This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BPSS-_DIq2EjKSZHb_Ava8TWKfI.roa File: BPSS-_DIq2EjKSZHb_Ava8TWKfI.roa (raw, json) Hash identifier: 5Qzc62XXR6UrYzM+oHUwTv+liJ2NtP7PLH4GY9K86O8= Subject key identifier: 04:F4:92:FB:F0:C8:AB:61:23:29:26:47:6F:F0:2F:6B:C4:D6:29:F2 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F8490107D0BB91414445ABBC3F0D59E Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BPSS-_DIq2EjKSZHb_Ava8TWKfI.roa Signing time: Fri 02 Jan 2026 16:22:32 +0000 ROA not before: Fri 02 Jan 2026 16:22:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16227 IP address blocks: 93.171.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:90:10:7d:0b:b9:14:14:44:5a:bb:c3:f0:d5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04f492fbf0c8ab61232926476ff02f6bc4d629f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cb:b2:1c:cb:20:8a:76:65:55:ec:ac:bc:d3: 92:71:6a:52:63:01:1d:d3:76:07:4b:93:b5:4e:72: 99:bc:59:c1:c0:76:a8:3a:73:a3:7e:30:bc:2b:3c: d0:9c:91:d3:5b:c8:ae:e7:ed:1c:6a:fb:29:39:4f: 75:f3:bd:d1:d9:c4:e7:fe:46:87:94:8f:68:04:e0: 78:37:be:04:9a:4a:d3:a3:a2:ea:55:30:ec:d4:12: 13:54:7a:f2:ba:2f:a4:98:25:1d:ee:e0:0b:38:3a: 6d:40:ef:79:9f:ed:e8:2b:ab:26:e6:07:8e:ff:3c: e6:9c:80:f2:2b:34:8c:32:87:11:ea:84:b2:7e:dd: 95:3a:a7:56:85:66:07:55:79:bc:6b:5b:d3:41:6b: 09:2f:75:e8:c8:05:51:2b:db:d2:73:dd:84:d1:a3: 94:82:cb:84:83:c7:58:e4:64:ac:7a:a0:23:09:6f: 16:d1:87:cd:09:d0:dd:6c:03:93:3f:4f:63:64:89: 56:9e:11:c4:5c:4b:e2:9c:21:6b:16:11:af:32:56: 48:15:a1:b8:a1:86:a5:a2:f6:6e:95:bb:cf:84:4a: 92:a6:db:74:5b:e2:08:83:85:33:3a:76:9b:11:aa: f7:57:69:c1:49:58:63:24:68:d6:47:52:6f:5a:6b: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:92:FB:F0:C8:AB:61:23:29:26:47:6F:F0:2F:6B:C4:D6:29:F2 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/BPSS-_DIq2EjKSZHb_Ava8TWKfI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.171.244.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:02:9d:75:2c:0a:3c:41:89:d4:16:99:71:1b:33:f7:0c:47: 95:53:5f:da:62:7d:1f:e5:1c:53:4d:eb:03:2b:1f:ac:73:52: a7:8a:21:d8:32:a9:19:d2:2a:39:f1:e6:33:b4:32:4b:50:f8: 1d:2c:33:52:2f:b0:4f:bc:26:f4:19:15:05:d8:f7:e4:a1:fb: 86:91:f4:3f:df:c9:36:4b:00:09:1a:9a:68:2a:3d:24:41:27: d6:c4:9e:d0:6c:f3:ab:a5:02:f3:fb:93:2a:cd:6d:03:bc:e3: 57:f0:b5:ea:66:b0:29:e5:28:ed:0e:c1:ee:42:84:c8:8e:8e: 43:72:f2:b6:2e:d4:a6:19:90:1e:cd:f7:f5:fa:42:1f:c7:da: 15:b1:cc:da:73:6e:a9:3d:bd:bc:ac:ed:fc:57:f4:47:ef:e1: 52:86:2f:9b:d5:ad:db:ee:d2:ca:01:4f:61:9b:d6:b0:4f:32: 05:e5:cb:8d:f3:8f:5d:f2:19:3b:8f:5b:a2:e5:ef:91:33:e3: be:87:89:16:3c:ae:05:ad:57:af:bf:6a:f2:42:04:20:29:45: f0:b2:5a:80:28:8e:b0:87:90:7c:cc:3b:9e:68:d3:86:46:42: 03:9b:a4:63:69:1c:cd:f7:84:58:c7:3a:e7:8b:9b:04:ac:b8: 5d:08:73:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hJAQfQu5FBREWrvD8NWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGY0OTJmYmYwYzhhYjYxMjMyOTI2NDc2ZmYwMmY2YmM0ZDYyOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8uyHMsginZlVeysvNOScWpSYwEd 03YHS5O1TnKZvFnBwHaoOnOjfjC8KzzQnJHTW8iu5+0cavspOU91873R2cTn/kaH lI9oBOB4N74EmkrTo6LqVTDs1BITVHryui+kmCUd7uALODptQO95n+3oK6sm5geO /zzmnIDyKzSMMocR6oSyft2VOqdWhWYHVXm8a1vTQWsJL3XoyAVRK9vSc92E0aOU gsuEg8dY5GSseqAjCW8W0YfNCdDdbAOTP09jZIlWnhHEXEvinCFrFhGvMlZIFaG4 oYalovZulbvPhEqSptt0W+IIg4UzOnabEar3V2nBSVhjJGjWR1JvWmtKrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAT0kvvwyKthIykmR2/wL2vE1inyMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvQlBTUy1fRElxMkVqS1NaSGJfQXZhOFRXS2ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXav0MA0G CSqGSIb3DQEBCwUAA4IBAQAcAp11LAo8QYnUFplxGzP3DEeVU1/aYn0f5RxTTesD Kx+sc1KniiHYMqkZ0io58eYztDJLUPgdLDNSL7BPvCb0GRUF2PfkofuGkfQ/38k2 SwAJGppoKj0kQSfWxJ7QbPOrpQLz+5MqzW0DvONX8LXqZrAp5SjtDsHuQoTIjo5D cvK2LtSmGZAezff1+kIfx9oVsczac26pPb28rO38V/RH7+FShi+b1a3b7tLKAU9h m9awTzIF5cuN849d8hk7j1ui5e+RM+O+h4kWPK4FrVevv2ryQgQgKUXwslqAKI6w h5B8zDueaNOGRkIDm6RjaRzN94RYxzrni5sErLhdCHO4 -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:14 2026 by rpki-client