This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BsLFwslW4EgiDqRJepPWAu4tvlk.roa File: BsLFwslW4EgiDqRJepPWAu4tvlk.roa (raw, json) Hash identifier: 2ZNPimeynuKHsNp2OEHVnGlBWzitpNQA6ZERqe5Om44= Subject key identifier: 06:C2:C5:C2:C9:56:E0:48:22:0E:A4:49:7A:93:D6:02:EE:2D:BE:59 Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Certificate serial: 019B7CEE6A04348DC92067EE9BE09B3F3433 Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BsLFwslW4EgiDqRJepPWAu4tvlk.roa Signing time: Fri 02 Jan 2026 04:19:18 +0000 ROA not before: Fri 02 Jan 2026 04:19:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209260 IP address blocks: 87.229.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:6a:04:34:8d:c9:20:67:ee:9b:e0:9b:3f:34:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497 Validity Not Before: Jan 2 04:19:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06c2c5c2c956e048220ea4497a93d602ee2dbe59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:02:c2:26:9e:e5:6b:e4:4e:b9:f6:70:f6:92: dc:e3:67:3a:8a:03:4c:10:57:e8:ef:39:0d:7e:16: 4c:3a:43:3c:a5:c7:dd:e5:5d:10:81:11:49:33:9f: cc:93:26:37:d2:c9:15:15:0d:64:08:02:90:36:ba: 78:58:22:d4:42:29:07:a6:bf:56:c3:db:68:1a:d6: e7:b9:24:bc:ee:2f:50:ed:59:d4:7e:f2:63:8b:b0: fd:54:eb:2e:05:c1:08:7d:52:11:39:98:59:97:22: bb:80:28:bd:7b:2d:6d:00:d2:e4:a9:92:4c:64:58: 42:9f:d6:90:a0:84:b4:99:b5:c4:b5:b6:ca:4e:e1: 4e:84:0c:18:67:14:62:72:0d:d4:64:0c:61:50:ca: 97:98:a5:fe:47:81:00:7c:80:fb:7f:51:66:e2:cd: af:f1:ff:85:b9:0e:97:3b:e2:48:fa:75:8b:02:08: 91:7e:ef:58:cc:66:76:39:d8:76:65:13:63:f4:92: 84:98:10:61:fd:e9:b8:9a:83:5b:cb:c2:bc:57:8e: a0:50:fa:c3:a7:3a:64:42:c4:d8:6d:d1:f7:6c:3a: 71:d3:fd:d3:93:c8:be:9b:1f:c3:64:35:90:9f:34: 55:d6:96:73:ea:0e:6f:e7:54:ac:e9:b2:cb:49:fa: 3f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C2:C5:C2:C9:56:E0:48:22:0E:A4:49:7A:93:D6:02:EE:2D:BE:59 X509v3 Authority Key Identifier: keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/BsLFwslW4EgiDqRJepPWAu4tvlk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.229.34.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:fa:28:e8:46:66:de:d6:60:95:fb:55:7a:c5:2e:46:24:2f: cd:cd:18:56:09:5f:89:ac:e0:9d:40:1a:bb:54:4e:e0:44:58: ea:2b:11:62:c3:f2:3a:fe:4a:6b:50:6f:47:72:00:5e:7a:91: 92:e0:41:41:7a:ae:85:58:62:9f:d0:7b:cd:0b:c5:2d:1d:41: e6:3a:b4:54:73:42:31:f1:18:b2:c2:c8:28:5d:77:6b:d6:63: 74:47:12:c2:4f:a4:80:e2:8a:7b:a2:f7:47:4d:be:ac:5b:38: 44:27:6a:49:46:8d:a5:5a:d8:40:98:5a:34:d7:0d:19:fc:32: da:cf:43:66:78:36:36:7b:86:09:41:54:cf:3b:53:93:e9:24: c3:a0:70:8c:b0:43:06:55:4b:c1:80:76:44:af:82:43:4f:a0: bc:d8:99:01:8b:df:73:80:a5:67:7a:03:74:b6:a0:96:dc:cf: 5c:42:f3:f8:e8:ef:55:db:64:1b:eb:28:ac:25:95:26:39:69: 1b:ac:57:b4:57:c7:ff:57:1c:f9:8b:8d:88:86:42:75:98:ab: 10:27:fb:08:ab:5d:87:fd:20:4b:cd:eb:18:cd:d7:25:d6:07: 2a:68:3b:2a:19:5c:a4:f4:33:37:d5:e9:20:43:61:a7:6a:f5: 0d:ee:53:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87moENI3JIGfum+CbPzQzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2 NDI0OTcwHhcNMjYwMTAyMDQxOTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmMyYzVjMmM5NTZlMDQ4MjIwZWE0NDk3YTkzZDYwMmVlMmRiZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQLCJp7la+ROufZw9pLc42c6igNM EFfo7zkNfhZMOkM8pcfd5V0QgRFJM5/MkyY30skVFQ1kCAKQNrp4WCLUQikHpr9W w9toGtbnuSS87i9Q7VnUfvJji7D9VOsuBcEIfVIROZhZlyK7gCi9ey1tANLkqZJM ZFhCn9aQoIS0mbXEtbbKTuFOhAwYZxRicg3UZAxhUMqXmKX+R4EAfID7f1Fm4s2v 8f+FuQ6XO+JI+nWLAgiRfu9YzGZ2Odh2ZRNj9JKEmBBh/em4moNby8K8V46gUPrD pzpkQsTYbdH3bDpx0/3Tk8i+mx/DZDWQnzRV1pZz6g5v51Ss6bLLSfo/ZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAbCxcLJVuBIIg6kSXqT1gLuLb5ZMB8GA1UdIwQY MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt OTU5M2E0ODhhZmNjLzEvQnNMRndzbFc0RWdpRHFSSmVwUFdBdTR0dmxrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+UiMA0G CSqGSIb3DQEBCwUAA4IBAQA/+ijoRmbe1mCV+1V6xS5GJC/NzRhWCV+JrOCdQBq7 VE7gRFjqKxFiw/I6/kprUG9HcgBeepGS4EFBeq6FWGKf0HvNC8UtHUHmOrRUc0Ix 8RiywsgoXXdr1mN0RxLCT6SA4op7ovdHTb6sWzhEJ2pJRo2lWthAmFo01w0Z/DLa z0NmeDY2e4YJQVTPO1OT6STDoHCMsEMGVUvBgHZEr4JDT6C82JkBi99zgKVnegN0 tqCW3M9cQvP46O9V22Qb6yisJZUmOWkbrFe0V8f/Vxz5i42IhkJ1mKsQJ/sIq12H /SBLzesYzdcl1gcqaDsqGVyk9DM31ekgQ2GnavUN7lN4 -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:28 2026 by rpki-client