This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BmlFckoCLbkIU9v1cSTyLfBhbrE.roa File: BmlFckoCLbkIU9v1cSTyLfBhbrE.roa (raw, json) Hash identifier: P9gavT0xq2zbiSHjEpukS24GWUotqHWhdlBaj5KptM4= Subject key identifier: 06:69:45:72:4A:02:2D:B9:08:53:DB:F5:71:24:F2:2D:F0:61:6E:B1 Certificate issuer: /CN=0620eadb2e1562b4e2e4f480772c36887a777f24 Certificate serial: 019B7DC87889BFE8765DB932E5E3EF1535A3 Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BmlFckoCLbkIU9v1cSTyLfBhbrE.roa Signing time: Fri 02 Jan 2026 08:17:28 +0000 ROA not before: Fri 02 Jan 2026 08:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 80.93.220.0/24 maxlen: 24 217.195.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:78:89:bf:e8:76:5d:b9:32:e5:e3:ef:15:35:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24 Validity Not Before: Jan 2 08:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=066945724a022db90853dbf57124f22df0616eb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:70:af:73:97:ea:6b:f7:77:44:48:c1:21: e7:10:09:ae:93:27:3d:b7:56:23:e9:01:47:21:58: 8d:c0:c1:2e:ea:d2:76:e2:bd:41:20:71:1f:72:8f: 3f:cd:c5:4b:25:1b:48:f6:93:79:32:95:b0:6d:84: 91:f1:57:db:dc:42:b4:62:88:21:f4:04:26:2f:ec: 3c:72:cd:b2:6d:0f:7f:91:97:93:64:18:02:d8:4f: 4b:a1:14:57:b6:15:1f:dc:3b:49:45:3f:e2:84:15: 25:c6:18:07:30:40:17:de:32:f3:59:d8:a5:a0:af: 1c:53:b4:6d:a8:61:d7:4d:52:37:4b:16:f2:64:1c: 65:79:eb:28:ea:75:7f:6d:e3:b1:19:3b:9c:c9:42: ba:6c:7e:c9:e4:62:03:65:0a:23:8b:db:47:8b:f7: be:f5:e7:58:4d:95:a8:3e:35:cb:52:ee:a5:80:b6: 6c:56:65:67:53:f8:6f:3c:92:52:8e:0a:8d:89:51: 1e:f5:88:cd:67:da:07:1c:13:52:ac:f4:7d:48:0b: 0c:dd:34:ee:cb:80:23:0d:73:d1:c7:7f:92:0d:ce: a8:5d:cd:00:99:a4:bb:2a:1d:10:4d:87:5b:90:83: 40:03:58:f1:45:24:90:5f:c0:60:70:b5:36:ae:f4: 02:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:69:45:72:4A:02:2D:B9:08:53:DB:F5:71:24:F2:2D:F0:61:6E:B1 X509v3 Authority Key Identifier: keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BmlFckoCLbkIU9v1cSTyLfBhbrE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.93.220.0/24 217.195.195.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:07:c4:ee:4a:f3:1e:15:bc:13:7a:8f:c8:7a:bf:f5:45:b9: b5:c3:a7:35:ee:58:66:41:2a:52:45:50:c1:76:cf:0d:a2:67: 64:40:24:9b:7b:c2:8f:08:61:a5:87:c2:3e:54:c4:1e:34:ff: 8f:4b:bf:e5:22:e2:07:93:3d:7e:cf:fd:2a:40:a0:39:50:64: 96:74:c4:b1:f3:03:8c:d9:65:06:6f:e4:d4:87:dc:2e:2c:12: 12:2b:c5:f3:50:87:84:54:f3:ae:b4:39:22:37:56:a3:48:68: 1a:0d:2f:1a:95:ed:9f:fc:b8:91:45:78:fe:1d:b5:33:e1:e6: df:0c:0f:bb:4f:f7:6c:c7:b0:9e:b5:52:56:7e:d4:ac:42:59: 4e:13:ee:eb:6a:44:85:b0:e6:76:68:13:55:bd:f5:bb:99:1c: f2:67:b8:4a:4f:0c:b1:ec:8e:b9:fd:ff:fd:68:6f:c6:44:fd: be:79:be:99:20:74:52:dd:9c:30:4b:e4:86:b8:8a:9b:e1:28: 8b:f4:6e:8c:8a:f1:0a:53:98:a9:b9:c6:ed:04:da:c3:62:e8: cf:ed:3c:ca:a5:d6:ae:fa:4b:70:bb:75:5b:33:b8:cf:e4:13: e1:4e:88:f7:ef:52:9d:f8:6e:cc:78:0b:96:9a:ef:7d:ba:80: ab:95:c1:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yHiJv+h2Xbky5ePvFTWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3 NzdmMjQwHhcNMjYwMTAyMDgxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjY5NDU3MjRhMDIyZGI5MDg1M2RiZjU3MTI0ZjIyZGYwNjE2ZWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8twr3OX6mv3d0RIwSHnEAmukyc9 t1Yj6QFHIViNwMEu6tJ24r1BIHEfco8/zcVLJRtI9pN5MpWwbYSR8Vfb3EK0Yogh 9AQmL+w8cs2ybQ9/kZeTZBgC2E9LoRRXthUf3DtJRT/ihBUlxhgHMEAX3jLzWdil oK8cU7RtqGHXTVI3SxbyZBxleeso6nV/beOxGTucyUK6bH7J5GIDZQoji9tHi/e+ 9edYTZWoPjXLUu6lgLZsVmVnU/hvPJJSjgqNiVEe9YjNZ9oHHBNSrPR9SAsM3TTu y4AjDXPRx3+SDc6oXc0AmaS7Kh0QTYdbkINAA1jxRSSQX8BgcLU2rvQCiwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAZpRXJKAi25CFPb9XEk8i3wYW6xMB8GA1UdIwQY MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt YTVmZGI1NzBmZTlhLzEvQm1sRmNrb0NMYmtJVTl2MWNTVHlMZkJoYnJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUF3cAwQA 2cPDMA0GCSqGSIb3DQEBCwUAA4IBAQCcB8TuSvMeFbwTeo/Ier/1Rbm1w6c17lhm QSpSRVDBds8NomdkQCSbe8KPCGGlh8I+VMQeNP+PS7/lIuIHkz1+z/0qQKA5UGSW dMSx8wOM2WUGb+TUh9wuLBISK8XzUIeEVPOutDkiN1ajSGgaDS8ale2f/LiRRXj+ HbUz4ebfDA+7T/dsx7CetVJWftSsQllOE+7rakSFsOZ2aBNVvfW7mRzyZ7hKTwyx 7I65/f/9aG/GRP2+eb6ZIHRS3ZwwS+SGuIqb4SiL9G6MivEKU5ipucbtBNrDYujP 7TzKpdau+ktwu3VbM7jP5BPhToj371Kd+G7MeAuWmu99uoCrlcEj -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:32 2026 by rpki-client