This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa File: BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa (raw, json) Hash identifier: KAXKfS5lUAxV6gp81Rf5DkafcSKy01k+oipmTvIZyyw= Subject key identifier: 04:7C:40:ED:7C:89:FB:17:2A:26:7A:89:5F:9C:59:F2:CA:C0:7A:82 Certificate issuer: /CN=bd175e878d33b47d806f2cf3e04628220935123d Certificate serial: 019B7AC89E1B41C755961561ECA687EA32F7 Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa Signing time: Thu 01 Jan 2026 18:18:46 +0000 ROA not before: Thu 01 Jan 2026 18:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206423 IP address blocks: 91.199.8.0/24 maxlen: 32 2001:67c:2f84::/48 maxlen: 128 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9e:1b:41:c7:55:96:15:61:ec:a6:87:ea:32:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=047c40ed7c89fb172a267a895f9c59f2cac07a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:20:d3:fa:1b:b3:37:ad:8e:20:6b:c9:ac: be:f0:84:ef:08:2b:ba:b1:53:84:fd:15:f2:41:58: 7a:69:6a:51:6f:4b:a6:85:c5:ae:9d:d8:5e:1e:63: 28:f5:f2:77:cb:c0:b4:c6:3a:72:51:05:d2:84:5d: 7d:25:7e:55:38:5a:16:ed:02:88:87:db:32:83:1d: 77:2b:0f:32:dc:bf:eb:01:70:1f:b6:c0:56:a5:66: 2b:2f:d2:34:62:de:29:29:c2:b9:ae:30:5a:73:d6: 4d:b5:d5:7d:4f:ef:f2:f6:db:4a:7e:c8:39:c2:44: c7:62:2d:e2:0a:25:65:9d:9f:66:48:fe:c2:49:12: df:5c:4a:38:ff:ad:6d:6c:d5:db:d5:4e:7b:53:62: 4a:4f:52:27:ad:07:1d:ee:eb:e4:7e:61:31:10:19: be:d2:65:32:b5:74:b2:2a:88:3d:ff:dd:a5:6a:1e: aa:c2:e6:0d:2a:11:61:cc:11:12:66:4e:a7:60:7e: dd:ea:ad:f2:02:a3:66:ce:50:f7:74:8e:3c:5f:fc: 70:26:ed:b7:76:94:4c:3a:77:f3:4a:7e:6f:6c:c1: 57:4a:ee:12:1a:49:5f:ed:28:1e:2f:c5:c2:14:be: fc:9b:e3:bf:17:35:23:ac:8f:f9:e6:da:c0:5e:f6: 04:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7C:40:ED:7C:89:FB:17:2A:26:7A:89:5F:9C:59:F2:CA:C0:7A:82 X509v3 Authority Key Identifier: keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.199.8.0/24 IPv6: 2001:67c:2f84::/48 Signature Algorithm: sha256WithRSAEncryption 21:75:c3:ae:68:22:71:ed:bf:a8:6a:87:2f:51:ce:db:e3:e3: 9c:26:ad:23:08:fc:2a:cc:10:01:19:53:69:a8:ca:03:ad:4d: 8e:89:e2:ee:70:c1:1c:97:21:1f:78:45:1d:32:38:0f:23:13: af:90:bc:10:33:34:ff:40:a9:4f:dd:5d:a9:7a:fe:99:18:d8: 4f:60:3a:75:1e:98:57:a4:5a:b8:b1:a4:a5:00:4c:0e:ed:9d: b5:da:2e:7e:7b:17:04:a9:f6:0e:7c:9e:bb:b4:c7:ee:70:bf: 23:9a:01:38:44:a6:4e:45:06:2e:9d:8e:9f:f4:67:6f:ae:20: 1e:39:98:70:fc:77:c2:23:6a:b4:c1:03:70:3d:af:1f:05:fe: a9:d3:0d:4a:5a:89:c6:7f:60:d2:f2:37:f4:61:40:83:f1:b3: b5:7e:df:3d:e9:7a:f7:24:ed:70:9b:2f:d2:66:a7:4d:3c:a3: 7d:71:d3:95:ec:8c:29:dd:91:7d:ff:e6:cc:6b:bb:19:00:51: 1c:9e:1a:48:5e:1f:df:8e:da:b7:92:ed:74:e1:d1:46:c5:c2: 12:46:bb:c2:c4:73:fc:08:45:f9:01:29:4f:3e:04:fb:30:9a: 82:cc:6f:7e:47:3f:2f:b6:bc:a3:06:31:1a:4b:bc:d0:d3:47: 81:d8:a9:3e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6yJ4bQcdVlhVh7KaH6jL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMTc1ZTg3OGQzM2I0N2Q4MDZmMmNmM2UwNDYyODIyMDkz NTEyM2QwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDdjNDBlZDdjODlmYjE3MmEyNjdhODk1ZjljNTlmMmNhYzA3YTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypkg0/obszetjiBryay+8ITvCCu6 sVOE/RXyQVh6aWpRb0umhcWundheHmMo9fJ3y8C0xjpyUQXShF19JX5VOFoW7QKI h9sygx13Kw8y3L/rAXAftsBWpWYrL9I0Yt4pKcK5rjBac9ZNtdV9T+/y9ttKfsg5 wkTHYi3iCiVlnZ9mSP7CSRLfXEo4/61tbNXb1U57U2JKT1InrQcd7uvkfmExEBm+ 0mUytXSyKog9/92lah6qwuYNKhFhzBESZk6nYH7d6q3yAqNmzlD3dI48X/xwJu23 dpRMOnfzSn5vbMFXSu4SGklf7SgeL8XCFL78m+O/FzUjrI/55trAXvYEcwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAR8QO18ifsXKiZ6iV+cWfLKwHqCMB8GA1UdIwQY MBaAFL0XXoeNM7R9gG8s8+BGKCIJNRI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlJkZWg0MHp0SDJBYnl6ejRFWW9JZ2sxRWowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kZGE5OGUtODY0Ni00ZDA3LTgwYWMt YTM1ZWFmMDA1YWY1LzEvQkh4QTdYeUoteGNxSm5xSlg1eFo4c3JBZW9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kZGE5OGUtODY0Ni00ZDA3LTgwYWMtYTM1ZWFmMDA1YWY1 LzEvdlJkZWg0MHp0SDJBYnl6ejRFWW9JZ2sxRWowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW8cIMA8E AgACMAkDBwAgAQZ8L4QwDQYJKoZIhvcNAQELBQADggEBACF1w65oInHtv6hqhy9R ztvj45wmrSMI/CrMEAEZU2moygOtTY6J4u5wwRyXIR94RR0yOA8jE6+QvBAzNP9A qU/dXal6/pkY2E9gOnUemFekWrixpKUATA7tnbXaLn57FwSp9g58nru0x+5wvyOa AThEpk5FBi6djp/0Z2+uIB45mHD8d8IjarTBA3A9rx8F/qnTDUpaicZ/YNLyN/Rh QIPxs7V+3z3pevck7XCbL9Jmp008o31x05XsjCndkX3/5sxruxkAURyeGkheH9+O 2reS7XTh0UbFwhJGu8LEc/wIRfkBKU8+BPswmoLMb35HPy+2vKMGMRpLvNDTR4HY qT4= -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:58 2026 by rpki-client