This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/bnpIDhTze01wESG9I3vUuYbGv80.roa File: bnpIDhTze01wESG9I3vUuYbGv80.roa (raw, json) Hash identifier: pCKaqyPuY+WplwCpDPRA6ZUWqAhou47BgnY6GoKoew4= Subject key identifier: 6E:7A:48:0E:14:F3:7B:4D:70:11:21:BD:23:7B:D4:B9:86:C6:BF:CD Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Certificate serial: 019BBBBCA29C3EB09BCF45F4A2160C1AC928 Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/bnpIDhTze01wESG9I3vUuYbGv80.roa Signing time: Wed 14 Jan 2026 09:01:00 +0000 ROA not before: Wed 14 Jan 2026 09:01:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42385 IP address blocks: 193.232.84.0/24 maxlen: 24 194.85.109.0/24 maxlen: 24 2001:67c:1008::/48 maxlen: 48 2001:67c:1447::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.mft rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:bc:a2:9c:3e:b0:9b:cf:45:f4:a2:16:0c:1a:c9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03 Validity Not Before: Jan 14 09:01:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e7a480e14f37b4d701121bd237bd4b986c6bfcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:d2:02:4a:ac:b7:30:68:6b:cb:eb:a3:13: 82:a9:03:70:61:ec:20:e4:d8:e7:cc:29:06:a4:05: e1:f0:b4:72:69:88:0a:fa:48:fa:b1:d2:17:f7:5b: c2:e8:22:4a:43:80:e3:5b:45:45:de:7d:00:d4:82: 5f:81:d4:e1:c6:ec:e4:9b:c8:f6:62:f2:c3:d7:74: 35:b0:45:97:ae:24:a1:42:68:10:e3:05:e6:84:50: 02:58:35:da:88:da:fd:6f:4f:f6:72:a4:2d:19:40: 8b:60:15:34:ef:1e:87:ef:9e:b7:f2:f6:f5:54:38: bf:ab:e4:c3:c3:0a:09:28:bc:cc:ef:27:c4:63:8d: 87:10:ff:e6:c3:ba:52:ad:a8:23:5c:12:59:47:fd: 38:ce:46:f5:40:32:49:c9:8e:dc:db:56:eb:d2:0c: 8d:08:24:e5:a9:1e:6a:50:29:80:95:b3:4e:43:82: 64:d3:3b:f6:35:97:4e:6a:47:df:98:00:5f:d1:74: 50:d6:4e:69:c8:57:df:7d:01:f6:9a:26:ce:9c:0d: 6c:44:86:b3:51:3c:b0:0f:37:ce:89:e9:f2:09:64: 46:77:dc:53:ac:c0:86:c9:a3:73:23:0c:9f:94:5a: 00:c8:d8:c1:c9:0a:32:30:99:6d:4d:c0:d6:6b:d0: 4a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7A:48:0E:14:F3:7B:4D:70:11:21:BD:23:7B:D4:B9:86:C6:BF:CD X509v3 Authority Key Identifier: keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/bnpIDhTze01wESG9I3vUuYbGv80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.232.84.0/24 194.85.109.0/24 IPv6: 2001:67c:1008::/48 2001:67c:1447::/48 Signature Algorithm: sha256WithRSAEncryption 32:f6:57:85:dc:61:e8:5a:71:e0:f9:82:fb:75:cc:33:c9:4d: 18:e8:f8:47:93:4f:c0:b3:31:70:c4:fb:09:6b:b8:a0:da:28: a4:7e:04:3c:19:46:1c:09:92:54:37:c5:e9:8f:4c:bc:15:86: 50:51:01:f7:53:13:5c:39:27:d7:9d:54:fb:b5:21:ed:04:a0: d4:2d:92:89:ae:13:6d:78:aa:e0:73:53:1e:45:87:38:4b:7d: 93:0e:e5:bb:07:5c:a4:39:cb:b2:29:8c:7c:64:5d:c5:6a:ee: 79:00:14:d4:dd:c1:2f:b3:ea:c1:48:db:d9:5f:aa:47:ab:71: 95:c3:33:b2:c6:ec:1a:8e:32:3d:b2:50:1c:ba:80:d5:9c:2c: cf:ef:42:1c:6c:38:f3:44:dd:3b:e4:30:c5:ed:24:4f:c2:0e: e2:7a:a4:13:5f:79:a9:39:40:c3:00:c5:95:84:1f:0f:ee:8a: cb:c6:0d:df:49:a4:c2:ac:94:22:4e:05:67:c1:7e:18:1e:78: 74:ea:a2:99:a0:6e:d5:16:3b:c8:96:d6:55:4b:4e:99:de:7f: ad:42:2e:76:fd:c2:56:8f:35:6f:22:b8:66:01:0e:37:6b:09: e5:40:ea:44:7b:ed:28:6e:b2:43:51:2f:23:29:92:74:15:be: 23:23:64:95 -----BEGIN CERTIFICATE----- MIIFHTCCBAWgAwIBAgISAZu7vKKcPrCbz0X0ohYMGskoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMWM2NjViMDM4NjkyYjkzYmRmNWQxZDhmM2NlYTNlOTg2 OTdhMDMwHhcNMjYwMTE0MDkwMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTdhNDgwZTE0ZjM3YjRkNzAxMTIxYmQyMzdiZDRiOTg2YzZiZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hjSAkqstzBoa8vroxOCqQNwYewg 5NjnzCkGpAXh8LRyaYgK+kj6sdIX91vC6CJKQ4DjW0VF3n0A1IJfgdThxuzkm8j2 YvLD13Q1sEWXriShQmgQ4wXmhFACWDXaiNr9b0/2cqQtGUCLYBU07x6H75638vb1 VDi/q+TDwwoJKLzM7yfEY42HEP/mw7pSragjXBJZR/04zkb1QDJJyY7c21br0gyN CCTlqR5qUCmAlbNOQ4Jk0zv2NZdOakffmABf0XRQ1k5pyFfffQH2mibOnA1sRIaz UTywDzfOienyCWRGd9xTrMCGyaNzIwyflFoAyNjByQoyMJltTcDWa9BKyQIDAQAB o4ICKTCCAiUwHQYDVR0OBBYEFG56SA4U83tNcBEhvSN71LmGxr/NMB8GA1UdIwQY MBaAFO8cZlsDhpK5O99dHY886j6YaXoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAt Njg4ZDMzM2VkOWQ1LzEvYm5wSURoVHplMDF3RVNHOUkzdlV1WWJHdjgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8yOTI1YTMtODcxYi00Njc2LWFlMTAtNjg4ZDMzM2VkOWQ1 LzEvN3h4bVd3T0drcms3MzEwZGp6enFQcGhwZWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAwehUAwQA wlVtMBgEAgACMBIDBwAgAQZ8EAgDBwAgAQZ8FEcwDQYJKoZIhvcNAQELBQADggEB ADL2V4XcYehaceD5gvt1zDPJTRjo+EeTT8CzMXDE+wlruKDaKKR+BDwZRhwJklQ3 xemPTLwVhlBRAfdTE1w5J9edVPu1Ie0EoNQtkomuE214quBzUx5FhzhLfZMO5bsH XKQ5y7IpjHxkXcVq7nkAFNTdwS+z6sFI29lfqkercZXDM7LG7BqOMj2yUBy6gNWc LM/vQhxsOPNE3TvkMMXtJE/CDuJ6pBNfeak5QMMAxZWEHw/uisvGDd9JpMKslCJO BWfBfhgeeHTqopmgbtUWO8iW1lVLTpnef61CLnb9wlaPNW8iuGYBDjdrCeVA6kR7 7ShuskNRLyMpknQVviMjZJU= -----END CERTIFICATE-----Generated at Mon Jan 26 03:07:58 2026 by rpki-client