This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/bvnYLjO4XnZpQwlp4A4LeramkVU.roa File: bvnYLjO4XnZpQwlp4A4LeramkVU.roa (raw, json) Hash identifier: m98GrPDwOLEJ7ds6AJ3l5MrgQAx4G25F8NpI1kHjfRY= Subject key identifier: 6E:F9:D8:2E:33:B8:5E:76:69:43:09:69:E0:0E:0B:7A:B6:A6:91:55 Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2 Certificate serial: 019B7EA49847A2F7649007EF3B04F2D02E99 Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/bvnYLjO4XnZpQwlp4A4LeramkVU.roa Signing time: Fri 02 Jan 2026 12:17:54 +0000 ROA not before: Fri 02 Jan 2026 12:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41001 IP address blocks: 86.105.118.0/24 maxlen: 24 89.45.232.0/22 maxlen: 22 89.47.184.0/23 maxlen: 23 89.47.188.0/22 maxlen: 22 2001:6b0:5a::/48 maxlen: 48 2001:6b0:7d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:98:47:a2:f7:64:90:07:ef:3b:04:f2:d0:2e:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2 Validity Not Before: Jan 2 12:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ef9d82e33b85e7669430969e00e0b7ab6a69155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:41:eb:dd:95:66:62:46:7b:bf:87:d8:4d:20: 71:63:4b:28:6b:ee:2a:ce:d7:ae:3f:7a:fa:27:5c: 0d:6f:94:11:70:ec:bb:2a:29:10:fa:77:4c:61:7d: 61:65:fa:8f:0d:30:8b:0e:b7:c6:7c:96:6f:7d:22: 44:ba:34:a9:3f:ec:8e:6e:f9:d1:33:4e:bd:eb:cf: 41:2b:9f:3d:1d:7d:8b:19:5b:51:c5:71:7f:6b:09: 48:2b:eb:9d:63:54:c1:ee:88:55:50:11:58:83:15: 74:b2:2c:ec:54:ac:ea:c2:18:f9:e5:8f:61:a6:c1: 6b:23:c7:f5:d9:fa:9b:ba:3c:bd:d8:fc:6f:3f:26: 86:d4:99:b3:9d:c7:4b:07:f1:95:2b:89:c9:63:e6: 71:25:ca:0f:69:f5:2b:30:e9:c2:f9:2e:83:85:5a: ba:24:ac:59:ff:ad:68:21:e5:84:24:0e:b7:af:00: db:a2:e9:10:24:0e:12:3d:69:fd:b7:3e:f2:1c:61: 68:ea:1f:ac:a9:fb:f9:c2:f9:97:9d:a8:27:93:22: 7a:5a:71:f1:8b:ba:bd:e1:4f:3e:43:e8:65:cf:77: 6e:38:dc:91:4b:10:03:51:d3:51:0e:9b:3e:09:14: 4b:86:b4:d9:cb:54:a9:7a:91:61:2a:ce:d2:60:82: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F9:D8:2E:33:B8:5E:76:69:43:09:69:E0:0E:0B:7A:B6:A6:91:55 X509v3 Authority Key Identifier: keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/bvnYLjO4XnZpQwlp4A4LeramkVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 86.105.118.0/24 89.45.232.0/22 89.47.184.0/23 89.47.188.0/22 IPv6: 2001:6b0:5a::/48 2001:6b0:7d::/48 Signature Algorithm: sha256WithRSAEncryption 98:c1:52:4d:ba:d7:1a:96:a7:7f:9d:20:55:b0:be:6f:87:08: c3:e7:e4:43:50:38:45:d5:e8:15:8a:cd:a9:5f:15:34:05:29: 82:59:9a:33:a0:0c:25:cf:5f:2c:04:1e:e7:f3:e6:91:90:88: 3a:99:ab:2b:8f:7b:be:44:f6:f4:41:c1:49:28:e9:b2:a4:e7: 13:df:73:84:11:de:70:63:38:3f:d0:94:3d:c4:ca:74:c9:c2: f5:b2:27:54:7d:fc:02:73:59:79:f4:0d:f7:57:f4:0c:62:b3: 8e:cc:ca:45:3e:ef:44:8c:63:d3:ee:6a:6b:57:79:52:25:50: b7:ee:72:b9:b2:03:e1:11:4d:c1:a7:19:d8:f7:da:5a:d1:48: b5:58:86:4d:b7:92:55:d3:99:27:90:6b:52:c4:5c:a7:95:b5: b2:4d:1b:9f:67:e7:0a:ee:da:3d:72:00:49:fe:de:5b:fe:c0: 1c:b7:4c:85:18:10:05:f2:df:47:86:63:2c:c6:3e:62:13:57: 53:7c:a8:e0:2a:e0:e8:f4:d4:5b:9c:eb:f6:cc:81:b0:b8:3d: 14:c7:7c:16:99:39:cb:18:7a:fa:12:f8:c0:ae:28:a3:8c:51: 5c:52:2c:cd:1d:8a:f6:bc:4e:f5:e4:48:42:2e:4e:de:ed:a5: 75:fd:ef:5b -----BEGIN CERTIFICATE----- MIIFKTCCBBGgAwIBAgISAZt+pJhHovdkkAfvOwTy0C6ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5 NGM1ZjIwHhcNMjYwMTAyMTIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWY5ZDgyZTMzYjg1ZTc2Njk0MzA5NjllMDBlMGI3YWI2YTY5MTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUHr3ZVmYkZ7v4fYTSBxY0soa+4q zteuP3r6J1wNb5QRcOy7KikQ+ndMYX1hZfqPDTCLDrfGfJZvfSJEujSpP+yObvnR M069689BK589HX2LGVtRxXF/awlIK+udY1TB7ohVUBFYgxV0sizsVKzqwhj55Y9h psFrI8f12fqbujy92PxvPyaG1JmzncdLB/GVK4nJY+ZxJcoPafUrMOnC+S6DhVq6 JKxZ/61oIeWEJA63rwDboukQJA4SPWn9tz7yHGFo6h+sqfv5wvmXnagnkyJ6WnHx i7q94U8+Q+hlz3duONyRSxADUdNRDps+CRRLhrTZy1SpepFhKs7SYIK8FwIDAQAB o4ICNTCCAjEwHQYDVR0OBBYEFG752C4zuF52aUMJaeAOC3q2ppFVMB8GA1UdIwQY MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt NDY0ZWIxODNiNTY4LzEvYnZuWUxqTzRYblpwUXdscDRBNExlcmFta1ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4 LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQAVml2AwQC WS3oAwQBWS+4AwQCWS+8MBgEAgACMBIDBwAgAQawAFoDBwAgAQawAH0wDQYJKoZI hvcNAQELBQADggEBAJjBUk261xqWp3+dIFWwvm+HCMPn5ENQOEXV6BWKzalfFTQF KYJZmjOgDCXPXywEHufz5pGQiDqZqyuPe75E9vRBwUko6bKk5xPfc4QR3nBjOD/Q lD3EynTJwvWyJ1R9/AJzWXn0DfdX9Axis47MykU+70SMY9PuamtXeVIlULfucrmy A+ERTcGnGdj32lrRSLVYhk23klXTmSeQa1LEXKeVtbJNG59n5wru2j1yAEn+3lv+ wBy3TIUYEAXy30eGYyzGPmITV1N8qOAq4Oj01Fuc6/bMgbC4PRTHfBaZOcsYevoS +MCuKKOMUVxSLM0diva8TvXkSEIuTt7tpXX971s= -----END CERTIFICATE-----Generated at Sun Jan 25 13:34:45 2026 by rpki-client