This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/BSVnXWVLQnFahxWR27R2hZyRLOw.roa
File: BSVnXWVLQnFahxWR27R2hZyRLOw.roa (raw, json)
Hash identifier: zWXD1zdzQR6HCoxaZdLT2hwbNb0wnUHdkVZOay9qs94=
Subject key identifier: 05:25:67:5D:65:4B:42:71:5A:87:15:91:DB:B4:76:85:9C:91:2C:EC
Certificate issuer: /CN=eb554c44046c36439a919738942f31fa756b6911
Certificate serial: 019B7B3683A45B7CDA4CA8289984F2AD63D4
Authority key identifier: EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/BSVnXWVLQnFahxWR27R2hZyRLOw.roa
Signing time: Thu 01 Jan 2026 20:18:48 +0000
ROA not before: Thu 01 Jan 2026 20:18:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15682
IP address blocks: 212.74.233.0/24 maxlen: 24
212.74.237.0/24 maxlen: 24
212.74.240.0/21 maxlen: 21
2a01:5f40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:83:a4:5b:7c:da:4c:a8:28:99:84:f2:ad:63:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb554c44046c36439a919738942f31fa756b6911
Validity
Not Before: Jan 1 20:18:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0525675d654b42715a871591dbb476859c912cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0d:f3:a5:e2:55:98:bb:35:72:88:34:53:4e:
2a:74:36:92:81:7f:a7:c5:6a:be:81:f4:39:ae:10:
97:87:c9:7f:2d:86:dc:94:11:ea:57:e8:95:33:4a:
7e:63:5a:43:b5:44:ef:fa:3e:cf:19:41:2e:c9:dd:
19:e3:9e:74:cb:7d:c9:8e:4f:4a:df:c1:a9:09:4d:
6a:92:34:ed:95:62:c5:e2:50:29:cc:2a:82:94:76:
ad:95:f7:03:29:16:bd:4b:69:0b:21:0e:ae:f7:36:
81:49:18:6b:99:68:3f:cc:c2:cc:e5:5a:80:54:e7:
35:90:54:ab:21:e3:c6:47:37:ad:0b:b2:33:c2:f6:
f9:03:69:b7:b9:2c:4a:1d:57:fa:42:ec:25:79:82:
39:41:59:f1:76:47:4c:11:31:c4:b8:2c:b8:2c:98:
93:ac:c8:90:ec:98:f0:dc:7c:07:6d:62:53:7e:16:
69:6e:18:cd:dc:70:86:29:ae:5f:20:be:7a:dc:00:
0c:79:6d:f2:bb:20:b9:c8:94:ea:c3:05:73:cb:80:
1a:be:7e:e3:ef:18:ec:51:35:70:f6:e6:60:f8:95:
76:d9:89:f2:8e:e0:18:4e:03:19:1d:e2:e1:20:40:
b8:38:c0:86:ed:55:cb:c2:c6:15:32:bb:34:94:ec:
e8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:25:67:5D:65:4B:42:71:5A:87:15:91:DB:B4:76:85:9C:91:2C:EC
X509v3 Authority Key Identifier:
keyid:EB:55:4C:44:04:6C:36:43:9A:91:97:38:94:2F:31:FA:75:6B:69:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61VMRARsNkOakZc4lC8x-nVraRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/BSVnXWVLQnFahxWR27R2hZyRLOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c547b8-99ab-42f1-a6cc-bc665bb21686/1/61VMRARsNkOakZc4lC8x-nVraRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.74.233.0/24
212.74.237.0/24
212.74.240.0/21
IPv6:
2a01:5f40::/32
Signature Algorithm: sha256WithRSAEncryption
82:41:36:47:6e:21:5d:9d:36:e9:6b:5e:22:da:50:92:6b:1d:
25:bd:0c:a6:8a:fd:cf:36:09:c5:3f:97:f1:da:a9:4e:38:74:
a2:94:f0:60:68:49:cf:fa:15:06:aa:9c:7f:d3:11:33:88:c9:
81:25:11:83:d3:bb:c9:0a:10:72:6f:2a:da:50:59:49:cc:d9:
a0:9e:34:94:be:a0:f9:7b:73:ae:b5:10:7f:ad:11:c7:f6:f8:
87:09:74:e3:3b:26:33:e9:33:f7:ca:56:f0:01:27:b1:93:32:
c2:5d:df:df:e4:0c:ab:9b:bb:90:b1:86:5d:1f:d5:c1:57:43:
4b:c8:c8:b6:0e:56:b6:e7:ad:36:e8:3b:b8:8b:8c:a9:0e:ac:
0d:d5:3d:f4:e7:29:b0:0d:35:21:2b:4e:24:5b:f6:16:31:cf:
5f:0a:0d:b1:80:16:a7:81:45:77:b6:b0:5c:ce:b6:cd:6b:5a:
65:b5:4d:3b:02:f2:4a:c0:cf:d7:62:12:2f:c4:e0:f9:48:4c:
4b:d1:60:8d:f8:72:51:c0:f3:f0:51:5e:43:c2:a2:1a:71:ce:
c9:b5:b6:04:dd:a3:0c:4e:8c:f1:cc:e0:a0:5d:29:38:5a:d6:
a7:f0:bd:28:7b:15:4b:18:b4:4c:cb:41:3c:3f:5e:43:55:3d:
d9:b1:fd:10
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZt7NoOkW3zaTKgomYTyrWPUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNTU0YzQ0MDQ2YzM2NDM5YTkxOTczODk0MmYzMWZhNzU2
YjY5MTEwHhcNMjYwMTAxMjAxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTI1Njc1ZDY1NGI0MjcxNWE4NzE1OTFkYmI0NzY4NTljOTEyY2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ3zpeJVmLs1cog0U04qdDaSgX+n
xWq+gfQ5rhCXh8l/LYbclBHqV+iVM0p+Y1pDtUTv+j7PGUEuyd0Z4550y33Jjk9K
38GpCU1qkjTtlWLF4lApzCqClHatlfcDKRa9S2kLIQ6u9zaBSRhrmWg/zMLM5VqA
VOc1kFSrIePGRzetC7Izwvb5A2m3uSxKHVf6QuwleYI5QVnxdkdMETHEuCy4LJiT
rMiQ7Jjw3HwHbWJTfhZpbhjN3HCGKa5fIL563AAMeW3yuyC5yJTqwwVzy4Aavn7j
7xjsUTVw9uZg+JV22YnyjuAYTgMZHeLhIEC4OMCG7VXLwsYVMrs0lOzoMwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFAUlZ11lS0JxWocVkdu0doWckSzsMB8GA1UdIwQY
MBaAFOtVTEQEbDZDmpGXOJQvMfp1a2kRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjFWTVJBUnNOa09ha1pjNGxDOHgtblZyYVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jNTQ3YjgtOTlhYi00MmYxLWE2Y2Mt
YmM2NjViYjIxNjg2LzEvQlNWblhXVkxRbkZhaHhXUjI3UjJoWnlSTE93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jNTQ3YjgtOTlhYi00MmYxLWE2Y2MtYmM2NjViYjIxNjg2
LzEvNjFWTVJBUnNOa09ha1pjNGxDOHgtblZyYVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQA1ErpAwQA
1ErtAwQD1ErwMA0EAgACMAcDBQAqAV9AMA0GCSqGSIb3DQEBCwUAA4IBAQCCQTZH
biFdnTbpa14i2lCSax0lvQymiv3PNgnFP5fx2qlOOHSilPBgaEnP+hUGqpx/0xEz
iMmBJRGD07vJChBybyraUFlJzNmgnjSUvqD5e3OutRB/rRHH9viHCXTjOyYz6TP3
ylbwASexkzLCXd/f5Ayrm7uQsYZdH9XBV0NLyMi2Dla256026Du4i4ypDqwN1T30
5ymwDTUhK04kW/YWMc9fCg2xgBangUV3trBczrbNa1pltU07AvJKwM/XYhIvxOD5
SExL0WCN+HJRwPPwUV5DwqIacc7JtbYE3aMMTozxzOCgXSk4Wtan8L0oexVLGLRM
y0E8P15DVT3Zsf0Q
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:54:51 2026 by rpki-client