This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Bv-DPtEYSuzZ5693jHTxa4K7u5Y.roa File: Bv-DPtEYSuzZ5693jHTxa4K7u5Y.roa (raw, json) Hash identifier: KlsR+9aUNtF2Aas/9nrneQZ8Znm5mQG2H+Gw8V482bg= Subject key identifier: 06:FF:83:3E:D1:18:4A:EC:D9:E7:AF:77:8C:74:F1:6B:82:BB:BB:96 Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Certificate serial: 019B7A5AB297F5C700067CB3457D02725D32 Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Bv-DPtEYSuzZ5693jHTxa4K7u5Y.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142111 IP address blocks: 82.153.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b2:97:f5:c7:00:06:7c:b3:45:7d:02:72:5d:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06ff833ed1184aecd9e7af778c74f16b82bbbb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e7:24:d7:52:f2:4f:9c:08:8b:f1:55:93:f4: 19:2e:c3:e9:71:e7:2d:27:b4:31:59:89:4d:e5:80: 0c:25:62:9f:af:6e:51:95:4f:2e:8c:b9:7d:5a:96: 02:56:e4:dc:45:1e:5a:1a:a7:dd:98:00:30:f5:10: 67:43:b7:d6:16:60:0b:94:7b:93:49:09:06:c9:c6: bf:f8:0b:8d:2a:77:17:6b:95:57:90:dd:64:5a:4a: 44:12:00:c4:21:e8:d9:4a:29:c0:a4:6a:f2:a2:b4: dc:c6:b9:45:db:86:96:78:62:d7:1a:49:af:ee:05: 12:e7:48:12:4f:b7:54:25:2a:40:78:82:c4:ff:e7: 35:cc:e0:08:ff:ce:1d:34:12:b2:d5:7f:53:4a:b8: 1d:2a:e0:15:c4:8a:8f:45:65:9e:7d:e6:5e:b3:0d: 77:e3:9c:fe:f1:93:6a:d4:b5:8f:ac:91:3a:13:55: b1:53:26:8d:bf:b2:e3:5c:a6:6a:a1:8f:f2:a0:e8: 46:66:ff:82:3a:ec:5c:eb:94:a1:f7:65:87:09:b2: d7:db:c2:47:c3:2a:2c:1a:2d:2c:f3:a6:c5:5c:72: 2e:77:bd:84:6e:29:73:db:11:66:3d:7b:ed:4b:15: 5f:67:b4:a2:df:86:00:2a:24:92:61:73:c0:b5:e8: 24:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FF:83:3E:D1:18:4A:EC:D9:E7:AF:77:8C:74:F1:6B:82:BB:BB:96 X509v3 Authority Key Identifier: keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Bv-DPtEYSuzZ5693jHTxa4K7u5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.153.216.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:aa:8d:fa:5d:d8:c8:c7:03:07:94:ca:fb:20:c1:a7:5e:cd: 63:ff:f8:57:c8:9e:8a:d3:e1:79:5b:36:6d:11:f6:1e:d7:46: 19:70:86:d9:2d:a7:11:47:d8:3a:7b:62:23:8b:81:66:b9:57: eb:03:2c:16:ab:19:e1:98:76:d7:9f:fd:80:b3:4b:37:1b:bf: cf:d8:0a:58:5c:8a:ae:fb:c4:35:72:bc:37:36:c3:51:eb:55: 56:18:f0:fd:13:53:5f:55:3d:5d:48:8d:29:02:c6:e3:f5:0c: ec:fb:88:bf:49:0f:1b:a4:17:1e:74:68:81:c9:24:0e:0e:b0: 24:e3:a5:6d:1c:d6:b3:e5:bc:c6:f2:57:72:4a:09:11:f0:52: b2:90:bf:b5:8a:27:32:12:48:e7:5c:fa:b6:90:4a:11:5e:12: ab:46:45:3f:87:34:84:19:97:a4:3a:b2:85:27:30:bf:6f:dd: 48:54:ea:bf:93:71:c9:37:ec:f8:ac:b2:8f:49:3b:f7:f7:8b: 1a:76:27:0d:c6:af:43:ee:5a:79:78:ba:02:35:23:9e:ec:b0: c6:93:12:50:df:5c:95:dd:d2:aa:0b:d5:29:ed:b0:d9:97:85: c2:03:18:22:cb:92:f7:ef:7d:7c:00:cf:6e:cc:73:80:1d:2b: fb:39:3b:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrKX9ccABnyzRX0Ccl0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh NTNiOWIwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmZmODMzZWQxMTg0YWVjZDllN2FmNzc4Yzc0ZjE2YjgyYmJiYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+ck11LyT5wIi/FVk/QZLsPpcect J7QxWYlN5YAMJWKfr25RlU8ujLl9WpYCVuTcRR5aGqfdmAAw9RBnQ7fWFmALlHuT SQkGyca/+AuNKncXa5VXkN1kWkpEEgDEIejZSinApGryorTcxrlF24aWeGLXGkmv 7gUS50gST7dUJSpAeILE/+c1zOAI/84dNBKy1X9TSrgdKuAVxIqPRWWefeZesw13 45z+8ZNq1LWPrJE6E1WxUyaNv7LjXKZqoY/yoOhGZv+COuxc65Sh92WHCbLX28JH wyosGi0s86bFXHIud72Ebilz2xFmPXvtSxVfZ7Si34YAKiSSYXPAtegkhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAb/gz7RGErs2eevd4x08WuCu7uWMB8GA1UdIwQY MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt NDEyMjhlMzlmZjdjLzEvQnYtRFB0RVlTdXpaNTY5M2pIVHhhNEs3dTVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpnYMA0G CSqGSIb3DQEBCwUAA4IBAQArqo36XdjIxwMHlMr7IMGnXs1j//hXyJ6K0+F5WzZt EfYe10YZcIbZLacRR9g6e2Iji4FmuVfrAywWqxnhmHbXn/2As0s3G7/P2ApYXIqu +8Q1crw3NsNR61VWGPD9E1NfVT1dSI0pAsbj9Qzs+4i/SQ8bpBcedGiBySQODrAk 46VtHNaz5bzG8ldySgkR8FKykL+1iicyEkjnXPq2kEoRXhKrRkU/hzSEGZekOrKF JzC/b91IVOq/k3HJN+z4rLKPSTv394sadicNxq9D7lp5eLoCNSOe7LDGkxJQ31yV 3dKqC9Up7bDZl4XCAxgiy5L37318AM9uzHOAHSv7OTss -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:58 2026 by rpki-client