This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/BP2iTGyVFjoJIRdw7NDIH2tQQA8.roa File: BP2iTGyVFjoJIRdw7NDIH2tQQA8.roa (raw, json) Hash identifier: P0fFfmYNK2It6Tl9zJcGnv6bBKn+rvutapJMqLPRBXA= Subject key identifier: 04:FD:A2:4C:6C:95:16:3A:09:21:17:70:EC:D0:C8:1F:6B:50:40:0F Certificate issuer: /CN=80c028ad0e60d7ea8914b13c3a53d8f089160315 Certificate serial: 019B7C12A39170CA37D3EFB71D618044DD37 Authority key identifier: 80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/BP2iTGyVFjoJIRdw7NDIH2tQQA8.roa Signing time: Fri 02 Jan 2026 00:19:14 +0000 ROA not before: Fri 02 Jan 2026 00:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39745 IP address blocks: 195.60.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.mft rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:a3:91:70:ca:37:d3:ef:b7:1d:61:80:44:dd:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=80c028ad0e60d7ea8914b13c3a53d8f089160315 Validity Not Before: Jan 2 00:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04fda24c6c95163a09211770ecd0c81f6b50400f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:8a:0c:3a:50:f8:35:11:ca:ad:a4:5d:e1:ae: 34:bb:44:d1:02:66:63:84:8f:64:a6:30:7c:31:db: e3:73:b8:11:c7:65:29:9c:71:4c:ed:25:61:6a:da: ac:d5:f9:ba:03:b8:17:bd:64:93:72:d9:ad:18:4e: 38:73:b1:10:09:b7:ed:4c:bd:10:be:f0:0e:9c:50: c6:e9:bd:14:d5:ca:eb:5c:10:4c:65:b5:26:3a:ca: c2:69:18:2d:6d:58:44:1c:20:6d:98:23:c9:2d:53: ff:0c:d9:f5:4c:58:6d:8a:8e:9e:c4:75:8c:fb:02: 88:ac:03:38:96:da:3d:38:f1:27:f9:7b:b3:0e:2f: b0:2c:ec:8b:c5:00:5f:b1:fc:e9:36:cb:4c:ca:06: 34:da:00:0a:f6:28:34:64:22:7b:6d:e8:38:62:83: 52:f2:41:7a:b9:bc:69:0e:f2:3d:f5:49:ab:6d:19: 1f:50:95:0d:a2:82:16:26:fb:2b:cd:50:3d:b9:f2: c2:38:93:b6:c5:e6:ed:e5:b6:66:72:6d:33:34:95: ef:a2:ed:d2:28:3b:92:2a:a4:36:eb:95:cf:6d:8d: 64:d5:e6:1d:3d:c3:5e:13:31:cd:4a:95:3d:d8:94: 6c:19:9f:03:71:97:83:bf:23:d6:53:d8:af:6c:9e: 69:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FD:A2:4C:6C:95:16:3A:09:21:17:70:EC:D0:C8:1F:6B:50:40:0F X509v3 Authority Key Identifier: keyid:80:C0:28:AD:0E:60:D7:EA:89:14:B1:3C:3A:53:D8:F0:89:16:03:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMAorQ5g1-qJFLE8OlPY8IkWAxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/BP2iTGyVFjoJIRdw7NDIH2tQQA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b5ff66-807d-4bf1-abe9-a3b4c900241f/1/gMAorQ5g1-qJFLE8OlPY8IkWAxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.60.78.0/23 Signature Algorithm: sha256WithRSAEncryption 22:b3:9b:38:c1:bd:9b:ea:b1:e9:71:b2:d7:75:d6:63:68:93: 0b:57:e7:52:ea:59:87:c6:47:89:a6:a1:ab:d2:e1:07:b9:a7: 3c:da:3e:d9:83:bd:e6:df:ac:a5:bd:ce:5e:0f:aa:71:fa:59: 23:4c:29:0b:58:97:3a:f8:4a:ae:06:30:c4:46:ed:c8:53:33: db:2a:7d:b2:c2:80:47:26:b2:3f:50:0f:85:89:5b:7a:40:b9: b6:27:31:db:b7:65:ad:c7:19:04:17:59:15:8e:98:66:5c:8e: fb:bf:a1:d7:57:5d:88:5c:43:15:d6:65:ac:1a:bf:f6:59:b6: a0:78:84:47:57:79:45:f6:87:e3:1f:8f:52:2b:65:d8:12:48: 95:5c:f1:20:22:90:53:24:3b:55:2f:1e:0e:c5:95:d3:49:a0: b7:df:ba:4a:d1:d6:41:36:55:73:ec:20:b1:08:0d:3e:6a:f9: a3:e3:12:3a:f1:1a:90:42:83:e7:0a:83:a8:53:13:46:3b:05: 5e:89:57:bf:08:2e:fb:8b:71:00:d8:80:7b:27:31:ef:35:36: e1:0c:42:9d:02:ad:fa:34:ec:46:e4:98:1c:cb:1c:31:0b:06: 4c:16:71:70:5d:09:98:59:65:20:68:9e:4c:26:4f:a4:e9:30: 74:c4:56:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EqORcMo30++3HWGARN03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwYzAyOGFkMGU2MGQ3ZWE4OTE0YjEzYzNhNTNkOGYwODkx NjAzMTUwHhcNMjYwMTAyMDAxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGZkYTI0YzZjOTUxNjNhMDkyMTE3NzBlY2QwYzgxZjZiNTA0MDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYoMOlD4NRHKraRd4a40u0TRAmZj hI9kpjB8Mdvjc7gRx2UpnHFM7SVhatqs1fm6A7gXvWSTctmtGE44c7EQCbftTL0Q vvAOnFDG6b0U1crrXBBMZbUmOsrCaRgtbVhEHCBtmCPJLVP/DNn1TFhtio6exHWM +wKIrAM4lto9OPEn+XuzDi+wLOyLxQBfsfzpNstMygY02gAK9ig0ZCJ7beg4YoNS 8kF6ubxpDvI99UmrbRkfUJUNooIWJvsrzVA9ufLCOJO2xebt5bZmcm0zNJXvou3S KDuSKqQ265XPbY1k1eYdPcNeEzHNSpU92JRsGZ8DcZeDvyPWU9ivbJ5pGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAT9okxslRY6CSEXcOzQyB9rUEAPMB8GA1UdIwQY MBaAFIDAKK0OYNfqiRSxPDpT2PCJFgMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iNWZmNjYtODA3ZC00YmYxLWFiZTkt YTNiNGM5MDAyNDFmLzEvQlAyaVRHeVZGam9KSVJkdzdORElIMnRRUUE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iNWZmNjYtODA3ZC00YmYxLWFiZTktYTNiNGM5MDAyNDFm LzEvZ01Bb3JRNWcxLXFKRkxFOE9sUFk4SWtXQXhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzxOMA0G CSqGSIb3DQEBCwUAA4IBAQAis5s4wb2b6rHpcbLXddZjaJMLV+dS6lmHxkeJpqGr 0uEHuac82j7Zg73m36ylvc5eD6px+lkjTCkLWJc6+EquBjDERu3IUzPbKn2ywoBH JrI/UA+FiVt6QLm2JzHbt2WtxxkEF1kVjphmXI77v6HXV12IXEMV1mWsGr/2Wbag eIRHV3lF9ofjH49SK2XYEkiVXPEgIpBTJDtVLx4OxZXTSaC337pK0dZBNlVz7CCx CA0+avmj4xI68RqQQoPnCoOoUxNGOwVeiVe/CC77i3EA2IB7JzHvNTbhDEKdAq36 NOxG5JgcyxwxCwZMFnFwXQmYWWUgaJ5MJk+k6TB0xFaH -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:23 2026 by rpki-client