This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa File: BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa (raw, json) Hash identifier: uRJt0kWvcM/4ik+kay2QDd7hzw9JG0GpAQJN7rBesLo= Subject key identifier: 06:C3:18:65:0D:B1:E2:0C:1A:3C:C5:09:20:99:36:5A:4A:A9:16:9C Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820 Certificate serial: 019B79ECEB29DC4D04E5F5F584A7D1E81AB5 Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa Signing time: Thu 01 Jan 2026 14:18:48 +0000 ROA not before: Thu 01 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201333 IP address blocks: 212.54.232.0/21 maxlen: 24 212.54.240.0/20 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:eb:29:dc:4d:04:e5:f5:f5:84:a7:d1:e8:1a:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820 Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06c318650db1e20c1a3cc5092099365a4aa9169c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e4:27:fe:26:73:64:31:13:1d:48:9c:db:e5: f4:ce:97:03:d0:b7:3b:bd:1a:a0:0f:b0:c4:3a:a8: a0:0b:17:3a:d1:77:b7:63:63:ee:d3:eb:b2:f8:85: 5d:9f:65:2c:cc:9e:18:74:b1:00:12:b0:9a:18:ce: ee:dd:28:60:22:fe:df:13:85:66:06:3d:a7:80:56: c5:c1:00:5d:b8:42:d1:81:ed:b9:dc:f5:aa:93:9e: 9d:83:e0:7d:5c:13:6e:e0:0f:a1:b6:e8:4d:90:8a: b7:2f:49:e7:82:a5:21:04:79:e6:c1:81:0e:7f:e9: 5e:64:f8:41:99:e0:ab:12:14:b6:c3:38:25:f0:f4: 0a:c9:f2:b4:e2:9b:8e:36:42:00:3e:9c:b7:f2:f6: c4:8b:15:41:1c:b5:61:ac:95:42:6e:1e:97:00:a6: 05:2a:33:e2:bb:49:e8:16:51:a3:ef:3a:61:2d:f4: 6c:c2:09:17:9b:83:5d:04:d1:e1:e5:ee:dd:e5:81: 8e:48:d5:a3:20:f2:90:5b:87:fa:d0:22:df:1f:64: 62:33:88:4f:00:d9:49:9c:45:a3:46:9f:a3:dc:34: 5d:26:3e:09:fd:ea:a3:5e:f0:98:85:8f:13:51:5f: 7d:07:d5:7b:38:70:e5:ce:bb:d4:5b:6d:aa:2e:17: c3:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C3:18:65:0D:B1:E2:0C:1A:3C:C5:09:20:99:36:5A:4A:A9:16:9C X509v3 Authority Key Identifier: keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/BsMYZQ2x4gwaPMUJIJk2WkqpFpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.54.232.0-212.54.255.255 Signature Algorithm: sha256WithRSAEncryption 48:85:f0:21:55:bc:9f:70:67:c2:1f:de:47:49:35:04:e8:1b: cf:af:7d:09:db:ca:cc:fa:09:17:1c:83:65:31:38:73:0f:55: eb:08:38:e1:9f:7a:05:67:3c:f8:e8:dc:67:c7:73:36:76:38: d6:c4:5c:ee:36:9d:2a:8b:c8:f9:79:36:49:c2:6b:8d:f0:2d: 71:78:a4:f1:26:bd:43:6f:5c:1c:67:b2:fa:d7:1b:bf:60:da: ee:8d:39:09:d1:bd:95:1d:47:1e:f3:d2:33:4c:67:8d:96:68: 31:0d:81:b2:f7:85:96:0b:1d:30:50:30:a9:76:46:2c:ad:a1: 59:ae:d6:41:b7:70:df:f2:43:53:b9:65:eb:4d:75:3d:76:a0: e2:15:40:e3:54:98:57:75:f6:00:68:61:e0:14:9c:57:8a:19: 2e:af:37:07:77:a5:63:84:85:62:8e:70:8a:34:79:34:5e:4e: 7c:bc:70:fa:a5:92:71:08:2c:6a:94:85:c2:13:79:d0:c0:40: 22:b2:1b:19:a9:d7:fc:67:19:cc:48:7c:d2:65:ab:83:48:9d: c7:87:20:9a:fb:22:7a:2a:2a:dc:1e:eb:4e:d2:d1:57:75:fd: 10:01:55:01:fe:b1:31:b4:5c:a1:91:20:f5:4e:5e:ca:3e:cf: 15:a0:e7:3e -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt57Osp3E0E5fX1hKfR6Bq1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmM5OWNjMzM4ZjY5MmRhOGY4MWI3MTZiYWQ3OWQxYzlk N2M4MjAwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmMzMTg2NTBkYjFlMjBjMWEzY2M1MDkyMDk5MzY1YTRhYTkxNjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+Qn/iZzZDETHUic2+X0zpcD0Lc7 vRqgD7DEOqigCxc60Xe3Y2Pu0+uy+IVdn2UszJ4YdLEAErCaGM7u3ShgIv7fE4Vm Bj2ngFbFwQBduELRge253PWqk56dg+B9XBNu4A+htuhNkIq3L0nngqUhBHnmwYEO f+leZPhBmeCrEhS2wzgl8PQKyfK04puONkIAPpy38vbEixVBHLVhrJVCbh6XAKYF KjPiu0noFlGj7zphLfRswgkXm4NdBNHh5e7d5YGOSNWjIPKQW4f60CLfH2RiM4hP ANlJnEWjRp+j3DRdJj4J/eqjXvCYhY8TUV99B9V7OHDlzrvUW22qLhfD1wIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFAbDGGUNseIMGjzFCSCZNlpKqRacMB8GA1UdIwQY MBaAFHEsmcwzj2ktqPgbcWutedHJ18ggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kOTVmMzItODIyYS00Y2ZlLTk4NTMt NGViZWY4ODg0Mzk2LzEvQnNNWVpRMng0Z3dhUE1VSklKazJXa3FwRnB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kOTVmMzItODIyYS00Y2ZlLTk4NTMtNGViZWY4ODg0Mzk2 LzEvY1N5WnpET1BhUzJvLUJ0eGE2MTUwY25YeUNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBAPUNugD AwDUNjANBgkqhkiG9w0BAQsFAAOCAQEASIXwIVW8n3Bnwh/eR0k1BOgbz699CdvK zPoJFxyDZTE4cw9V6wg44Z96BWc8+OjcZ8dzNnY41sRc7jadKovI+Xk2ScJrjfAt cXik8Sa9Q29cHGey+tcbv2Da7o05CdG9lR1HHvPSM0xnjZZoMQ2BsveFlgsdMFAw qXZGLK2hWa7WQbdw3/JDU7ll6011PXag4hVA41SYV3X2AGhh4BScV4oZLq83B3el Y4SFYo5wijR5NF5OfLxw+qWScQgsapSFwhN50MBAIrIbGanX/GcZzEh80mWrg0id x4cgmvsieioq3B7rTtLRV3X9EAFVAf6xMbRcoZEg9U5eyj7PFaDnPg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:03 2026 by rpki-client