This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/bzbw6ZQQlgZG-VDctSbAwKD0loI.roa File: bzbw6ZQQlgZG-VDctSbAwKD0loI.roa (raw, json) Hash identifier: XGHU1Qq/9SW+uBsv+/TnL48HjuX/R8vTB0lxCS9rZSk= Subject key identifier: 6F:36:F0:E9:94:10:96:06:46:F9:50:DC:B5:26:C0:C0:A0:F4:96:82 Certificate issuer: /CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae Certificate serial: 019B7C7F9134D4FC0D7E198872D86CC6A707 Authority key identifier: 8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/bzbw6ZQQlgZG-VDctSbAwKD0loI.roa Signing time: Fri 02 Jan 2026 02:18:13 +0000 ROA not before: Fri 02 Jan 2026 02:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216238 IP address blocks: 77.95.219.0/24 maxlen: 24 2a13:f1c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.mft rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:91:34:d4:fc:0d:7e:19:88:72:d8:6c:c6:a7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ef8c471e83b14fc6c6cc7cfc96c1ac3e3087eae Validity Not Before: Jan 2 02:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f36f0e99410960646f950dcb526c0c0a0f49682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:1b:dc:28:d0:47:be:c1:da:17:88:b7:7e: 18:53:19:60:9a:0c:36:80:b6:3c:91:a5:75:7a:33: bd:3e:3e:8d:f0:5e:c8:48:b5:55:23:e6:9f:97:51: f6:c4:bc:08:57:2a:5c:56:e6:ce:be:55:b7:68:48: 77:65:ea:ee:b2:ea:0b:bb:1e:9f:f5:78:04:9b:9d: be:d9:d8:3e:0f:3d:68:57:7e:b4:1b:7d:0c:d9:da: 1a:b8:18:4f:50:46:c0:10:19:f7:cc:9f:10:dc:5d: f2:ad:42:12:c5:22:b4:07:23:51:f3:11:13:54:27: db:d2:88:35:d7:74:eb:a5:7b:9a:f3:54:35:6b:68: 0e:77:e1:1c:b3:28:b9:7c:13:14:98:1a:17:5a:bb: 40:51:6e:8c:2f:2b:85:dd:1f:ff:4f:78:48:9b:93: 8a:d9:c5:0d:af:3e:e6:f8:ad:e2:51:70:37:c6:1b: c9:5f:64:dd:c4:50:e6:da:16:bb:e9:55:ca:34:d4: 34:4d:37:2f:59:10:d5:a2:27:5e:b9:db:c5:31:20: c8:2b:17:d6:89:db:07:4a:8b:ef:cb:7e:5c:3b:e3: e1:7a:eb:78:38:ef:85:42:c0:1c:80:e6:6c:91:e9: 60:05:91:8b:a4:27:ce:0c:13:09:19:3c:a5:c8:a6: bd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:36:F0:E9:94:10:96:06:46:F9:50:DC:B5:26:C0:C0:A0:F4:96:82 X509v3 Authority Key Identifier: keyid:8E:F8:C4:71:E8:3B:14:FC:6C:6C:C7:CF:C9:6C:1A:C3:E3:08:7E:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvjEceg7FPxsbMfPyWwaw-MIfq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/bzbw6ZQQlgZG-VDctSbAwKD0loI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/8f2ad8-6a48-423c-be41-138a7117de36/1/jvjEceg7FPxsbMfPyWwaw-MIfq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.95.219.0/24 IPv6: 2a13:f1c0::/29 Signature Algorithm: sha256WithRSAEncryption 7b:cb:c5:0a:5a:fe:b5:ce:37:13:8f:f4:dd:79:97:d3:c0:80: 6d:de:a1:28:e6:7e:f2:11:04:58:8a:45:d9:6e:eb:81:84:ee: 14:c7:fe:6e:5a:14:65:ab:0e:6e:be:6b:52:9c:7f:29:f3:5c: c1:fd:42:99:43:0c:13:e6:4e:ab:a2:52:69:87:7b:3f:49:40: 12:01:e7:81:8a:f4:32:c2:99:e4:cd:b1:16:d0:36:11:ae:16: 2e:b9:19:f9:93:bc:69:94:72:3f:72:d7:1d:57:4d:5d:48:50: ef:7d:04:f4:57:17:c2:3a:cf:28:d4:fc:82:fa:84:a2:96:15: 76:2d:df:33:99:01:ed:b3:be:ff:17:12:f7:e0:cd:da:0a:ae: aa:e4:a1:0f:41:55:66:9c:97:bb:01:7e:58:d9:49:aa:66:bf: fc:ae:b1:15:bb:b2:8d:0f:26:57:60:a1:e8:01:51:8a:42:5e: e0:f6:20:f6:a4:3b:63:22:77:5b:a4:d8:20:4e:9d:95:60:73: 15:ed:a4:35:7c:88:26:43:79:6f:de:70:76:de:b3:82:f0:d8: c2:83:a6:64:1b:32:9a:92:cd:4e:fa:0c:ea:a2:9e:84:3e:18: 91:69:57:ea:06:ef:4a:5a:6e:f8:c2:aa:ff:27:ef:ae:a9:a4: 17:15:84:25 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f5E01PwNfhmIcthsxqcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlZjhjNDcxZTgzYjE0ZmM2YzZjYzdjZmM5NmMxYWMzZTMw ODdlYWUwHhcNMjYwMTAyMDIxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjM2ZjBlOTk0MTA5NjA2NDZmOTUwZGNiNTI2YzBjMGEwZjQ5NjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWgb3CjQR77B2heIt34YUxlgmgw2 gLY8kaV1ejO9Pj6N8F7ISLVVI+afl1H2xLwIVypcVubOvlW3aEh3ZerusuoLux6f 9XgEm52+2dg+Dz1oV360G30M2doauBhPUEbAEBn3zJ8Q3F3yrUISxSK0ByNR8xET VCfb0og113TrpXua81Q1a2gOd+Ecsyi5fBMUmBoXWrtAUW6MLyuF3R//T3hIm5OK 2cUNrz7m+K3iUXA3xhvJX2TdxFDm2ha76VXKNNQ0TTcvWRDVoideudvFMSDIKxfW idsHSovvy35cO+Pheut4OO+FQsAcgOZskelgBZGLpCfODBMJGTylyKa9VQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG828OmUEJYGRvlQ3LUmwMCg9JaCMB8GA1UdIwQY MBaAFI74xHHoOxT8bGzHz8lsGsPjCH6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS84ZjJhZDgtNmE0OC00MjNjLWJlNDEt MTM4YTcxMTdkZTM2LzEvYnpidzZaUVFsZ1pHLVZEY3RTYkF3S0QwbG9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS84ZjJhZDgtNmE0OC00MjNjLWJlNDEtMTM4YTcxMTdkZTM2 LzEvanZqRWNlZzdGUHhzYk1mUHlXd2F3LU1JZnE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQATV/bMA0E AgACMAcDBQMqE/HAMA0GCSqGSIb3DQEBCwUAA4IBAQB7y8UKWv61zjcTj/TdeZfT wIBt3qEo5n7yEQRYikXZbuuBhO4Ux/5uWhRlqw5uvmtSnH8p81zB/UKZQwwT5k6r olJph3s/SUASAeeBivQywpnkzbEW0DYRrhYuuRn5k7xplHI/ctcdV01dSFDvfQT0 VxfCOs8o1PyC+oSilhV2Ld8zmQHts77/FxL34M3aCq6q5KEPQVVmnJe7AX5Y2Umq Zr/8rrEVu7KNDyZXYKHoAVGKQl7g9iD2pDtjIndbpNggTp2VYHMV7aQ1fIgmQ3lv 3nB23rOC8NjCg6ZkGzKaks1O+gzqop6EPhiRaVfqBu9KWm74wqr/J++uqaQXFYQl -----END CERTIFICATE-----Generated at Mon Jan 26 07:08:17 2026 by rpki-client