This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Bz-bGhObpvC35L_hp0eu2-3qYtw.roa
File: Bz-bGhObpvC35L_hp0eu2-3qYtw.roa (raw, json)
Hash identifier: uwq39bcN6XNetP7Mhovff9ei7i/RPLC7scA5GaLsdrI=
Subject key identifier: 07:3F:9B:1A:13:9B:A6:F0:B7:E4:BF:E1:A7:47:AE:DB:ED:EA:62:DC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019B797E30D04FD9CC07B28DE8ADFBC0A817
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Bz-bGhObpvC35L_hp0eu2-3qYtw.roa
Signing time: Thu 01 Jan 2026 12:17:51 +0000
ROA not before: Thu 01 Jan 2026 12:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61049
IP address blocks: 185.177.83.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Jan 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:7e:30:d0:4f:d9:cc:07:b2:8d:e8:ad:fb:c0:a8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 12:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=073f9b1a139ba6f0b7e4bfe1a747aedbedea62dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5c:fa:c8:15:1f:4c:48:75:b0:cb:a8:be:48:
46:81:b9:50:85:96:da:88:f0:61:09:24:07:de:6e:
1e:44:e8:99:dd:50:87:05:25:57:b4:be:16:af:11:
62:e3:cc:98:ce:29:f6:ac:0c:24:b5:87:eb:fe:ac:
67:60:1c:d7:01:68:34:88:a4:4b:b0:9d:34:91:57:
ee:ad:7e:1f:da:42:75:85:25:cf:4c:5f:75:05:af:
74:d5:5e:d9:71:71:96:dd:78:cd:27:ef:77:35:bf:
7f:cd:dc:d8:05:83:56:4f:fd:a4:10:8c:73:99:ec:
54:02:6c:ac:41:f8:7d:8c:00:82:7b:34:86:31:a9:
4a:51:e4:a6:ba:f1:9d:f2:35:9a:57:3d:78:3b:a2:
95:09:52:41:0a:3c:18:6e:14:6a:c3:ed:a0:37:c9:
19:a6:23:e9:c4:58:c2:07:aa:45:39:da:5a:0e:65:
fc:8d:e7:8b:74:76:09:d9:97:ba:55:15:b7:93:20:
32:63:b4:df:1b:4e:ab:56:25:9d:b6:38:0b:6a:9d:
01:d5:1b:56:c5:16:84:f3:b6:b5:a1:65:5d:57:65:
e2:98:63:2c:8c:ea:d6:41:0c:46:5f:60:21:5a:88:
4e:e1:77:49:0c:41:6d:15:f7:28:cf:65:a7:b8:17:
b3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3F:9B:1A:13:9B:A6:F0:B7:E4:BF:E1:A7:47:AE:DB:ED:EA:62:DC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Bz-bGhObpvC35L_hp0eu2-3qYtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.83.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a7:8e:73:17:1d:a9:27:36:de:7b:76:99:e1:14:25:aa:af:
cf:17:80:7b:75:19:bc:cb:68:7c:41:c7:06:57:14:3d:2a:dd:
ca:1f:5c:8a:b0:0b:bc:a6:8b:2e:a5:2f:4d:cb:fe:2b:14:dc:
22:59:1b:2e:dd:20:7a:66:14:d1:15:ea:10:5f:6f:aa:94:42:
38:f2:62:c7:e4:17:87:36:5e:b8:da:05:4a:76:60:30:0a:84:
a6:51:69:f5:c3:08:f7:6c:e2:c1:04:99:1f:75:e7:14:7a:85:
85:d0:13:55:f7:85:aa:e6:3f:b3:c8:3c:a2:90:91:3e:22:f8:
11:d6:40:48:2a:d1:fe:2f:3f:4f:00:c3:32:e5:f8:42:73:ac:
b5:8b:74:fa:0e:eb:7e:10:9d:26:64:19:e4:71:26:7b:19:82:
e8:37:4e:65:35:6d:07:d8:06:6b:1d:5c:fa:20:22:ae:13:9b:
e9:b2:81:8a:64:78:5b:33:0e:9d:1f:ae:f0:c0:41:59:ea:95:
31:1c:ce:c3:dc:b6:aa:72:d3:af:99:77:df:fd:12:fa:5f:a8:
30:25:56:86:14:58:0f:1b:90:53:dc:c9:44:6d:27:5b:2a:25:
c3:43:65:0c:38:70:80:08:bb:88:85:d1:2d:81:48:7b:41:6a:
ed:f0:91:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt5fjDQT9nMB7KN6K37wKgXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjYwMTAxMTIxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzNmOWIxYTEzOWJhNmYwYjdlNGJmZTFhNzQ3YWVkYmVkZWE2MmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlz6yBUfTEh1sMuovkhGgblQhZba
iPBhCSQH3m4eROiZ3VCHBSVXtL4WrxFi48yYzin2rAwktYfr/qxnYBzXAWg0iKRL
sJ00kVfurX4f2kJ1hSXPTF91Ba901V7ZcXGW3XjNJ+93Nb9/zdzYBYNWT/2kEIxz
mexUAmysQfh9jACCezSGMalKUeSmuvGd8jWaVz14O6KVCVJBCjwYbhRqw+2gN8kZ
piPpxFjCB6pFOdpaDmX8jeeLdHYJ2Ze6VRW3kyAyY7TfG06rViWdtjgLap0B1RtW
xRaE87a1oWVdV2XimGMsjOrWQQxGX2AhWohO4XdJDEFtFfcoz2WnuBeztQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAc/mxoTm6bwt+S/4adHrtvt6mLcMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvQnotYkdoT2JwdkMzNUxfaHAwZXUyLTNxWXR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubFTMA0G
CSqGSIb3DQEBCwUAA4IBAQAap45zFx2pJzbee3aZ4RQlqq/PF4B7dRm8y2h8QccG
VxQ9Kt3KH1yKsAu8posupS9Ny/4rFNwiWRsu3SB6ZhTRFeoQX2+qlEI48mLH5BeH
Nl642gVKdmAwCoSmUWn1wwj3bOLBBJkfdecUeoWF0BNV94Wq5j+zyDyikJE+IvgR
1kBIKtH+Lz9PAMMy5fhCc6y1i3T6Dut+EJ0mZBnkcSZ7GYLoN05lNW0H2AZrHVz6
ICKuE5vpsoGKZHhbMw6dH67wwEFZ6pUxHM7D3LaqctOvmXff/RL6X6gwJVaGFFgP
G5BT3MlEbSdbKiXDQ2UMOHCACLuIhdEtgUh7QWrt8JG9
-----END CERTIFICATE-----
Generated at Mon Jan 19 20:21:54 2026 by rpki-client