This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/bzSWstjFIYA6blRoFbFSF1OGU6I.roa File: bzSWstjFIYA6blRoFbFSF1OGU6I.roa (raw, json) Hash identifier: 7+JXpzWh9jeKZFp1Mfmg0BBiAYIO4Ce8OyrMvTMG8jY= Subject key identifier: 6F:34:96:B2:D8:C5:21:80:3A:6E:54:68:15:B1:52:17:53:86:53:A2 Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Certificate serial: 019B78A22DCC05BC5B743D20E7C4E0EEAF89 Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/bzSWstjFIYA6blRoFbFSF1OGU6I.roa Signing time: Thu 01 Jan 2026 08:17:33 +0000 ROA not before: Thu 01 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50053 IP address blocks: 185.23.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 17:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:2d:cc:05:bc:5b:74:3d:20:e7:c4:e0:ee:af:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f Validity Not Before: Jan 1 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f3496b2d8c521803a6e546815b15217538653a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c7:0c:4c:2c:72:ee:2d:39:ab:62:92:c3:b4: 2e:9e:55:33:36:cd:e9:65:7e:04:93:7e:9c:0d:aa: 3d:51:4d:8e:d4:c8:32:17:4d:a2:02:d8:93:1a:26: 94:d8:68:88:50:98:da:2d:7c:16:ba:75:2a:73:db: 13:8d:e8:e6:ed:41:55:4b:78:2c:78:81:59:6d:ef: ac:8d:66:64:62:74:c8:1d:15:1b:b3:09:4b:4a:9e: 73:49:7d:9d:80:b7:92:d4:a1:7b:cb:8a:77:8e:3c: c1:ca:9a:d0:57:6a:f5:95:f9:01:de:5f:b2:40:38: 88:ba:7c:9f:37:49:5b:65:30:cd:df:49:f8:d4:86: e1:7f:a0:57:de:f9:a1:3a:4c:7f:3b:e7:c2:78:fe: 98:41:85:b9:df:d6:c0:15:d0:13:f3:3d:d7:3e:26: 4d:1a:4d:1d:a3:de:43:ab:fb:75:b7:fa:26:8f:a3: 30:52:52:c8:c5:79:a1:52:28:d4:02:be:ca:38:28: 9a:79:a0:6c:9d:7c:e8:b0:65:f6:dd:19:86:d4:21: dd:5f:e0:67:b9:2b:40:ad:a0:84:ca:ee:bc:59:1c: c6:62:53:0e:09:5b:9f:30:56:04:02:4f:c4:10:af: 85:a3:a7:a5:f2:06:f4:58:55:80:68:8a:13:28:54: d0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:34:96:B2:D8:C5:21:80:3A:6E:54:68:15:B1:52:17:53:86:53:A2 X509v3 Authority Key Identifier: keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/bzSWstjFIYA6blRoFbFSF1OGU6I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.23.238.0/24 Signature Algorithm: sha256WithRSAEncryption 50:00:bc:cc:56:c4:0e:61:cc:0d:8d:11:b5:d2:51:82:85:00: 52:4c:c9:92:d2:ab:df:41:96:7c:88:49:e7:b3:6b:58:84:ae: eb:d9:5e:fa:62:d8:00:50:82:c5:19:d6:05:4a:64:7f:e9:43: 91:d9:4f:07:e2:60:30:d8:8a:a1:b7:ce:63:bf:85:7c:5e:d5: 89:48:46:af:f2:da:f3:62:ea:cd:53:ab:80:6d:29:4d:fa:ba: 06:c3:f9:68:cc:f7:c3:3e:b6:32:ae:57:60:19:a3:9f:e4:71: a5:c1:91:09:68:1d:3d:83:30:0d:30:0e:8d:05:56:1d:62:2f: cd:7f:71:bf:ea:81:35:00:51:9e:4d:63:b6:47:a2:2f:b2:e6: c8:9b:10:1b:e7:c7:12:c8:20:bf:b9:f1:99:fa:2f:eb:88:0f: e1:81:16:0a:37:e8:4b:b2:73:06:e5:36:0e:2a:c2:1d:a4:cf: aa:3f:39:83:0c:18:d9:7b:cb:ec:ca:cf:47:2b:5b:d1:81:16: 43:21:67:fe:cd:c4:c5:93:fe:7b:39:80:eb:30:7d:d5:63:40: c8:b9:12:c5:3d:e3:68:da:66:31:dc:21:1d:ef:57:9a:73:39: fd:c8:13:84:a4:22:91:92:ac:36:62:f4:a1:c8:5a:39:78:4a: 04:1d:d7:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oi3MBbxbdD0g58Tg7q+JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5N2VmOWJlZmQxYTdlMjRjMGNjOTcyOTk4N2ZjMDY1ZDZi NzEzMmYwHhcNMjYwMTAxMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjM0OTZiMmQ4YzUyMTgwM2E2ZTU0NjgxNWIxNTIxNzUzODY1M2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsscMTCxy7i05q2KSw7QunlUzNs3p ZX4Ek36cDao9UU2O1MgyF02iAtiTGiaU2GiIUJjaLXwWunUqc9sTjejm7UFVS3gs eIFZbe+sjWZkYnTIHRUbswlLSp5zSX2dgLeS1KF7y4p3jjzByprQV2r1lfkB3l+y QDiIunyfN0lbZTDN30n41Ibhf6BX3vmhOkx/O+fCeP6YQYW539bAFdAT8z3XPiZN Gk0do95Dq/t1t/omj6MwUlLIxXmhUijUAr7KOCiaeaBsnXzosGX23RmG1CHdX+Bn uStAraCEyu68WRzGYlMOCVufMFYEAk/EEK+Fo6el8gb0WFWAaIoTKFTQvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG80lrLYxSGAOm5UaBWxUhdThlOiMB8GA1UdIwQY MBaAFCl++b79Gn4kwMyXKZh/wGXWtxMvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWIt ZGVlNzY4NjAwMTNkLzEvYnpTV3N0akZJWUE2YmxSb0ZiRlNGMU9HVTZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9iZTQ5MDktNzQ1Zi00ZDBjLWJmYWItZGVlNzY4NjAwMTNk LzEvS1g3NXZ2MGFmaVRBekpjcG1IX0FaZGEzRXk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuRfuMA0G CSqGSIb3DQEBCwUAA4IBAQBQALzMVsQOYcwNjRG10lGChQBSTMmS0qvfQZZ8iEnn s2tYhK7r2V76YtgAUILFGdYFSmR/6UOR2U8H4mAw2Iqht85jv4V8XtWJSEav8trz YurNU6uAbSlN+roGw/lozPfDPrYyrldgGaOf5HGlwZEJaB09gzANMA6NBVYdYi/N f3G/6oE1AFGeTWO2R6IvsubImxAb58cSyCC/ufGZ+i/riA/hgRYKN+hLsnMG5TYO KsIdpM+qPzmDDBjZe8vsys9HK1vRgRZDIWf+zcTFk/57OYDrMH3VY0DIuRLFPeNo 2mYx3CEd71eaczn9yBOEpCKRkqw2YvShyFo5eEoEHdfM -----END CERTIFICATE-----Generated at Thu Jan 1 21:34:35 2026 by rpki-client