This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BusemzlYkDloYB-ywFsAGc9yGzY.roa
File: BusemzlYkDloYB-ywFsAGc9yGzY.roa (raw, json)
Hash identifier: csXVe/0mxph6QsVFiEuyaYxjqPVHU2VJ0XScj128bLY=
Subject key identifier: 06:EB:1E:9B:39:58:90:39:68:60:1F:B2:C0:5B:00:19:CF:72:1B:36
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019B7F84C73EF061A6237AC4CA23FA3373C4
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BusemzlYkDloYB-ywFsAGc9yGzY.roa
Signing time: Fri 02 Jan 2026 16:22:46 +0000
ROA not before: Fri 02 Jan 2026 16:22:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214922
IP address blocks: 94.183.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Jan 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:84:c7:3e:f0:61:a6:23:7a:c4:ca:23:fa:33:73:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Jan 2 16:22:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=06eb1e9b3958903968601fb2c05b0019cf721b36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:e9:08:a1:f1:72:92:06:d5:bd:06:78:d6:
06:98:84:67:8e:4f:7b:88:53:51:68:48:7f:d2:7c:
e3:cb:87:6e:b8:73:a9:90:a2:55:36:21:ca:ef:a3:
ce:a2:c1:8d:be:3c:15:ec:a0:43:df:c8:e4:af:e3:
85:d2:b3:f7:ed:95:35:34:f8:b3:94:33:08:16:a1:
25:ed:24:ca:c2:49:0a:3f:c6:91:7a:11:dc:46:f6:
cd:d4:86:ae:04:93:c0:06:92:ab:08:af:a5:c5:a3:
95:d5:1b:8b:aa:90:ed:e3:75:68:ef:37:ae:1d:01:
eb:80:d1:28:53:0d:c4:59:b3:75:24:9a:20:71:0c:
02:84:20:8d:d9:ab:70:ab:0d:c0:3f:e1:ea:d0:d6:
44:70:6c:48:1e:53:8a:a0:6b:bb:b4:16:52:8a:f9:
d9:ce:a1:3b:cb:fd:d4:0d:48:5d:f1:6a:11:e1:9f:
b0:9b:29:b9:fb:f2:ea:cc:70:f9:e7:0f:81:39:21:
6b:f3:b6:11:a9:30:36:51:d8:f1:6e:e8:8d:02:85:
57:df:22:f1:ea:7e:4c:3b:c6:86:35:8c:d0:76:62:
03:e9:44:bc:20:77:d1:24:54:6b:3f:a1:44:9d:fa:
3a:e3:78:33:1e:c1:2c:18:5e:d2:b2:af:64:2a:f9:
ec:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EB:1E:9B:39:58:90:39:68:60:1F:B2:C0:5B:00:19:CF:72:1B:36
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/BusemzlYkDloYB-ywFsAGc9yGzY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.183.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:10:6c:15:6f:a5:0a:ca:31:3c:50:ae:a9:25:89:f5:20:3f:
e2:bf:f9:24:fa:fa:a1:9a:cd:a2:a4:2f:0b:bf:a0:c8:c9:5a:
7e:84:8f:a8:a7:6f:34:0c:bc:1e:44:d2:58:b0:f4:39:b9:82:
1a:28:74:42:f8:9a:b2:27:a9:28:82:b4:3c:b7:69:27:58:1b:
e8:20:d8:ce:64:e4:b5:52:69:6a:93:eb:34:67:01:49:80:62:
ef:88:67:a8:f0:ff:c5:d0:31:fc:da:72:8a:8c:c5:dc:c4:24:
1c:84:f5:23:84:0a:72:50:4f:92:51:52:e1:aa:38:83:16:ec:
e3:20:b9:5b:a7:99:79:a4:90:58:05:60:49:1e:bf:79:0d:2e:
8b:2e:29:a9:b0:ea:d4:f4:3c:9b:54:d5:4d:90:e3:41:d3:af:
9e:fd:12:ea:5c:09:1f:13:b1:3d:f4:4b:b8:f7:59:16:4a:d7:
8b:69:25:5f:9b:94:b5:31:51:35:eb:2b:38:14:43:82:73:de:
51:c4:b5:34:11:d2:b0:31:1d:32:2a:59:9d:08:dd:38:c4:f4:
f6:ff:47:05:fe:e7:d8:b2:f5:e2:a1:fc:37:ec:c0:76:5f:bb:
3a:95:9e:76:ab:a3:21:de:71:a9:a1:5c:9d:ca:5c:97:e1:90:
d1:06:96:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 5 14:38:00 2026 by rpki-client