This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/bfKp4He-qKJs_enDIJl7XQ9lPPU.roa File: bfKp4He-qKJs_enDIJl7XQ9lPPU.roa (raw, json) Hash identifier: uFXbmdwQGYD/iE9Y1EfqaH0e9iyi0snRJrn455EqNPc= Subject key identifier: 6D:F2:A9:E0:77:BE:A8:A2:6C:FD:E9:C3:20:99:7B:5D:0F:65:3C:F5 Certificate issuer: /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56 Certificate serial: 019B76EAB73DECE8ECD9DD325A7EBC373D2D Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/bfKp4He-qKJs_enDIJl7XQ9lPPU.roa Signing time: Thu 01 Jan 2026 00:17:32 +0000 ROA not before: Thu 01 Jan 2026 00:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196863 IP address blocks: 91.223.88.0/24 maxlen: 24 91.227.206.0/23 maxlen: 23 91.234.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:b7:3d:ec:e8:ec:d9:dd:32:5a:7e:bc:37:3d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56 Validity Not Before: Jan 1 00:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6df2a9e077bea8a26cfde9c320997b5d0f653cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e7:e4:cd:83:68:fd:f3:22:a3:d8:c8:3f:e9: 78:98:e8:9f:f4:86:31:b2:6b:bb:d7:99:08:2d:00: da:2d:89:d8:b8:a7:0a:bf:bf:fe:3a:7a:91:0d:41: 8b:6f:a2:9b:7d:af:58:3f:bf:d5:5f:d1:d1:11:df: 65:7e:b0:5d:2a:cf:33:9c:2f:ae:26:33:97:b6:e2: ae:c2:c9:43:60:37:75:b0:a4:3c:c8:17:bd:65:48: 49:af:d7:dd:7b:44:fe:c7:21:ea:ed:3e:54:62:dd: be:92:b3:7e:95:bb:86:75:86:65:b5:ee:ed:56:e3: bb:b2:2b:ca:f3:d3:01:54:bf:ac:ec:30:e8:61:ef: fc:c9:3f:f8:9f:fd:ef:ee:24:c2:d6:fd:0b:d0:e3: 55:77:5e:d4:77:ad:8e:06:86:9b:d6:3e:88:f0:d5: 77:83:a8:a6:c4:88:f3:be:2a:70:c6:70:9a:6e:bb: bc:21:08:1a:14:05:d7:c4:28:47:57:cb:b0:76:d5: f0:f8:8a:14:fe:02:19:b2:0c:45:92:5d:ba:8a:d7: 7f:35:51:a2:71:78:38:8d:22:4a:5d:0d:14:ee:26: f1:03:2f:47:e6:a7:30:fa:2a:19:e4:be:a8:16:65: ca:50:9f:d4:66:e3:d7:53:17:f1:b6:27:33:5c:b4: fd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F2:A9:E0:77:BE:A8:A2:6C:FD:E9:C3:20:99:7B:5D:0F:65:3C:F5 X509v3 Authority Key Identifier: keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/bfKp4He-qKJs_enDIJl7XQ9lPPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.223.88.0/24 91.227.206.0/23 91.234.0.0/22 Signature Algorithm: sha256WithRSAEncryption 0d:0d:38:af:2d:cc:9b:25:a4:53:ff:75:c3:66:c3:61:4f:0e: f1:4a:9f:90:ee:a4:ea:a4:02:11:67:71:f6:ef:19:bb:94:75: 9c:bb:73:1e:3e:ce:1b:53:cc:12:6d:67:e2:d6:cf:02:b5:b4: 1e:b9:7c:e4:92:42:3a:42:ed:6d:c7:f9:8c:9e:a5:93:b2:1f: 95:47:36:e3:fb:d3:fa:32:44:42:98:14:f5:4b:02:33:e0:91: d7:74:25:92:18:d8:a4:1f:27:54:2f:51:9c:ad:f7:4e:d5:a7: aa:e5:85:2c:96:31:57:fb:bc:e2:b6:4a:85:7c:21:f0:85:5f: 88:3e:c9:03:bb:88:0a:25:d7:63:c3:9c:c7:ae:01:39:25:21: 12:c3:55:90:eb:89:69:1f:11:a1:c2:86:53:6c:fe:37:b7:7c: bd:e8:8f:ce:f0:b2:a3:3b:32:2a:f4:08:fe:15:7d:b2:cb:5c: 8e:8d:3b:fb:21:22:fc:4d:17:fb:41:67:68:4c:d9:31:08:50: a3:95:51:e2:86:b8:32:f7:2f:d4:9e:e2:83:a3:fa:b2:01:94: 89:01:bd:46:a2:74:3c:95:1c:7f:b8:ce:af:62:c0:c0:e5:fe: 12:9f:b9:41:80:95:c4:ae:4a:53:39:81:df:20:14:f1:57:99: 0f:17:87:09 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26rc97Ojs2d0yWn68Nz0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZDA0MzdjZGY3Y2JhOWYzOTY3ZWIzMjhhMDg2ODZkMDZl NDdkNTYwHhcNMjYwMTAxMDAxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGYyYTllMDc3YmVhOGEyNmNmZGU5YzMyMDk5N2I1ZDBmNjUzY2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApefkzYNo/fMio9jIP+l4mOif9IYx smu715kILQDaLYnYuKcKv7/+OnqRDUGLb6Kbfa9YP7/VX9HREd9lfrBdKs8znC+u JjOXtuKuwslDYDd1sKQ8yBe9ZUhJr9fde0T+xyHq7T5UYt2+krN+lbuGdYZlte7t VuO7sivK89MBVL+s7DDoYe/8yT/4n/3v7iTC1v0L0ONVd17Ud62OBoab1j6I8NV3 g6imxIjzvipwxnCabru8IQgaFAXXxChHV8uwdtXw+IoU/gIZsgxFkl26itd/NVGi cXg4jSJKXQ0U7ibxAy9H5qcw+ioZ5L6oFmXKUJ/UZuPXUxfxticzXLT9mQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG3yqeB3vqiibP3pwyCZe10PZTz1MB8GA1UdIwQY MBaAFMDQQ3zffLqfOWfrMooIaG0G5H1WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9lNDYxNjgtOTgxOC00YjUxLTk0YWQt YzYxOGRlYzA3NDYyLzEvYmZLcDRIZS1xS0pzX2VuRElKbDdYUTlsUFBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9lNDYxNjgtOTgxOC00YjUxLTk0YWQtYzYxOGRlYzA3NDYy LzEvd05CRGZOOTh1cDg1Wi1zeWlnaG9iUWJrZlZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW99YAwQB W+POAwQCW+oAMA0GCSqGSIb3DQEBCwUAA4IBAQANDTivLcybJaRT/3XDZsNhTw7x Sp+Q7qTqpAIRZ3H27xm7lHWcu3MePs4bU8wSbWfi1s8CtbQeuXzkkkI6Qu1tx/mM nqWTsh+VRzbj+9P6MkRCmBT1SwIz4JHXdCWSGNikHydUL1GcrfdO1aeq5YUsljFX +7zitkqFfCHwhV+IPskDu4gKJddjw5zHrgE5JSESw1WQ64lpHxGhwoZTbP43t3y9 6I/O8LKjOzIq9Aj+FX2yy1yOjTv7ISL8TRf7QWdoTNkxCFCjlVHihrgy9y/UnuKD o/qyAZSJAb1GonQ8lRx/uM6vYsDA5f4Sn7lBgJXErkpTOYHfIBTxV5kPF4cJ -----END CERTIFICATE-----Generated at Sun Jan 25 21:04:56 2026 by rpki-client