This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/BB2LlqTkSDt6R-A2I5o2xTiWLGg.roa File: BB2LlqTkSDt6R-A2I5o2xTiWLGg.roa (raw, json) Hash identifier: 3KwFp0oSjTOqtCDN/tEUzd0T9DjV6rBZs8n/Bn3wqig= Subject key identifier: 04:1D:8B:96:A4:E4:48:3B:7A:47:E0:36:23:9A:36:C5:38:96:2C:68 Certificate issuer: /CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4 Certificate serial: 019B7BA4C2948AFF11DAB031B9128C4B13F4 Authority key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/BB2LlqTkSDt6R-A2I5o2xTiWLGg.roa Signing time: Thu 01 Jan 2026 22:19:13 +0000 ROA not before: Thu 01 Jan 2026 22:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43259 IP address blocks: 89.145.170.0/24 maxlen: 24 89.145.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c2:94:8a:ff:11:da:b0:31:b9:12:8c:4b:13:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4 Validity Not Before: Jan 1 22:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=041d8b96a4e4483b7a47e036239a36c538962c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:93:49:09:92:c2:46:4d:9f:de:6f:1c:3b:be: 6b:03:1e:6c:db:f6:41:bd:62:ad:0f:79:77:de:04: 61:7c:44:fd:0b:4d:a8:6d:3a:00:33:2a:53:c9:35: 89:ae:bf:e0:3f:96:3f:65:8c:52:9c:56:30:d3:25: ac:57:26:97:8a:38:20:63:e6:7f:f2:fb:11:cf:1f: a1:4d:7e:4b:ed:c8:76:dc:dd:ca:fa:66:95:e9:2d: f8:39:6a:2c:05:87:59:68:85:27:41:83:63:86:78: 1b:47:2d:9a:de:b7:23:68:6f:58:74:ec:9d:4e:4e: 89:8e:4d:90:8f:02:d5:60:26:5a:ab:22:43:27:c7: c7:20:7d:bb:4f:a2:9b:70:6f:67:75:f4:4b:29:45: df:43:c0:1f:cf:1d:2a:91:ff:5d:4c:c2:e3:66:ab: 63:ea:6e:7a:f0:38:75:e0:8b:c3:9c:e5:47:c8:09: da:2d:a6:53:85:09:30:69:f1:07:46:60:3c:3c:a5: 25:4c:32:42:06:b0:5a:43:b6:61:d4:87:21:fc:f2: ec:4e:3d:ea:64:4d:b4:32:85:0b:46:64:0e:bb:30: 10:51:c7:83:0b:f1:59:18:c2:cd:75:10:1e:84:90: 5d:ef:32:d6:91:1d:7f:7d:82:84:b1:60:64:52:d4: 04:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1D:8B:96:A4:E4:48:3B:7A:47:E0:36:23:9A:36:C5:38:96:2C:68 X509v3 Authority Key Identifier: keyid:C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/BB2LlqTkSDt6R-A2I5o2xTiWLGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.145.170.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:57:45:3a:84:ad:ad:08:3d:85:43:70:69:58:49:f7:ea:34: 18:e6:01:f6:e8:b7:d3:73:6a:fd:49:80:ba:c5:4a:74:4f:ad: 8d:a6:83:da:e2:3e:47:a6:49:d0:1c:b3:a8:5c:29:8e:c8:99: cc:6b:12:67:52:f8:85:63:da:db:fb:79:d8:83:ed:ab:67:4f: 68:f7:dd:38:84:3b:aa:d7:0d:75:24:b3:dc:d7:e8:05:4b:78: 9f:9f:f2:ac:78:ab:62:44:3e:70:f9:35:4b:e8:14:7b:d4:80: 88:4c:6a:cb:20:ad:fd:fc:83:19:f5:00:ca:46:53:6b:47:86: 52:58:8a:c8:b0:5c:fd:59:11:39:33:3a:16:ae:7c:03:db:a0: a2:97:87:c3:1d:2e:0f:e7:71:71:cf:06:ac:b4:27:3d:47:61: b0:90:f9:04:d2:c9:70:4c:70:b5:75:2b:a5:d1:1b:5a:a4:91: 97:53:10:52:cc:d1:1a:47:94:55:fc:d7:12:7b:b5:0b:53:85: c7:20:14:10:21:f3:1e:f1:97:7f:c2:a4:ef:2c:2e:0b:46:69: e7:1a:80:ba:77:c0:a6:56:ba:e9:50:05:bb:34:68:09:19:c4: c4:4c:af:89:24:bf:0b:bc:b2:60:90:ee:37:36:7f:58:51:76: cc:cd:dc:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMKUiv8R2rAxuRKMSxP0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMDQyZjVjNDc4OWM5N2M0ZjkyZWYyMTc3ZTdiODkzOGM4 ZGQ1YzQwHhcNMjYwMTAxMjIxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDFkOGI5NmE0ZTQ0ODNiN2E0N2UwMzYyMzlhMzZjNTM4OTYyYzY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZNJCZLCRk2f3m8cO75rAx5s2/ZB vWKtD3l33gRhfET9C02obToAMypTyTWJrr/gP5Y/ZYxSnFYw0yWsVyaXijggY+Z/ 8vsRzx+hTX5L7ch23N3K+maV6S34OWosBYdZaIUnQYNjhngbRy2a3rcjaG9YdOyd Tk6Jjk2QjwLVYCZaqyJDJ8fHIH27T6KbcG9ndfRLKUXfQ8Afzx0qkf9dTMLjZqtj 6m568Dh14IvDnOVHyAnaLaZThQkwafEHRmA8PKUlTDJCBrBaQ7Zh1Ich/PLsTj3q ZE20MoULRmQOuzAQUceDC/FZGMLNdRAehJBd7zLWkR1/fYKEsWBkUtQEXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAQdi5ak5Eg7ekfgNiOaNsU4lixoMB8GA1UdIwQY MBaAFMMEL1xHicl8T5LvIXfnuJOMjdXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3dRdlhFZUp5WHhQa3U4aGQtZTRrNHlOMWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85ZTFkNWItZGU2MS00ZDlhLTg0YmQt MDI3OTJmOWNmMDdiLzEvQkIyTGxxVGtTRHQ2Ui1BMkk1bzJ4VGlXTEdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy85ZTFkNWItZGU2MS00ZDlhLTg0YmQtMDI3OTJmOWNmMDdi LzEvd3dRdlhFZUp5WHhQa3U4aGQtZTRrNHlOMWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBWZGqMA0G CSqGSIb3DQEBCwUAA4IBAQB/V0U6hK2tCD2FQ3BpWEn36jQY5gH26LfTc2r9SYC6 xUp0T62NpoPa4j5HpknQHLOoXCmOyJnMaxJnUviFY9rb+3nYg+2rZ09o9904hDuq 1w11JLPc1+gFS3ifn/KseKtiRD5w+TVL6BR71ICITGrLIK39/IMZ9QDKRlNrR4ZS WIrIsFz9WRE5MzoWrnwD26Cil4fDHS4P53FxzwastCc9R2GwkPkE0slwTHC1dSul 0RtapJGXUxBSzNEaR5RV/NcSe7ULU4XHIBQQIfMe8Zd/wqTvLC4LRmnnGoC6d8Cm VrrpUAW7NGgJGcTETK+JJL8LvLJgkO43Nn9YUXbMzdxU -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:35 2026 by rpki-client