This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/bsp6BDSIWkrxR6u3xicw9RBKbtM.roa File: bsp6BDSIWkrxR6u3xicw9RBKbtM.roa (raw, json) Hash identifier: KBNbBNVVMKDz24iMEiDHeH6Ud37u/sKie2hM0HuZtdo= Subject key identifier: 6E:CA:7A:04:34:88:5A:4A:F1:47:AB:B7:C6:27:30:F5:10:4A:6E:D3 Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019B791119E72B4FCB31FAC4F809D32B07BB Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/bsp6BDSIWkrxR6u3xicw9RBKbtM.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56765 IP address blocks: 94.182.236.0/23 maxlen: 23 94.182.236.0/24 maxlen: 24 94.182.237.0/24 maxlen: 24 94.182.242.0/23 maxlen: 23 94.182.242.0/24 maxlen: 24 94.182.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:19:e7:2b:4f:cb:31:fa:c4:f8:09:d3:2b:07:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6eca7a0434885a4af147abb7c62730f5104a6ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5b:8e:62:87:74:9d:ce:00:5c:07:a9:7d:d3: 57:2b:72:55:35:66:be:ee:05:d0:bc:57:a3:c7:9b: 74:b5:b3:d0:53:0f:91:37:3a:0b:c9:9f:04:e0:17: 8a:be:2d:89:67:81:b5:f0:cd:09:22:23:62:32:03: c7:a2:f9:d0:0b:85:7c:4f:90:84:8a:6f:e0:de:f6: f1:bd:28:26:67:de:83:88:e1:f1:5c:b3:a0:ae:10: e6:30:80:a5:95:4f:cd:a3:4b:6b:46:0f:24:69:89: f9:be:a7:c2:87:1e:96:f9:9c:dd:97:aa:4d:de:bd: 66:65:be:b3:0a:da:6b:bc:4a:e0:02:d7:31:ee:8a: b4:3b:02:2c:17:d8:81:c9:69:05:22:0b:9d:c9:21: f0:2a:8e:4f:98:2d:21:fd:16:1f:2f:3f:d0:df:2c: a8:d0:ef:b4:06:82:0b:09:fc:be:d6:91:21:ea:97: 26:6f:1a:f4:4a:a9:07:1d:14:ab:fc:4e:93:10:e9: 2c:6c:1c:ce:e3:7e:07:4b:b7:27:2b:3f:41:2e:42: 8d:a0:57:8d:af:b2:b8:be:d4:51:c0:06:4d:39:15: cb:37:58:a4:72:97:5d:45:43:44:ba:f0:1d:75:b5: 9f:02:1b:d5:38:64:9e:e8:34:9f:37:d8:b1:ba:34: 64:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CA:7A:04:34:88:5A:4A:F1:47:AB:B7:C6:27:30:F5:10:4A:6E:D3 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/bsp6BDSIWkrxR6u3xicw9RBKbtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.182.236.0/23 94.182.242.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:52:69:eb:63:5c:54:75:0c:b7:b7:b5:04:9b:d1:97:b6:c4: 3c:34:1e:dd:86:a0:67:63:00:b8:36:65:44:09:c9:df:cf:ec: b3:2e:a7:c9:ba:a9:6a:fd:86:00:0e:e3:9c:2f:11:69:cb:02: d8:e4:ae:84:8d:0f:e0:3f:21:54:f9:1d:82:a2:f6:eb:17:65: 2f:53:a0:9a:73:1e:f9:8d:74:e6:4c:e5:b8:ba:0e:4a:2f:e8: fb:e8:69:dd:11:87:23:54:9a:16:df:9d:7d:63:1e:d8:3d:ef: 75:43:cb:90:b3:99:9e:2d:a5:b6:34:e7:03:5e:94:6d:d6:67: c5:a6:ba:9d:e2:33:33:18:68:82:cb:78:84:36:f2:92:82:47: 74:80:03:59:36:54:9e:2f:57:3d:2c:05:18:1e:be:c0:7d:ec: 21:55:52:b9:c3:bf:7c:1a:01:9b:d1:e1:b3:bd:c9:a6:84:2a: 0a:51:51:81:d6:d8:05:e8:f5:3a:45:12:64:6a:e8:de:be:a6: f0:13:f3:c1:c8:53:35:0c:e8:d7:ae:92:8d:a5:d0:63:db:ee: 4e:68:88:f4:de:0c:b4:3d:6e:7c:aa:4a:af:67:f2:72:98:6f: 54:29:ae:f1:76:9f:44:36:0d:0b:83:0a:80:26:e9:79:51:94: d8:90:fa:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ERnnK0/LMfrE+AnTKwe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWNhN2EwNDM0ODg1YTRhZjE0N2FiYjdjNjI3MzBmNTEwNGE2ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1uOYod0nc4AXAepfdNXK3JVNWa+ 7gXQvFejx5t0tbPQUw+RNzoLyZ8E4BeKvi2JZ4G18M0JIiNiMgPHovnQC4V8T5CE im/g3vbxvSgmZ96DiOHxXLOgrhDmMICllU/No0trRg8kaYn5vqfChx6W+Zzdl6pN 3r1mZb6zCtprvErgAtcx7oq0OwIsF9iByWkFIgudySHwKo5PmC0h/RYfLz/Q3yyo 0O+0BoILCfy+1pEh6pcmbxr0SqkHHRSr/E6TEOksbBzO434HS7cnKz9BLkKNoFeN r7K4vtRRwAZNORXLN1ikcpddRUNEuvAddbWfAhvVOGSe6DSfN9ixujRkpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG7KegQ0iFpK8Uert8YnMPUQSm7TMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvYnNwNkJEU0lXa3J4UjZ1M3hpY3c5UkJLYnRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXrbsAwQB XrbyMA0GCSqGSIb3DQEBCwUAA4IBAQA+UmnrY1xUdQy3t7UEm9GXtsQ8NB7dhqBn YwC4NmVECcnfz+yzLqfJuqlq/YYADuOcLxFpywLY5K6EjQ/gPyFU+R2CovbrF2Uv U6Cacx75jXTmTOW4ug5KL+j76GndEYcjVJoW3519Yx7YPe91Q8uQs5meLaW2NOcD XpRt1mfFprqd4jMzGGiCy3iENvKSgkd0gANZNlSeL1c9LAUYHr7AfewhVVK5w798 GgGb0eGzvcmmhCoKUVGB1tgF6PU6RRJkaujevqbwE/PByFM1DOjXrpKNpdBj2+5O aIj03gy0PW58qkqvZ/JymG9UKa7xdp9ENg0LgwqAJul5UZTYkPol -----END CERTIFICATE-----Generated at Sun Jan 25 22:15:58 2026 by rpki-client