This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa File: BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa (raw, json) Hash identifier: WLYjBTaaoRkUg9cIZWEhhWlOX7Jh/HdxdA+DXCeO3yM= Subject key identifier: 04:A3:E5:D1:54:7B:C5:87:57:60:A8:36:B0:1E:63:87:32:14:A4:F3 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC3FA09B16EBAD9993206ECE366C9C Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa Signing time: Thu 01 Jan 2026 14:18:04 +0000 ROA not before: Thu 01 Jan 2026 14:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12507 IP address blocks: 46.151.144.0/21 maxlen: 21 46.151.144.0/23 maxlen: 23 195.49.200.0/21 maxlen: 21 195.49.200.0/22 maxlen: 22 195.49.206.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:3f:a0:9b:16:eb:ad:99:93:20:6e:ce:36:6c:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04a3e5d1547bc5875760a836b01e63873214a4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d9:d4:0c:3d:7f:1d:04:c5:ff:0b:f1:4f:33: 97:5e:52:a6:e2:8d:f5:1f:1f:5e:0a:6a:90:c3:c7: 55:fc:5f:7a:0f:fe:4d:6e:c8:fe:d3:a3:c7:ef:5d: ca:2c:02:ca:47:8e:b1:c7:21:50:0f:f3:c5:5f:e9: 07:df:45:e6:46:98:0f:a4:e0:90:0a:75:7f:5a:73: e4:38:59:a8:d0:72:dc:42:80:5e:66:56:7b:56:6d: da:a7:f2:9c:7c:fd:15:96:e3:76:7e:81:34:c9:f8: 55:f2:62:f7:50:4c:80:4e:b7:e2:ad:d8:b7:f6:dc: ee:7c:38:5b:21:0f:0c:9a:c5:b6:58:e4:cd:93:c2: d3:92:3e:ff:5c:cf:4c:3d:87:05:8d:8b:24:60:82: 63:7b:f1:72:98:6d:da:c7:c3:b5:38:c7:56:05:c9: 8d:17:b1:1c:7e:4f:24:78:a4:37:63:6a:22:f4:8a: a7:ba:ef:e8:f6:c8:82:21:a5:f0:c8:5b:37:c4:b6: 8e:66:99:25:b1:b8:40:69:26:1e:e3:f3:27:fd:23: 96:f6:9f:a0:40:af:6d:65:84:cb:ab:d0:e2:a3:fc: b3:d1:2e:9f:c0:38:80:0e:98:11:e0:5b:5c:ea:1d: fe:59:e0:83:fb:8f:95:09:b7:c8:2d:79:b9:20:82: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A3:E5:D1:54:7B:C5:87:57:60:A8:36:B0:1E:63:87:32:14:A4:F3 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/BKPl0VR7xYdXYKg2sB5jhzIUpPM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.144.0/21 195.49.200.0/21 Signature Algorithm: sha256WithRSAEncryption 76:00:96:dd:9d:55:49:65:1a:bd:ae:cc:57:a3:15:0a:95:25: 3e:5b:9a:fe:f6:1b:63:10:b9:91:2b:4f:17:2f:f5:bb:cf:2c: cd:e5:1f:f7:5e:20:f4:cc:ca:3c:a7:07:1a:77:bc:a5:44:e7: 36:c5:d7:e0:9a:22:02:00:da:42:07:27:84:1f:63:39:d0:10: 70:a1:46:0f:10:82:e7:e1:02:36:c6:39:63:8e:06:ef:5c:71: d6:73:58:4b:e0:47:67:06:f8:17:91:c4:f9:b9:a6:8f:79:60: 2a:4e:d2:53:2e:5e:97:70:4b:6a:7f:4a:f8:af:9f:28:6a:c8: 0d:c6:49:67:9b:5f:f5:31:07:fd:20:9f:6b:a9:10:4b:24:87: dc:9b:c4:57:7a:97:ec:cb:aa:fd:b6:f2:63:a2:b7:57:58:42: f8:66:9a:0d:cd:79:ee:13:46:26:cd:f4:64:79:13:b5:28:2b: a9:81:6a:c3:f3:44:dc:86:70:ad:06:94:39:6c:aa:2d:04:5d: 22:fe:ed:60:e6:a0:9f:68:14:ab:86:48:b6:81:f0:ff:3c:96: 03:d8:01:dc:41:92:94:1e:69:c0:57:21:11:33:28:c1:b2:df: 9f:5f:c6:7e:30:13:2c:c5:d2:56:16:63:7a:04:4f:f0:9e:7c: 8f:26:dc:20 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57D+gmxbrrZmTIG7ONmycMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGEzZTVkMTU0N2JjNTg3NTc2MGE4MzZiMDFlNjM4NzMyMTRhNGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNnUDD1/HQTF/wvxTzOXXlKm4o31 Hx9eCmqQw8dV/F96D/5Nbsj+06PH713KLALKR46xxyFQD/PFX+kH30XmRpgPpOCQ CnV/WnPkOFmo0HLcQoBeZlZ7Vm3ap/KcfP0VluN2foE0yfhV8mL3UEyATrfirdi3 9tzufDhbIQ8MmsW2WOTNk8LTkj7/XM9MPYcFjYskYIJje/FymG3ax8O1OMdWBcmN F7Ecfk8keKQ3Y2oi9Iqnuu/o9siCIaXwyFs3xLaOZpklsbhAaSYe4/Mn/SOW9p+g QK9tZYTLq9Dio/yz0S6fwDiADpgR4Ftc6h3+WeCD+4+VCbfILXm5IILKVQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFASj5dFUe8WHV2CoNrAeY4cyFKTzMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvQktQbDBWUjd4WWRYWUtnMnNCNWpoeklVcFBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEtOGRmMzYzMzdlNmJj LzEvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLpeQAwQD wzHIMA0GCSqGSIb3DQEBCwUAA4IBAQB2AJbdnVVJZRq9rsxXoxUKlSU+W5r+9htj ELmRK08XL/W7zyzN5R/3XiD0zMo8pwcad7ylROc2xdfgmiICANpCByeEH2M50BBw oUYPEILn4QI2xjljjgbvXHHWc1hL4EdnBvgXkcT5uaaPeWAqTtJTLl6XcEtqf0r4 r58oasgNxklnm1/1MQf9IJ9rqRBLJIfcm8RXepfsy6r9tvJjordXWEL4ZpoNzXnu E0YmzfRkeRO1KCupgWrD80TchnCtBpQ5bKotBF0i/u1g5qCfaBSrhki2gfD/PJYD 2AHcQZKUHmnAVyERMyjBst+fX8Z+MBMsxdJWFmN6BE/wnnyPJtwg -----END CERTIFICATE-----Generated at Mon Jan 26 08:06:30 2026 by rpki-client