This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Bp5zlilwuyaRPhk6Ag82mmFCo3w.roa File: Bp5zlilwuyaRPhk6Ag82mmFCo3w.roa (raw, json) Hash identifier: xrN0uKyBm1CX+OJoSRVPwUwuRBDicntuIWZkG0fDDF4= Subject key identifier: 06:9E:73:96:29:70:BB:26:91:3E:19:3A:02:0F:36:9A:61:42:A3:7C Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Certificate serial: 019B79105FEF92970FE4B1C9B7F222CA8041 Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Bp5zlilwuyaRPhk6Ag82mmFCo3w.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393942 IP address blocks: 188.191.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5f:ef:92:97:0f:e4:b1:c9:b7:f2:22:ca:80:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=069e73962970bb26913e193a020f369a6142a37c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:d0:f6:b3:04:c5:0d:d1:18:3b:9c:e8:b4: 92:fc:a8:bd:e1:0d:29:fd:b4:d1:f7:44:3e:d6:86: 4d:80:60:d7:1e:8a:83:9d:f5:5d:5a:c2:54:c7:df: 15:f7:ad:10:30:7a:c5:e0:90:2c:cb:12:7d:84:f4: 63:69:88:b1:72:28:83:f4:64:6e:24:8b:15:cc:65: da:1d:c7:9b:a4:86:15:b5:75:8b:27:32:a9:69:1a: c3:39:6a:fa:27:bf:4c:43:66:b0:7b:8e:bc:67:e1: 69:ce:bb:d5:a2:c6:e1:96:06:fe:97:2a:00:85:6b: 85:ff:07:18:64:b3:4c:29:0a:f3:a5:72:98:29:df: 4d:e7:14:20:a8:c7:b2:e9:da:8a:ed:e4:92:d6:6c: 1a:39:06:52:45:69:e1:44:20:5e:7f:d0:9f:8b:ad: a0:19:ab:af:52:42:60:35:4e:85:61:77:64:d6:ff: dc:72:60:1a:94:3f:2d:7d:77:18:27:ef:7f:2e:c1: c6:e7:8b:bf:c6:f3:80:0f:42:d4:65:98:a5:54:95: 31:de:2e:41:4a:21:dd:b5:c6:1f:1a:ef:21:5c:d5: 9c:15:a9:ff:7b:bc:41:88:6b:0d:0e:eb:7b:b2:62: f1:e0:18:30:94:03:25:b9:27:0c:dc:21:5e:14:6e: 88:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9E:73:96:29:70:BB:26:91:3E:19:3A:02:0F:36:9A:61:42:A3:7C X509v3 Authority Key Identifier: keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/Bp5zlilwuyaRPhk6Ag82mmFCo3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.191.97.0/24 Signature Algorithm: sha256WithRSAEncryption 26:28:0a:99:df:a1:88:47:49:09:8a:67:e8:67:ea:58:73:59: 6c:d0:77:c8:3f:22:9d:eb:56:10:d1:d2:36:1c:fc:ae:28:3e: 2a:4f:19:06:a6:9a:0b:12:b7:dd:35:d0:0a:c7:b6:2b:95:6d: d2:12:c7:87:13:fa:f4:50:6e:60:4c:1f:e6:13:bc:5c:b4:b2: 3f:6b:61:24:72:67:b5:8b:83:83:b6:52:cf:c8:7d:dc:39:4c: f1:a3:bd:e2:fc:86:23:9d:8a:08:b3:4e:11:ba:9c:0d:28:90: 09:fd:bd:31:51:8c:86:2b:15:26:4f:e9:7f:e2:53:9c:5a:9a: f9:63:36:fc:32:e9:46:0e:ed:35:da:15:8a:d1:fa:ee:eb:1c: 0f:73:63:cf:52:89:12:25:2f:f9:97:5a:9e:06:c4:15:74:6f: c0:26:3a:f4:f4:a7:8e:b9:76:25:95:e3:03:7c:13:54:76:03: eb:6d:86:21:4a:2d:26:5f:64:83:2e:82:b3:0e:53:5f:15:1c: e9:51:2c:d2:49:b0:23:d7:31:ed:4f:6a:ed:40:5e:1d:53:58: 69:d3:59:dd:20:5b:fc:6f:3d:6f:a4:a7:b1:c2:a8:58:3d:e1: 2f:be:68:0a:18:3f:a0:59:7c:58:5d:40:39:b8:3d:47:d1:c7: 99:3f:84:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EF/vkpcP5LHJt/IiyoBBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMWFjODNlZTNhM2Y5NjhkNjZhZDJmZGY0NjE2ZTdiYjFl NGQxZDcwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjllNzM5NjI5NzBiYjI2OTEzZTE5M2EwMjBmMzY5YTYxNDJhMzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6rQ9rMExQ3RGDuc6LSS/Ki94Q0p /bTR90Q+1oZNgGDXHoqDnfVdWsJUx98V960QMHrF4JAsyxJ9hPRjaYixciiD9GRu JIsVzGXaHcebpIYVtXWLJzKpaRrDOWr6J79MQ2awe468Z+FpzrvVosbhlgb+lyoA hWuF/wcYZLNMKQrzpXKYKd9N5xQgqMey6dqK7eSS1mwaOQZSRWnhRCBef9Cfi62g GauvUkJgNU6FYXdk1v/ccmAalD8tfXcYJ+9/LsHG54u/xvOAD0LUZZilVJUx3i5B SiHdtcYfGu8hXNWcFan/e7xBiGsNDut7smLx4BgwlAMluScM3CFeFG6I9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAaec5YpcLsmkT4ZOgIPNpphQqN8MB8GA1UdIwQY MBaAFI0ayD7jo/lo1mrS/fRhbnux5NHXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWIt ZGRmNTY3ZWRlZDAzLzEvQnA1emxpbHd1eWFSUGhrNkFnODJtbUZDbzN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi80YWJmM2YtMTU4Zi00ZjYyLWE5ZWItZGRmNTY3ZWRlZDAz LzEvalJySVB1T2otV2pXYXRMOTlHRnVlN0hrMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvL9hMA0G CSqGSIb3DQEBCwUAA4IBAQAmKAqZ36GIR0kJimfoZ+pYc1ls0HfIPyKd61YQ0dI2 HPyuKD4qTxkGppoLErfdNdAKx7YrlW3SEseHE/r0UG5gTB/mE7xctLI/a2Ekcme1 i4ODtlLPyH3cOUzxo73i/IYjnYoIs04RupwNKJAJ/b0xUYyGKxUmT+l/4lOcWpr5 Yzb8MulGDu012hWK0fru6xwPc2PPUokSJS/5l1qeBsQVdG/AJjr09KeOuXYlleMD fBNUdgPrbYYhSi0mX2SDLoKzDlNfFRzpUSzSSbAj1zHtT2rtQF4dU1hp01ndIFv8 bz1vpKexwqhYPeEvvmgKGD+gWXxYXUA5uD1H0ceZP4SR -----END CERTIFICATE-----Generated at Mon Jan 19 16:52:57 2026 by rpki-client