This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/BpF57bVVwTA43ZXOpKIcTo0yCy0.roa File: BpF57bVVwTA43ZXOpKIcTo0yCy0.roa (raw, json) Hash identifier: pjFV8qfYifG/BRFE6yEd3HYMs5X+Dr5JAfSfN8z6EsA= Subject key identifier: 06:91:79:ED:B5:55:C1:30:38:DD:95:CE:A4:A2:1C:4E:8D:32:0B:2D Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39 Certificate serial: 019B7BA377FEEE393C72B73431A9F9333197 Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/BpF57bVVwTA43ZXOpKIcTo0yCy0.roa Signing time: Thu 01 Jan 2026 22:17:49 +0000 ROA not before: Thu 01 Jan 2026 22:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57982 IP address blocks: 91.237.108.0/24 maxlen: 24 91.237.109.0/24 maxlen: 24 91.237.110.0/24 maxlen: 24 91.237.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.mft rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:77:fe:ee:39:3c:72:b7:34:31:a9:f9:33:31:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39 Validity Not Before: Jan 1 22:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=069179edb555c13038dd95cea4a21c4e8d320b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:2d:96:bf:e4:a9:18:7b:f4:58:38:23:d9: 94:a0:72:a6:32:1e:a1:e0:e2:07:87:11:b1:7f:52: 54:cf:8b:5e:d0:53:92:8d:f0:25:ff:23:fe:ab:d1: e9:92:f7:01:3e:69:46:2a:07:55:a3:5b:b7:0b:ba: e1:bb:2c:a4:a6:f1:4e:00:c6:9a:bc:48:8c:36:c9: 02:c2:7d:1b:bc:fb:e4:f1:80:a3:fb:5c:77:b1:0e: 5d:72:37:55:2f:50:2f:96:a3:a2:f4:28:0e:79:c2: bd:d6:c4:95:52:e1:8f:c7:5d:ce:c2:b2:fc:aa:de: 46:54:8b:95:af:6c:fe:95:c3:d3:ef:4f:fe:ae:aa: b1:5d:1f:d5:d7:0f:00:9c:37:f0:de:45:86:f9:fe: f8:5b:67:8a:b2:6e:51:9d:87:7d:0f:b1:c6:e9:b4: 2a:d7:f2:09:61:ca:5a:ee:61:09:40:2e:e2:bc:ca: 7a:52:07:49:af:33:be:c4:4f:b5:c5:58:75:d3:73: 32:c2:50:1d:9e:34:24:2d:e2:89:cc:bd:b8:79:04: e5:7b:16:95:f9:6c:76:1c:ce:ae:63:f6:07:0d:f3: b8:e5:95:a1:2a:cb:fa:53:40:a1:c8:8c:18:87:ec: 51:7b:2d:21:5a:4a:8c:09:45:5b:7a:10:e7:62:66: 13:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:91:79:ED:B5:55:C1:30:38:DD:95:CE:A4:A2:1C:4E:8D:32:0B:2D X509v3 Authority Key Identifier: keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/BpF57bVVwTA43ZXOpKIcTo0yCy0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.237.108.0/22 Signature Algorithm: sha256WithRSAEncryption 24:3e:c8:39:38:a0:59:72:d2:48:a9:2a:2f:71:33:99:d1:69: 4b:14:6a:0e:99:08:e2:94:66:5b:15:c8:08:3e:b0:55:80:f9: 07:31:72:3a:cc:77:6a:65:1b:da:32:2f:5a:69:c0:e8:d9:73: ea:79:cc:33:32:e6:f6:95:15:62:97:5a:41:30:f4:a8:a6:88: fa:c5:56:67:00:87:c7:dc:81:05:c3:1e:96:e3:3a:2c:64:64: f5:ea:79:a5:1b:98:4f:f8:29:91:86:d8:38:84:83:8e:23:e9: 0a:d4:82:ca:aa:c8:e0:ac:1f:70:49:dc:db:c3:bb:1d:71:11: f5:d7:d4:d0:a1:bf:c3:21:8b:48:3d:bb:11:e1:07:26:bc:ed: 0e:27:58:da:b5:3b:b5:6e:82:4f:39:51:3c:ca:95:d4:35:ba: 16:02:a0:ac:d8:69:d4:1a:8d:bf:5a:80:22:46:bd:78:30:f7: aa:0d:a8:d4:5f:c0:bb:53:f4:f7:74:6b:33:e9:45:af:61:23: e2:07:50:e5:1a:37:5d:68:de:65:83:f5:d6:35:3b:a8:df:c0: 11:68:30:6e:d4:d6:d9:67:cb:95:d9:ea:78:0f:a2:d0:2b:0d: 36:66:a8:af:05:f7:8d:56:76:49:b9:57:32:78:84:78:ca:64: 30:7a:d4:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o3f+7jk8crc0Man5MzGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZjZlYTgwMjMwN2JjNTNiZmYzY2JiNjNlOWY4MTc5YWM0 YzFlMzkwHhcNMjYwMTAxMjIxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjkxNzllZGI1NTVjMTMwMzhkZDk1Y2VhNGEyMWM0ZThkMzIwYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/stlr/kqRh79Fg4I9mUoHKmMh6h 4OIHhxGxf1JUz4te0FOSjfAl/yP+q9HpkvcBPmlGKgdVo1u3C7rhuyykpvFOAMaa vEiMNskCwn0bvPvk8YCj+1x3sQ5dcjdVL1AvlqOi9CgOecK91sSVUuGPx13OwrL8 qt5GVIuVr2z+lcPT70/+rqqxXR/V1w8AnDfw3kWG+f74W2eKsm5RnYd9D7HG6bQq 1/IJYcpa7mEJQC7ivMp6UgdJrzO+xE+1xVh103MywlAdnjQkLeKJzL24eQTlexaV +Wx2HM6uY/YHDfO45ZWhKsv6U0ChyIwYh+xRey0hWkqMCUVbehDnYmYTEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAaRee21VcEwON2VzqSiHE6NMgstMB8GA1UdIwQY MBaAFF/26oAjB7xTv/PLtj6fgXmsTB45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWF9icWdDTUh2Rk9fODh1MlBwLUJlYXhNSGprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jNDM1MDUtYjMwNi00OTQxLWI3YzYt NTgzODIzODQ3OTUyLzEvQnBGNTdiVlZ3VEE0M1pYT3BLSWNUbzB5Q3kwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9jNDM1MDUtYjMwNi00OTQxLWI3YzYtNTgzODIzODQ3OTUy LzEvWF9icWdDTUh2Rk9fODh1MlBwLUJlYXhNSGprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+1sMA0G CSqGSIb3DQEBCwUAA4IBAQAkPsg5OKBZctJIqSovcTOZ0WlLFGoOmQjilGZbFcgI PrBVgPkHMXI6zHdqZRvaMi9aacDo2XPqecwzMub2lRVil1pBMPSopoj6xVZnAIfH 3IEFwx6W4zosZGT16nmlG5hP+CmRhtg4hIOOI+kK1ILKqsjgrB9wSdzbw7sdcRH1 19TQob/DIYtIPbsR4QcmvO0OJ1jatTu1boJPOVE8ypXUNboWAqCs2GnUGo2/WoAi Rr14MPeqDajUX8C7U/T3dGsz6UWvYSPiB1DlGjddaN5lg/XWNTuo38ARaDBu1NbZ Z8uV2ep4D6LQKw02ZqivBfeNVnZJuVcyeIR4ymQwetQR -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:28 2026 by rpki-client