This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BPiizw_5Zv3x9pF992MDnHcp-zs.roa File: BPiizw_5Zv3x9pF992MDnHcp-zs.roa (raw, json) Hash identifier: VjkQRuPH2zhLDtpgNCGZYnzoKEYsm+d3me2Y4K+GerE= Subject key identifier: 04:F8:A2:CF:0F:F9:66:FD:F1:F6:91:7D:F7:63:03:9C:77:29:FB:3B Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Certificate serial: 019B7E39157BB0D4B0177A6516F000887256 Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BPiizw_5Zv3x9pF992MDnHcp-zs.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207373 IP address blocks: 85.143.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:15:7b:b0:d4:b0:17:7a:65:16:f0:00:88:72:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04f8a2cf0ff966fdf1f6917df763039c7729fb3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:3d:fd:c6:53:8b:58:b3:c9:50:50:d5:cf:43: f2:5c:d5:f1:22:67:e8:ed:bf:e3:e4:21:cb:4e:86: 30:15:f7:c7:b1:fc:30:5c:f8:2d:09:2a:70:24:1a: 0d:8e:f2:a9:ee:dc:db:00:31:55:5b:cd:9b:53:3c: c9:77:2b:e6:6f:7b:f4:6d:40:06:08:8f:8a:c3:7c: 18:63:e0:c4:39:46:b9:77:5b:6e:d2:93:f8:d6:55: 0f:06:f9:e7:d5:f9:6d:70:36:fc:46:f6:07:30:fb: 18:aa:0e:3b:24:2b:85:2c:0a:6a:1a:4c:ef:80:57: fe:69:6a:87:7b:cd:39:d1:1d:5a:03:99:a2:1e:86: eb:7f:58:34:03:a3:c9:00:c8:29:b2:2c:10:db:bf: 8d:64:70:0b:31:99:cc:d9:4f:0e:53:64:da:7f:f6: f0:4d:24:f0:b4:ae:83:16:4f:ed:4e:6a:60:e1:80: 62:4c:3c:1d:3d:56:80:75:26:db:7d:f1:35:96:3a: f1:c6:46:87:37:fc:b1:bc:ef:20:fb:09:79:b1:2b: 81:75:f1:5c:04:44:d9:2a:c7:7b:df:e2:23:03:06: 3e:d8:95:22:9b:34:c4:01:45:cd:16:bb:24:54:c1: 57:f0:2f:cb:fb:34:01:dc:70:f4:1b:3d:11:50:46: d0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F8:A2:CF:0F:F9:66:FD:F1:F6:91:7D:F7:63:03:9C:77:29:FB:3B X509v3 Authority Key Identifier: keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/BPiizw_5Zv3x9pF992MDnHcp-zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.143.24.0/24 Signature Algorithm: sha256WithRSAEncryption 93:0c:a9:e9:26:a7:e2:57:b8:fc:57:79:90:6e:70:ef:2f:8d: 87:8f:d8:91:d5:b9:90:06:ff:21:21:0e:47:bd:ad:a7:a4:08: 84:3f:8d:4e:ed:18:81:a5:8b:76:1a:ff:d5:b4:9a:57:7a:3a: ff:b2:e2:0d:7b:0c:93:7b:67:13:3e:77:e9:0d:44:8b:c0:10: 99:c1:37:02:fe:64:16:29:f1:7b:0c:0d:d7:a7:2e:97:43:01: e4:42:f7:d2:b5:67:0a:e9:ad:38:96:11:a6:8a:d6:7e:9a:55: ac:1d:2f:63:06:87:f0:2f:90:b8:b8:e8:9f:90:b5:08:8e:e9: 47:69:c6:39:4f:e2:f8:b1:72:6c:f6:ca:da:39:49:99:2e:97: 14:bd:44:c7:bd:21:47:7c:36:a4:a1:5c:38:71:c9:bd:8d:c0: 1e:64:ad:69:6c:7d:20:5f:d3:66:e3:1c:9c:bf:d8:45:79:29: db:ec:91:94:ac:75:1a:98:18:0c:3c:1d:34:7a:bd:ab:a0:ba: 4e:de:54:0b:43:96:bf:72:11:4a:02:59:b9:32:f2:a9:a5:ca: a0:aa:e9:3c:4f:c2:a4:40:63:b6:98:0d:ef:4d:0e:07:39:7c: b2:b9:d5:ca:62:72:39:69:fc:e6:a5:b7:d2:6a:ed:11:5c:18: f2:3e:dc:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ORV7sNSwF3plFvAAiHJWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4YjIyMDIzYjZlYWQ0YzI5NjgzYTlmZWQ0NDkzZDAzZGVl MmM2ODUwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNGY4YTJjZjBmZjk2NmZkZjFmNjkxN2RmNzYzMDM5Yzc3MjlmYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD39xlOLWLPJUFDVz0PyXNXxImfo 7b/j5CHLToYwFffHsfwwXPgtCSpwJBoNjvKp7tzbADFVW82bUzzJdyvmb3v0bUAG CI+Kw3wYY+DEOUa5d1tu0pP41lUPBvnn1fltcDb8RvYHMPsYqg47JCuFLApqGkzv gFf+aWqHe8050R1aA5miHobrf1g0A6PJAMgpsiwQ27+NZHALMZnM2U8OU2Taf/bw TSTwtK6DFk/tTmpg4YBiTDwdPVaAdSbbffE1ljrxxkaHN/yxvO8g+wl5sSuBdfFc BETZKsd73+IjAwY+2JUimzTEAUXNFrskVMFX8C/L+zQB3HD0Gz0RUEbQNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAT4os8P+Wb98faRffdjA5x3Kfs7MB8GA1UdIwQY MBaAFDiyICO26tTCloOp/tRJPQPe4saFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMt NDBkOTViZDMzZmNiLzEvQlBpaXp3XzVadjN4OXBGOTkyTURuSGNwLXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84ODEzZjUtNGU3Yi00ZDUxLWI1ZjMtNDBkOTViZDMzZmNi LzEvT0xJZ0k3YnExTUtXZzZuLTFFazlBOTdpeG9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVY8YMA0G CSqGSIb3DQEBCwUAA4IBAQCTDKnpJqfiV7j8V3mQbnDvL42Hj9iR1bmQBv8hIQ5H va2npAiEP41O7RiBpYt2Gv/VtJpXejr/suINewyTe2cTPnfpDUSLwBCZwTcC/mQW KfF7DA3Xpy6XQwHkQvfStWcK6a04lhGmitZ+mlWsHS9jBofwL5C4uOifkLUIjulH acY5T+L4sXJs9sraOUmZLpcUvUTHvSFHfDakoVw4ccm9jcAeZK1pbH0gX9Nm4xyc v9hFeSnb7JGUrHUamBgMPB00er2roLpO3lQLQ5a/chFKAlm5MvKppcqgquk8T8Kk QGO2mA3vTQ4HOXyyudXKYnI5afzmpbfSau0RXBjyPtyd -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:49 2026 by rpki-client