This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/BSyVVnIQyVE4YwB72lzy14u_BDA.roa File: BSyVVnIQyVE4YwB72lzy14u_BDA.roa (raw, json) Hash identifier: UV3CW9R7w+p/7qtVB+/WOrunh+7+rnwo65AYKWYxNqA= Subject key identifier: 05:2C:95:56:72:10:C9:51:38:63:00:7B:DA:5C:F2:D7:8B:BF:04:30 Certificate issuer: /CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779 Certificate serial: 019B7AC7B3BEFA6492DA79B45F41156FE002 Authority key identifier: E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/BSyVVnIQyVE4YwB72lzy14u_BDA.roa Signing time: Thu 01 Jan 2026 18:17:46 +0000 ROA not before: Thu 01 Jan 2026 18:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3292 IP address blocks: 91.142.112.0/20 maxlen: 20 185.143.148.0/22 maxlen: 22 2a00:17b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.mft rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b3:be:fa:64:92:da:79:b4:5f:41:15:6f:e0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8a32e8a6ac6f6ec37860ee7c07eb8df93147779 Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=052c95567210c9513863007bda5cf2d78bbf0430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:83:10:07:d1:ae:d8:11:70:69:4b:4f:b2:72: d6:75:48:f6:4e:53:3a:0c:46:8c:e0:36:28:e7:93: 8d:cd:e0:24:5d:81:d2:45:22:09:f0:a9:30:16:70: 9a:91:9d:84:c3:29:ad:35:44:8b:ce:37:6f:89:02: fe:c5:76:b1:30:ee:da:2f:16:03:83:de:59:bc:14: 81:2e:fa:04:57:4b:51:29:59:57:68:f0:72:93:d9: bf:81:3e:00:20:e4:92:61:da:46:2e:0a:b8:e3:6a: 93:20:d1:65:fd:d3:95:e9:d3:c8:0b:84:ff:e2:fc: bc:1f:ab:20:d9:60:e6:05:46:07:fe:f5:0f:be:5d: e1:8a:96:b2:cc:49:3d:00:d3:20:e1:eb:65:03:87: 56:e0:21:db:25:df:c7:8e:f6:fa:c7:ff:c1:9a:b7: 6f:33:62:42:21:fd:6d:77:1f:28:1b:ae:8d:9d:1f: d0:3e:32:b9:e3:65:8f:9d:18:71:cc:3c:8d:68:0b: 8e:57:eb:33:e8:7b:75:54:fa:3e:73:62:18:d5:d7: e8:71:d4:9d:2c:94:e3:4f:bb:41:7e:0b:69:e5:36: 25:45:4d:39:a5:42:a0:35:06:17:ea:2d:58:fc:f7: 94:97:97:37:6d:df:06:6b:fc:6d:ef:cc:f3:00:fa: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:2C:95:56:72:10:C9:51:38:63:00:7B:DA:5C:F2:D7:8B:BF:04:30 X509v3 Authority Key Identifier: keyid:E8:A3:2E:8A:6A:C6:F6:EC:37:86:0E:E7:C0:7E:B8:DF:93:14:77:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6KMuimrG9uw3hg7nwH6435MUd3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/BSyVVnIQyVE4YwB72lzy14u_BDA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c4bfd4-a0a1-4334-860a-4fa537dbe2e9/1/6KMuimrG9uw3hg7nwH6435MUd3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.142.112.0/20 185.143.148.0/22 IPv6: 2a00:17b0::/32 Signature Algorithm: sha256WithRSAEncryption aa:97:a9:d5:63:17:fb:94:7b:38:03:37:c1:c1:01:a1:8d:d7: 91:5c:e7:3d:58:d8:c9:99:a7:7b:51:e3:b0:1f:42:9b:df:dc: 9e:77:a7:64:57:60:68:a4:dd:b5:41:e9:84:ad:2b:d1:99:df: 46:92:3e:9e:c7:49:18:28:89:27:3f:eb:58:44:81:4f:6e:1f: 40:06:7c:b2:64:6f:c0:04:b0:81:df:ce:db:ed:e7:82:06:ae: 58:31:b6:95:91:90:05:15:dc:96:45:5b:cd:57:65:36:f1:90: 44:c9:a4:36:c2:84:51:e3:70:76:b8:b5:b0:b6:f6:4b:64:88: 78:2b:72:41:4a:c4:3a:8c:a7:0a:0f:5d:28:6d:34:59:20:83: 12:1e:ee:a8:ec:2f:f8:39:cb:02:9a:8b:07:85:bc:c1:84:ae: d5:d8:8a:68:47:24:9e:71:06:80:fc:84:8a:44:db:60:7e:d5: 82:7f:67:c8:b6:80:4b:8e:5d:31:c1:f1:0d:6b:dd:00:f1:0a: dd:f8:db:ea:62:0b:45:a6:c6:96:cd:4a:c9:32:3c:af:06:30: a2:29:f6:38:6a:64:49:4a:3b:e6:87:2f:8d:c5:67:76:cf:17: c8:57:c6:76:af:09:1f:cc:53:5a:65:2e:89:7c:9c:b5:e5:94: d2:64:2a:df -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x7O++mSS2nm0X0EVb+ACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4YTMyZThhNmFjNmY2ZWMzNzg2MGVlN2MwN2ViOGRmOTMx NDc3NzkwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTJjOTU1NjcyMTBjOTUxMzg2MzAwN2JkYTVjZjJkNzhiYmYwNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IMQB9Gu2BFwaUtPsnLWdUj2TlM6 DEaM4DYo55ONzeAkXYHSRSIJ8KkwFnCakZ2EwymtNUSLzjdviQL+xXaxMO7aLxYD g95ZvBSBLvoEV0tRKVlXaPByk9m/gT4AIOSSYdpGLgq442qTINFl/dOV6dPIC4T/ 4vy8H6sg2WDmBUYH/vUPvl3hipayzEk9ANMg4etlA4dW4CHbJd/Hjvb6x//Bmrdv M2JCIf1tdx8oG66NnR/QPjK542WPnRhxzDyNaAuOV+sz6Ht1VPo+c2IY1dfocdSd LJTjT7tBfgtp5TYlRU05pUKgNQYX6i1Y/PeUl5c3bd8Ga/xt78zzAPpOSQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAUslVZyEMlROGMAe9pc8teLvwQwMB8GA1UdIwQY MBaAFOijLopqxvbsN4YO58B+uN+TFHd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jNGJmZDQtYTBhMS00MzM0LTg2MGEt NGZhNTM3ZGJlMmU5LzEvQlN5VlZuSVF5VkU0WXdCNzJsenkxNHVfQkRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy9jNGJmZDQtYTBhMS00MzM0LTg2MGEtNGZhNTM3ZGJlMmU5 LzEvNktNdWltckc5dXczaGc3bndINjQzNU1VZDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEW45wAwQC uY+UMA0EAgACMAcDBQAqABewMA0GCSqGSIb3DQEBCwUAA4IBAQCql6nVYxf7lHs4 AzfBwQGhjdeRXOc9WNjJmad7UeOwH0Kb39yed6dkV2BopN21QemErSvRmd9Gkj6e x0kYKIknP+tYRIFPbh9ABnyyZG/ABLCB387b7eeCBq5YMbaVkZAFFdyWRVvNV2U2 8ZBEyaQ2woRR43B2uLWwtvZLZIh4K3JBSsQ6jKcKD10obTRZIIMSHu6o7C/4OcsC mosHhbzBhK7V2IpoRySecQaA/ISKRNtgftWCf2fItoBLjl0xwfENa90A8Qrd+Nvq YgtFpsaWzUrJMjyvBjCiKfY4amRJSjvmhy+NxWd2zxfIV8Z2rwkfzFNaZS6JfJy1 5ZTSZCrf -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:02 2026 by rpki-client