This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v2jnTdk8Ahk3_NZELDsN38q8Dig.roa File: v2jnTdk8Ahk3_NZELDsN38q8Dig.roa (raw, json) Hash identifier: At3bpbo91k63f3L/tEszUY99MgueIkIhRgrR03val0o= Subject key identifier: BF:68:E7:4D:D9:3C:02:19:37:FC:D6:44:2C:3B:0D:DF:CA:BC:0E:28 Certificate issuer: /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce Certificate serial: 019B7D5CFA0B5CAC2F1B0F0364A687ABF055 Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v2jnTdk8Ahk3_NZELDsN38q8Dig.roa Signing time: Fri 02 Jan 2026 06:20:03 +0000 ROA not before: Fri 02 Jan 2026 06:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39223 IP address blocks: 91.221.166.0/23 maxlen: 23 194.105.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fa:0b:5c:ac:2f:1b:0f:03:64:a6:87:ab:f0:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce Validity Not Before: Jan 2 06:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf68e74dd93c021937fcd6442c3b0ddfcabc0e28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:42:96:47:1e:40:6e:47:d2:ff:70:e2:5f:b0: fb:e9:31:fe:1b:23:53:b0:e6:4c:e2:c1:a1:f3:82: 67:27:e6:a5:c7:1d:67:53:8b:94:82:d9:de:9b:53: 17:13:5c:88:83:eb:e9:82:8e:a1:38:e1:f0:ff:d6: a0:cd:32:9b:7a:fc:36:cd:04:4c:8b:f1:64:59:b6: 0c:75:d4:b4:9a:be:20:24:e7:35:11:47:44:56:29: da:ba:99:49:b6:23:6e:fe:60:f6:9f:5c:fa:44:ab: 68:cd:4e:08:38:07:4d:f5:33:35:e0:1f:90:d0:38: b6:79:0b:39:ac:8e:81:3d:1e:9c:e6:c8:1f:84:6a: 16:36:cc:a4:e3:38:ee:78:67:4d:3a:4a:2a:3f:f7: 4d:db:51:1e:ab:63:7b:37:7b:7f:b9:e7:50:11:6a: 49:e7:19:2f:d5:ef:4a:3f:82:53:79:82:bf:ec:92: d9:4b:a8:1a:de:55:bc:39:7f:28:d6:41:cf:b3:57: e1:8a:5c:36:96:d6:40:8e:6e:4a:79:83:7f:56:3b: 71:18:94:ca:d8:e8:25:e7:18:4f:58:80:43:bc:d7: e6:c7:3d:0c:d7:66:93:b6:20:32:39:62:7e:22:7b: 34:82:e4:81:7f:a6:f2:45:dc:c3:10:7e:74:86:69: 9f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:68:E7:4D:D9:3C:02:19:37:FC:D6:44:2C:3B:0D:DF:CA:BC:0E:28 X509v3 Authority Key Identifier: keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v2jnTdk8Ahk3_NZELDsN38q8Dig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.221.166.0/23 194.105.144.0/23 Signature Algorithm: sha256WithRSAEncryption 88:90:be:6a:e8:97:5f:40:1a:99:c7:9a:17:55:26:32:98:b7: 9a:61:9c:13:17:7e:61:e6:87:cd:61:96:2d:53:ef:f8:d3:f3: 61:3c:81:d1:c1:e4:db:7e:c2:8b:cc:78:ff:94:aa:c5:b7:75: 1f:ab:e2:5a:28:2d:16:e5:62:65:a2:1f:47:b4:10:52:b1:af: 25:1e:3c:7b:c6:31:e4:0a:70:7f:8d:fe:fe:39:10:95:51:78: b8:a7:f2:46:8f:4c:c0:49:e2:02:02:05:8a:bd:aa:90:ec:c0: 7e:97:95:e2:e7:4c:5c:33:e5:30:08:90:e0:43:90:dc:b5:7b: 46:e6:7e:c0:98:64:90:d0:2c:66:99:53:f0:f7:dd:39:44:68: 88:99:f0:52:a4:12:0e:43:6b:0b:70:9f:cc:bc:4a:8f:ea:60: 30:8a:42:64:8d:45:ce:7e:17:fa:4a:34:7b:7c:6f:e2:33:b2: 21:d5:5e:37:55:43:0b:14:ed:1c:2a:77:43:cd:bf:a6:1b:f7: 4b:b2:e1:8c:09:23:36:db:23:fb:0e:bf:16:09:57:26:f0:b4: 1a:aa:c8:39:5a:e2:a4:73:48:b0:6b:41:c2:90:80:4a:a8:10: db:45:e6:7e:a8:88:bd:fb:2c:c7:ca:f1:98:5d:0d:e4:8f:6c: 23:61:3f:07 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XPoLXKwvGw8DZKaHq/BVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYWQ4MjMxYTQ2YzY0MWM3YWIzMDFkN2JmYmVmMGRjMDlh Y2Q0Y2UwHhcNMjYwMTAyMDYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjY4ZTc0ZGQ5M2MwMjE5MzdmY2Q2NDQyYzNiMGRkZmNhYmMwZTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEKWRx5AbkfS/3DiX7D76TH+GyNT sOZM4sGh84JnJ+alxx1nU4uUgtnem1MXE1yIg+vpgo6hOOHw/9agzTKbevw2zQRM i/FkWbYMddS0mr4gJOc1EUdEVinauplJtiNu/mD2n1z6RKtozU4IOAdN9TM14B+Q 0Di2eQs5rI6BPR6c5sgfhGoWNsyk4zjueGdNOkoqP/dN21Eeq2N7N3t/uedQEWpJ 5xkv1e9KP4JTeYK/7JLZS6ga3lW8OX8o1kHPs1fhilw2ltZAjm5KeYN/VjtxGJTK 2Ogl5xhPWIBDvNfmxz0M12aTtiAyOWJ+Ins0guSBf6byRdzDEH50hmmf4wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFL9o503ZPAIZN/zWRCw7Dd/KvA4oMB8GA1UdIwQY MBaAFL+tgjGkbGQcerMB17++8NwJrNTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zMzc5MDAtMzgwZS00OWQ4LWFmNGUt OWRkNDJjMTcxMTEyLzEvdjJqblRkazhBaGszX05aRUxEc04zOHE4RGlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zMzc5MDAtMzgwZS00OWQ4LWFmNGUtOWRkNDJjMTcxMTEy LzEvdjYyQ01hUnNaQng2c3dIWHY3N3czQW1zMU00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW92mAwQB wmmQMA0GCSqGSIb3DQEBCwUAA4IBAQCIkL5q6JdfQBqZx5oXVSYymLeaYZwTF35h 5ofNYZYtU+/40/NhPIHRweTbfsKLzHj/lKrFt3Ufq+JaKC0W5WJloh9HtBBSsa8l Hjx7xjHkCnB/jf7+ORCVUXi4p/JGj0zASeICAgWKvaqQ7MB+l5Xi50xcM+UwCJDg Q5DctXtG5n7AmGSQ0CxmmVPw9905RGiImfBSpBIOQ2sLcJ/MvEqP6mAwikJkjUXO fhf6SjR7fG/iM7Ih1V43VUMLFO0cKndDzb+mG/dLsuGMCSM22yP7Dr8WCVcm8LQa qsg5WuKkc0iwa0HCkIBKqBDbReZ+qIi9+yzHyvGYXQ3kj2wjYT8H -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:28 2026 by rpki-client