This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BjjtOig6ynpAAc4mV_fdwg2HKm4.roa File: BjjtOig6ynpAAc4mV_fdwg2HKm4.roa (raw, json) Hash identifier: lxfSbH6tKYQZNv2rB4QYcLiqCsf8op/gnDb+eevzMiE= Subject key identifier: 06:38:ED:3A:28:3A:CA:7A:40:01:CE:26:57:F7:DD:C2:0D:87:2A:6E Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE6D00FD3AD2437C158F089EE2D261 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BjjtOig6ynpAAc4mV_fdwg2HKm4.roa Signing time: Fri 02 Jan 2026 04:19:18 +0000 ROA not before: Fri 02 Jan 2026 04:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213643 IP address blocks: 84.21.11.0/24 maxlen: 24 84.21.15.0/24 maxlen: 24 217.113.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6d:00:fd:3a:d2:43:7c:15:8f:08:9e:e2:d2:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0638ed3a283aca7a4001ce2657f7ddc20d872a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:69:36:c6:3b:5a:6b:80:6f:f8:8a:a2:53: 60:12:74:cc:38:9d:de:13:0f:9d:fa:20:79:6d:a0: ac:99:96:0d:aa:0d:86:50:70:8d:8f:21:57:f5:13: 36:35:7a:ee:18:14:68:65:a4:16:54:91:50:d6:f8: 57:f3:15:0e:25:3e:cf:f8:6c:34:b2:56:9b:a3:49: 50:9b:3e:1d:b5:47:a9:26:2d:da:ab:e8:f6:3c:9b: b6:1d:c2:8c:9d:d0:a3:3f:37:2b:7b:81:dc:b7:63: 2b:54:4f:23:bc:d6:6e:9f:ae:80:d9:82:8a:12:99: 97:af:77:30:57:a6:15:97:e4:90:80:7a:19:a7:0c: 4e:98:33:48:44:fd:26:53:c9:80:1f:19:71:7c:e7: b4:26:c4:02:96:fe:0e:43:f2:7c:83:2c:5f:7c:0f: aa:f1:4d:90:95:ce:b5:bf:d6:4a:d7:6a:a5:63:b8: 61:fe:af:16:9a:12:e4:d8:e8:86:44:df:86:2e:e0: cc:b5:1a:db:c4:76:e6:f1:f6:52:ac:69:94:56:51: f3:80:53:7a:01:d2:25:7a:13:fe:a5:60:0a:35:ae: fa:3d:de:47:33:0b:e6:ee:8d:08:e8:e6:bf:42:a4: 2c:f0:af:40:12:b4:d4:4c:2b:24:70:76:ae:82:1d: 64:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:38:ED:3A:28:3A:CA:7A:40:01:CE:26:57:F7:DD:C2:0D:87:2A:6E X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BjjtOig6ynpAAc4mV_fdwg2HKm4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.11.0/24 84.21.15.0/24 217.113.53.0/24 Signature Algorithm: sha256WithRSAEncryption 52:94:d1:06:99:78:fa:42:2a:8d:f7:42:a3:e5:3f:a4:a7:c7: 4c:77:d7:31:44:6a:f1:49:f9:76:f0:40:c8:cf:27:ff:5d:a1: 74:aa:fc:22:cd:cd:30:31:4e:3f:fe:34:aa:a5:7a:bb:a5:e7: 7f:ae:04:8b:f2:0b:8b:ed:f4:6c:f9:af:2f:5e:bb:df:6d:5b: 3b:9a:84:3e:25:ce:e2:54:90:3c:32:26:9a:9a:6f:cb:8f:2e: 1b:45:5f:47:ee:0e:fd:e5:47:c5:f3:a6:d9:12:b2:ad:f9:72: f8:4b:7e:e6:6a:7e:d6:13:14:aa:16:5e:85:f8:7f:48:e2:4d: 1a:f5:49:f4:9b:7d:7b:33:fe:cc:34:af:c1:c4:8b:d9:85:8f: 2c:be:68:ea:9e:64:ed:17:e7:20:a2:e3:56:6f:41:a7:49:82: d2:a3:83:64:9a:28:53:c6:a8:1a:c0:6e:96:c5:a8:75:a0:6e: cb:51:9c:27:eb:7f:66:4c:24:8b:38:65:97:26:06:f8:fd:12: fb:7e:b1:53:92:cd:e1:68:99:3e:b1:d7:16:3e:93:f2:14:e9: c1:b3:70:3f:2f:01:0f:ad:d7:4a:c2:f3:14:86:51:f7:6f:f2: 0e:fe:55:37:23:28:f7:2c:f5:c8:55:ad:c1:63:19:c9:23:4c: 62:b3:eb:80 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87m0A/TrSQ3wVjwie4tJhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjM4ZWQzYTI4M2FjYTdhNDAwMWNlMjY1N2Y3ZGRjMjBkODcyYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4FpNsY7WmuAb/iKolNgEnTMOJ3e Ew+d+iB5baCsmZYNqg2GUHCNjyFX9RM2NXruGBRoZaQWVJFQ1vhX8xUOJT7P+Gw0 slabo0lQmz4dtUepJi3aq+j2PJu2HcKMndCjPzcre4Hct2MrVE8jvNZun66A2YKK EpmXr3cwV6YVl+SQgHoZpwxOmDNIRP0mU8mAHxlxfOe0JsQClv4OQ/J8gyxffA+q 8U2Qlc61v9ZK12qlY7hh/q8WmhLk2OiGRN+GLuDMtRrbxHbm8fZSrGmUVlHzgFN6 AdIlehP+pWAKNa76Pd5HMwvm7o0I6Oa/QqQs8K9AErTUTCskcHaugh1kIwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAY47TooOsp6QAHOJlf33cINhypuMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvQmpqdE9pZzZ5bnBBQWM0bVZfZmR3ZzJIS200LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAVBULAwQA VBUPAwQA2XE1MA0GCSqGSIb3DQEBCwUAA4IBAQBSlNEGmXj6QiqN90Kj5T+kp8dM d9cxRGrxSfl28EDIzyf/XaF0qvwizc0wMU4//jSqpXq7ped/rgSL8guL7fRs+a8v XrvfbVs7moQ+Jc7iVJA8Miaamm/Ljy4bRV9H7g795UfF86bZErKt+XL4S37man7W ExSqFl6F+H9I4k0a9Un0m317M/7MNK/BxIvZhY8svmjqnmTtF+cgouNWb0GnSYLS o4NkmihTxqgawG6Wxah1oG7LUZwn639mTCSLOGWXJgb4/RL7frFTks3haJk+sdcW PpPyFOnBs3A/LwEPrddKwvMUhlH3b/IO/lU3Iyj3LPXIVa3BYxnJI0xis+uA -----END CERTIFICATE-----Generated at Sun Jan 25 10:08:40 2026 by rpki-client