This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa File: BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa (raw, json) Hash identifier: 5wX5ABs7jXHAcsj1rTpIdy5eRi1XpbpjW+Bwyv+iY8g= Subject key identifier: 04:50:6B:B4:52:91:C5:DF:7C:4B:59:3C:2B:0C:78:DA:C8:C2:C4:24 Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Certificate serial: 019B79ED19D20263297D0B1AF8AE303FBF6C Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30801 IP address blocks: 82.98.0.0/18 maxlen: 24 82.98.0.0/19 maxlen: 19 82.98.32.0/20 maxlen: 20 82.98.48.0/21 maxlen: 21 82.98.56.0/22 maxlen: 22 82.98.60.0/22 maxlen: 22 85.203.64.0/18 maxlen: 24 92.61.128.0/20 maxlen: 20 178.16.240.0/20 maxlen: 24 217.67.144.0/20 maxlen: 20 2a04:1e00::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:19:d2:02:63:29:7d:0b:1a:f8:ae:30:3f:bf:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04506bb45291c5df7c4b593c2b0c78dac8c2c424 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:05:23:fa:b4:ad:df:3f:d1:27:1b:f9:cc:96: 17:f3:5c:40:54:6e:7e:cd:59:15:51:15:2d:fe:01: 57:36:96:29:74:c6:08:a8:eb:37:f6:2d:e1:c1:16: a6:d1:f5:42:7b:d3:a6:34:ae:12:bb:8a:38:d2:d2: 13:4c:ef:d7:1a:ef:ff:0e:60:33:4e:3c:54:f8:37: 99:1d:ef:fb:c6:a1:ca:a8:4f:11:b3:e6:70:29:61: 7a:10:0d:8d:9c:5a:49:e9:83:0e:80:80:36:53:28: 05:23:9d:fb:3f:58:c9:de:5d:c0:e2:3a:c4:8f:ab: 66:b6:10:45:b6:a3:37:0d:34:16:3b:06:d4:55:1f: 91:df:d2:c1:3b:82:c2:39:e3:9d:0b:21:b8:1c:63: e6:af:4c:8c:40:e6:7b:85:e6:29:78:79:1e:c8:71: 85:bf:f8:32:90:2f:c1:ec:85:7a:3d:f3:33:c6:eb: 38:9e:da:f2:72:3e:02:2d:28:1d:05:a7:0e:85:b5: cf:7c:9b:af:6b:3c:60:a5:fa:68:8c:66:27:79:c4: 84:c3:ed:1f:d3:97:e8:1e:cb:f1:2f:43:a2:f8:0b: a7:e7:af:e3:86:b1:be:27:b1:61:c8:2b:97:e4:53: 65:33:eb:b6:38:ef:b3:7f:fd:80:95:bc:cc:98:f6: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:50:6B:B4:52:91:C5:DF:7C:4B:59:3C:2B:0C:78:DA:C8:C2:C4:24 X509v3 Authority Key Identifier: keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/BFBrtFKRxd98S1k8Kwx42sjCxCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.98.0.0/18 85.203.64.0/18 92.61.128.0/20 178.16.240.0/20 217.67.144.0/20 IPv6: 2a04:1e00::/29 Signature Algorithm: sha256WithRSAEncryption 52:7c:60:ab:b5:ac:e2:42:9d:e3:f7:4d:1d:60:d9:84:ef:37: 24:e2:a1:c1:25:fa:ee:b3:1d:e8:c6:99:81:ac:e6:ef:e9:c3: dd:60:4b:7e:e3:c3:14:b3:6d:95:e8:1d:63:8c:31:0c:27:fd: 29:66:1c:db:b1:72:4c:f2:16:95:a8:35:21:56:92:6b:57:ff: d2:95:74:a7:08:51:17:0f:c5:86:5f:4a:3b:f2:9a:ea:ed:e3: 16:7e:90:17:71:bf:52:6e:38:2a:fc:17:87:63:d6:b4:bd:46: 23:88:04:11:f6:25:e6:c2:d0:5e:66:0e:21:9e:9b:e0:f2:28: 5e:d0:62:d2:79:09:c0:c8:f5:fb:af:af:78:92:80:8e:2b:ab: 2c:ba:c5:6f:50:80:89:c6:fb:08:6a:7b:7b:89:96:fa:d8:54: d7:d4:19:4b:8d:26:99:04:24:42:d8:dc:1d:79:b6:eb:00:de: 79:43:a4:b5:95:07:a7:d6:33:09:a7:6d:96:ec:7a:7c:89:af: 3a:e0:89:9b:ea:de:a7:06:b3:ee:6d:4b:ba:ef:eb:8c:d7:b2: 4f:fd:72:ed:cb:ea:fa:a8:e2:76:7a:1d:de:fe:5d:21:73:33: 44:cf:ef:13:4b:96:d7:89:5f:9e:70:bb:46:29:82:7a:cb:a7: cf:cf:ff:4e -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt57RnSAmMpfQsa+K4wP79sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0 NzdmNzUwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDUwNmJiNDUyOTFjNWRmN2M0YjU5M2MyYjBjNzhkYWM4YzJjNDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAUj+rSt3z/RJxv5zJYX81xAVG5+ zVkVURUt/gFXNpYpdMYIqOs39i3hwRam0fVCe9OmNK4Su4o40tITTO/XGu//DmAz TjxU+DeZHe/7xqHKqE8Rs+ZwKWF6EA2NnFpJ6YMOgIA2UygFI537P1jJ3l3A4jrE j6tmthBFtqM3DTQWOwbUVR+R39LBO4LCOeOdCyG4HGPmr0yMQOZ7heYpeHkeyHGF v/gykC/B7IV6PfMzxus4ntrycj4CLSgdBacOhbXPfJuvazxgpfpojGYnecSEw+0f 05foHsvxL0Oi+Aun56/jhrG+J7FhyCuX5FNlM+u2OO+zf/2AlbzMmPZVwQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFARQa7RSkcXffEtZPCsMeNrIwsQkMB8GA1UdIwQY MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt OWY1MjJhMjg0NTk1LzEvQkZCcnRGS1J4ZDk4UzFrOEt3eDQyc2pDeENRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1 LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQGUmIAAwQG VctAAwQEXD2AAwQEshDwAwQE2UOQMA0EAgACMAcDBQMqBB4AMA0GCSqGSIb3DQEB CwUAA4IBAQBSfGCrtaziQp3j900dYNmE7zck4qHBJfrusx3oxpmBrObv6cPdYEt+ 48MUs22V6B1jjDEMJ/0pZhzbsXJM8haVqDUhVpJrV//SlXSnCFEXD8WGX0o78prq 7eMWfpAXcb9Sbjgq/BeHY9a0vUYjiAQR9iXmwtBeZg4hnpvg8ihe0GLSeQnAyPX7 r694koCOK6ssusVvUICJxvsIant7iZb62FTX1BlLjSaZBCRC2NwdebbrAN55Q6S1 lQen1jMJp22W7Hp8ia864Imb6t6nBrPubUu67+uM17JP/XLty+r6qOJ2eh3e/l0h czNEz+8TS5bXiV+ecLtGKYJ6y6fPz/9O -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:29 2026 by rpki-client