This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/bvZFPCvF4Igp5im9CQi4MSj0eOc.roa File: bvZFPCvF4Igp5im9CQi4MSj0eOc.roa (raw, json) Hash identifier: SLYZCRjXEHo6LL4IR+75+DXz52FJqPAYvzqcrr6DgqE= Subject key identifier: 6E:F6:45:3C:2B:C5:E0:88:29:E6:29:BD:09:08:B8:31:28:F4:78:E7 Certificate issuer: /CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b Certificate serial: 019B7A5ACBAB5FC10A0D1B0EAB6B4949FA1F Authority key identifier: CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/bvZFPCvF4Igp5im9CQi4MSj0eOc.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51434 IP address blocks: 91.217.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.mft rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cb:ab:5f:c1:0a:0d:1b:0e:ab:6b:49:49:fa:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc81d54dc0fd16ac92534b9a780e26764b2f8f7b Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ef6453c2bc5e08829e629bd0908b83128f478e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f4:f5:00:df:1a:6b:64:ec:aa:e7:01:dd:31: c0:ae:22:9c:11:72:3f:76:7e:ce:6e:9b:c7:23:e9: c7:1c:65:31:58:7c:db:19:c3:94:70:07:2e:eb:23: 7e:48:de:04:c8:41:07:cd:91:6d:77:ef:5f:cc:14: f7:49:6a:23:1d:99:3d:c1:0b:d0:7c:3d:8a:4b:0a: 1c:7f:17:cf:c0:b4:72:b9:f4:d2:96:b8:b5:ad:f4: aa:3d:db:9a:3e:95:4b:a0:a9:c2:c1:d4:73:e9:2c: 0c:dd:ba:64:97:12:96:f7:92:95:f1:ab:f8:4d:4f: d2:b4:70:06:93:92:a5:05:7f:87:4b:57:e6:f7:3f: 51:43:f5:00:3a:90:2e:87:b7:ed:ef:f3:28:63:b5: 71:5b:a4:b4:85:0e:e6:cf:65:a9:1d:ef:c8:2d:09: 32:52:4c:cb:56:3f:86:a9:45:ef:66:7e:22:00:11: 45:1f:a8:06:2e:8c:3b:d9:f0:86:b1:ab:0d:bc:82: 98:03:0b:c4:a1:77:fb:77:75:b7:30:f8:49:fd:87: 39:b1:5d:51:ad:02:c1:db:49:6f:09:4f:7e:58:e3: dd:04:9e:86:ee:dd:e6:e8:7e:f6:f0:ce:13:60:32: 37:dc:55:20:62:b0:99:a3:18:f2:7a:a6:e9:27:a3: 15:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F6:45:3C:2B:C5:E0:88:29:E6:29:BD:09:08:B8:31:28:F4:78:E7 X509v3 Authority Key Identifier: keyid:CC:81:D5:4D:C0:FD:16:AC:92:53:4B:9A:78:0E:26:76:4B:2F:8F:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zIHVTcD9FqySU0uaeA4mdksvj3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/bvZFPCvF4Igp5im9CQi4MSj0eOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2fe112-d63e-40ce-a8bc-f3f7bd31a0fe/1/zIHVTcD9FqySU0uaeA4mdksvj3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.217.138.0/24 Signature Algorithm: sha256WithRSAEncryption c4:db:b5:68:12:90:06:8d:3d:59:ad:50:f8:32:43:bf:6b:35: c3:86:22:55:ea:d5:30:e9:2d:92:19:fd:d5:83:4d:8a:c9:48: 09:8b:6e:5d:48:16:0e:d0:7a:eb:78:89:33:e3:63:4c:34:34: 61:e0:a1:6c:e4:c5:4c:24:c6:d4:6e:fd:62:a8:52:9c:87:d3: c8:70:4c:87:db:ff:b4:ef:1d:e0:77:f3:ff:f9:6a:47:61:df: 0e:66:26:84:ca:4d:18:54:da:77:1b:8f:aa:63:1e:cc:62:5e: 47:96:4c:9e:fd:31:29:91:3f:80:36:42:a2:68:35:9b:5f:f5: e7:e3:aa:3a:c7:94:e8:f3:2f:51:08:39:7c:cc:bf:68:3c:98: a1:5b:57:e2:10:7d:7d:72:e7:0c:1f:a1:37:ef:d7:9c:a9:09: 11:82:c4:82:0b:c4:0c:fc:f2:81:c2:17:a1:f4:73:51:ba:dd: ca:8a:ca:b8:b8:87:11:3c:3c:9f:77:ea:91:7c:9e:32:8d:3a: 66:86:49:a8:74:33:9b:fd:46:21:16:02:bd:b5:98:1a:db:e7: ad:84:04:38:5c:81:41:2b:78:07:7c:91:5c:85:bc:e1:0d:75: db:30:13:de:7d:05:e3:47:8c:8b:d5:8f:69:78:25:81:5d:98: a4:65:b4:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsurX8EKDRsOq2tJSfofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjODFkNTRkYzBmZDE2YWM5MjUzNGI5YTc4MGUyNjc2NGIy ZjhmN2IwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWY2NDUzYzJiYzVlMDg4MjllNjI5YmQwOTA4YjgzMTI4ZjQ3OGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvT1AN8aa2TsqucB3THAriKcEXI/ dn7ObpvHI+nHHGUxWHzbGcOUcAcu6yN+SN4EyEEHzZFtd+9fzBT3SWojHZk9wQvQ fD2KSwocfxfPwLRyufTSlri1rfSqPduaPpVLoKnCwdRz6SwM3bpklxKW95KV8av4 TU/StHAGk5KlBX+HS1fm9z9RQ/UAOpAuh7ft7/MoY7VxW6S0hQ7mz2WpHe/ILQky UkzLVj+GqUXvZn4iABFFH6gGLow72fCGsasNvIKYAwvEoXf7d3W3MPhJ/Yc5sV1R rQLB20lvCU9+WOPdBJ6G7t3m6H728M4TYDI33FUgYrCZoxjyeqbpJ6MVxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG72RTwrxeCIKeYpvQkIuDEo9HjnMB8GA1UdIwQY MBaAFMyB1U3A/RasklNLmngOJnZLL497MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMt ZjNmN2JkMzFhMGZlLzEvYnZaRlBDdkY0SWdwNWltOUNRaTRNU2owZU9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yZmUxMTItZDYzZS00MGNlLWE4YmMtZjNmN2JkMzFhMGZl LzEveklIVlRjRDlGcXlTVTB1YWVBNG1ka3N2ajNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9mKMA0G CSqGSIb3DQEBCwUAA4IBAQDE27VoEpAGjT1ZrVD4MkO/azXDhiJV6tUw6S2SGf3V g02KyUgJi25dSBYO0HrreIkz42NMNDRh4KFs5MVMJMbUbv1iqFKch9PIcEyH2/+0 7x3gd/P/+WpHYd8OZiaEyk0YVNp3G4+qYx7MYl5Hlkye/TEpkT+ANkKiaDWbX/Xn 46o6x5To8y9RCDl8zL9oPJihW1fiEH19cucMH6E379ecqQkRgsSCC8QM/PKBwheh 9HNRut3Kisq4uIcRPDyfd+qRfJ4yjTpmhkmodDOb/UYhFgK9tZga2+ethAQ4XIFB K3gHfJFchbzhDXXbMBPefQXjR4yL1Y9peCWBXZikZbSr -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:52 2026 by rpki-client