This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/BvqPzBWXDdD_wNLa0N08b6_pz_k.roa File: BvqPzBWXDdD_wNLa0N08b6_pz_k.roa (raw, json) Hash identifier: GYBQI1YwuHCkNkDxrkD1QYuljCiU/SztGfYzxnToFa0= Subject key identifier: 06:FA:8F:CC:15:97:0D:D0:FF:C0:D2:DA:D0:DD:3C:6F:AF:E9:CF:F9 Certificate issuer: /CN=3eb121cf0632819eeceabeb8a95569c675298821 Certificate serial: 019B7BA354BAB71BA19A11B62C20FC278A54 Authority key identifier: 3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/BvqPzBWXDdD_wNLa0N08b6_pz_k.roa Signing time: Thu 01 Jan 2026 22:17:40 +0000 ROA not before: Thu 01 Jan 2026 22:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43910 IP address blocks: 193.186.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.mft rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:54:ba:b7:1b:a1:9a:11:b6:2c:20:fc:27:8a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb121cf0632819eeceabeb8a95569c675298821 Validity Not Before: Jan 1 22:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06fa8fcc15970dd0ffc0d2dad0dd3c6fafe9cff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:de:f4:c8:88:60:18:7e:27:e7:8c:70:85:ff: 3f:69:49:47:ef:18:6e:4d:d5:a4:7a:72:bf:ee:f3: b5:c3:1a:99:85:5d:1d:11:bb:aa:fe:1a:ab:00:ad: 17:35:b6:1c:3c:8e:32:96:9f:24:3c:50:aa:c1:93: de:68:39:43:7c:b2:01:5b:bc:4d:05:7a:fb:54:e4: 82:45:99:0b:3f:19:fa:47:b9:c1:37:cc:a3:4f:92: 0a:1d:73:ca:12:95:bb:a1:36:85:f4:b1:d4:7d:c1: 86:fe:02:76:f4:5e:5d:f7:c4:c5:25:99:f6:b5:83: de:08:b3:98:f5:11:a9:4b:94:31:fe:8a:f9:a6:51: cc:59:65:46:4c:ff:d7:5a:ef:30:74:a1:05:74:a7: 99:ce:c1:3e:1b:d0:92:8c:26:6f:a6:14:df:d3:f2: 0e:d5:62:f6:84:ac:e9:11:14:76:1f:b5:8f:7a:d8: f1:96:7f:ce:f0:f6:03:45:44:83:17:a7:57:98:fd: bd:4a:02:c8:a3:b5:aa:f5:ab:17:40:5f:5a:31:53: a5:c5:8d:6c:c0:6c:c8:0b:f6:c0:ac:60:52:92:f1: 99:39:40:35:10:d3:cd:af:cd:a0:90:05:08:ff:3b: 01:7a:94:19:02:ec:bc:ce:42:c3:bd:1a:f2:be:b5: db:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FA:8F:CC:15:97:0D:D0:FF:C0:D2:DA:D0:DD:3C:6F:AF:E9:CF:F9 X509v3 Authority Key Identifier: keyid:3E:B1:21:CF:06:32:81:9E:EC:EA:BE:B8:A9:55:69:C6:75:29:88:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrEhzwYygZ7s6r64qVVpxnUpiCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/BvqPzBWXDdD_wNLa0N08b6_pz_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/fb9093-407f-4620-b964-6e739f02d512/1/PrEhzwYygZ7s6r64qVVpxnUpiCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.186.7.0/24 Signature Algorithm: sha256WithRSAEncryption 44:34:58:83:fc:b9:bd:24:cf:ea:04:75:b2:57:91:1c:30:18: b9:d9:cf:b8:3c:43:90:8c:2c:97:45:bf:cf:4a:83:93:0a:df: bf:8a:bb:d7:50:db:67:01:44:a1:15:b1:ee:a0:ad:ca:a5:ea: a0:6b:b7:87:c9:98:ba:86:9b:6f:8e:cb:ac:9d:ac:5b:93:37: 11:de:91:a9:12:5d:89:0d:70:08:3c:29:d0:f6:6d:00:f7:6a: 99:5c:39:18:fc:da:74:f9:00:4a:d2:4a:39:de:41:20:e5:76: 9e:d2:2a:c3:26:77:95:c9:36:8e:d4:f2:e1:d8:af:f3:f5:bd: 24:6d:a1:5e:5a:4e:d8:19:45:70:0d:ea:6b:52:96:04:8b:fe: 75:33:fc:3a:47:a0:5e:31:69:d1:d5:8c:e2:a0:97:c1:be:52: c6:16:48:60:aa:3d:f0:38:00:58:25:1e:58:a2:3f:64:e1:79: 06:d5:b8:3e:76:b0:0f:db:58:1b:05:6c:1c:41:81:16:e7:d3: 14:ea:86:58:70:e9:0c:13:92:7d:6e:ec:8a:f2:c2:f5:61:a4: c4:1b:42:a1:c4:23:7a:4a:ae:bd:16:44:98:4a:a7:c5:f6:d5: d1:3b:5e:13:38:20:c1:c2:dd:d4:50:7a:0f:00:e6:66:00:b0: c0:ff:3d:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o1S6txuhmhG2LCD8J4pUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjEyMWNmMDYzMjgxOWVlY2VhYmViOGE5NTU2OWM2NzUy OTg4MjEwHhcNMjYwMTAxMjIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmZhOGZjYzE1OTcwZGQwZmZjMGQyZGFkMGRkM2M2ZmFmZTljZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqt70yIhgGH4n54xwhf8/aUlH7xhu TdWkenK/7vO1wxqZhV0dEbuq/hqrAK0XNbYcPI4ylp8kPFCqwZPeaDlDfLIBW7xN BXr7VOSCRZkLPxn6R7nBN8yjT5IKHXPKEpW7oTaF9LHUfcGG/gJ29F5d98TFJZn2 tYPeCLOY9RGpS5Qx/or5plHMWWVGTP/XWu8wdKEFdKeZzsE+G9CSjCZvphTf0/IO 1WL2hKzpERR2H7WPetjxln/O8PYDRUSDF6dXmP29SgLIo7Wq9asXQF9aMVOlxY1s wGzIC/bArGBSkvGZOUA1ENPNr82gkAUI/zsBepQZAuy8zkLDvRryvrXbuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAb6j8wVlw3Q/8DS2tDdPG+v6c/5MB8GA1UdIwQY MBaAFD6xIc8GMoGe7Oq+uKlVacZ1KYghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQt NmU3MzlmMDJkNTEyLzEvQnZxUHpCV1hEZERfd05MYTBOMDhiNl9wel9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9mYjkwOTMtNDA3Zi00NjIwLWI5NjQtNmU3MzlmMDJkNTEy LzEvUHJFaHp3WXlnWjdzNnI2NHFWVnB4blVwaUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwboHMA0G CSqGSIb3DQEBCwUAA4IBAQBENFiD/Lm9JM/qBHWyV5EcMBi52c+4PEOQjCyXRb/P SoOTCt+/irvXUNtnAUShFbHuoK3Kpeqga7eHyZi6hptvjsusnaxbkzcR3pGpEl2J DXAIPCnQ9m0A92qZXDkY/Np0+QBK0ko53kEg5Xae0irDJneVyTaO1PLh2K/z9b0k baFeWk7YGUVwDeprUpYEi/51M/w6R6BeMWnR1YzioJfBvlLGFkhgqj3wOABYJR5Y oj9k4XkG1bg+drAP21gbBWwcQYEW59MU6oZYcOkME5J9buyK8sL1YaTEG0KhxCN6 Sq69FkSYSqfF9tXRO14TOCDBwt3UUHoPAOZmALDA/z3h -----END CERTIFICATE-----Generated at Mon Feb 9 21:26:57 2026 by rpki-client