This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/BmzDco6FUeR2pV7CetfxwgyZzwU.roa File: BmzDco6FUeR2pV7CetfxwgyZzwU.roa (raw, json) Hash identifier: 3e8ATRNUbcI+nS1vmGLQB8ObHNnkxsHOjtgJ15KBPNU= Subject key identifier: 06:6C:C3:72:8E:85:51:E4:76:A5:5E:C2:7A:D7:F1:C2:0C:99:CF:05 Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Certificate serial: 019C0EC225ADDBB445E45F0EBCC50FE702FE Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/BmzDco6FUeR2pV7CetfxwgyZzwU.roa Signing time: Fri 30 Jan 2026 11:55:30 +0000 ROA not before: Fri 30 Jan 2026 11:55:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.140.58.0/24 maxlen: 24 45.149.5.0/24 maxlen: 24 212.81.44.0/24 maxlen: 24 212.81.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0e:c2:25:ad:db:b4:45:e4:5f:0e:bc:c5:0f:e7:02:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309 Validity Not Before: Jan 30 11:55:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=066cc3728e8551e476a55ec27ad7f1c20c99cf05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:19:df:ce:f7:92:80:15:01:5b:9f:bc:53:76: 2a:f4:3b:1b:b8:1c:07:63:b6:2d:50:b9:14:d5:6a: 8b:e6:e3:c5:04:18:70:5c:85:fe:0f:99:ef:e2:21: 3a:ae:a3:71:9e:96:16:ae:eb:84:2c:00:2a:26:99: 0e:b8:7e:b8:07:53:33:31:04:47:dd:81:93:85:be: 37:d5:1a:66:15:18:83:63:40:f6:5f:d7:35:d9:d5: bd:e0:63:92:fa:f7:6a:22:ce:d4:71:cf:43:e1:c1: d5:e3:aa:44:d6:f1:0c:8d:fc:da:3d:cd:fe:c8:bb: 44:9d:af:b9:c5:76:f9:63:96:ea:0d:65:ce:c6:fa: c1:a0:56:83:f6:03:6f:34:cd:cd:bc:2a:75:d9:92: 1f:c8:ab:2c:a7:46:58:16:ba:49:88:f1:5b:15:02: 01:22:87:c4:89:06:18:23:69:2e:fc:31:b1:5d:38: 10:44:15:ca:66:54:d1:40:34:41:60:48:c6:5c:2e: 40:2d:b7:ce:0b:2f:e9:7f:d9:5f:c0:26:91:b6:16: 4d:37:52:47:4c:8f:1b:f2:2f:9e:da:61:90:ec:3d: 27:06:2c:78:ec:a7:63:b7:20:cd:1c:a6:57:f9:2e: d6:2e:b7:55:66:45:63:e3:f0:8a:1e:75:e6:6c:3a: 4f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6C:C3:72:8E:85:51:E4:76:A5:5E:C2:7A:D7:F1:C2:0C:99:CF:05 X509v3 Authority Key Identifier: keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/BmzDco6FUeR2pV7CetfxwgyZzwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.58.0/24 45.149.5.0/24 212.81.44.0/23 Signature Algorithm: sha256WithRSAEncryption 30:bd:26:03:ed:98:16:09:17:e2:41:14:17:dd:be:ae:1b:a1: 65:9c:4a:51:25:ac:3a:e2:1f:df:2d:9c:d7:4b:fe:ad:28:36: 54:b1:ff:12:f2:55:cc:bb:66:e4:28:af:ca:cb:46:cf:e6:25: 0a:ed:b5:75:ac:e2:c9:3a:4c:93:22:b5:4a:16:70:34:fe:c6: 1e:2b:ed:90:c9:b5:39:55:f3:83:4e:17:fa:0c:6b:71:8c:99: 59:eb:65:d9:bb:42:75:e2:9f:26:14:4c:e2:fa:a5:6b:98:57: b6:cd:19:ef:46:8f:21:cd:6a:3c:a6:58:84:98:e6:9b:ea:90: ed:7c:46:a1:32:7e:ec:57:50:73:9d:36:3e:9f:fc:5c:00:26: db:ee:4b:f6:8c:59:c9:18:26:ce:52:fa:85:37:49:3f:76:91: ad:0f:b3:a3:11:96:fc:88:ac:ab:d7:c6:0d:63:96:c2:3c:33: ce:5f:ff:b6:ad:da:60:e2:9b:1f:17:5a:55:b9:f1:3f:e4:0b: a7:6f:65:fe:0d:4b:fb:c5:41:2b:d3:d9:dc:10:31:a5:ba:ad: bd:cd:bc:0a:b4:c9:ef:ad:85:e8:dc:6f:80:07:63:b4:35:e4: fa:9b:02:89:5d:d3:b4:78:14:0e:16:2f:c6:73:b4:3a:e9:3c: e3:38:ca:fa -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwOwiWt27RF5F8OvMUP5wL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5 M2UzMDkwHhcNMjYwMTMwMTE1NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjZjYzM3MjhlODU1MWU0NzZhNTVlYzI3YWQ3ZjFjMjBjOTljZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBnfzveSgBUBW5+8U3Yq9DsbuBwH Y7YtULkU1WqL5uPFBBhwXIX+D5nv4iE6rqNxnpYWruuELAAqJpkOuH64B1MzMQRH 3YGThb431RpmFRiDY0D2X9c12dW94GOS+vdqIs7Ucc9D4cHV46pE1vEMjfzaPc3+ yLtEna+5xXb5Y5bqDWXOxvrBoFaD9gNvNM3NvCp12ZIfyKssp0ZYFrpJiPFbFQIB IofEiQYYI2ku/DGxXTgQRBXKZlTRQDRBYEjGXC5ALbfOCy/pf9lfwCaRthZNN1JH TI8b8i+e2mGQ7D0nBix47KdjtyDNHKZX+S7WLrdVZkVj4/CKHnXmbDpPmwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAZsw3KOhVHkdqVewnrX8cIMmc8FMB8GA1UdIwQY MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt ZTZiZjMxNmM5NGExLzEvQm16RGNvNkZVZVIycFY3Q2V0Znh3Z3laendVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYw6AwQA LZUFAwQB1FEsMA0GCSqGSIb3DQEBCwUAA4IBAQAwvSYD7ZgWCRfiQRQX3b6uG6Fl nEpRJaw64h/fLZzXS/6tKDZUsf8S8lXMu2bkKK/Ky0bP5iUK7bV1rOLJOkyTIrVK FnA0/sYeK+2QybU5VfODThf6DGtxjJlZ62XZu0J14p8mFEzi+qVrmFe2zRnvRo8h zWo8pliEmOab6pDtfEahMn7sV1BznTY+n/xcACbb7kv2jFnJGCbOUvqFN0k/dpGt D7OjEZb8iKyr18YNY5bCPDPOX/+2rdpg4psfF1pVufE/5Aunb2X+DUv7xUEr09nc EDGluq29zbwKtMnvrYXo3G+AB2O0NeT6mwKJXdO0eBQOFi/Gc7Q66TzjOMr6 -----END CERTIFICATE-----Generated at Sat Feb 14 17:24:09 2026 by rpki-client