This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa File: bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa (raw, json) Hash identifier: z7weft+bC6v8Gp+CtsE+ZYXb+kZuusFeVfZLKQMSX24= Subject key identifier: 6D:F9:A8:5C:9C:E8:0D:DA:4C:F4:AE:80:C6:0E:91:43:A3:DC:2B:B0 Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d Certificate serial: 019B7BA3339FF7A92C54897D64B17BA51C31 Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa Signing time: Thu 01 Jan 2026 22:17:31 +0000 ROA not before: Thu 01 Jan 2026 22:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51435 IP address blocks: 91.217.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:33:9f:f7:a9:2c:54:89:7d:64:b1:7b:a5:1c:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d Validity Not Before: Jan 1 22:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6df9a85c9ce80dda4cf4ae80c60e9143a3dc2bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:82:56:11:62:1e:ab:19:ce:5c:19:b3:83: 57:23:3e:13:61:34:b3:cf:71:19:d7:d7:e9:29:99: e3:fa:bf:bd:2b:6b:31:6d:4b:84:b9:7a:fe:45:97: 0e:f3:0e:e7:ff:3a:cc:13:23:80:51:c4:44:53:8e: 4e:a9:ac:fc:6f:36:88:96:02:88:f1:a0:dd:5a:0e: d1:dd:46:e5:01:7c:a7:36:e3:b2:3f:e6:b3:6a:2e: 5b:95:18:b6:ca:ee:91:e6:cb:78:20:50:91:fd:d3: 81:6b:49:85:b1:72:95:8f:b6:c0:79:bd:91:86:ab: 08:d2:44:b7:44:4d:de:3f:9d:2d:93:d5:65:52:83: fb:bb:ca:94:f2:aa:69:f6:25:51:f2:b1:c2:94:e0: 56:53:21:f4:38:f6:0d:be:cb:9a:bf:f6:fd:30:b3: 57:91:c9:74:d5:00:c1:d5:a4:5f:3f:50:4c:5e:44: 87:04:0b:07:11:92:5d:30:07:7b:ea:4e:21:7e:0e: cc:64:d0:18:22:f5:7d:40:54:3d:51:7c:02:80:55: ac:62:d9:d9:ee:61:fe:db:7e:84:1d:6c:fb:88:b2: ef:85:b3:44:c4:74:76:73:d2:8d:af:3f:89:2a:16: 8b:3e:ba:0d:28:a4:e8:5b:60:83:99:7a:90:ad:05: f5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F9:A8:5C:9C:E8:0D:DA:4C:F4:AE:80:C6:0E:91:43:A3:DC:2B:B0 X509v3 Authority Key Identifier: keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.147.0/24 Signature Algorithm: sha256WithRSAEncryption 73:19:c9:92:7e:94:65:1b:e3:28:5b:dc:7f:c5:f2:3b:37:a6: 98:42:9d:7d:0f:26:54:11:e4:63:3a:0d:77:ef:74:89:93:de: de:a1:6b:cb:46:6c:71:36:32:f6:dd:65:9c:0e:f2:03:27:9f: 63:84:af:02:16:90:15:25:58:06:25:34:b3:2a:37:75:85:cd: 65:ff:20:d8:16:8c:0b:f9:d4:69:5e:61:17:fd:e7:5b:94:69: 87:1f:7d:ff:21:e4:9b:ae:37:d7:be:9c:fa:4c:f9:c7:3d:b2: f8:c9:74:df:3e:27:5f:fe:f3:23:ac:02:51:e7:38:85:ae:ea: d8:7b:aa:da:87:5c:54:98:15:de:7b:8d:67:66:96:ab:7e:1b: bb:18:68:a0:33:bd:9f:ed:a3:6d:68:ff:1d:31:59:78:60:83: 04:f7:fc:e5:40:b8:af:6e:d6:db:53:6c:4c:24:d5:3d:27:b6: cc:ce:04:73:00:04:34:c1:78:3c:bd:36:c9:09:f5:56:60:99: 44:a6:07:04:b1:91:4b:a9:d9:dd:ee:7f:2a:18:6a:e8:3c:9c: 38:fa:06:32:96:09:39:21:17:23:a9:8b:1e:c3:48:77:5c:82: 65:19:ba:65:bc:1a:f2:19:39:aa:9b:95:90:ab:39:28:e5:7b: c3:9a:b6:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7ozOf96ksVIl9ZLF7pRwxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYmJjNzA2N2Y4YTdjNTdkNjg2ZDY3NWViNDY4ZTk5Yjg2 YmQ2MmQwHhcNMjYwMTAxMjIxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGY5YTg1YzljZTgwZGRhNGNmNGFlODBjNjBlOTE0M2EzZGMyYmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqGCVhFiHqsZzlwZs4NXIz4TYTSz z3EZ19fpKZnj+r+9K2sxbUuEuXr+RZcO8w7n/zrMEyOAUcREU45Oqaz8bzaIlgKI 8aDdWg7R3UblAXynNuOyP+azai5blRi2yu6R5st4IFCR/dOBa0mFsXKVj7bAeb2R hqsI0kS3RE3eP50tk9VlUoP7u8qU8qpp9iVR8rHClOBWUyH0OPYNvsuav/b9MLNX kcl01QDB1aRfP1BMXkSHBAsHEZJdMAd76k4hfg7MZNAYIvV9QFQ9UXwCgFWsYtnZ 7mH+236EHWz7iLLvhbNExHR2c9KNrz+JKhaLProNKKToW2CDmXqQrQX1/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG35qFyc6A3aTPSugMYOkUOj3CuwMB8GA1UdIwQY MBaAFOK7xwZ/inxX1obWdetGjpm4a9YtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUt MWRhMmFjYzc2ZTExLzEvYmZtb1hKem9EZHBNOUs2QXhnNlJRNlBjSzdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8yZGFjOGItNzZjZC00MGYwLTg1NGUtMWRhMmFjYzc2ZTEx LzEvNHJ2SEJuLUtmRmZXaHRaMTYwYU9tYmhyMWkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mTMA0G CSqGSIb3DQEBCwUAA4IBAQBzGcmSfpRlG+MoW9x/xfI7N6aYQp19DyZUEeRjOg13 73SJk97eoWvLRmxxNjL23WWcDvIDJ59jhK8CFpAVJVgGJTSzKjd1hc1l/yDYFowL +dRpXmEX/edblGmHH33/IeSbrjfXvpz6TPnHPbL4yXTfPidf/vMjrAJR5ziFrurY e6rah1xUmBXee41nZparfhu7GGigM72f7aNtaP8dMVl4YIME9/zlQLivbtbbU2xM JNU9J7bMzgRzAAQ0wXg8vTbJCfVWYJlEpgcEsZFLqdnd7n8qGGroPJw4+gYylgk5 IRcjqYsew0h3XIJlGbplvBryGTmqm5WQqzko5XvDmrbO -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:48 2026 by rpki-client