This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/BVH6b7o32zruo819dGQ7RJqUDl8.roa File: BVH6b7o32zruo819dGQ7RJqUDl8.roa (raw, json) Hash identifier: xnWOB/u8pFkczKp6SQPwHh+agMf57JcMqkeEhSQno3k= Subject key identifier: 05:51:FA:6F:BA:37:DB:3A:EE:A3:CD:7D:74:64:3B:44:9A:94:0E:5F Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA69275DC9744AA90A9F880BC42CB3C Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/BVH6b7o32zruo819dGQ7RJqUDl8.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 46.20.96.0/24 maxlen: 24 46.20.98.0/24 maxlen: 24 46.20.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:92:75:dc:97:44:aa:90:a9:f8:80:bc:42:cb:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0551fa6fba37db3aeea3cd7d74643b449a940e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3b:bf:be:47:1b:7d:50:b8:50:8e:4a:36:de: 49:f1:b5:79:f7:90:ad:5b:03:4f:0a:9e:51:fc:20: c0:21:87:e7:6a:4d:b9:d5:cf:a5:40:7f:d5:95:90: 84:2b:01:42:3e:43:c6:9b:f1:fa:46:dd:66:36:f3: 4a:89:2f:52:b0:ae:ef:ae:f0:80:7c:d9:cc:d0:b1: 88:be:c8:ab:6e:24:3a:c3:79:c9:1f:63:44:82:9a: 16:c7:13:72:ca:8b:19:a4:f2:c9:7f:84:09:0b:df: 57:db:27:cc:e7:79:b6:2a:bd:6b:87:43:d0:83:82: 6e:6b:7e:80:c5:b2:b9:3b:1a:51:d6:e6:b6:58:e2: 9b:aa:5f:53:ed:42:e4:40:7c:4f:27:33:72:b8:e0: 0f:9d:56:3c:da:f1:9a:2d:8c:01:5d:50:fa:08:28: 47:ec:75:2c:1e:b0:06:79:28:8d:e0:30:53:f2:3e: ed:f7:01:36:bd:31:0e:c2:d5:d7:40:10:c9:3c:9d: 8c:15:92:69:c1:84:e7:71:47:3a:ee:d9:cb:20:8c: 4e:4c:24:3d:7a:2d:de:e0:e2:ac:23:47:74:7f:9c: 27:5d:69:d8:fc:be:db:22:60:78:1c:e5:de:c6:72: a2:77:11:2a:45:38:8f:a9:40:b4:14:61:db:9a:ae: 96:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:51:FA:6F:BA:37:DB:3A:EE:A3:CD:7D:74:64:3B:44:9A:94:0E:5F X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/BVH6b7o32zruo819dGQ7RJqUDl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.96.0/24 46.20.98.0/24 46.20.102.0/24 Signature Algorithm: sha256WithRSAEncryption 08:2e:75:ea:21:85:9e:10:07:9f:98:89:9a:47:0f:1b:c5:5f: 58:ab:ab:bc:9c:50:4e:ee:87:1c:bf:7a:5b:d6:f0:90:90:53: ec:38:4c:38:f3:b8:05:32:50:34:39:f4:37:98:51:e2:12:ef: 13:5c:dd:1a:31:34:06:c5:ee:8f:1a:f6:7a:a3:e5:30:19:70: 83:5c:6d:81:3e:6c:7c:7b:c1:ad:a3:58:38:db:83:81:ab:bd: 46:98:d5:58:43:c7:77:24:a0:09:5d:51:14:9a:c5:a0:36:6a: 47:45:9b:4c:ec:02:d3:cf:77:a5:20:be:9a:6c:1b:cb:97:4e: 9d:93:e1:43:c8:55:91:a7:6c:bf:84:34:f3:fb:8d:41:4d:1c: 76:27:3a:14:da:b9:8a:29:d7:fa:9b:ba:70:40:52:ae:f9:c1: 68:64:20:65:2e:d6:72:0f:cf:56:6f:09:1d:74:6c:49:b2:ae: 33:47:75:f6:c6:f3:68:ba:6c:a5:53:0a:96:a1:f6:a0:85:7a: 98:4d:c5:f8:89:f9:12:26:24:4e:05:c9:a8:25:db:2d:35:f4: f5:83:0a:7d:34:3e:63:22:79:1e:85:f7:da:52:f8:7a:74:44: e4:0f:37:cf:d9:8a:c8:16:4e:85:71:6a:6b:ff:36:34:9b:71: 6b:81:84:95 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+ppJ13JdEqpCp+IC8Qss8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTUxZmE2ZmJhMzdkYjNhZWVhM2NkN2Q3NDY0M2I0NDlhOTQwZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Tu/vkcbfVC4UI5KNt5J8bV595Ct WwNPCp5R/CDAIYfnak251c+lQH/VlZCEKwFCPkPGm/H6Rt1mNvNKiS9SsK7vrvCA fNnM0LGIvsirbiQ6w3nJH2NEgpoWxxNyyosZpPLJf4QJC99X2yfM53m2Kr1rh0PQ g4Jua36AxbK5OxpR1ua2WOKbql9T7ULkQHxPJzNyuOAPnVY82vGaLYwBXVD6CChH 7HUsHrAGeSiN4DBT8j7t9wE2vTEOwtXXQBDJPJ2MFZJpwYTncUc67tnLIIxOTCQ9 ei3e4OKsI0d0f5wnXWnY/L7bImB4HOXexnKidxEqRTiPqUC0FGHbmq6WFQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAVR+m+6N9s67qPNfXRkO0SalA5fMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvQlZINmI3bzMyenJ1bzgxOWRHUTdSSnFVRGw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALhRgAwQA LhRiAwQALhRmMA0GCSqGSIb3DQEBCwUAA4IBAQAILnXqIYWeEAefmImaRw8bxV9Y q6u8nFBO7occv3pb1vCQkFPsOEw487gFMlA0OfQ3mFHiEu8TXN0aMTQGxe6PGvZ6 o+UwGXCDXG2BPmx8e8Gto1g424OBq71GmNVYQ8d3JKAJXVEUmsWgNmpHRZtM7ALT z3elIL6abBvLl06dk+FDyFWRp2y/hDTz+41BTRx2JzoU2rmKKdf6m7pwQFKu+cFo ZCBlLtZyD89WbwkddGxJsq4zR3X2xvNoumylUwqWofaghXqYTcX4ifkSJiROBcmo JdstNfT1gwp9ND5jInkehffaUvh6dETkDzfP2YrIFk6FcWpr/zY0m3FrgYSV -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:20 2026 by rpki-client