This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/Bv2hzFMshraYJZMhKiNAPQW5yzo.roa File: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (raw, json) Hash identifier: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds= Subject key identifier: 06:FD:A1:CC:53:2C:86:B6:98:25:93:21:2A:23:40:3D:05:B9:CB:3A Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 019B797EFD7397BEA6801CE1375F9773A739 Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/Bv2hzFMshraYJZMhKiNAPQW5yzo.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209133 IP address blocks: 94.247.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fd:73:97:be:a6:80:1c:e1:37:5f:97:73:a7:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=06fda1cc532c86b6982593212a23403d05b9cb3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:45:ea:27:78:24:7c:12:3a:6a:65:56:15:63: 65:c8:e7:d8:b7:e3:1b:a0:d5:c6:90:c5:7a:85:c9: 2c:4c:44:15:ce:e0:23:44:a0:7c:41:75:d1:e0:fd: d3:63:1c:1f:36:c7:a2:39:45:55:11:a5:aa:6e:ce: 36:c5:fd:4b:03:3a:62:14:65:7f:e7:af:86:ce:58: c2:02:6b:88:3f:69:73:35:83:c8:c6:0d:99:52:e7: 29:af:33:4a:b5:87:11:61:49:71:7a:7e:bf:17:57: f4:24:9f:c3:58:41:80:10:2d:8d:2b:b1:68:14:9b: 49:67:93:c6:b3:81:a8:81:a0:1e:08:90:19:52:08: 3e:f4:50:5f:c5:8a:a0:f1:70:02:1c:34:4a:2c:e4: e6:bd:2c:e3:43:2f:a7:3b:94:e6:6a:07:90:d9:95: ee:0a:6f:2b:5f:fd:f4:a1:49:56:43:4c:b0:94:84: 1d:c0:79:84:0e:ad:17:67:fa:9f:16:ce:82:13:3f: 98:2d:37:10:33:38:e8:fe:1e:e8:8f:f1:a3:38:f5: 03:75:e5:d3:35:5d:2e:1d:6c:41:c5:15:20:68:cc: 49:65:e6:dc:51:a0:b3:79:2c:88:1a:df:98:0a:52: 34:d6:52:56:f6:08:42:f3:86:8b:3c:08:cd:95:49: ab:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:FD:A1:CC:53:2C:86:B6:98:25:93:21:2A:23:40:3D:05:B9:CB:3A X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/Bv2hzFMshraYJZMhKiNAPQW5yzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.247.108.0/24 Signature Algorithm: sha256WithRSAEncryption ab:dc:ea:aa:ee:63:35:bc:80:4e:ba:84:41:79:73:63:4b:75: fd:c1:97:72:6f:30:75:ad:07:8e:0a:e0:20:6b:39:c9:7d:48: e2:0d:36:3a:dd:10:bd:a9:c3:02:1f:83:9a:bf:39:2a:d6:c1: bb:70:16:7b:27:d3:6b:5b:34:92:c3:da:28:fc:39:2a:fb:1a: 18:15:7f:24:44:4a:f9:3f:cb:4c:38:fd:c4:7c:be:67:29:b0: d3:a0:7b:be:fe:85:59:9b:c4:60:89:cc:49:66:bc:25:7c:66: 4f:24:d6:69:08:cc:71:00:0f:85:e0:ae:b1:ca:bd:16:5a:e4: 21:f8:eb:51:60:73:bd:c8:5b:56:56:c8:c1:58:db:d1:ae:ae: a6:dd:a2:6b:60:0e:38:7f:11:ad:f0:66:ef:19:54:73:0a:9b: d4:70:d9:e9:85:69:39:59:ed:de:d5:9c:26:40:19:dd:c9:fa: 22:48:cf:bd:29:36:30:4a:ed:b3:db:7f:4a:67:09:f8:44:fb: 97:aa:7a:d9:75:3d:dc:3c:b0:98:d9:82:42:b3:1a:c3:37:1c: 03:3c:63:91:16:d4:de:ff:d0:ee:b7:e3:cd:03:09:20:d5:93: 2e:f4:04:5c:2c:13:e8:44:29:f8:a8:93:37:69:e0:ea:6a:40: 6f:cb:55:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fv1zl76mgBzhN1+Xc6c5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNmZkYTFjYzUzMmM4NmI2OTgyNTkzMjEyYTIzNDAzZDA1YjljYjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0XqJ3gkfBI6amVWFWNlyOfYt+Mb oNXGkMV6hcksTEQVzuAjRKB8QXXR4P3TYxwfNseiOUVVEaWqbs42xf1LAzpiFGV/ 56+GzljCAmuIP2lzNYPIxg2ZUucprzNKtYcRYUlxen6/F1f0JJ/DWEGAEC2NK7Fo FJtJZ5PGs4GogaAeCJAZUgg+9FBfxYqg8XACHDRKLOTmvSzjQy+nO5TmageQ2ZXu Cm8rX/30oUlWQ0ywlIQdwHmEDq0XZ/qfFs6CEz+YLTcQMzjo/h7oj/GjOPUDdeXT NV0uHWxBxRUgaMxJZebcUaCzeSyIGt+YClI01lJW9ghC84aLPAjNlUmrCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAb9ocxTLIa2mCWTISojQD0Fucs6MB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvQnYyaHpGTXNocmFZSlpNaEtpTkFQUVc1eXpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXvdsMA0G CSqGSIb3DQEBCwUAA4IBAQCr3Oqq7mM1vIBOuoRBeXNjS3X9wZdybzB1rQeOCuAg aznJfUjiDTY63RC9qcMCH4Oavzkq1sG7cBZ7J9NrWzSSw9oo/Dkq+xoYFX8kREr5 P8tMOP3EfL5nKbDToHu+/oVZm8RgicxJZrwlfGZPJNZpCMxxAA+F4K6xyr0WWuQh +OtRYHO9yFtWVsjBWNvRrq6m3aJrYA44fxGt8GbvGVRzCpvUcNnphWk5We3e1Zwm QBndyfoiSM+9KTYwSu2z239KZwn4RPuXqnrZdT3cPLCY2YJCsxrDNxwDPGORFtTe /9Dut+PNAwkg1ZMu9ARcLBPoRCn4qJM3aeDqakBvy1WJ -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:37 2026 by rpki-client