This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa File: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (raw, json) Hash identifier: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k= Subject key identifier: 6E:7A:5B:3D:7F:DC:B6:DD:24:AA:4C:31:EA:E9:15:FA:3E:16:4C:63 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019B7834F5E6AECED25C855C1B58BEF0A832 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa Signing time: Thu 01 Jan 2026 06:18:14 +0000 ROA not before: Thu 01 Jan 2026 06:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15960 IP address blocks: 93.94.80.0/21 maxlen: 24 185.215.100.0/22 maxlen: 24 217.64.160.0/20 maxlen: 24 2a00:15e0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:f5:e6:ae:ce:d2:5c:85:5c:1b:58:be:f0:a8:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jan 1 06:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e7a5b3d7fdcb6dd24aa4c31eae915fa3e164c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:5e:21:3a:e5:61:5d:73:ab:23:2c:19:85: 81:92:05:73:f2:fd:8e:84:dd:ce:6f:18:b7:66:c0: f6:ea:0c:d5:1d:b9:98:aa:29:42:ed:73:93:f0:ec: ec:92:0d:3e:b0:0a:ba:f0:e5:5e:09:e6:3a:ab:bd: f0:58:b3:cd:ee:39:6a:64:c4:8d:86:2b:f5:96:bd: 8d:7c:78:1a:e5:41:0c:7a:b9:40:f7:3b:d4:ea:d6: 8f:af:74:66:6e:1e:21:d5:c4:7b:d1:62:1c:bb:7d: ba:1a:ed:41:df:fb:3a:f3:2d:27:a1:bc:08:cf:e5: b1:06:33:c3:a6:3a:d9:e3:90:75:21:ac:2f:22:f7: 2b:d1:ab:bd:3a:d8:88:e4:a4:45:e7:61:d9:17:44: be:2c:df:96:78:d9:5f:0d:48:15:a8:37:6d:df:21: f3:b3:d7:f4:46:a3:9f:79:93:c2:18:f0:a3:f8:fc: e9:3d:19:a9:2a:68:b0:6b:c6:86:68:a5:27:95:c6: 67:41:9f:94:fc:a5:d5:02:24:1b:c5:83:a7:66:62: 80:71:8d:f1:6a:21:8b:2e:db:48:9d:6e:53:a4:cc: 0f:26:d5:4d:29:d9:f1:b4:18:43:57:0f:10:af:99: a9:bb:3c:a7:2a:36:6f:f5:91:d2:15:10:25:8d:fe: 1b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:7A:5B:3D:7F:DC:B6:DD:24:AA:4C:31:EA:E9:15:FA:3E:16:4C:63 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.94.80.0/21 185.215.100.0/22 217.64.160.0/20 IPv6: 2a00:15e0::/29 Signature Algorithm: sha256WithRSAEncryption 62:17:0d:83:78:2e:ca:13:12:ca:fe:b5:85:3e:5c:a8:21:d0: 43:be:2a:d7:11:94:be:c4:85:3d:74:2a:55:ac:44:dc:f6:b0: 03:86:53:87:5a:d9:0e:2f:b1:61:65:e9:78:ec:65:09:62:a2: 80:4a:2a:bc:01:cc:16:a8:66:4c:b0:bf:9a:58:5c:18:9e:27: 06:5c:10:d3:26:f0:74:d0:2a:e9:95:f7:01:49:8d:6f:bf:6d: cb:c4:90:12:61:93:ae:54:99:10:6f:5b:e7:5c:9c:ac:6f:f3: 46:f1:83:50:b3:0c:7e:20:38:1f:d5:72:41:4e:98:d9:c0:63: ea:5d:67:db:23:e3:25:f1:58:5f:e4:28:a7:3c:44:e9:32:4a: 40:85:ee:93:1b:4b:54:b9:51:da:01:15:2f:b1:34:4a:2d:0f: e5:f8:59:68:72:fd:1a:d5:bb:51:b1:ec:20:1b:4a:d8:28:0e: 26:82:c6:1f:5c:dc:69:81:e5:eb:37:8e:ed:1a:d2:e8:73:89: 92:25:7f:2e:26:19:ea:cf:22:da:ea:1c:69:46:0d:89:44:70: 67:ab:66:12:8d:fb:fe:6d:91:dc:c0:12:04:7b:ca:88:68:f0: bd:1c:63:ff:e9:3d:7f:60:77:34:d9:40:dd:3d:6b:d5:7c:9e: 0f:4b:4a:28 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt4NPXmrs7SXIVcG1i+8KgyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwMTAxMDYxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTdhNWIzZDdmZGNiNmRkMjRhYTRjMzFlYWU5MTVmYTNlMTY0YzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgZeITrlYV1zqyMsGYWBkgVz8v2O hN3Obxi3ZsD26gzVHbmYqilC7XOT8Ozskg0+sAq68OVeCeY6q73wWLPN7jlqZMSN hiv1lr2NfHga5UEMerlA9zvU6taPr3Rmbh4h1cR70WIcu326Gu1B3/s68y0nobwI z+WxBjPDpjrZ45B1IawvIvcr0au9OtiI5KRF52HZF0S+LN+WeNlfDUgVqDdt3yHz s9f0RqOfeZPCGPCj+PzpPRmpKmiwa8aGaKUnlcZnQZ+U/KXVAiQbxYOnZmKAcY3x aiGLLttInW5TpMwPJtVNKdnxtBhDVw8Qr5mpuzynKjZv9ZHSFRAljf4bKQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFG56Wz1/3LbdJKpMMerpFfo+FkxjMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvYm5wYlBYX2N0dDBrcWt3eDZ1a1YtajRXVEdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXV5QAwQC uddkAwQE2UCgMA0EAgACMAcDBQMqABXgMA0GCSqGSIb3DQEBCwUAA4IBAQBiFw2D eC7KExLK/rWFPlyoIdBDvirXEZS+xIU9dCpVrETc9rADhlOHWtkOL7FhZel47GUJ YqKASiq8AcwWqGZMsL+aWFwYnicGXBDTJvB00CrplfcBSY1vv23LxJASYZOuVJkQ b1vnXJysb/NG8YNQswx+IDgf1XJBTpjZwGPqXWfbI+Ml8Vhf5CinPETpMkpAhe6T G0tUuVHaARUvsTRKLQ/l+Flocv0a1btRsewgG0rYKA4mgsYfXNxpgeXrN47tGtLo c4mSJX8uJhnqzyLa6hxpRg2JRHBnq2YSjfv+bZHcwBIEe8qIaPC9HGP/6T1/YHc0 2UDdPWvVfJ4PS0oo -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:08 2026 by rpki-client