This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/BhiORD-UuUDBrhyIYI_DoUYPlI8.roa File: BhiORD-UuUDBrhyIYI_DoUYPlI8.roa (raw, json) Hash identifier: JTlV8Y8e4tmlDr8mHk2b5u6aD2TaQXFvARgJc495HDg= Subject key identifier: 06:18:8E:44:3F:94:B9:40:C1:AE:1C:88:60:8F:C3:A1:46:0F:94:8F Certificate issuer: /CN=6b378df27bd9260c7eb15273e993e36b0985da10 Certificate serial: 019B77C75481B6C8DF92B257AF656C0AE084 Authority key identifier: 6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/BhiORD-UuUDBrhyIYI_DoUYPlI8.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56786 IP address blocks: 84.21.176.0/22 maxlen: 24 84.21.176.0/24 maxlen: 24 84.21.177.0/24 maxlen: 24 84.21.178.0/24 maxlen: 24 84.21.179.0/24 maxlen: 24 2a0d:f540::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.mft rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:54:81:b6:c8:df:92:b2:57:af:65:6c:0a:e0:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b378df27bd9260c7eb15273e993e36b0985da10 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06188e443f94b940c1ae1c88608fc3a1460f948f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e7:8e:dd:ab:20:83:9b:91:0a:a2:fe:5d:09: bc:74:1a:ed:63:75:69:3f:d9:41:d3:ae:0d:b7:3a: b0:31:53:b3:d2:49:70:57:f2:89:93:8b:b8:54:8c: c0:f9:49:2e:99:83:97:cb:c7:b3:13:aa:d5:59:aa: b3:c7:ef:77:53:f3:71:23:63:1f:0e:32:26:b2:3a: d0:6d:02:ca:13:6e:b7:e0:10:d2:88:e5:c4:64:bb: d1:a4:f4:26:98:a2:01:07:ad:d3:2d:b1:6f:7d:ce: a5:6a:be:e8:0d:22:c5:e6:6e:ad:2a:86:5e:19:f8: 6f:15:ed:c0:fd:1a:aa:e9:a4:ff:e5:c9:dd:f5:5d: 85:94:0a:1f:6c:9a:78:38:08:9a:50:33:ab:62:12: d3:96:c1:21:bd:f7:df:ac:e1:bf:25:b1:57:ae:f1: 57:82:ca:09:99:30:72:83:cb:ff:6b:1d:14:97:f7: 25:75:76:89:6f:fe:b6:79:b7:94:b7:dc:ba:5a:68: 48:22:d9:e6:75:50:e0:61:ce:d5:05:99:a3:18:96: 2e:a8:8a:fa:b2:ff:55:cf:86:50:d9:52:77:76:bb: ef:6e:bb:9d:01:c5:c4:cb:9a:c3:61:f5:f4:f9:8c: 24:d2:74:3b:f5:89:da:74:2d:94:6b:69:a2:b7:fc: 16:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:18:8E:44:3F:94:B9:40:C1:AE:1C:88:60:8F:C3:A1:46:0F:94:8F X509v3 Authority Key Identifier: keyid:6B:37:8D:F2:7B:D9:26:0C:7E:B1:52:73:E9:93:E3:6B:09:85:DA:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azeN8nvZJgx-sVJz6ZPjawmF2hA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/BhiORD-UuUDBrhyIYI_DoUYPlI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/485ebc-7ee4-4270-bdc8-97fa80c0df41/1/azeN8nvZJgx-sVJz6ZPjawmF2hA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.21.176.0/22 IPv6: 2a0d:f540::/29 Signature Algorithm: sha256WithRSAEncryption b4:d4:77:1c:c4:c8:10:35:3b:af:a0:19:a2:73:42:50:16:bc: 11:ca:ba:ec:43:08:3d:c2:48:6f:c3:01:0a:31:8e:77:d6:7a: 42:6b:c9:f3:d9:c3:d7:2a:3b:4d:fa:95:14:f1:e7:fb:b0:41: 7c:2f:8c:d6:b1:c7:64:8f:eb:a4:23:fb:57:25:a9:e8:44:e9: b5:c9:60:40:33:cd:b8:b0:8f:a2:ec:55:bf:26:00:9d:9b:1d: a7:e6:02:8b:2a:64:6e:cc:f1:29:02:2b:14:08:01:19:d9:a0: 79:6e:b9:f4:f1:c0:08:e6:4c:ae:7b:d8:87:5b:92:42:63:e7: 85:5b:05:a6:0a:0a:1e:cb:83:90:11:7c:9b:b6:bf:2e:3b:d3: 6d:9a:17:f0:b8:d6:89:b2:3c:db:1a:c2:6f:f6:03:87:9c:5c: 33:59:44:e4:b7:23:2c:c1:f6:f8:33:0d:78:a7:fb:23:50:b0: 1f:c3:90:c8:5d:aa:0d:1c:49:7f:7b:af:19:c9:c2:97:40:8b: 96:34:51:0f:1a:a8:27:a6:34:5b:02:a7:fd:4b:f7:91:b6:71: 20:1a:ab:f5:22:76:77:c6:67:31:75:6c:40:6e:b1:cd:24:22: 56:d3:9c:0a:cc:71:82:76:2a:46:04:0e:3e:8b:67:05:85:a9: 9f:33:15:c2 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x1SBtsjfkrJXr2VsCuCEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMzc4ZGYyN2JkOTI2MGM3ZWIxNTI3M2U5OTNlMzZiMDk4 NWRhMTAwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjE4OGU0NDNmOTRiOTQwYzFhZTFjODg2MDhmYzNhMTQ2MGY5NDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOeO3asgg5uRCqL+XQm8dBrtY3Vp P9lB064NtzqwMVOz0klwV/KJk4u4VIzA+UkumYOXy8ezE6rVWaqzx+93U/NxI2Mf DjImsjrQbQLKE2634BDSiOXEZLvRpPQmmKIBB63TLbFvfc6lar7oDSLF5m6tKoZe GfhvFe3A/Rqq6aT/5cnd9V2FlAofbJp4OAiaUDOrYhLTlsEhvfffrOG/JbFXrvFX gsoJmTByg8v/ax0Ul/cldXaJb/62ebeUt9y6WmhIItnmdVDgYc7VBZmjGJYuqIr6 sv9Vz4ZQ2VJ3drvvbrudAcXEy5rDYfX0+Ywk0nQ79YnadC2Ua2mit/wW/wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAYYjkQ/lLlAwa4ciGCPw6FGD5SPMB8GA1UdIwQY MBaAFGs3jfJ72SYMfrFSc+mT42sJhdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80ODVlYmMtN2VlNC00MjcwLWJkYzgt OTdmYTgwYzBkZjQxLzEvQmhpT1JELVV1VURCcmh5SVlJX0RvVVlQbEk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80ODVlYmMtN2VlNC00MjcwLWJkYzgtOTdmYTgwYzBkZjQx LzEvYXplTjhudlpKZ3gtc1ZKejZaUGphd21GMmhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCVBWwMA0E AgACMAcDBQMqDfVAMA0GCSqGSIb3DQEBCwUAA4IBAQC01HccxMgQNTuvoBmic0JQ FrwRyrrsQwg9wkhvwwEKMY531npCa8nz2cPXKjtN+pUU8ef7sEF8L4zWscdkj+uk I/tXJanoROm1yWBAM824sI+i7FW/JgCdmx2n5gKLKmRuzPEpAisUCAEZ2aB5brn0 8cAI5kyue9iHW5JCY+eFWwWmCgoey4OQEXybtr8uO9NtmhfwuNaJsjzbGsJv9gOH nFwzWUTktyMswfb4Mw14p/sjULAfw5DIXaoNHEl/e68ZycKXQIuWNFEPGqgnpjRb Aqf9S/eRtnEgGqv1InZ3xmcxdWxAbrHNJCJW05wKzHGCdipGBA4+i2cFhamfMxXC -----END CERTIFICATE-----Generated at Mon Jan 26 08:57:46 2026 by rpki-client