This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/BVCNuyEI8Escb23UOBkojnAQ3uU.roa File: BVCNuyEI8Escb23UOBkojnAQ3uU.roa (raw, json) Hash identifier: TpAVxATDxHC3mnDA/ZCfMM4mNI1Q7807T0lCqaxfnlA= Subject key identifier: 05:50:8D:BB:21:08:F0:4B:1C:6F:6D:D4:38:19:28:8E:70:10:DE:E5 Certificate issuer: /CN=cf66224bcfb8b82deaabac8c4ca250371b974611 Certificate serial: 019B77C7070962BBF8E37EC637A21DA4C6B1 Authority key identifier: CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/BVCNuyEI8Escb23UOBkojnAQ3uU.roa Signing time: Thu 01 Jan 2026 04:18:10 +0000 ROA not before: Thu 01 Jan 2026 04:18:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31742 IP address blocks: 45.14.228.0/22 maxlen: 22 46.255.248.0/21 maxlen: 21 83.137.224.0/21 maxlen: 21 93.191.24.0/21 maxlen: 21 185.119.20.0/22 maxlen: 22 212.85.252.0/22 maxlen: 22 2a00:d300::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.mft rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:07:09:62:bb:f8:e3:7e:c6:37:a2:1d:a4:c6:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf66224bcfb8b82deaabac8c4ca250371b974611 Validity Not Before: Jan 1 04:18:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05508dbb2108f04b1c6f6dd43819288e7010dee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:75:23:61:08:54:74:00:85:86:2e:cd:e4:73: 30:99:9d:99:3e:df:c4:3d:6a:ff:7d:b2:a0:9f:f9: 87:95:e5:69:fa:b3:27:53:c2:33:e5:ef:8c:27:05: 4b:38:7b:be:ed:cd:8e:53:b1:41:da:bf:72:72:45: e5:a2:b5:af:2d:83:d6:6f:37:b5:20:a3:a8:d9:cb: d2:c3:db:8b:e0:98:20:b1:93:6e:1b:e1:f9:ec:1f: 61:93:54:a0:1d:d4:7e:a0:d2:3d:94:6e:c0:88:06: 9f:fd:c3:9d:ce:46:38:a3:1c:22:bf:3c:c1:49:a8: 78:a5:8e:04:e4:f6:17:ac:73:51:a0:2e:cd:78:38: 77:eb:9d:17:cf:32:27:7e:cc:17:b5:19:a4:9d:77: 9e:27:e0:6e:35:40:45:07:04:f7:68:b5:5f:20:68: 56:df:57:14:48:e7:f0:ad:c7:83:c9:85:2b:ca:1d: 14:26:a5:41:6d:e9:d0:e4:bf:a4:56:c1:bf:cd:62: a0:57:5d:56:d4:9b:9c:de:cc:82:59:68:a7:c6:55: 42:1b:00:de:79:52:82:5c:e7:72:10:b4:50:e9:27: 4f:4a:e8:27:38:ee:3e:4d:db:68:b9:47:d5:03:e8: be:a3:48:fe:5a:28:ec:28:d2:08:91:f6:37:fb:9e: cd:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:50:8D:BB:21:08:F0:4B:1C:6F:6D:D4:38:19:28:8E:70:10:DE:E5 X509v3 Authority Key Identifier: keyid:CF:66:22:4B:CF:B8:B8:2D:EA:AB:AC:8C:4C:A2:50:37:1B:97:46:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2YiS8-4uC3qq6yMTKJQNxuXRhE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/BVCNuyEI8Escb23UOBkojnAQ3uU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/196b71-587e-4099-bdb2-b954c50fdbb0/1/z2YiS8-4uC3qq6yMTKJQNxuXRhE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.228.0/22 46.255.248.0/21 83.137.224.0/21 93.191.24.0/21 185.119.20.0/22 212.85.252.0/22 IPv6: 2a00:d300::/32 Signature Algorithm: sha256WithRSAEncryption 16:4a:d9:80:04:d1:71:f1:a8:07:4d:1f:f1:68:43:f2:fb:ec: 89:a2:b2:91:27:d1:d0:83:7a:54:c9:9b:8e:b0:ad:e1:a1:9d: e8:0c:0e:54:b5:16:2b:31:7c:08:4e:b2:a1:5d:c0:0c:4f:80: 90:98:ac:9b:0f:bc:a9:fc:70:1e:14:c4:2c:57:28:e6:2b:e2: 81:e9:32:8c:7d:4e:39:dc:fb:54:22:2f:f6:b8:3d:9c:96:b5: 3a:61:97:57:3e:86:c6:19:19:67:cb:b4:57:59:c9:cf:2d:5f: 6d:b1:86:01:f7:2e:83:da:9e:78:f7:76:0f:f8:91:4a:cd:b2: 43:28:22:f8:69:31:be:3c:b2:92:b5:97:be:f5:ac:c0:97:75: f3:ab:b3:59:2a:cf:fb:7c:72:75:c4:fd:93:17:1b:cb:d7:0d: 42:ed:f1:b1:66:b9:c2:32:a2:94:83:41:36:d1:2e:ec:37:e1: 1d:ea:74:35:0b:ac:e7:01:4e:57:0e:f7:74:61:bd:a2:32:49: 59:84:10:c5:42:14:82:78:20:55:26:44:26:12:75:62:95:a6: 91:09:24:3e:a1:f0:4c:ba:7e:f2:50:9a:3e:2c:5d:05:37:b3: eb:7a:bf:82:56:4a:be:46:63:b0:b5:74:79:8d:de:ad:6b:6b: 28:1a:bc:8f -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt3xwcJYrv4437GN6IdpMaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNjYyMjRiY2ZiOGI4MmRlYWFiYWM4YzRjYTI1MDM3MWI5 NzQ2MTEwHhcNMjYwMTAxMDQxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTUwOGRiYjIxMDhmMDRiMWM2ZjZkZDQzODE5Mjg4ZTcwMTBkZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnUjYQhUdACFhi7N5HMwmZ2ZPt/E PWr/fbKgn/mHleVp+rMnU8Iz5e+MJwVLOHu+7c2OU7FB2r9yckXlorWvLYPWbze1 IKOo2cvSw9uL4JggsZNuG+H57B9hk1SgHdR+oNI9lG7AiAaf/cOdzkY4oxwivzzB Sah4pY4E5PYXrHNRoC7NeDh3650XzzInfswXtRmknXeeJ+BuNUBFBwT3aLVfIGhW 31cUSOfwrceDyYUryh0UJqVBbenQ5L+kVsG/zWKgV11W1Juc3syCWWinxlVCGwDe eVKCXOdyELRQ6SdPSugnOO4+TdtouUfVA+i+o0j+WijsKNIIkfY3+57NYwIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFAVQjbshCPBLHG9t1DgZKI5wEN7lMB8GA1UdIwQY MBaAFM9mIkvPuLgt6qusjEyiUDcbl0YRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xOTZiNzEtNTg3ZS00MDk5LWJkYjIt Yjk1NGM1MGZkYmIwLzEvQlZDTnV5RUk4RXNjYjIzVU9Ca29qbkFRM3VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8xOTZiNzEtNTg3ZS00MDk5LWJkYjItYjk1NGM1MGZkYmIw LzEvejJZaVM4LTR1QzNxcTZ5TVRLSlFOeHVYUmhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCLQ7kAwQD Lv/4AwQDU4ngAwQDXb8YAwQCuXcUAwQC1FX8MA0EAgACMAcDBQAqANMAMA0GCSqG SIb3DQEBCwUAA4IBAQAWStmABNFx8agHTR/xaEPy++yJorKRJ9HQg3pUyZuOsK3h oZ3oDA5UtRYrMXwITrKhXcAMT4CQmKybD7yp/HAeFMQsVyjmK+KB6TKMfU453PtU Ii/2uD2clrU6YZdXPobGGRlny7RXWcnPLV9tsYYB9y6D2p5493YP+JFKzbJDKCL4 aTG+PLKStZe+9azAl3Xzq7NZKs/7fHJ1xP2TFxvL1w1C7fGxZrnCMqKUg0E20S7s N+Ed6nQ1C6znAU5XDvd0Yb2iMklZhBDFQhSCeCBVJkQmEnVilaaRCSQ+ofBMun7y UJo+LF0FN7Prer+CVkq+RmOwtXR5jd6ta2soGryP -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:51 2026 by rpki-client