This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/BpvKKP8EHYFnUrzt21TAjaKhVyY.roa File: BpvKKP8EHYFnUrzt21TAjaKhVyY.roa (raw, json) Hash identifier: BVcIxns5J1UEyy8KjfhVvJrapP9On5m6pyzg2XcZJHA= Subject key identifier: 06:9B:CA:28:FF:04:1D:81:67:52:BC:ED:DB:54:C0:8D:A2:A1:57:26 Certificate issuer: /CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2 Certificate serial: 019B78A33E8AEB0808CCDD142C84888EF094 Authority key identifier: BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/BpvKKP8EHYFnUrzt21TAjaKhVyY.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42466 IP address blocks: 91.189.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.mft rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3e:8a:eb:08:08:cc:dd:14:2c:84:88:8e:f0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb62fe6b7f3d364332bcd6e0daf79226ccf809e2 Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=069bca28ff041d816752bceddb54c08da2a15726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5b:50:92:0a:24:14:e6:f6:f0:65:40:fa:47: 87:6c:e7:f7:48:8a:bb:f3:8a:05:ed:b4:ef:2d:85: 5e:a2:75:22:6f:b2:5a:0a:e6:73:26:9a:b7:04:2d: cf:bc:95:42:7f:a0:83:47:73:2e:d5:c2:12:b1:39: 0a:c8:03:82:df:f2:3f:e4:a2:b9:55:99:3b:fb:8e: b1:bd:f6:34:38:86:3c:3b:53:42:cc:24:d2:0f:57: e0:a0:e1:95:d6:8b:10:5c:51:e5:a7:a6:1d:4d:67: d8:c5:a5:31:af:34:7e:16:10:45:5d:09:e2:c5:2e: 50:1a:8f:0a:52:74:8e:6a:01:e2:8b:26:9f:11:c6: a2:30:3d:56:58:c6:0e:c5:7b:b5:d1:57:65:d8:ec: 64:b0:fe:d7:e3:bb:f1:04:28:59:bf:8c:f9:be:1a: 27:3a:7f:d8:67:14:d3:fd:ca:41:84:bf:79:e6:32: d6:f2:0f:ac:73:f2:a8:d0:7d:55:51:27:7b:d5:92: c7:d3:a5:92:66:9e:04:7d:9f:e2:a8:4c:38:69:5d: 11:ac:13:36:e2:de:63:d6:6a:65:c8:fc:93:d0:a7: 5b:9d:b9:e8:aa:a5:03:ff:98:92:cc:54:27:23:dd: 28:40:0c:3c:c8:aa:33:a9:54:43:f8:3d:7a:1d:77: 7c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:9B:CA:28:FF:04:1D:81:67:52:BC:ED:DB:54:C0:8D:A2:A1:57:26 X509v3 Authority Key Identifier: keyid:BB:62:FE:6B:7F:3D:36:43:32:BC:D6:E0:DA:F7:92:26:CC:F8:09:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2L-a389NkMyvNbg2veSJsz4CeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/BpvKKP8EHYFnUrzt21TAjaKhVyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ffbf18-aa03-434c-8bbd-141450f10a85/1/u2L-a389NkMyvNbg2veSJsz4CeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.189.144.0/21 Signature Algorithm: sha256WithRSAEncryption a7:92:51:27:d3:96:eb:66:a9:2d:16:1e:82:a0:cc:fb:e0:ad: cd:1f:59:e8:8d:94:e1:41:b7:bb:1a:f3:5c:d1:05:b2:73:10: 2a:0e:93:d9:47:73:e3:52:ed:09:f9:10:94:af:84:c8:04:c8: 66:4a:57:a1:ad:51:dd:3c:d1:8f:1b:d1:92:c5:a6:b5:c3:99: 6f:62:51:33:48:36:6d:3a:e4:7a:74:5a:26:3f:80:6d:18:a7: a4:35:87:4a:9e:6e:a2:be:2f:10:ee:be:6a:0e:09:cb:d9:81: 9c:65:77:48:0d:b1:73:2e:77:14:2a:99:42:e4:7e:00:bd:d9: eb:50:70:9e:57:4d:79:cd:f1:39:df:42:70:02:4d:ea:d3:13: 39:7d:dd:b7:cd:86:e7:af:29:b2:12:4e:27:58:fc:89:35:e2: 1f:ae:8d:37:39:76:c2:eb:6a:64:5d:fb:d5:88:b4:11:e0:3e: 3f:e5:4a:fe:2c:ea:8b:72:56:7f:a3:b3:91:8d:1e:9a:c6:51: 1d:8d:59:69:50:72:e4:12:7a:a8:52:04:9d:d6:50:cb:2f:ed: 4b:94:a3:22:13:f1:d5:e2:91:a7:c0:4b:82:85:a9:e6:83:3a: 72:c9:fc:3c:9e:47:7a:0d:e6:0e:25:45:d8:8e:f0:50:0a:3f: 88:06:cb:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oz6K6wgIzN0ULISIjvCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNjJmZTZiN2YzZDM2NDMzMmJjZDZlMGRhZjc5MjI2Y2Nm ODA5ZTIwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjliY2EyOGZmMDQxZDgxNjc1MmJjZWRkYjU0YzA4ZGEyYTE1NzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFtQkgokFOb28GVA+keHbOf3SIq7 84oF7bTvLYVeonUib7JaCuZzJpq3BC3PvJVCf6CDR3Mu1cISsTkKyAOC3/I/5KK5 VZk7+46xvfY0OIY8O1NCzCTSD1fgoOGV1osQXFHlp6YdTWfYxaUxrzR+FhBFXQni xS5QGo8KUnSOagHiiyafEcaiMD1WWMYOxXu10Vdl2OxksP7X47vxBChZv4z5vhon On/YZxTT/cpBhL955jLW8g+sc/Ko0H1VUSd71ZLH06WSZp4EfZ/iqEw4aV0RrBM2 4t5j1mplyPyT0KdbnbnoqqUD/5iSzFQnI90oQAw8yKozqVRD+D16HXd8pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAabyij/BB2BZ1K87dtUwI2ioVcmMB8GA1UdIwQY MBaAFLti/mt/PTZDMrzW4Nr3kibM+AniMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9mZmJmMTgtYWEwMy00MzRjLThiYmQt MTQxNDUwZjEwYTg1LzEvQnB2S0tQOEVIWUZuVXJ6dDIxVEFqYUtoVnlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS9mZmJmMTgtYWEwMy00MzRjLThiYmQtMTQxNDUwZjEwYTg1 LzEvdTJMLWEzODlOa015dk5iZzJ2ZVNKc3o0Q2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDW72QMA0G CSqGSIb3DQEBCwUAA4IBAQCnklEn05brZqktFh6CoMz74K3NH1nojZThQbe7GvNc 0QWycxAqDpPZR3PjUu0J+RCUr4TIBMhmSlehrVHdPNGPG9GSxaa1w5lvYlEzSDZt OuR6dFomP4BtGKekNYdKnm6ivi8Q7r5qDgnL2YGcZXdIDbFzLncUKplC5H4Avdnr UHCeV015zfE530JwAk3q0xM5fd23zYbnrymyEk4nWPyJNeIfro03OXbC62pkXfvV iLQR4D4/5Ur+LOqLclZ/o7ORjR6axlEdjVlpUHLkEnqoUgSd1lDLL+1LlKMiE/HV 4pGnwEuChanmgzpyyfw8nkd6DeYOJUXYjvBQCj+IBsu4 -----END CERTIFICATE-----Generated at Tue Feb 10 00:09:09 2026 by rpki-client