This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BbVpHLJ9gvpYLcOjkCK1I2FmnCs.roa File: BbVpHLJ9gvpYLcOjkCK1I2FmnCs.roa (raw, json) Hash identifier: Mc8Hazfwv1OWvrq+w8oj6aSU0JC1jcM/HDXU5v/yoLg= Subject key identifier: 05:B5:69:1C:B2:7D:82:FA:58:2D:C3:A3:90:22:B5:23:61:66:9C:2B Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AEDCCBF1BD07FDDEB918AE829EEA9 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BbVpHLJ9gvpYLcOjkCK1I2FmnCs.roa Signing time: Thu 01 Jan 2026 16:18:58 +0000 ROA not before: Thu 01 Jan 2026 16:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401776 IP address blocks: 82.152.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 14:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ed:cc:bf:1b:d0:7f:dd:eb:91:8a:e8:29:ee:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05b5691cb27d82fa582dc3a39022b52361669c2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:45:5e:02:f5:bb:3b:2b:be:13:8d:e3:c2:b5: f9:c8:3e:98:7e:40:56:90:40:64:8b:99:91:12:85: af:80:b5:13:d6:83:93:dc:5c:8c:d6:ae:b7:ed:91: da:61:ec:f0:95:af:92:cf:98:08:47:8c:2d:34:42: 31:31:ad:85:c9:fb:f6:6e:96:56:98:26:dd:64:f4: 02:bb:64:93:d4:39:c1:d0:85:f4:f1:0f:b9:56:9a: 9c:c2:f1:5a:5c:67:6b:2c:a7:1b:7d:06:32:17:7b: a6:41:7b:2a:94:c0:28:98:62:a4:99:39:12:c6:77: a1:f6:49:cc:7b:21:27:69:e2:a7:09:3a:a8:bd:08: 1b:6c:d3:55:53:21:5d:38:7d:11:66:59:12:2c:65: 94:c7:6b:0c:8b:3d:81:26:b0:00:1a:e1:cf:7c:dc: 47:64:06:0b:43:92:5d:72:6d:a7:2f:d8:8f:1d:33: 34:6c:4e:3f:8c:6f:98:2c:0f:19:8e:b6:ab:33:a0: 5a:de:61:8c:cb:9d:72:08:d5:fc:4c:60:f1:a0:3f: c0:d5:12:e0:fd:4c:f6:96:1d:af:82:fe:b8:d4:8c: e8:84:c2:5b:f6:10:54:13:cd:9b:f1:0d:91:29:23: c6:2a:b6:68:b6:ce:b5:62:60:40:8c:0d:6a:83:e6: 1e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B5:69:1C:B2:7D:82:FA:58:2D:C3:A3:90:22:B5:23:61:66:9C:2B X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/BbVpHLJ9gvpYLcOjkCK1I2FmnCs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.152.122.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:14:14:6b:bb:7c:61:03:81:43:c9:96:8c:24:e5:fc:e6:a7: 00:2c:f3:05:19:41:e8:69:95:89:70:a9:a7:3c:a9:af:8a:5c: 88:7d:0d:4e:d4:e7:be:d9:b8:f7:6e:fc:d1:11:c4:10:a0:01: ed:de:92:43:67:d5:14:5b:b8:f2:cb:8b:ee:02:ee:50:20:09: 5d:15:30:b6:b8:cc:93:c1:8d:7a:e8:c7:66:23:fb:33:13:c0: e6:a6:fd:97:f6:66:2c:83:49:dc:b5:24:c3:8e:8f:48:48:8a: fd:1b:c3:bb:72:7e:46:ad:68:9d:04:2d:29:25:9f:e2:8c:5e: b4:8d:a6:3e:03:49:ea:4c:57:a1:07:c0:ab:c8:df:5c:93:75: 5d:67:b4:6b:ee:6a:62:6b:5b:62:c8:5d:d4:4f:6b:ec:b3:ad: a9:e2:e3:d8:c5:bb:eb:23:46:1a:ba:21:97:9a:3f:f8:1b:c2: 1f:75:f0:d4:df:cc:26:75:83:79:01:17:50:ed:89:13:05:86: 39:07:83:ea:d5:7a:4d:c2:b2:f3:9e:47:87:68:97:81:de:85: 3e:07:17:90:71:e9:3d:a3:4b:73:48:d7:3c:9b:8f:35:8e:0b: a8:a7:ab:ad:f9:20:00:8f:3c:06:9b:e6:9d:50:57:22:4e:82: 97:41:52:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wu3MvxvQf93rkYroKe6pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWI1NjkxY2IyN2Q4MmZhNTgyZGMzYTM5MDIyYjUyMzYxNjY5YzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykVeAvW7Oyu+E43jwrX5yD6YfkBW kEBki5mREoWvgLUT1oOT3FyM1q637ZHaYezwla+Sz5gIR4wtNEIxMa2Fyfv2bpZW mCbdZPQCu2ST1DnB0IX08Q+5VpqcwvFaXGdrLKcbfQYyF3umQXsqlMAomGKkmTkS xneh9knMeyEnaeKnCTqovQgbbNNVUyFdOH0RZlkSLGWUx2sMiz2BJrAAGuHPfNxH ZAYLQ5Jdcm2nL9iPHTM0bE4/jG+YLA8ZjrarM6Ba3mGMy51yCNX8TGDxoD/A1RLg /Uz2lh2vgv641IzohMJb9hBUE82b8Q2RKSPGKrZots61YmBAjA1qg+YegwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAW1aRyyfYL6WC3Do5AitSNhZpwrMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvQmJWcEhMSjlndnBZTGNPamtDSzFJMkZtbkNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUph6MA0G CSqGSIb3DQEBCwUAA4IBAQCbFBRru3xhA4FDyZaMJOX85qcALPMFGUHoaZWJcKmn PKmvilyIfQ1O1Oe+2bj3bvzREcQQoAHt3pJDZ9UUW7jyy4vuAu5QIAldFTC2uMyT wY166MdmI/szE8Dmpv2X9mYsg0nctSTDjo9ISIr9G8O7cn5GrWidBC0pJZ/ijF60 jaY+A0nqTFehB8CryN9ck3VdZ7Rr7mpia1tiyF3UT2vss62p4uPYxbvrI0YauiGX mj/4G8IfdfDU38wmdYN5ARdQ7YkTBYY5B4Pq1XpNwrLznkeHaJeB3oU+BxeQcek9 o0tzSNc8m481jguop6ut+SAAjzwGm+adUFciToKXQVJ2 -----END CERTIFICATE-----Generated at Tue Jan 20 22:19:37 2026 by rpki-client