This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/BHIfo0SUvriKZsyFCXiSME1_wPg.roa File: BHIfo0SUvriKZsyFCXiSME1_wPg.roa (raw, json) Hash identifier: yw3xzgJDYvAe05HAZHE3RD577H1UTSvrT/Xm9tpbxKg= Subject key identifier: 04:72:1F:A3:44:94:BE:B8:8A:66:CC:85:09:78:92:30:4D:7F:C0:F8 Certificate issuer: /CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Certificate serial: 019B78A223C9DEFECA39766BA5567F0383F4 Authority key identifier: DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/BHIfo0SUvriKZsyFCXiSME1_wPg.roa Signing time: Thu 01 Jan 2026 08:17:30 +0000 ROA not before: Thu 01 Jan 2026 08:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29637 IP address blocks: 217.66.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:23:c9:de:fe:ca:39:76:6b:a5:56:7f:03:83:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dafcb643e6a21e2fb6e21cd0653ab095e9ebef13 Validity Not Before: Jan 1 08:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04721fa34494beb88a66cc85097892304d7fc0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:03:bf:4e:8f:be:ee:a3:51:db:10:20:78:9e: 37:9c:5a:c3:f6:42:c3:47:3d:d7:41:31:18:67:df: 6c:d6:2f:f4:6d:48:15:1c:f8:7c:05:b7:85:ee:7e: 00:db:9b:68:c6:4e:64:9e:21:4d:11:02:a7:54:55: e4:b5:22:0b:b8:b2:f9:7f:ed:22:37:d6:19:a3:3e: d8:a3:6b:7e:73:04:e7:72:80:85:19:9c:fc:4f:1d: 50:3d:ca:19:18:89:ea:52:01:71:07:f8:b3:ae:a9: 59:40:e4:6e:66:d9:41:a8:94:b7:c6:e0:0e:08:98: 2f:17:4a:d6:eb:b3:13:bf:a7:01:6b:4d:42:36:5a: ae:90:73:c2:c4:8a:bf:c6:47:ed:d1:be:df:9e:a5: 28:70:bb:82:ed:8b:a2:e5:6c:f3:62:06:13:d2:1f: 08:1e:cc:b3:95:ef:02:2a:3a:03:a9:2c:64:d5:30: 97:ce:fc:46:12:00:87:b8:69:d8:df:a1:58:9f:9f: bb:06:c0:d8:97:1a:1d:10:6d:7b:09:20:1b:52:75: 7c:39:cc:3a:14:70:94:d4:10:7b:a1:b6:69:15:24: 4c:7b:37:d3:24:c5:56:ff:bc:84:9f:1c:dd:84:62: 1e:f0:7b:7a:7f:c2:3a:8a:f8:ae:9e:78:18:4e:a2: 10:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:72:1F:A3:44:94:BE:B8:8A:66:CC:85:09:78:92:30:4D:7F:C0:F8 X509v3 Authority Key Identifier: keyid:DA:FC:B6:43:E6:A2:1E:2F:B6:E2:1C:D0:65:3A:B0:95:E9:EB:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vy2Q-aiHi-24hzQZTqwlenr7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/BHIfo0SUvriKZsyFCXiSME1_wPg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/27a374-c984-4b19-ac7e-de2de15f90ed/1/2vy2Q-aiHi-24hzQZTqwlenr7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.66.96.0/22 Signature Algorithm: sha256WithRSAEncryption a7:ed:98:ad:f3:15:5a:e7:b7:c0:95:bb:0d:97:a8:48:a7:a0: 90:37:56:0a:ab:55:75:b5:54:f1:19:ff:d8:f8:1b:87:07:15: a0:b1:7a:6f:04:a9:8b:ea:53:27:d3:5a:34:06:16:52:bd:9a: 87:f6:40:b2:26:e4:44:cb:b5:83:48:d9:ee:1e:fc:08:96:59: e1:91:05:c1:24:8b:63:10:7a:70:a0:aa:ce:5a:f2:71:f4:11: 9b:d7:5c:e5:a4:b4:e7:98:c8:f4:6e:75:32:29:47:60:16:d8: ba:3b:e3:68:40:4b:63:ae:ce:90:77:6d:62:7a:76:4a:3d:07: 4b:8c:62:ea:07:d1:42:61:09:93:17:e1:68:65:f4:92:2f:4a: 57:d3:6d:fa:d6:86:e3:f7:f0:d9:27:20:ab:33:f6:77:c6:04: db:25:ad:bf:16:c2:2b:e1:86:49:80:d4:28:07:75:04:50:59: 99:ab:54:62:f9:74:cc:80:c9:7a:94:15:20:46:86:a0:b2:c8: 35:4e:2c:56:21:c7:4d:13:83:c5:6b:06:f7:2b:7c:e1:f2:09: 7c:01:52:65:e9:40:65:83:48:f6:83:91:f9:20:85:50:87:32: 81:69:81:90:e1:e3:d6:4a:96:a3:a7:b9:c1:83:96:39:62:36: 02:97:0e:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oiPJ3v7KOXZrpVZ/A4P0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhZmNiNjQzZTZhMjFlMmZiNmUyMWNkMDY1M2FiMDk1ZTll YmVmMTMwHhcNMjYwMTAxMDgxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDcyMWZhMzQ0OTRiZWI4OGE2NmNjODUwOTc4OTIzMDRkN2ZjMGY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwO/To++7qNR2xAgeJ43nFrD9kLD Rz3XQTEYZ99s1i/0bUgVHPh8BbeF7n4A25toxk5kniFNEQKnVFXktSILuLL5f+0i N9YZoz7Yo2t+cwTncoCFGZz8Tx1QPcoZGInqUgFxB/izrqlZQORuZtlBqJS3xuAO CJgvF0rW67MTv6cBa01CNlqukHPCxIq/xkft0b7fnqUocLuC7Yui5WzzYgYT0h8I Hsyzle8CKjoDqSxk1TCXzvxGEgCHuGnY36FYn5+7BsDYlxodEG17CSAbUnV8Ocw6 FHCU1BB7obZpFSRMezfTJMVW/7yEnxzdhGIe8Ht6f8I6iviunngYTqIQowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFARyH6NElL64imbMhQl4kjBNf8D4MB8GA1UdIwQY MBaAFNr8tkPmoh4vtuIc0GU6sJXp6+8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2Ut ZGUyZGUxNWY5MGVkLzEvQkhJZm8wU1V2cmlLWnN5RkNYaVNNRTFfd1BnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yN2EzNzQtYzk4NC00YjE5LWFjN2UtZGUyZGUxNWY5MGVk LzEvMnZ5MlEtYWlIaS0yNGh6UVpUcXdsZW5yN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2UJgMA0G CSqGSIb3DQEBCwUAA4IBAQCn7Zit8xVa57fAlbsNl6hIp6CQN1YKq1V1tVTxGf/Y +BuHBxWgsXpvBKmL6lMn01o0BhZSvZqH9kCyJuREy7WDSNnuHvwIllnhkQXBJItj EHpwoKrOWvJx9BGb11zlpLTnmMj0bnUyKUdgFti6O+NoQEtjrs6Qd21ienZKPQdL jGLqB9FCYQmTF+FoZfSSL0pX02361obj9/DZJyCrM/Z3xgTbJa2/FsIr4YZJgNQo B3UEUFmZq1Ri+XTMgMl6lBUgRoagssg1TixWIcdNE4PFawb3K3zh8gl8AVJl6UBl g0j2g5H5IIVQhzKBaYGQ4ePWSpajp7nBg5Y5YjYClw4g -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:18 2026 by rpki-client