This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/B2_FH3MtZlTaOE61buYvXBJKW2E.roa File: B2_FH3MtZlTaOE61buYvXBJKW2E.roa (raw, json) Hash identifier: 55aVAj571Q8/h0HvcQ8YQch6oVhSxMht9hvb0pWG9xs= Subject key identifier: 07:6F:C5:1F:73:2D:66:54:DA:38:4E:B5:6E:E6:2F:5C:12:4A:5B:61 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019B7E37B0FD0D24BA823E1703B289C27D0C Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/B2_FH3MtZlTaOE61buYvXBJKW2E.roa Signing time: Fri 02 Jan 2026 10:18:57 +0000 ROA not before: Fri 02 Jan 2026 10:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399734 IP address blocks: 217.163.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:b0:fd:0d:24:ba:82:3e:17:03:b2:89:c2:7d:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jan 2 10:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=076fc51f732d6654da384eb56ee62f5c124a5b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1b:fc:ff:8b:cd:67:83:74:4f:e8:70:0b:ad: e7:ba:fa:c9:27:1d:fd:1f:f5:29:2f:a7:40:d5:c3: ec:44:51:af:fb:10:7c:66:8b:68:a4:79:45:c2:c4: 77:1e:b4:4f:95:9b:03:db:5e:cd:4e:9e:44:d6:c7: 28:0a:1e:b7:81:09:0a:46:45:26:ba:8d:12:7c:48: f6:7b:43:d7:e1:d2:c3:45:64:ba:9f:60:9d:44:e3: dd:17:80:b6:83:52:3c:72:7c:1d:f1:60:bb:dc:fd: b5:9d:f9:bc:ba:96:ad:31:85:cb:51:93:d5:b2:ca: 90:7e:60:4a:3b:bd:ba:1e:22:6b:9e:b4:ff:d1:65: b2:2a:dd:43:47:c4:82:c2:8b:d0:ac:67:76:73:8a: f4:ea:5a:75:9a:21:02:52:16:35:13:c9:2b:09:79: 86:9f:2f:a4:8e:46:14:bf:7f:e2:d1:c0:56:9d:cb: 4e:87:76:c8:42:15:17:ed:62:c7:8e:95:dd:9f:b5: 9e:e6:8c:60:8a:28:16:d4:2c:87:6f:87:e7:86:66: b6:20:83:54:c0:d6:71:8d:45:08:1d:9e:8d:be:74: 97:f3:75:58:91:b4:7a:4e:0c:22:4f:52:9f:fc:43: 65:20:a3:be:69:a8:bc:ba:f1:fe:9b:01:54:39:33: d6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:6F:C5:1F:73:2D:66:54:DA:38:4E:B5:6E:E6:2F:5C:12:4A:5B:61 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/B2_FH3MtZlTaOE61buYvXBJKW2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.163.118.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:e7:89:11:c6:ce:fb:8e:56:bb:8c:00:d3:ce:f0:5f:92:ef: c8:94:6b:49:ae:82:1d:ed:18:f0:c3:0f:b9:40:bb:05:f6:3a: 1b:96:ac:c6:67:81:13:96:36:e6:b8:f5:a2:8f:fb:3d:b6:54: 22:86:f8:d3:dd:42:80:91:0e:cd:9c:40:ab:19:65:6a:14:20: 95:b7:3d:02:9d:a7:18:40:4f:72:48:a9:2d:8c:1f:3c:04:b4: d6:7a:78:a6:8e:cb:f2:da:c1:11:87:7e:36:08:1e:b7:bb:7a: 28:f8:0e:a5:df:29:a1:a7:25:a7:c9:26:36:df:07:ed:86:78: 73:dd:f6:ba:51:ec:92:b8:f5:92:7c:a2:1d:0b:42:e9:cb:17: a8:4f:16:9d:47:64:04:ff:6b:df:d2:61:2a:3a:89:09:50:dd: e4:cc:40:22:34:37:3b:51:3d:17:2c:99:3d:e1:36:4d:97:b8: 69:9d:55:80:ba:e3:f6:ce:b7:bb:12:b2:b9:37:32:75:2d:18: 21:21:70:24:47:a8:79:52:4e:6a:66:19:79:3e:6e:f1:73:db: fd:4b:f9:fd:23:ef:db:62:8a:8d:c0:20:d7:70:a3:71:d0:68: fb:3f:f5:7a:49:57:8b:c4:dc:28:97:6b:8c:5a:6c:a5:99:7d: 2f:56:e7:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N7D9DSS6gj4XA7KJwn0MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwMTAyMTAxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzZmYzUxZjczMmQ2NjU0ZGEzODRlYjU2ZWU2MmY1YzEyNGE1YjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBv8/4vNZ4N0T+hwC63nuvrJJx39 H/UpL6dA1cPsRFGv+xB8ZotopHlFwsR3HrRPlZsD217NTp5E1scoCh63gQkKRkUm uo0SfEj2e0PX4dLDRWS6n2CdROPdF4C2g1I8cnwd8WC73P21nfm8upatMYXLUZPV ssqQfmBKO726HiJrnrT/0WWyKt1DR8SCwovQrGd2c4r06lp1miECUhY1E8krCXmG ny+kjkYUv3/i0cBWnctOh3bIQhUX7WLHjpXdn7We5oxgiigW1CyHb4fnhma2IINU wNZxjUUIHZ6NvnSX83VYkbR6TgwiT1Kf/ENlIKO+aai8uvH+mwFUOTPWGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAdvxR9zLWZU2jhOtW7mL1wSSlthMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQjJfRkgzTXRabFRhT0U2MWJ1WXZYQkpLVzJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2aN2MA0G CSqGSIb3DQEBCwUAA4IBAQBa54kRxs77jla7jADTzvBfku/IlGtJroId7Rjwww+5 QLsF9joblqzGZ4ETljbmuPWij/s9tlQihvjT3UKAkQ7NnECrGWVqFCCVtz0CnacY QE9ySKktjB88BLTWenimjsvy2sERh342CB63u3oo+A6l3ymhpyWnySY23wfthnhz 3fa6UeySuPWSfKIdC0LpyxeoTxadR2QE/2vf0mEqOokJUN3kzEAiNDc7UT0XLJk9 4TZNl7hpnVWAuuP2zre7ErK5NzJ1LRghIXAkR6h5Uk5qZhl5Pm7xc9v9S/n9I+/b YoqNwCDXcKNx0Gj7P/V6SVeLxNwol2uMWmylmX0vVuch -----END CERTIFICATE-----Generated at Sun Jan 25 03:59:02 2026 by rpki-client