This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/BvtEp7ZykJYdaMqo7blsUuKtvPY.roa File: BvtEp7ZykJYdaMqo7blsUuKtvPY.roa (raw, json) Hash identifier: JWrGFKwI8ZmYJkc5AseOHeCw/Nb3xRt6/+xGW3jCg44= Subject key identifier: 06:FB:44:A7:B6:72:90:96:1D:68:CA:A8:ED:B9:6C:52:E2:AD:BC:F6 Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649 Certificate serial: 019B79113AD1BECD9F58F3AD9B1D18A03478 Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/BvtEp7ZykJYdaMqo7blsUuKtvPY.roa Signing time: Thu 01 Jan 2026 10:18:50 +0000 ROA not before: Thu 01 Jan 2026 10:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206348 IP address blocks: 185.159.248.0/22 maxlen: 24 185.159.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:3a:d1:be:cd:9f:58:f3:ad:9b:1d:18:a0:34:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649 Validity Not Before: Jan 1 10:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06fb44a7b67290961d68caa8edb96c52e2adbcf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:6c:ae:95:6a:b1:c5:7b:99:13:26:e9:31: fb:92:be:92:e2:68:e1:43:dc:aa:db:b9:b8:58:50: 74:ea:68:c9:94:b0:99:04:8b:a3:e0:3e:f2:3d:c1: 2d:fe:67:c3:5a:29:4f:1a:f2:a2:fd:75:fb:08:3b: 8c:98:d1:fd:ba:eb:6e:f2:ce:83:d4:90:77:a1:db: 46:40:cb:dc:f4:77:79:6c:80:56:f5:92:07:ca:f6: 71:d1:7d:49:9b:26:e2:5b:09:22:fe:b3:c3:76:98: 32:bb:9d:7e:a0:46:86:18:a4:f8:1e:05:1a:45:4b: 52:8b:1e:7b:2c:74:42:e7:98:fd:95:d5:fd:9e:70: 6b:c8:a0:b5:bc:a4:2a:9a:ae:1e:31:85:06:81:53: 44:fe:fc:70:ba:75:0b:db:53:77:5b:7a:f9:97:fd: e1:95:31:47:76:d8:9c:5b:9e:f8:04:f6:de:d2:9c: ab:3f:d9:7f:b7:fa:90:2f:cf:70:bf:52:21:c8:59: d2:c1:64:05:c5:e1:97:84:c2:6d:24:ec:ef:f7:10: b9:31:70:0c:cb:67:06:0f:7d:0c:c2:79:44:fe:79: ed:7c:cc:27:6a:20:9d:e6:3a:42:82:34:5d:5b:56: 32:a4:ff:cb:3c:7a:b6:93:76:07:22:76:2d:a6:66: 67:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FB:44:A7:B6:72:90:96:1D:68:CA:A8:ED:B9:6C:52:E2:AD:BC:F6 X509v3 Authority Key Identifier: keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/BvtEp7ZykJYdaMqo7blsUuKtvPY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.159.248.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:9e:c9:4e:5a:77:ae:64:66:7c:ee:3d:d4:14:57:3b:a9:9f: dd:a9:44:66:3c:ae:1f:31:8a:b1:8f:b6:08:d6:a5:03:d6:a4: 54:1a:dd:c1:3a:fc:0b:2c:ed:0e:e6:5b:4a:57:55:f2:55:8d: 4a:15:fc:88:79:cf:b2:2e:1a:08:b5:50:68:ac:06:ba:70:35: c5:1a:c2:00:2d:60:da:b6:d7:20:5d:22:a2:a8:02:0e:39:7e: 3a:23:cf:73:92:3f:44:00:16:69:b4:53:62:61:85:38:87:b6: 7c:fc:bd:26:46:9f:f9:4c:4c:f5:84:ee:87:7c:8f:65:06:56: 46:c1:19:35:f1:2b:89:ee:4a:b4:15:66:94:c1:10:fb:3f:27: 19:f9:5f:f4:74:48:ec:57:c4:01:b2:41:45:34:ce:71:49:9d: 95:ec:1a:3a:b5:9a:2d:42:e6:d0:01:ec:f3:e9:18:d5:99:f8: a6:df:a3:93:57:5b:76:de:6d:6f:d2:a7:b2:cb:29:66:d0:51: 60:0d:22:85:14:22:ab:7c:c3:35:07:a3:2c:f9:38:4b:6a:99: 42:c2:25:52:ae:bd:5c:8e:6b:12:e2:f6:2c:86:18:55:b3:0b: c1:21:a8:ba:3d:ec:af:2a:bb:24:10:94:c7:88:73:08:1f:70: d3:1d:5b:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ETrRvs2fWPOtmx0YoDR4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODhmYWUzNWI2NmI0ZGUyZTQxY2E1ZWUwNzdiNWVmMGI0 YWI2NDkwHhcNMjYwMTAxMTAxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmZiNDRhN2I2NzI5MDk2MWQ2OGNhYThlZGI5NmM1MmUyYWRiY2Y2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0hsrpVqscV7mRMm6TH7kr6S4mjh Q9yq27m4WFB06mjJlLCZBIuj4D7yPcEt/mfDWilPGvKi/XX7CDuMmNH9uutu8s6D 1JB3odtGQMvc9Hd5bIBW9ZIHyvZx0X1JmybiWwki/rPDdpgyu51+oEaGGKT4HgUa RUtSix57LHRC55j9ldX9nnBryKC1vKQqmq4eMYUGgVNE/vxwunUL21N3W3r5l/3h lTFHdticW574BPbe0pyrP9l/t/qQL89wv1IhyFnSwWQFxeGXhMJtJOzv9xC5MXAM y2cGD30MwnlE/nntfMwnaiCd5jpCgjRdW1YypP/LPHq2k3YHInYtpmZnVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAb7RKe2cpCWHWjKqO25bFLirbz2MB8GA1UdIwQY MBaAFKqI+uNbZrTeLkHKXuB3te8LSrZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzct YjkyY2I2MTEzMDM1LzEvQnZ0RXA3WnlrSllkYU1xbzdibHNVdUt0dlBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzctYjkyY2I2MTEzMDM1 LzEvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ/4MA0G CSqGSIb3DQEBCwUAA4IBAQA+nslOWneuZGZ87j3UFFc7qZ/dqURmPK4fMYqxj7YI 1qUD1qRUGt3BOvwLLO0O5ltKV1XyVY1KFfyIec+yLhoItVBorAa6cDXFGsIALWDa ttcgXSKiqAIOOX46I89zkj9EABZptFNiYYU4h7Z8/L0mRp/5TEz1hO6HfI9lBlZG wRk18SuJ7kq0FWaUwRD7PycZ+V/0dEjsV8QBskFFNM5xSZ2V7Bo6tZotQubQAezz 6RjVmfim36OTV1t23m1v0qeyyylm0FFgDSKFFCKrfMM1B6Ms+ThLaplCwiVSrr1c jmsS4vYshhhVswvBIai6PeyvKrskEJTHiHMIH3DTHVu8 -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:23 2026 by rpki-client