1c:da:ff: b6:62:2a:1f:69:38:cb:6a:a1:2e:64:01:d9:1f:74: 3f:2e:69:5e:d5:21:51:e9:3f:8e:ee:5c:21:9d:db: df:ab:2f:0a:b8:aa:ec:70:be:ff:69:c1:a9:5d:a3: b6:4a:5d:18:fa:30:e0:c9:8a:16:a9:47:e5:82:49: 12:98:68:79:da:72:ab:ce:3e:fb:f5:62:b6:4c:2e: 44:32:3d:82:7e:e2:7d:67:aa:95:80:19:af:97:96: 2a:b8:da:f4:7c:c1:74:b2:2b:15:26:e1:db:50:c4: ba:cd:9e:24:64:b7:48:e7:d7:64:d0:ca:a4:c4:71: 6a:7e:c9:1e:01:b1:b8:6b:fb:fb:e9:be:f4:54:14: 97:b0:42:3d:e7:4b:1e:06:e1:06:ad:ff:0f:0a:21: 60:7d:a2:68:dc:c7:b0:a3:4f:cf:2c:c0:14:ff:9e: 42:5d:23:af:ee:5e:e2:f5:0f:59:ec:41:4a:63:3b: de:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:37:BE:0E:96:C3:68:59:53:BA:33:44:62:B0:69:CD:72:BD:FA:53 X509v3 Authority Key Identifier: keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/bze-DpbDaFlTujNEYrBpzXK9-lM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.119.0/24 Signature Algorithm: sha256WithRSAEncryption 22:e2:8c:be:54:69:aa:77:0e:45:08:72:96:e6:7e:ec:44:69: 18:ab:db:18:13:a4:ca:dc:72:02:ee:fc:4a:71:20:81:5a:f4: 95:b5:81:61:53:7d:53:28:89:6c:2b:0d:f7:df:8f:ae:37:85: 80:c5:41:af:d0:78:18:b1:26:25:77:67:3a:cb:50:6e:fa:31: 79:69:5f:c2:15:6c:a4:66:1c:85:a1:29:1d:31:ce:d9:9d:aa: 90:f4:c3:7a:22:37:af:86:ab:b1:c6:9d:35:d8:81:79:2e:db: 28:6f:bf:55:b3:c7:af:0d:c0:34:fd:18:fa:7f:ef:20:71:92: c8:81:36:b1:48:89:e9:f3:90:4b:6e:3b:81:3c:ea:95:6c:2b: 9a:90:3e:b2:9e:76:57:8f:ba:03:9d:80:a8:c9:96:54:54:7e: 99:2b:41:60:62:78:d5:f8:58:fd:14:a2:5d:ee:98:34:78:06: 4d:27:79:2a:51:4a:3b:7b:7e:58:e8:d9:51:e7:23:94:09:df: 3f:be:af:ea:3b:51:55:01:34:7e:a3:c5:ba:83:19:24:68:6f: 5b:14:a8:34:3f:98:19:2b:47:58:a8:8c:74:4f:e2:f0:f5:30: cd:9a:82:c7:e5:80:bf:1e:42:17:27:0f:d6:cd:73:0d:34:c3: 05:3f:62:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGAjgfSUW0LUeoAeWu4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5OTM5ZmYxMjkzYjdlMjI3NzlmYzU1YjRjODNmMTNlNTJl OTQ0MjgwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjM3YmUwZTk2YzM2ODU5NTNiYTMzNDQ2MmIwNjljZDcyYmRmYTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8b7nBJnwB3fgLpY+rrY6mNjPwwi f/1i0EKOpttamef87uON+Nw2eO0hcJeyfALnh4MTd83geeD7E0OMgb/tXqaOMCT1 Eo0c2v+2YiofaTjLaqEuZAHZH3Q/Lmle1SFR6T+O7lwhndvfqy8KuKrscL7/acGp XaO2Sl0Y+jDgyYoWqUflgkkSmGh52nKrzj779WK2TC5EMj2CfuJ9Z6qVgBmvl5Yq uNr0fMF0sisVJuHbUMS6zZ4kZLdI59dk0MqkxHFqfskeAbG4a/v76b70VBSXsEI9 50seBuEGrf8PCiFgfaJo3Mewo0/PLMAU/55CXSOv7l7i9Q9Z7EFKYzve/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG83vg6Ww2hZU7ozRGKwac1yvfpTMB8GA1UdIwQY MBaAFImTn/EpO34id5/FW0yD8T5S6UQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYt MGU2ODAwMGIzNTM3LzEvYnplLURwYkRhRmxUdWpORVlyQnB6WEs5LWxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYtMGU2ODAwMGIzNTM3 LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9h3MA0G CSqGSIb3DQEBCwUAA4IBAQAi4oy+VGmqdw5FCHKW5n7sRGkYq9sYE6TK3HIC7vxK cSCBWvSVtYFhU31TKIlsKw3334+uN4WAxUGv0HgYsSYld2c6y1Bu+jF5aV/CFWyk ZhyFoSkdMc7ZnaqQ9MN6Ijevhquxxp012IF5Ltsob79Vs8evDcA0/Rj6f+8gcZLI gTaxSInp85BLbjuBPOqVbCuakD6ynnZXj7oDnYCoyZZUVH6ZK0FgYnjV+Fj9FKJd 7pg0eAZNJ3kqUUo7e35Y6NlR5yOUCd8/vq/qO1FVATR+o8W6gxkkaG9bFKg0P5gZ K0dYqIx0T+Lw9TDNmoLH5YC/HkIXJw/WzXMNNMMFP2Ja -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:49 2026 by rpki-client