This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/bvn9xrtj8WOl66unrLqZtL1bs_8.roa File: bvn9xrtj8WOl66unrLqZtL1bs_8.roa (raw, json) Hash identifier: /pqD3nrcEleiPqOHk8dm0+W2Klr4HRio578jwUq+GZ8= Subject key identifier: 6E:F9:FD:C6:BB:63:F1:63:A5:EB:AB:A7:AC:BA:99:B4:BD:5B:B3:FF Certificate issuer: /CN=e01b4e0f2a201cf430048e248164b32eddf43dae Certificate serial: 019B78A3311C76738C49D2842B4C3B70229C Authority key identifier: E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/bvn9xrtj8WOl66unrLqZtL1bs_8.roa Signing time: Thu 01 Jan 2026 08:18:39 +0000 ROA not before: Thu 01 Jan 2026 08:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199004 IP address blocks: 91.206.170.0/24 maxlen: 24 185.25.212.0/22 maxlen: 22 2a13:ec80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:31:1c:76:73:8c:49:d2:84:2b:4c:3b:70:22:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e01b4e0f2a201cf430048e248164b32eddf43dae Validity Not Before: Jan 1 08:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ef9fdc6bb63f163a5ebaba7acba99b4bd5bb3ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d1:c0:75:61:84:c9:bb:a8:55:a0:dd:12:49: f2:b8:25:95:3d:84:55:ae:9d:c1:62:85:b3:3d:4a: 53:ba:8a:10:4c:32:0e:a8:dd:6a:d7:11:80:49:3c: 4b:9d:2c:a5:cd:70:56:93:76:39:a5:73:b4:61:d3: b1:37:37:4e:a7:2e:ab:a4:22:da:a6:4b:59:0f:5f: f5:ce:61:e1:32:78:e1:b4:e3:e8:86:b8:6f:48:57: 9d:fd:ef:06:8a:05:2b:08:65:d9:90:b9:0f:b9:ff: e4:ab:5b:a6:1c:2f:f6:67:db:3a:7f:fa:27:a0:e8: 8d:00:f4:dc:73:b6:77:c1:d0:c0:f8:e5:e4:7f:bb: a2:1d:f1:83:4b:bb:5b:8a:ee:28:ea:d4:da:88:90: 2b:36:13:2f:72:f5:c8:b5:9f:95:81:4e:d2:9e:be: 18:32:9e:b0:c6:1b:21:85:7c:dd:4a:33:1d:ed:ad: f5:8c:8e:9b:97:c3:43:00:f2:69:a3:46:5a:7b:aa: 99:9e:3c:6d:95:f5:30:fa:32:c2:44:82:73:2d:d1: 13:1c:8d:60:ae:1a:34:12:67:18:23:02:7c:ff:58: 3c:4f:94:36:d3:30:00:1d:ba:12:4d:72:9b:c9:b0: de:63:8a:97:be:2d:e6:69:00:8d:67:2f:05:16:5a: fa:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F9:FD:C6:BB:63:F1:63:A5:EB:AB:A7:AC:BA:99:B4:BD:5B:B3:FF X509v3 Authority Key Identifier: keyid:E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/bvn9xrtj8WOl66unrLqZtL1bs_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.206.170.0/24 185.25.212.0/22 IPv6: 2a13:ec80::/29 Signature Algorithm: sha256WithRSAEncryption 32:75:54:50:6e:a1:84:e4:05:6e:fe:0e:53:86:ac:78:f2:c5: 04:7e:d5:ca:3e:b1:4d:7f:6f:70:4c:10:50:23:6b:fd:57:cf: 24:46:9f:be:9b:15:bd:48:fb:37:bd:cc:0a:c2:76:e9:bb:96: 6f:5d:59:e6:c4:10:4e:0b:19:4a:55:50:bd:52:9f:b3:31:e6: 7d:49:d9:4f:6e:9d:aa:96:4a:1b:a8:0a:ae:46:9a:86:ba:0e: 5b:3a:38:c7:a0:8b:da:20:f6:f0:a1:27:9c:62:42:be:dd:47: dc:e2:b4:7f:db:50:58:bd:ec:17:c8:9b:f0:b4:93:10:3d:50: a3:47:7f:92:52:b5:b5:90:4e:da:56:bb:02:e2:d4:c7:e1:24: e4:58:b6:1f:2d:82:a3:2c:f2:e2:15:4f:99:c3:60:c1:35:6a: bc:f6:ca:f0:5e:9a:83:bd:d1:2b:d7:96:0e:0c:80:f1:84:5a: 2c:50:bd:fa:b7:b3:74:e1:20:2c:e2:24:40:3c:02:4f:65:8f: d3:cc:64:dc:62:44:ad:dc:2d:b1:18:55:0d:dd:e9:07:fd:3b: 53:f8:4d:1f:63:56:45:6e:5f:80:44:bc:b1:76:a1:2a:4a:6a: 8f:52:54:bb:bd:0b:e8:d3:6c:4e:cf:0d:ed:5c:ee:ab:34:09: b2:59:74:dd -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4ozEcdnOMSdKEK0w7cCKcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMWI0ZTBmMmEyMDFjZjQzMDA0OGUyNDgxNjRiMzJlZGRm NDNkYWUwHhcNMjYwMTAxMDgxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWY5ZmRjNmJiNjNmMTYzYTVlYmFiYTdhY2JhOTliNGJkNWJiM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9HAdWGEybuoVaDdEknyuCWVPYRV rp3BYoWzPUpTuooQTDIOqN1q1xGASTxLnSylzXBWk3Y5pXO0YdOxNzdOpy6rpCLa pktZD1/1zmHhMnjhtOPohrhvSFed/e8GigUrCGXZkLkPuf/kq1umHC/2Z9s6f/on oOiNAPTcc7Z3wdDA+OXkf7uiHfGDS7tbiu4o6tTaiJArNhMvcvXItZ+VgU7Snr4Y Mp6wxhshhXzdSjMd7a31jI6bl8NDAPJpo0Zae6qZnjxtlfUw+jLCRIJzLdETHI1g rho0EmcYIwJ8/1g8T5Q20zAAHboSTXKbybDeY4qXvi3maQCNZy8FFlr6bQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFG75/ca7Y/Fjpeurp6y6mbS9W7P/MB8GA1UdIwQY MBaAFOAbTg8qIBz0MASOJIFksy7d9D2uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEJ0T0R5b2dIUFF3Qkk0a2dXU3pMdDMwUGE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYzJjY2MtOGNiZC00YmVmLTk0MWQt YzYxNWY5OTEwZmZjLzEvYnZuOXhydGo4V09sNjZ1bnJMcVp0TDFic184LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lYzJjY2MtOGNiZC00YmVmLTk0MWQtYzYxNWY5OTEwZmZj LzEvNEJ0T0R5b2dIUFF3Qkk0a2dXU3pMdDMwUGE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW86qAwQC uRnUMA0EAgACMAcDBQMqE+yAMA0GCSqGSIb3DQEBCwUAA4IBAQAydVRQbqGE5AVu /g5Thqx48sUEftXKPrFNf29wTBBQI2v9V88kRp++mxW9SPs3vcwKwnbpu5ZvXVnm xBBOCxlKVVC9Up+zMeZ9SdlPbp2qlkobqAquRpqGug5bOjjHoIvaIPbwoSecYkK+ 3Ufc4rR/21BYvewXyJvwtJMQPVCjR3+SUrW1kE7aVrsC4tTH4STkWLYfLYKjLPLi FU+Zw2DBNWq89srwXpqDvdEr15YODIDxhFosUL36t7N04SAs4iRAPAJPZY/TzGTc YkSt3C2xGFUN3ekH/TtT+E0fY1ZFbl+ARLyxdqEqSmqPUlS7vQvo02xOzw3tXO6r NAmyWXTd -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:05 2026 by rpki-client