This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/bzcWIOR530kfZXQw__qDEK1p8UI.roa File: bzcWIOR530kfZXQw__qDEK1p8UI.roa (raw, json) Hash identifier: t4Fa41wgJdlSaS1EXeWWpyDSCXN0855ilnaAwd5UGbU= Subject key identifier: 6F:37:16:20:E4:79:DF:49:1F:65:74:30:FF:FA:83:10:AD:69:F1:42 Certificate issuer: /CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b Certificate serial: 019B79ED15AD3C1D6A118E8574E5CF35C1A1 Authority key identifier: 8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/bzcWIOR530kfZXQw__qDEK1p8UI.roa Signing time: Thu 01 Jan 2026 14:18:59 +0000 ROA not before: Thu 01 Jan 2026 14:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51394 IP address blocks: 91.239.244.0/22 maxlen: 22 178.212.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:15:ad:3c:1d:6a:11:8e:85:74:e5:cf:35:c1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a83555caa22ce9b9b1683503a14e3cdd836e01b Validity Not Before: Jan 1 14:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f371620e479df491f657430fffa8310ad69f142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:4f:78:4d:44:4f:43:2c:80:a7:6c:b2:08: ff:8f:dd:cb:21:c7:0a:1b:d7:1c:b7:63:84:fb:ac: 88:aa:68:86:99:95:bd:fa:f4:55:64:89:92:3b:e1: a3:d0:57:54:d3:75:5f:30:e5:d1:a3:bb:0e:69:11: d5:d8:3e:4b:d2:62:19:15:0e:e8:0e:0f:8c:b0:72: 44:43:a2:55:78:83:25:33:21:c8:4f:35:6e:15:a7: fd:e1:d2:7e:74:e4:92:47:3a:b3:dd:5a:f0:1d:28: 1d:99:ec:8c:f0:d5:2d:88:96:60:48:be:c4:aa:59: 2b:72:55:5c:aa:21:15:24:78:38:33:69:28:5b:c4: b2:71:04:fb:b3:b6:1a:6b:eb:72:3f:94:46:36:c3: 52:62:e9:0d:f1:77:a7:bf:c6:c2:15:63:ef:26:03: c3:8f:a7:ec:33:30:a4:4f:fa:a4:78:ed:eb:9f:2a: 87:13:10:dd:ae:8c:5b:2d:b0:2e:62:25:4a:81:77: ca:ba:6c:b8:29:6e:36:7e:84:87:17:3f:8b:1d:88: f6:a7:f1:d9:83:e9:cf:47:da:0f:7d:25:ca:c9:c1: 64:b1:df:9b:18:f3:18:cc:90:b7:7e:b2:d6:76:a5: a3:53:7e:f4:1d:25:79:e8:ac:a6:b1:f4:e1:a0:d2: 22:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:37:16:20:E4:79:DF:49:1F:65:74:30:FF:FA:83:10:AD:69:F1:42 X509v3 Authority Key Identifier: keyid:8A:83:55:5C:AA:22:CE:9B:9B:16:83:50:3A:14:E3:CD:D8:36:E0:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ioNVXKoizpubFoNQOhTjzdg24Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/bzcWIOR530kfZXQw__qDEK1p8UI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/7b9cf8-2542-41c2-88c0-1f325473ce68/1/ioNVXKoizpubFoNQOhTjzdg24Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.244.0/22 178.212.120.0/21 Signature Algorithm: sha256WithRSAEncryption 60:0a:63:12:57:dc:39:f7:3b:ae:72:5c:7e:85:0b:2c:37:52: 74:39:de:e6:60:01:97:8e:4e:45:f9:cd:cd:86:c3:da:0e:4f: 63:7b:0d:c8:05:73:ea:25:a9:14:1c:a5:4f:7b:1c:31:53:27: 82:42:8b:45:61:98:30:f2:79:d6:6f:4e:10:de:d2:9a:71:95: a5:7b:33:4a:9c:fd:86:16:c0:d6:f7:dc:98:9c:4a:02:65:d3: c9:4b:de:8a:8d:db:52:3a:31:f3:65:a2:8d:31:4f:6c:fe:6d: 07:5e:e9:96:4c:2f:37:3c:1d:a4:13:bc:84:98:50:f4:1c:d6: 8b:b6:df:4c:2f:fb:7d:a2:86:3c:2d:49:b8:b4:7c:d2:43:24: 49:d4:e0:4d:6a:fd:da:8a:34:38:e2:d8:03:18:38:d5:d0:09: 00:ef:92:77:78:ea:68:1b:b8:50:d4:3d:0d:ea:6e:58:ca:ce: cd:24:83:74:b3:0e:b2:31:ea:94:db:3e:f3:44:6b:3e:69:dd: 66:b8:b2:ca:4d:0c:e9:d3:ae:81:de:0e:69:f0:26:a9:49:58: ee:e2:52:ab:95:36:6c:b6:db:b0:1a:48:05:d4:e1:a8:07:94: 68:d8:81:97:51:f1:b5:84:31:b4:a0:9e:2a:70:0c:e7:d1:70: 01:87:22:41 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57RWtPB1qEY6FdOXPNcGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhODM1NTVjYWEyMmNlOWI5YjE2ODM1MDNhMTRlM2NkZDgz NmUwMWIwHhcNMjYwMTAxMTQxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjM3MTYyMGU0NzlkZjQ5MWY2NTc0MzBmZmZhODMxMGFkNjlmMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsStPeE1ET0MsgKdssgj/j93LIccK G9cct2OE+6yIqmiGmZW9+vRVZImSO+Gj0FdU03VfMOXRo7sOaRHV2D5L0mIZFQ7o Dg+MsHJEQ6JVeIMlMyHITzVuFaf94dJ+dOSSRzqz3VrwHSgdmeyM8NUtiJZgSL7E qlkrclVcqiEVJHg4M2koW8SycQT7s7Yaa+tyP5RGNsNSYukN8Xenv8bCFWPvJgPD j6fsMzCkT/qkeO3rnyqHExDdroxbLbAuYiVKgXfKumy4KW42foSHFz+LHYj2p/HZ g+nPR9oPfSXKycFksd+bGPMYzJC3frLWdqWjU370HSV56KymsfThoNIi5QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG83FiDked9JH2V0MP/6gxCtafFCMB8GA1UdIwQY MBaAFIqDVVyqIs6bmxaDUDoU483YNuAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy83YjljZjgtMjU0Mi00MWMyLTg4YzAt MWYzMjU0NzNjZTY4LzEvYnpjV0lPUjUzMGtmWlhRd19fcURFSzFwOFVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy83YjljZjgtMjU0Mi00MWMyLTg4YzAtMWYzMjU0NzNjZTY4 LzEvaW9OVlhLb2l6cHViRm9OUU9oVGp6ZGcyNEJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW+/0AwQD stR4MA0GCSqGSIb3DQEBCwUAA4IBAQBgCmMSV9w59zuuclx+hQssN1J0Od7mYAGX jk5F+c3NhsPaDk9jew3IBXPqJakUHKVPexwxUyeCQotFYZgw8nnWb04Q3tKacZWl ezNKnP2GFsDW99yYnEoCZdPJS96KjdtSOjHzZaKNMU9s/m0HXumWTC83PB2kE7yE mFD0HNaLtt9ML/t9ooY8LUm4tHzSQyRJ1OBNav3aijQ44tgDGDjV0AkA75J3eOpo G7hQ1D0N6m5Yys7NJIN0sw6yMeqU2z7zRGs+ad1muLLKTQzp066B3g5p8CapSVju 4lKrlTZsttuwGkgF1OGoB5Ro2IGXUfG1hDG0oJ4qcAzn0XABhyJB -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:18 2026 by rpki-client