This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/BsMfnzrxddpnmFQ8FtiqLN4hIRw.roa File: BsMfnzrxddpnmFQ8FtiqLN4hIRw.roa (raw, json) Hash identifier: GbFN7H89aII0f8FiIff5RGaJGPYoV9OOEoYuPkHE93c= Subject key identifier: 06:C3:1F:9F:3A:F1:75:DA:67:98:54:3C:16:D8:AA:2C:DE:21:21:1C Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 019B77C6EDB938D767C6645F3B23FB68E02E Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/BsMfnzrxddpnmFQ8FtiqLN4hIRw.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206996 IP address blocks: 87.237.52.0/24 maxlen: 24 87.237.53.0/24 maxlen: 24 87.237.54.0/24 maxlen: 24 87.237.55.0/24 maxlen: 24 195.62.33.0/24 maxlen: 24 195.62.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ed:b9:38:d7:67:c6:64:5f:3b:23:fb:68:e0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06c31f9f3af175da6798543c16d8aa2cde21211c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:f8:93:6c:b9:07:4f:80:d8:93:d8:21:74: e3:fa:86:c4:00:93:3a:89:a4:e2:13:28:2b:d2:59: 39:dd:b5:0b:bd:af:a0:6e:5b:f3:b1:f1:f0:00:eb: b2:11:3a:e8:4a:ae:06:d8:e0:8c:f8:f3:8e:a7:9f: 2a:99:fd:90:f7:e7:c1:13:44:5b:97:2c:8f:a2:74: b1:ba:28:1f:e6:a3:3d:b9:e1:2e:20:5b:0d:e9:b6: 46:d6:75:e6:cc:eb:2a:c1:51:ef:d6:34:ab:70:80: 20:48:9b:4c:f1:f7:96:dd:20:ae:84:89:1d:0c:3f: 70:a0:27:a1:9e:cb:98:2c:92:cd:89:0a:92:01:58: a3:74:f1:4e:26:7e:4f:4a:4c:9f:f2:d8:dc:83:36: 86:3b:80:bc:59:af:96:02:20:f2:3e:42:c0:b8:e5: b0:8a:4f:d6:c7:3e:48:33:0d:98:81:f9:1a:08:f1: dd:c9:c2:63:2e:77:a4:df:c4:1b:88:8b:43:e7:c0: 72:69:0b:d6:5b:21:b0:bf:76:55:6d:54:db:d5:a3: 6f:b4:55:ad:0d:cc:af:37:e5:02:e8:2a:54:a7:34: 4d:56:89:7d:a9:37:0f:ca:d2:a5:30:d8:ca:1f:0e: d8:a9:77:6d:4f:3b:69:a2:64:f8:1a:c0:c8:16:14: 89:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C3:1F:9F:3A:F1:75:DA:67:98:54:3C:16:D8:AA:2C:DE:21:21:1C X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/BsMfnzrxddpnmFQ8FtiqLN4hIRw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.237.52.0/22 195.62.33.0/24 195.62.47.0/24 Signature Algorithm: sha256WithRSAEncryption 96:d3:bb:cc:e6:84:0f:8f:4b:56:39:11:81:cb:90:da:cb:00: e6:27:82:47:ad:2b:fd:57:db:b1:5f:71:6d:7e:22:31:25:01: 55:58:29:a0:c2:df:30:03:5f:cd:2a:bb:97:55:42:46:31:e5: 1f:ba:21:86:4e:99:c0:b1:91:16:cd:83:3c:ec:a8:d1:8b:d1: 56:69:60:19:a3:54:7a:83:84:af:1a:87:95:1e:b9:05:93:5a: 5a:00:71:19:c8:97:f4:ca:6a:8d:96:8c:2d:06:08:2b:7c:79: 0b:87:7b:5b:c1:9f:4a:bf:fc:c0:2c:4e:d2:e6:eb:e0:e9:97: f7:ea:16:c0:09:f4:87:50:7e:a7:9f:76:08:8b:ee:51:3d:f1: 4c:cf:5b:9f:0b:af:48:82:5e:5f:56:09:0c:de:50:16:cd:bb: 2f:b4:43:89:b3:13:d4:d0:a4:cb:73:ac:51:f0:5b:92:17:94: 97:89:01:67:c7:07:6f:e3:20:46:e5:0c:6d:24:ef:22:f6:50: c3:a6:55:87:a5:fc:81:74:00:87:c4:ba:94:38:a1:f1:f6:91: 47:d5:4a:a0:c4:19:98:0f:13:27:05:50:53:ea:c0:1d:63:4a: 98:50:53:89:7d:9f:66:73:6c:94:e0:d7:f5:5c:0c:78:c3:18: a3:f4:7d:7d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xu25ONdnxmRfOyP7aOAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmMzMWY5ZjNhZjE3NWRhNjc5ODU0M2MxNmQ4YWEyY2RlMjEyMTFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1X4k2y5B0+A2JPYIXTj+obEAJM6 iaTiEygr0lk53bULva+gblvzsfHwAOuyETroSq4G2OCM+POOp58qmf2Q9+fBE0Rb lyyPonSxuigf5qM9ueEuIFsN6bZG1nXmzOsqwVHv1jSrcIAgSJtM8feW3SCuhIkd DD9woCehnsuYLJLNiQqSAVijdPFOJn5PSkyf8tjcgzaGO4C8Wa+WAiDyPkLAuOWw ik/Wxz5IMw2YgfkaCPHdycJjLnek38QbiItD58ByaQvWWyGwv3ZVbVTb1aNvtFWt DcyvN+UC6CpUpzRNVol9qTcPytKlMNjKHw7YqXdtTztpomT4GsDIFhSJRwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAbDH5868XXaZ5hUPBbYqizeISEcMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEvQnNNZm56cnhkZHBubUZROEZ0aXFMTjRoSVJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCV+00AwQA wz4hAwQAwz4vMA0GCSqGSIb3DQEBCwUAA4IBAQCW07vM5oQPj0tWORGBy5DaywDm J4JHrSv9V9uxX3FtfiIxJQFVWCmgwt8wA1/NKruXVUJGMeUfuiGGTpnAsZEWzYM8 7KjRi9FWaWAZo1R6g4SvGoeVHrkFk1paAHEZyJf0ymqNlowtBggrfHkLh3tbwZ9K v/zALE7S5uvg6Zf36hbACfSHUH6nn3YIi+5RPfFMz1ufC69Igl5fVgkM3lAWzbsv tEOJsxPU0KTLc6xR8FuSF5SXiQFnxwdv4yBG5QxtJO8i9lDDplWHpfyBdACHxLqU OKHx9pFH1UqgxBmYDxMnBVBT6sAdY0qYUFOJfZ9mc2yU4Nf1XAx4wxij9H19 -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:47 2026 by rpki-client