This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/bbz47osIb4c7uoiyZJGPaxcYxu8.roa File: bbz47osIb4c7uoiyZJGPaxcYxu8.roa (raw, json) Hash identifier: yDftJ0V1zP6tNWS59D23nQ4A6wYjaRjcaKzcMkYk8QQ= Subject key identifier: 6D:BC:F8:EE:8B:08:6F:87:3B:BA:88:B2:64:91:8F:6B:17:18:C6:EF Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0 Certificate serial: 019B7BA5208FFE15C410A003719F72C36D41 Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/bbz47osIb4c7uoiyZJGPaxcYxu8.roa Signing time: Thu 01 Jan 2026 22:19:37 +0000 ROA not before: Thu 01 Jan 2026 22:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211425 IP address blocks: 91.151.85.0/24 maxlen: 24 91.151.92.0/24 maxlen: 24 193.56.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:20:8f:fe:15:c4:10:a0:03:71:9f:72:c3:6d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0 Validity Not Before: Jan 1 22:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dbcf8ee8b086f873bba88b264918f6b1718c6ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ef:ad:ac:50:77:d0:72:d3:ac:80:7a:48:a0: ce:39:8a:08:c6:7d:f2:03:0a:cf:66:a1:7d:f5:63: 92:0c:f6:23:55:60:2b:86:50:37:f2:cd:50:f1:3a: 39:29:de:8e:fb:23:76:1b:1e:55:7f:7e:8d:f9:b8: 19:65:2b:dc:15:f5:44:4b:37:20:eb:21:97:40:a7: 37:54:a8:ef:64:55:2e:f0:66:f2:78:fd:85:f7:cc: a5:ba:75:ef:dd:b7:cf:f8:5b:b8:c9:c9:c6:c6:9a: 57:75:ee:56:b1:96:f3:4a:4a:86:a4:21:31:ba:e3: e6:d2:d9:1f:ac:81:88:48:c2:a6:fa:a2:75:78:03: 5d:75:62:79:46:b0:16:6f:19:65:b5:b4:01:53:36: 30:90:59:f0:85:99:ca:6f:83:7a:8a:9c:2d:01:fa: 32:09:66:09:34:c2:e0:d4:76:da:ab:ca:18:8f:51: 1d:d2:4b:51:48:fa:eb:de:95:ca:dc:00:f3:3f:1b: a6:37:e6:71:17:41:17:05:7d:a6:40:ff:19:93:97: 30:07:b3:b4:dc:99:0a:5a:3f:3b:13:cd:fc:99:5c: 74:90:8a:6f:6f:81:f2:03:2d:08:0c:56:0d:22:74: 46:96:28:96:5e:70:5f:71:a5:13:a7:bd:b6:fb:17: 60:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BC:F8:EE:8B:08:6F:87:3B:BA:88:B2:64:91:8F:6B:17:18:C6:EF X509v3 Authority Key Identifier: keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/bbz47osIb4c7uoiyZJGPaxcYxu8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.151.85.0/24 91.151.92.0/24 193.56.0.0/24 Signature Algorithm: sha256WithRSAEncryption 05:8b:c6:3a:ea:bc:13:31:7a:e0:9c:f5:eb:c2:7a:f0:62:d4: fb:eb:82:be:cb:85:77:bd:00:7d:fb:4c:5a:73:50:48:27:a7: 44:1f:da:3b:ef:e4:d4:3f:b7:84:84:99:b5:70:79:07:17:88: a4:50:2a:40:57:eb:2d:2c:fe:eb:5a:89:63:20:36:ea:92:49: 08:39:6d:bd:a2:24:a2:31:8c:77:19:58:7b:d2:f4:45:6c:89: 21:2a:ae:53:ae:15:3d:dd:f2:cb:00:50:02:e1:9a:c9:bc:b5: 0e:b7:72:b7:b6:ff:dd:88:dd:59:ee:17:40:27:49:23:06:92: 34:07:2a:72:8f:a6:62:59:a4:77:8e:ff:38:53:45:ca:d8:14: 12:f6:bd:ec:cb:0b:3f:32:ab:97:0f:6f:69:1e:19:f7:bc:eb: d1:e3:bf:18:3d:a5:22:6f:96:04:a7:f6:a9:c4:98:59:c1:7a: 2a:57:b1:4b:e9:8b:7e:f2:68:1d:59:8c:a6:0d:28:24:8a:38: 03:b7:33:0c:c7:2b:14:4d:46:d5:66:8d:65:93:ca:05:d0:82: 98:17:fe:f5:9b:5c:22:8e:8b:4c:2c:22:5f:3b:5b:93:6b:6f: bb:3d:54:01:f7:f3:c5:02:00:28:0a:a3:51:35:b8:f7:94:ed: b6:a0:a1:84 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pSCP/hXEEKADcZ9yw21BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMThlMmQ5ZjUwOWM5ZDNiNDU1MTEyYWEyODhkMzM2MTg1 ODAxYTAwHhcNMjYwMTAxMjIxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGJjZjhlZThiMDg2Zjg3M2JiYTg4YjI2NDkxOGY2YjE3MThjNmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq++trFB30HLTrIB6SKDOOYoIxn3y AwrPZqF99WOSDPYjVWArhlA38s1Q8To5Kd6O+yN2Gx5Vf36N+bgZZSvcFfVESzcg 6yGXQKc3VKjvZFUu8GbyeP2F98ylunXv3bfP+Fu4ycnGxppXde5WsZbzSkqGpCEx uuPm0tkfrIGISMKm+qJ1eANddWJ5RrAWbxlltbQBUzYwkFnwhZnKb4N6ipwtAfoy CWYJNMLg1Hbaq8oYj1Ed0ktRSPrr3pXK3ADzPxumN+ZxF0EXBX2mQP8Zk5cwB7O0 3JkKWj87E838mVx0kIpvb4HyAy0IDFYNInRGliiWXnBfcaUTp722+xdgRQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG28+O6LCG+HO7qIsmSRj2sXGMbvMB8GA1UdIwQY MBaAFL4Y4tn1CcnTtFURKqKI0zYYWAGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYt MmNhMGU1YzEwNGZkLzEvYmJ6NDdvc0liNGM3dW9peVpKR1BheGNZeHU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYtMmNhMGU1YzEwNGZk LzEvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW5dVAwQA W5dcAwQAwTgAMA0GCSqGSIb3DQEBCwUAA4IBAQAFi8Y66rwTMXrgnPXrwnrwYtT7 64K+y4V3vQB9+0xac1BIJ6dEH9o77+TUP7eEhJm1cHkHF4ikUCpAV+stLP7rWolj IDbqkkkIOW29oiSiMYx3GVh70vRFbIkhKq5TrhU93fLLAFAC4ZrJvLUOt3K3tv/d iN1Z7hdAJ0kjBpI0Bypyj6ZiWaR3jv84U0XK2BQS9r3syws/MquXD29pHhn3vOvR 478YPaUib5YEp/apxJhZwXoqV7FL6Yt+8mgdWYymDSgkijgDtzMMxysUTUbVZo1l k8oF0IKYF/71m1wijotMLCJfO1uTa2+7PVQB9/PFAgAoCqNRNbj3lO22oKGE -----END CERTIFICATE-----Generated at Mon Feb 9 22:31:35 2026 by rpki-client