This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/Bfzwf98xLJbA9yO46opAzxoOY4Q.roa File: Bfzwf98xLJbA9yO46opAzxoOY4Q.roa (raw, json) Hash identifier: Otj13zfnlm0f6lweV/FWlpiH+m4gig+aXovg34tGPgI= Subject key identifier: 05:FC:F0:7F:DF:31:2C:96:C0:F7:23:B8:EA:8A:40:CF:1A:0E:63:84 Certificate issuer: /CN=a04845af1dc0087b274cee52a4a9e0880335435d Certificate serial: 019BC632D63B8A76DD1799043977D34D50DC Authority key identifier: A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/Bfzwf98xLJbA9yO46opAzxoOY4Q.roa Signing time: Fri 16 Jan 2026 09:46:18 +0000 ROA not before: Fri 16 Jan 2026 09:46:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9121 IP address blocks: 178.210.160.0/24 maxlen: 24 178.210.161.0/24 maxlen: 24 178.210.165.0/24 maxlen: 24 178.210.166.0/24 maxlen: 24 178.210.168.0/24 maxlen: 24 178.210.170.0/24 maxlen: 24 178.210.171.0/24 maxlen: 24 178.210.172.0/24 maxlen: 24 178.210.173.0/24 maxlen: 24 178.210.174.0/24 maxlen: 24 178.210.175.0/24 maxlen: 24 178.210.176.0/24 maxlen: 24 178.210.177.0/24 maxlen: 24 178.210.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.mft rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:32:d6:3b:8a:76:dd:17:99:04:39:77:d3:4d:50:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a04845af1dc0087b274cee52a4a9e0880335435d Validity Not Before: Jan 16 09:46:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05fcf07fdf312c96c0f723b8ea8a40cf1a0e6384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a2:03:3f:56:0e:32:fa:17:d4:bf:96:b2:0d: e0:8e:74:92:8f:c3:c8:f9:0e:d1:d3:ba:06:68:0e: 4a:56:12:1f:d9:25:0a:50:0e:47:b9:51:44:b2:5d: d7:8d:fa:3e:6f:2a:aa:fa:a4:10:dd:16:69:18:33: 2d:ac:c8:61:50:b2:57:b6:2b:35:78:86:4a:7d:e2: 04:64:a1:52:94:16:79:a7:53:51:3c:90:a8:fe:94: 03:29:1b:f9:4b:35:2f:43:c4:a8:db:7c:f0:4d:34: 00:01:ab:9a:9a:3c:a1:57:7b:0c:1a:b4:5e:23:61: 4a:0c:43:c2:ce:6a:96:96:47:62:31:fe:98:98:fc: 1c:7e:3c:1f:7f:64:bd:da:50:46:63:8a:52:7e:d7: 41:56:de:37:b5:34:06:21:b7:27:23:54:0c:93:8c: 07:d9:2c:c7:21:fe:9f:88:37:2e:03:a1:e7:cf:88: 34:cf:40:eb:a2:35:18:0e:df:23:32:6f:51:74:1e: 80:dd:5d:04:10:65:86:49:3c:ec:a1:f6:f5:d5:85: 30:f7:31:40:1e:ab:6d:5f:66:66:36:8b:cd:3c:ac: b1:82:f3:3f:a6:de:96:67:1b:87:42:c3:b4:21:b5: a8:f1:39:e0:b6:21:9a:c6:d2:b2:04:2e:78:26:1a: 80:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FC:F0:7F:DF:31:2C:96:C0:F7:23:B8:EA:8A:40:CF:1A:0E:63:84 X509v3 Authority Key Identifier: keyid:A0:48:45:AF:1D:C0:08:7B:27:4C:EE:52:A4:A9:E0:88:03:35:43:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oEhFrx3ACHsnTO5SpKngiAM1Q10.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/Bfzwf98xLJbA9yO46opAzxoOY4Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e55e30-97c6-40e6-81b7-507011570ee6/1/oEhFrx3ACHsnTO5SpKngiAM1Q10.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.160.0/23 178.210.165.0-178.210.166.255 178.210.168.0/24 178.210.170.0-178.210.178.255 Signature Algorithm: sha256WithRSAEncryption 40:40:24:f6:c1:d4:3c:50:49:63:07:f8:f3:8b:27:7d:e2:8b: 13:ae:04:9f:38:b7:52:5e:c0:15:ed:4e:04:6e:6d:c5:21:2f: c7:e6:c0:a0:06:6d:aa:a7:28:33:12:6d:90:9f:2e:ea:ec:36: 7f:66:07:f4:96:fc:f3:2d:4b:f1:69:48:ea:c6:83:36:48:d1: 97:5e:89:16:c8:a6:76:ab:d9:49:cc:40:67:0b:47:68:f5:cf: b2:aa:8c:a9:57:f9:5f:90:31:36:e8:4c:21:e6:a6:cc:69:74: 4b:f1:5b:80:e6:9f:99:b3:83:cb:1a:96:97:08:46:bd:66:9c: 7f:e3:71:64:ef:47:08:79:a0:42:b9:f4:1a:13:f8:9d:5a:13: 67:97:81:74:7b:11:a9:3b:b8:73:b1:ae:ba:25:d5:8c:90:f5: 29:fd:78:a9:ea:a8:82:9e:d7:f7:6f:4b:2b:05:4e:fa:a0:cb: b4:32:61:28:0e:68:41:bb:c7:7b:cb:5f:9c:81:9c:b8:bd:db: d3:27:62:31:cd:d7:8b:61:b3:57:d4:f1:0e:03:ce:c7:dc:67: 4b:55:80:17:e6:03:4b:4b:52:42:63:19:88:11:67:63:f9:99: c2:b0:19:7e:ba:51:28:3a:6a:4c:d1:ff:90:04:69:e5:9f:b7: bb:0d:d6:65 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZvGMtY7inbdF5kEOXfTTVDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwNDg0NWFmMWRjMDA4N2IyNzRjZWU1MmE0YTllMDg4MDMz NTQzNWQwHhcNMjYwMTE2MDk0NjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWZjZjA3ZmRmMzEyYzk2YzBmNzIzYjhlYThhNDBjZjFhMGU2Mzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKIDP1YOMvoX1L+Wsg3gjnSSj8PI +Q7R07oGaA5KVhIf2SUKUA5HuVFEsl3Xjfo+byqq+qQQ3RZpGDMtrMhhULJXtis1 eIZKfeIEZKFSlBZ5p1NRPJCo/pQDKRv5SzUvQ8So23zwTTQAAauamjyhV3sMGrRe I2FKDEPCzmqWlkdiMf6YmPwcfjwff2S92lBGY4pSftdBVt43tTQGIbcnI1QMk4wH 2SzHIf6fiDcuA6Hnz4g0z0DrojUYDt8jMm9RdB6A3V0EEGWGSTzsofb11YUw9zFA HqttX2ZmNovNPKyxgvM/pt6WZxuHQsO0IbWo8TngtiGaxtKyBC54JhqABwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFAX88H/fMSyWwPcjuOqKQM8aDmOEMB8GA1UdIwQY MBaAFKBIRa8dwAh7J0zuUqSp4IgDNUNdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjct NTA3MDExNTcwZWU2LzEvQmZ6d2Y5OHhMSmJBOXlPNDZvcEF6eG9PWTRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9lNTVlMzAtOTdjNi00MGU2LTgxYjctNTA3MDExNTcwZWU2 LzEvb0VoRnJ4M0FDSHNuVE81U3BLbmdpQU0xUTEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQBstKgMAwD BACy0qUDBACy0qYDBACy0qgwDAMEAbLSqgMEALLSsjANBgkqhkiG9w0BAQsFAAOC AQEAQEAk9sHUPFBJYwf484snfeKLE64Enzi3Ul7AFe1OBG5txSEvx+bAoAZtqqco MxJtkJ8u6uw2f2YH9Jb88y1L8WlI6saDNkjRl16JFsimdqvZScxAZwtHaPXPsqqM qVf5X5AxNuhMIeamzGl0S/FbgOafmbODyxqWlwhGvWacf+NxZO9HCHmgQrn0GhP4 nVoTZ5eBdHsRqTu4c7GuuiXVjJD1Kf14qeqogp7X929LKwVO+qDLtDJhKA5oQbvH e8tfnIGcuL3b0ydiMc3Xi2GzV9TxDgPOx9xnS1WAF+YDS0tSQmMZiBFnY/mZwrAZ frpRKDpqTNH/kARp5Z+3uw3WZQ== -----END CERTIFICATE-----Generated at Wed Jan 21 13:18:01 2026 by rpki-client