This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/BsVMQCwzb6fLZN9IOEUj8HBMBlA.roa File: BsVMQCwzb6fLZN9IOEUj8HBMBlA.roa (raw, json) Hash identifier: gKYj8cm9ixiRan4+/ZNTVTfJExcSD4j/qJmLYu6r0l0= Subject key identifier: 06:C5:4C:40:2C:33:6F:A7:CB:64:DF:48:38:45:23:F0:70:4C:06:50 Certificate issuer: /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Certificate serial: 019B7A5B97FF014ABC03ECF22DD2FF65ABF1 Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/BsVMQCwzb6fLZN9IOEUj8HBMBlA.roa Signing time: Thu 01 Jan 2026 16:19:41 +0000 ROA not before: Thu 01 Jan 2026 16:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199927 IP address blocks: 193.247.199.0/24 maxlen: 24 2a05:b2c4::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:97:ff:01:4a:bc:03:ec:f2:2d:d2:ff:65:ab:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262 Validity Not Before: Jan 1 16:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06c54c402c336fa7cb64df48384523f0704c0650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:71:0c:37:e2:56:49:00:3d:62:09:0a:01: 1e:32:86:ff:d6:ea:32:46:43:29:2d:94:37:f6:38: a7:4f:f6:5b:5d:43:c9:d5:70:40:44:a2:a4:83:b3: 98:b9:3f:f0:1a:6d:14:66:43:4f:20:90:56:ee:6e: ac:29:81:60:b0:b3:7e:b9:cf:63:a4:88:d0:5a:74: 55:7a:7b:48:46:30:52:06:18:e6:c2:bf:d8:d4:ef: 40:c2:ff:91:06:5e:80:e0:df:96:51:83:40:ab:f4: e3:11:16:e9:58:2e:51:cc:b5:82:b0:c1:95:f7:ea: f2:18:c8:24:9a:c0:7a:55:00:97:48:2c:a7:2a:a0: e3:52:40:29:ad:48:79:db:f0:2d:28:7f:c2:75:6e: e3:63:b3:11:34:52:1c:70:6f:16:fd:fd:ad:a1:f5: 0f:a1:af:16:83:60:3f:8b:ce:03:8d:f8:ca:3a:bb: 94:25:d4:bd:ef:62:bd:65:a1:b0:b8:c6:67:7f:aa: 46:6a:9f:ff:14:33:09:45:bc:ff:6f:4d:30:36:b9: 69:b9:75:e7:17:ac:66:26:71:e1:ce:bd:8e:66:0c: bc:4f:03:d1:b9:e0:49:7f:28:4c:46:00:23:68:09: 54:6f:01:60:e5:4d:9b:4e:48:0e:e0:1c:40:d7:2d: 9d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C5:4C:40:2C:33:6F:A7:CB:64:DF:48:38:45:23:F0:70:4C:06:50 X509v3 Authority Key Identifier: keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/BsVMQCwzb6fLZN9IOEUj8HBMBlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.247.199.0/24 IPv6: 2a05:b2c4::/31 Signature Algorithm: sha256WithRSAEncryption 35:7d:ca:69:5e:ef:c1:e6:be:47:bd:d9:35:34:31:13:b9:1c: 91:01:e7:9d:bb:46:27:fe:d2:86:03:46:77:9c:ba:2e:cf:18: 2a:c6:ab:10:87:c6:38:94:cc:00:96:b4:5b:b9:8d:15:3e:1d: 43:58:d8:44:70:95:9f:5f:8f:85:73:25:3e:37:68:93:41:a3: 26:59:cd:af:c4:ed:20:a7:59:32:57:a4:16:1c:a6:72:cd:c0: 91:cc:0a:68:ce:6d:4d:21:89:2d:b6:a6:f4:e7:69:d3:57:17: 63:b6:07:4a:d9:73:db:f0:43:3f:44:ed:fb:36:f7:7a:f9:59: 96:a8:f8:7f:0e:71:39:9b:27:18:86:3f:18:d9:d2:07:98:c0: 22:3e:7a:04:5d:d1:b0:11:3c:8d:84:24:af:c2:32:26:18:db: d2:24:1c:90:e1:6a:eb:5f:95:47:41:a8:64:7a:05:f7:45:6f: 37:66:e1:c8:cf:f2:6f:8f:ba:6f:a6:4b:c6:a6:f7:d8:51:51: c1:45:96:18:36:9c:60:df:e3:ef:ae:7f:11:15:49:5d:43:b8: 48:03:de:59:70:a9:9f:e2:f4:d1:5b:65:7d:c2:68:3f:5f:67: 80:b8:6e:05:54:a8:db:f3:76:34:ba:4a:c6:fc:f8:4c:29:2a: 3f:37:0d:73 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W5f/AUq8A+zyLdL/ZavxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNWNhZjI2MmZkYmZjYzVmZjMwZTI4YTUxMDQ2NDZlMjdh ODkyNjIwHhcNMjYwMTAxMTYxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmM1NGM0MDJjMzM2ZmE3Y2I2NGRmNDgzODQ1MjNmMDcwNGMwNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscNxDDfiVkkAPWIJCgEeMob/1uoy RkMpLZQ39jinT/ZbXUPJ1XBARKKkg7OYuT/wGm0UZkNPIJBW7m6sKYFgsLN+uc9j pIjQWnRVentIRjBSBhjmwr/Y1O9Awv+RBl6A4N+WUYNAq/TjERbpWC5RzLWCsMGV 9+ryGMgkmsB6VQCXSCynKqDjUkAprUh52/AtKH/CdW7jY7MRNFIccG8W/f2tofUP oa8Wg2A/i84DjfjKOruUJdS972K9ZaGwuMZnf6pGap//FDMJRbz/b00wNrlpuXXn F6xmJnHhzr2OZgy8TwPRueBJfyhMRgAjaAlUbwFg5U2bTkgO4BxA1y2d4QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAbFTEAsM2+ny2TfSDhFI/BwTAZQMB8GA1UdIwQY MBaAFAtcryYv2/zF/zDiilEEZG4nqJJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEt ZGYxZTk1ZDdlZGQ5LzEvQnNWTVFDd3piNmZMWk45SU9FVWo4SEJNQmxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mNGI4ZTktNjg2ZC00MWJlLTk4OTEtZGYxZTk1ZDdlZGQ5 LzEvQzF5dkppX2JfTVhfTU9LS1VRUmtiaWVva21JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwffHMA0E AgACMAcDBQEqBbLEMA0GCSqGSIb3DQEBCwUAA4IBAQA1fcppXu/B5r5Hvdk1NDET uRyRAeedu0Yn/tKGA0Z3nLouzxgqxqsQh8Y4lMwAlrRbuY0VPh1DWNhEcJWfX4+F cyU+N2iTQaMmWc2vxO0gp1kyV6QWHKZyzcCRzApozm1NIYkttqb052nTVxdjtgdK 2XPb8EM/RO37Nvd6+VmWqPh/DnE5mycYhj8Y2dIHmMAiPnoEXdGwETyNhCSvwjIm GNvSJByQ4WrrX5VHQahkegX3RW83ZuHIz/Jvj7pvpkvGpvfYUVHBRZYYNpxg3+Pv rn8RFUldQ7hIA95ZcKmf4vTRW2V9wmg/X2eAuG4FVKjb83Y0ukrG/PhMKSo/Nw1z -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:57 2026 by rpki-client