This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Bu9SUwOcVJgpBxmQBF-F7epWWtg.roa File: Bu9SUwOcVJgpBxmQBF-F7epWWtg.roa (raw, json) Hash identifier: FrTMQ7KbXoviPjsdmZdAMqS74Hi4YJDUcARzZd9rKkk= Subject key identifier: 06:EF:52:53:03:9C:54:98:29:07:19:90:04:5F:85:ED:EA:56:5A:D8 Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Certificate serial: 019B7A5AA1C427BE10A56448D5E3A2553054 Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Bu9SUwOcVJgpBxmQBF-F7epWWtg.roa Signing time: Thu 01 Jan 2026 16:18:38 +0000 ROA not before: Thu 01 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203758 IP address blocks: 83.147.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.mft rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a1:c4:27:be:10:a5:64:48:d5:e3:a2:55:30:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f Validity Not Before: Jan 1 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06ef5253039c549829071990045f85edea565ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:cb:50:77:1a:9c:ca:3a:14:26:da:8c:4a:40: e4:dd:e6:11:6b:40:38:a7:4f:b1:e5:86:fb:c3:56: b7:b2:c9:6c:7e:83:f4:c5:17:06:65:5f:73:be:db: f0:b0:e7:3b:f5:a1:75:57:c8:a8:09:1c:63:4c:7d: b1:b0:32:b7:74:63:7a:94:7f:87:cc:dc:68:78:82: 34:f6:89:3f:db:f6:e8:70:3b:a5:6a:5f:38:86:c9: 37:ba:ba:73:73:70:e6:f7:c7:2c:8e:80:a4:57:74: fc:22:4b:e4:82:c7:d9:90:da:37:92:0c:29:5d:7f: 99:c2:a6:2a:c1:7d:b5:fc:32:a6:90:a1:db:23:5e: c7:6c:2f:27:a4:07:b0:94:d6:1b:7b:36:63:f4:d7: 07:f5:e8:6f:50:17:e4:5f:ae:22:41:f3:62:f8:92: 25:78:fe:39:98:6a:ee:9d:b4:57:6c:3b:07:17:be: c4:f3:f9:60:58:7f:5c:2f:ce:24:88:c4:97:4d:9b: dc:2e:fa:fa:d1:e9:b2:15:ea:35:cd:72:31:45:f3: 51:57:8f:f3:59:fe:00:aa:0e:2b:8e:64:bc:8d:ca: cf:2c:19:51:a1:6c:ac:44:e3:2f:c2:07:b5:92:18: 5f:52:1f:57:c2:4b:2e:68:1d:51:aa:15:50:68:7a: a0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:EF:52:53:03:9C:54:98:29:07:19:90:04:5F:85:ED:EA:56:5A:D8 X509v3 Authority Key Identifier: keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/Bu9SUwOcVJgpBxmQBF-F7epWWtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.147.29.0/24 Signature Algorithm: sha256WithRSAEncryption 28:e8:98:23:4d:25:26:fe:99:b8:d4:b9:2c:36:ee:30:e3:cd: 3a:a2:80:c3:d5:a6:24:55:5b:af:a3:91:d8:87:d1:88:af:b1: e5:b5:5d:65:82:3e:55:82:d7:fd:55:c3:fe:46:4a:67:52:0d: c0:56:a2:bc:bb:65:f6:fb:02:f3:53:89:f0:34:93:4a:71:05: c8:f3:00:f5:c9:36:4c:5c:dc:0f:de:62:23:44:d3:ab:0d:16: c5:b9:dc:4d:a5:84:95:f6:09:a5:82:ca:a4:8e:1d:16:d6:83: a0:0f:82:51:93:b5:8a:cd:d5:08:1c:23:ba:4b:db:3d:cc:63: 4f:23:0b:a0:5c:72:e3:7b:85:0b:0c:d4:8f:18:73:08:4d:0c: c7:5d:80:5e:8e:95:44:38:5a:88:99:82:a9:46:ba:50:ec:05: fc:d7:ee:9e:0d:39:3f:e6:fc:44:58:2d:f6:a9:5e:3c:83:3c: 41:cc:7e:4d:11:d7:27:13:f7:32:8a:a2:7a:94:8b:9a:87:17: 1b:a6:27:56:be:32:0c:3a:4f:2b:d9:47:71:4c:0d:d5:b6:24: a9:d5:33:11:ff:20:18:9b:f6:8f:40:dd:f7:ae:4e:41:32:a7: 3b:75:05:88:7c:13:52:7f:ff:30:40:eb:70:6f:40:a5:a8:aa: 3f:33:29:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WqHEJ74QpWRI1eOiVTBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxOTNmZmU5ZGIzNzYyNmIxM2Y4NWQ3Y2M0NTdhYWQ1YzFm MzBjOWYwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmVmNTI1MzAzOWM1NDk4MjkwNzE5OTAwNDVmODVlZGVhNTY1YWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ctQdxqcyjoUJtqMSkDk3eYRa0A4 p0+x5Yb7w1a3sslsfoP0xRcGZV9zvtvwsOc79aF1V8ioCRxjTH2xsDK3dGN6lH+H zNxoeII09ok/2/bocDulal84hsk3urpzc3Dm98csjoCkV3T8IkvkgsfZkNo3kgwp XX+ZwqYqwX21/DKmkKHbI17HbC8npAewlNYbezZj9NcH9ehvUBfkX64iQfNi+JIl eP45mGrunbRXbDsHF77E8/lgWH9cL84kiMSXTZvcLvr60emyFeo1zXIxRfNRV4/z Wf4Aqg4rjmS8jcrPLBlRoWysROMvwge1khhfUh9XwksuaB1RqhVQaHqgdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAbvUlMDnFSYKQcZkARfhe3qVlrYMB8GA1UdIwQY MBaAFIGT/+nbN2JrE/hdfMRXqtXB8wyfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODkt MDhkMTI3MGMyZTcxLzEvQnU5U1V3T2NWSmdwQnhtUUJGLUY3ZXBXV3RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83NmJjMWUtYjZmNC00MDhhLWJiODktMDhkMTI3MGMyZTcx LzEvZ1pQXzZkczNZbXNULUYxOHhGZXExY0h6REo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU5MdMA0G CSqGSIb3DQEBCwUAA4IBAQAo6JgjTSUm/pm41LksNu4w4806ooDD1aYkVVuvo5HY h9GIr7HltV1lgj5Vgtf9VcP+RkpnUg3AVqK8u2X2+wLzU4nwNJNKcQXI8wD1yTZM XNwP3mIjRNOrDRbFudxNpYSV9gmlgsqkjh0W1oOgD4JRk7WKzdUIHCO6S9s9zGNP IwugXHLje4ULDNSPGHMITQzHXYBejpVEOFqImYKpRrpQ7AX81+6eDTk/5vxEWC32 qV48gzxBzH5NEdcnE/cyiqJ6lIuahxcbpidWvjIMOk8r2UdxTA3VtiSp1TMR/yAY m/aPQN33rk5BMqc7dQWIfBNSf/8wQOtwb0ClqKo/MylW -----END CERTIFICATE-----Generated at Wed Jan 21 18:22:13 2026 by rpki-client