This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/bvcvNYojmTtMnBysPzJxWFLdF80.roa File: bvcvNYojmTtMnBysPzJxWFLdF80.roa (raw, json) Hash identifier: rEF2pNowtb5e9TFBM+KqVgoLZ9CLxZ76uZKkrlZ2GsU= Subject key identifier: 6E:F7:2F:35:8A:23:99:3B:4C:9C:1C:AC:3F:32:71:58:52:DD:17:CD Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019B7B369F1808096488A6DD7F7465FF7E11 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/bvcvNYojmTtMnBysPzJxWFLdF80.roa Signing time: Thu 01 Jan 2026 20:18:55 +0000 ROA not before: Thu 01 Jan 2026 20:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199575 IP address blocks: 31.172.163.0/24 maxlen: 24 212.18.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:9f:18:08:09:64:88:a6:dd:7f:74:65:ff:7e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Jan 1 20:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ef72f358a23993b4c9c1cac3f32715852dd17cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:20:9c:d5:96:2f:9a:75:b2:d8:4b:e6:2d: 89:10:59:d4:6d:bd:ba:a1:49:e2:30:1c:bc:9c:7d: 7c:e1:48:f4:6f:22:69:2e:43:fb:b4:b6:d6:75:a2: 2e:cf:e4:1a:e3:24:9e:75:1f:f6:6d:c0:38:2b:dc: 2c:0e:c0:b1:bb:6b:5e:cb:87:39:18:f8:d4:fb:4e: a9:cf:c6:69:a2:de:0e:7c:f3:e9:26:51:32:2a:38: 3f:74:c7:7f:20:91:65:9b:64:8c:b3:ef:a4:aa:90: 30:a5:6b:34:33:84:f8:82:c5:30:6e:05:04:42:81: b0:d9:c5:ab:a0:33:44:7c:0d:ba:8e:7d:ca:1b:84: 37:8a:6a:24:ae:73:41:09:e3:e1:e8:f2:08:e5:ac: 40:b6:5e:ee:d8:a0:1d:ae:a2:f5:22:34:53:8a:2f: 8f:2b:4e:61:0b:72:4a:8c:f0:6c:0e:25:5f:ca:7c: 83:51:b6:25:29:9a:a3:62:e2:98:27:e5:d8:2c:84: ef:78:f8:c3:87:6c:cc:1f:ed:37:b9:eb:7c:d9:b6: 93:9e:67:eb:b4:9f:a7:8b:a2:67:98:6f:2a:35:d2: 0b:10:35:5f:47:8b:ed:d5:86:02:47:70:ef:84:99: ca:12:09:a2:f1:6b:7b:63:da:e5:4a:4c:e2:42:d9: cc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F7:2F:35:8A:23:99:3B:4C:9C:1C:AC:3F:32:71:58:52:DD:17:CD X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/bvcvNYojmTtMnBysPzJxWFLdF80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.172.163.0/24 212.18.246.0/24 Signature Algorithm: sha256WithRSAEncryption 69:c8:2a:04:b0:9c:3d:66:31:a3:ec:63:e4:75:7f:28:ba:9d: fd:d3:74:ea:aa:a0:62:20:f1:98:89:cd:23:5c:87:3b:5e:fb: 24:39:ad:90:52:5d:4d:9e:56:c4:1c:ef:38:f0:23:9c:ef:28: f0:01:bd:a0:ad:9f:03:53:89:36:48:7a:79:94:7c:3f:b3:8a: d4:d4:11:bb:50:fc:c7:69:42:ad:64:f9:ac:f9:30:31:a8:d7: 7f:01:0f:7c:e3:66:3a:9b:a7:fa:7f:1c:c2:86:1d:94:f5:d6: d9:7a:b5:22:1a:0d:7f:af:4a:fa:cb:fa:50:f9:20:1f:38:71: 16:06:4f:22:f2:7a:3b:ee:dc:5b:d7:7d:e9:98:4f:23:20:5f: c4:ae:fb:99:08:e1:e2:8e:1b:35:5b:fa:4d:58:0b:07:6d:27: d8:03:87:9a:93:0f:27:3e:ad:0c:40:62:d5:cf:f1:93:2a:94: e2:57:24:de:a4:33:d1:4c:92:03:f1:c3:c0:40:b8:22:6d:4d: 55:ce:75:85:02:3f:1c:d8:20:a1:74:b2:d7:86:26:04:7a:bd: d8:8e:92:a5:8a:fd:dc:02:b8:66:03:5b:01:aa:c7:4e:c4:77: 2d:85:5d:32:45:d1:d1:76:e6:8c:e7:75:64:0d:33:2b:97:b3: cc:21:aa:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Np8YCAlkiKbdf3Rl/34RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwMTAxMjAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWY3MmYzNThhMjM5OTNiNGM5YzFjYWMzZjMyNzE1ODUyZGQxN2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAUgnNWWL5p1sthL5i2JEFnUbb26 oUniMBy8nH184Uj0byJpLkP7tLbWdaIuz+Qa4ySedR/2bcA4K9wsDsCxu2tey4c5 GPjU+06pz8Zpot4OfPPpJlEyKjg/dMd/IJFlm2SMs++kqpAwpWs0M4T4gsUwbgUE QoGw2cWroDNEfA26jn3KG4Q3imokrnNBCePh6PII5axAtl7u2KAdrqL1IjRTii+P K05hC3JKjPBsDiVfynyDUbYlKZqjYuKYJ+XYLITvePjDh2zMH+03uet82baTnmfr tJ+ni6JnmG8qNdILEDVfR4vt1YYCR3DvhJnKEgmi8Wt7Y9rlSkziQtnM+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG73LzWKI5k7TJwcrD8ycVhS3RfNMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvYnZjdk5Zb2ptVHRNbkJ5c1B6SnhXRkxkRjgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH6yjAwQA 1BL2MA0GCSqGSIb3DQEBCwUAA4IBAQBpyCoEsJw9ZjGj7GPkdX8oup3903TqqqBi IPGYic0jXIc7XvskOa2QUl1NnlbEHO848COc7yjwAb2grZ8DU4k2SHp5lHw/s4rU 1BG7UPzHaUKtZPms+TAxqNd/AQ9842Y6m6f6fxzChh2U9dbZerUiGg1/r0r6y/pQ +SAfOHEWBk8i8no77txb133pmE8jIF/ErvuZCOHijhs1W/pNWAsHbSfYA4eakw8n Pq0MQGLVz/GTKpTiVyTepDPRTJID8cPAQLgibU1VznWFAj8c2CChdLLXhiYEer3Y jpKliv3cArhmA1sBqsdOxHcthV0yRdHRduaM53VkDTMrl7PMIapX -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:05 2026 by rpki-client