This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/bbtN_5mwzIbiwz2iYZsWxgs7DYc.roa File: bbtN_5mwzIbiwz2iYZsWxgs7DYc.roa (raw, json) Hash identifier: qaL3qNP2rfqqJbxA2Yxe7UXhzeA/+z+h+72ODdJbZt8= Subject key identifier: 6D:BB:4D:FF:99:B0:CC:86:E2:C3:3D:A2:61:9B:16:C6:0B:3B:0D:87 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 019B77C75A450B1123D842C83F1A7A9FE9DD Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/bbtN_5mwzIbiwz2iYZsWxgs7DYc.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20001 IP address blocks: 89.187.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:5a:45:0b:11:23:d8:42:c8:3f:1a:7a:9f:e9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dbb4dff99b0cc86e2c33da2619b16c60b3b0d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6c:2d:a0:e5:dd:d4:8c:bf:c6:c1:f0:25:68: 23:4f:a4:03:ee:db:cc:cc:a4:53:82:90:69:17:4f: f8:84:a2:27:a1:ca:ff:ca:75:ea:26:13:f4:08:b8: e0:18:d3:79:8c:f5:e0:02:75:15:76:5b:e2:72:ab: ed:54:62:52:69:67:6e:ac:64:19:d1:a3:ee:c4:b8: 60:62:8f:37:1d:a0:ec:85:7e:0b:21:b5:90:92:05: f2:b5:78:b4:32:1e:77:9b:dd:b6:ba:5a:cd:49:3d: d3:cc:29:c3:fd:f0:c6:1b:86:0a:1e:c1:9c:b5:27: 3e:c3:b8:63:b4:93:f0:21:93:ab:14:ee:1b:23:57: aa:82:ff:d6:78:64:ce:40:d3:db:08:90:95:28:03: 62:fd:7c:76:a4:38:fa:ae:c1:29:4e:d0:71:f4:5f: 48:68:64:0a:9f:75:9f:4c:83:34:b0:15:9d:95:02: d4:50:28:a2:aa:ae:d6:46:ee:c8:e1:d0:02:e6:34: bc:7d:76:0c:8a:f9:31:fe:cb:23:a9:40:fa:f0:c9: 4c:5d:4d:bd:6e:cc:61:c7:c2:71:70:f2:ab:92:75: 19:f3:22:b8:c4:0f:64:f1:1d:e7:fa:57:59:81:96: 16:e2:20:da:d4:25:a3:54:95:7b:78:3c:60:8c:32: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BB:4D:FF:99:B0:CC:86:E2:C3:3D:A2:61:9B:16:C6:0B:3B:0D:87 X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/bbtN_5mwzIbiwz2iYZsWxgs7DYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.187.20.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:b8:c7:84:d2:c6:bd:a0:c7:8f:f4:ab:6b:ad:fe:29:9e:c5: da:34:ab:72:03:e5:b4:88:44:df:7a:f1:1a:77:05:4d:b7:73: 52:f8:df:1b:df:ae:19:05:32:b0:dc:8d:02:91:c3:63:23:4a: 34:ce:32:c9:d7:16:73:b4:38:f5:f9:0b:62:a4:ef:6f:11:35: c0:bf:dd:32:b3:6d:4e:97:61:ab:bf:5e:38:35:a0:ee:83:d0: 06:ef:3b:00:e3:59:0a:27:b6:35:7b:d1:b0:fd:19:0a:d1:5a: 90:6c:3d:70:a0:52:3b:b0:d6:db:15:57:cc:7a:29:da:ad:13: 30:ba:9b:7d:c4:a1:8c:f6:9e:bb:c7:52:9d:9a:45:f7:ed:1b: 2f:c5:12:4b:70:5f:b9:b8:da:de:b2:51:a3:6f:c1:cd:b3:28: cb:2b:d7:a7:15:55:fa:8c:96:b8:33:0f:f9:00:32:ed:b3:3b: bb:1a:42:b6:7b:25:ef:0b:e0:7c:cd:da:bd:a6:0a:01:f7:45: 61:f0:f8:78:39:5c:ca:bd:9f:f3:61:80:76:7e:24:77:db:be: c1:16:bf:98:a9:8d:37:90:09:89:7f:89:6e:22:e3:86:03:93: fa:56:49:05:64:4d:6c:5f:d7:41:29:6d:60:10:21:54:27:26: 1c:e0:3a:d7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1pFCxEj2ELIPxp6n+ndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGJiNGRmZjk5YjBjYzg2ZTJjMzNkYTI2MTliMTZjNjBiM2IwZDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GwtoOXd1Iy/xsHwJWgjT6QD7tvM zKRTgpBpF0/4hKInocr/ynXqJhP0CLjgGNN5jPXgAnUVdlvicqvtVGJSaWdurGQZ 0aPuxLhgYo83HaDshX4LIbWQkgXytXi0Mh53m922ulrNST3TzCnD/fDGG4YKHsGc tSc+w7hjtJPwIZOrFO4bI1eqgv/WeGTOQNPbCJCVKANi/Xx2pDj6rsEpTtBx9F9I aGQKn3WfTIM0sBWdlQLUUCiiqq7WRu7I4dAC5jS8fXYMivkx/ssjqUD68MlMXU29 bsxhx8JxcPKrknUZ8yK4xA9k8R3n+ldZgZYW4iDa1CWjVJV7eDxgjDK98wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG27Tf+ZsMyG4sM9omGbFsYLOw2HMB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvYmJ0Tl81bXd6SWJpd3oyaVlac1d4Z3M3RFljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWbsUMA0G CSqGSIb3DQEBCwUAA4IBAQBtuMeE0sa9oMeP9Ktrrf4pnsXaNKtyA+W0iETfevEa dwVNt3NS+N8b364ZBTKw3I0CkcNjI0o0zjLJ1xZztDj1+QtipO9vETXAv90ys21O l2Grv144NaDug9AG7zsA41kKJ7Y1e9Gw/RkK0VqQbD1woFI7sNbbFVfMeinarRMw upt9xKGM9p67x1KdmkX37RsvxRJLcF+5uNreslGjb8HNsyjLK9enFVX6jJa4Mw/5 ADLtszu7GkK2eyXvC+B8zdq9pgoB90Vh8Ph4OVzKvZ/zYYB2fiR3277BFr+YqY03 kAmJf4luIuOGA5P6VkkFZE1sX9dBKW1gECFUJyYc4DrX -----END CERTIFICATE-----Generated at Tue Jan 20 01:22:05 2026 by rpki-client