This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/BcnRkRAQbZZ4INOqkTUCmGkxNks.roa File: BcnRkRAQbZZ4INOqkTUCmGkxNks.roa (raw, json) Hash identifier: vEctQxHlPIQWjpN3HvX2dAISZ0kY4iShspHvCFlft/Q= Subject key identifier: 05:C9:D1:91:10:10:6D:96:78:20:D3:AA:91:35:02:98:69:31:36:4B Certificate issuer: /CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8 Certificate serial: 019B7F844AA9E09A37AF5CA8D24317B2D227 Authority key identifier: E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/BcnRkRAQbZZ4INOqkTUCmGkxNks.roa Signing time: Fri 02 Jan 2026 16:22:14 +0000 ROA not before: Fri 02 Jan 2026 16:22:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400529 IP address blocks: 94.231.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.mft rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:4a:a9:e0:9a:37:af:5c:a8:d2:43:17:b2:d2:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4d7aaa3d25c2f9ebbec74c830cc0cde9318c8f8 Validity Not Before: Jan 2 16:22:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05c9d19110106d967820d3aa913502986931364b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:3d:dd:91:1f:0a:73:70:a0:04:53:c4:6f:db: 44:aa:d5:f6:56:8f:ff:30:b4:f2:09:6e:e4:99:a1: 95:69:a3:51:f6:55:59:74:e5:f3:e3:08:78:22:60: 19:0e:d5:11:0e:60:e2:1c:52:5f:15:df:0f:0f:eb: 15:bc:c4:68:df:5b:66:b3:0b:2b:6f:ca:86:67:62: 4a:8c:c8:8f:f0:54:54:84:50:48:c5:c3:e8:c8:95: a7:2f:4f:0b:ec:9a:ad:b4:59:a6:c6:81:44:08:a5: 3c:0b:42:91:c1:69:00:fc:1c:a5:cf:3d:40:7d:21: 51:ad:21:5e:39:fa:53:5f:cd:2c:43:a4:e4:6a:b0: 5e:c2:bf:ac:b4:e7:f3:86:6e:6f:9a:b4:b8:10:27: eb:de:9f:1c:62:1f:ac:d0:71:06:68:64:b3:d2:9b: 6b:99:79:c3:03:4e:08:4e:cc:ba:b4:9a:4f:4f:0f: 5e:1d:67:68:db:f6:73:67:25:a5:20:8a:5b:e6:64: c2:e0:83:62:6e:ea:1b:3d:46:78:e5:45:f0:e2:32: 4e:bb:19:59:1e:1c:20:9a:bf:56:38:0a:0b:73:61: 24:22:a4:b4:3f:d4:50:46:c2:53:2e:db:81:99:40: 25:50:e1:55:22:94:c5:98:e8:a1:64:87:ad:1b:8b: d9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C9:D1:91:10:10:6D:96:78:20:D3:AA:91:35:02:98:69:31:36:4B X509v3 Authority Key Identifier: keyid:E4:D7:AA:A3:D2:5C:2F:9E:BB:EC:74:C8:30:CC:0C:DE:93:18:C8:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Neqo9JcL5677HTIMMwM3pMYyPg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/BcnRkRAQbZZ4INOqkTUCmGkxNks.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/5Neqo9JcL5677HTIMMwM3pMYyPg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.231.215.0/24 Signature Algorithm: sha256WithRSAEncryption 43:2c:96:1f:9c:2c:16:4a:34:c2:c7:e0:05:8e:29:d2:94:47: 87:a6:28:2d:65:de:49:99:43:ad:cf:ef:db:00:c2:3f:b7:ae: 3a:27:ff:44:56:6d:aa:62:ca:e2:83:4e:9d:a9:e3:87:9f:31: a5:65:0d:3b:1f:64:cb:4d:18:8c:db:35:b2:db:61:e1:d4:93: 59:3d:1d:b4:c2:80:57:8b:de:59:70:b5:02:95:84:e5:98:7a: e3:7c:87:26:5d:e6:69:34:c1:2c:90:fd:d8:6a:64:1c:f6:a0: 22:6f:44:3e:d5:db:9e:cf:f1:57:26:60:f9:24:5e:cd:7e:e9: 8d:0f:5b:a0:88:72:ec:a3:58:99:d6:f4:5e:d5:3b:2d:e1:24: c6:54:b8:87:fa:70:8b:2f:48:11:44:3d:b8:b2:50:f2:c2:61: 52:89:29:7e:b8:56:4c:a1:06:83:eb:71:22:03:5a:63:af:72: 2a:1e:e8:64:06:7f:de:99:06:cb:47:73:65:d0:8d:d7:3b:c3: d5:31:1c:c6:85:bc:56:f7:8f:70:cb:b5:6d:9c:18:75:f6:9b: 58:f0:13:61:29:8a:0b:b8:31:75:88:f9:0a:62:d0:b1:9e:86: d9:f7:a4:77:82:9e:ff:87:58:0f:e1:da:e8:71:52:47:1b:1e: 94:1b:e1:91 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hEqp4Jo3r1yo0kMXstInMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0ZDdhYWEzZDI1YzJmOWViYmVjNzRjODMwY2MwY2RlOTMx OGM4ZjgwHhcNMjYwMTAyMTYyMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWM5ZDE5MTEwMTA2ZDk2NzgyMGQzYWE5MTM1MDI5ODY5MzEzNjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5j3dkR8Kc3CgBFPEb9tEqtX2Vo// MLTyCW7kmaGVaaNR9lVZdOXz4wh4ImAZDtURDmDiHFJfFd8PD+sVvMRo31tmswsr b8qGZ2JKjMiP8FRUhFBIxcPoyJWnL08L7JqttFmmxoFECKU8C0KRwWkA/Bylzz1A fSFRrSFeOfpTX80sQ6TkarBewr+stOfzhm5vmrS4ECfr3p8cYh+s0HEGaGSz0ptr mXnDA04ITsy6tJpPTw9eHWdo2/ZzZyWlIIpb5mTC4INibuobPUZ45UXw4jJOuxlZ Hhwgmr9WOAoLc2EkIqS0P9RQRsJTLtuBmUAlUOFVIpTFmOihZIetG4vZiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAXJ0ZEQEG2WeCDTqpE1AphpMTZLMB8GA1UdIwQY MBaAFOTXqqPSXC+eu+x0yDDMDN6TGMj4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2Yt ZWY2M2I4MTZkZDM1LzEvQmNuUmtSQVFiWlo0SU5PcWtUVUNtR2t4TmtzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS84YjQxNDctZTZlMC00ZDgwLWE5M2YtZWY2M2I4MTZkZDM1 LzEvNU5lcW85SmNMNTY3N0hUSU1Nd00zcE1ZeVBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXufXMA0G CSqGSIb3DQEBCwUAA4IBAQBDLJYfnCwWSjTCx+AFjinSlEeHpigtZd5JmUOtz+/b AMI/t646J/9EVm2qYsrig06dqeOHnzGlZQ07H2TLTRiM2zWy22Hh1JNZPR20woBX i95ZcLUClYTlmHrjfIcmXeZpNMEskP3YamQc9qAib0Q+1duez/FXJmD5JF7NfumN D1ugiHLso1iZ1vRe1Tst4STGVLiH+nCLL0gRRD24slDywmFSiSl+uFZMoQaD63Ei A1pjr3IqHuhkBn/emQbLR3Nl0I3XO8PVMRzGhbxW949wy7VtnBh19ptY8BNhKYoL uDF1iPkKYtCxnobZ96R3gp7/h1gP4drocVJHGx6UG+GR -----END CERTIFICATE-----Generated at Sun Jan 25 16:12:33 2026 by rpki-client