This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/bzP88qk3s6ARiJlGywZ2317-Qkk.roa File: bzP88qk3s6ARiJlGywZ2317-Qkk.roa (raw, json) Hash identifier: rTe2kXa8ciYIeylVjero2gdZ6EZEe9lmQgdYKe0pvzc= Subject key identifier: 6F:33:FC:F2:A9:37:B3:A0:11:88:99:46:CB:06:76:DF:5E:FE:42:49 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 019BDA10F08900D1CD5767F875B3D5293AF3 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/bzP88qk3s6ARiJlGywZ2317-Qkk.roa Signing time: Tue 20 Jan 2026 06:21:41 +0000 ROA not before: Tue 20 Jan 2026 06:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 80.246.231.0/24 maxlen: 24 80.246.232.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:da:10:f0:89:00:d1:cd:57:67:f8:75:b3:d5:29:3a:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Jan 20 06:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f33fcf2a937b3a011889946cb0676df5efe4249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ec:27:42:92:36:dd:0c:d8:aa:8b:dc:a7:ab: 8f:aa:a0:7d:32:db:d9:74:25:86:5d:92:3a:a8:b5: 69:28:42:49:d9:5c:99:a5:8b:7b:b6:82:15:19:de: 98:f5:92:1f:c4:12:70:0e:e9:c8:9e:4b:c4:b3:11: 6d:da:b5:89:8c:80:5a:af:a4:1b:5b:1b:81:3c:a2: fe:84:13:67:09:4e:2b:37:15:04:b6:83:f2:e6:7c: 41:e8:1e:b9:ff:31:f1:18:a6:90:4e:c8:3b:f8:85: eb:d3:9d:8b:4a:c8:9e:4a:1f:c0:f6:f0:5b:70:7d: 3a:0e:13:ff:d1:08:71:7a:87:2b:ca:7d:b1:4d:f7: 8a:ca:10:9f:0d:be:bb:a9:55:24:1e:d4:e7:c9:11: 28:45:aa:4e:cc:5f:0b:94:76:e8:1c:71:8b:25:7a: 45:0b:3c:47:ee:a8:d0:75:4a:57:d8:2a:90:28:56: b6:61:89:76:b0:6d:bf:42:2c:d3:22:c9:4d:f8:a8: 07:29:7c:26:63:d0:8c:92:94:97:61:08:c7:1b:36: a5:f9:02:45:38:a6:fe:e3:46:be:73:7f:3f:ec:6a: 82:8c:cd:c7:e2:88:98:da:2f:c3:d1:0f:a1:78:79: d1:21:05:45:eb:8a:d7:7f:38:c9:b6:fc:75:5e:ca: 81:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:33:FC:F2:A9:37:B3:A0:11:88:99:46:CB:06:76:DF:5E:FE:42:49 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/bzP88qk3s6ARiJlGywZ2317-Qkk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.246.231.0-80.246.239.255 Signature Algorithm: sha256WithRSAEncryption 74:25:4a:c9:8a:98:48:18:e2:0d:ee:45:9d:33:01:32:87:ed: 47:37:fa:20:05:fa:ef:7e:c9:37:4a:4d:4c:a6:33:47:8c:97: dd:82:3a:b1:e0:d5:91:17:0f:85:54:c0:61:a0:26:4a:80:ca: d6:42:93:a9:95:43:b0:3a:94:31:f2:92:8f:bc:8f:af:9b:25: dc:3f:e8:24:1c:34:e2:a9:e6:31:78:2f:18:a7:91:65:12:aa: 68:c9:5b:25:23:3c:a7:a5:f7:b4:95:d8:41:d7:29:47:6f:67: 9c:b0:81:05:de:b6:7d:54:82:17:c5:e1:73:11:e3:41:f7:4a: 4a:65:57:4b:83:d3:67:24:30:7b:66:a3:1e:d4:67:4c:75:b2: 2b:a5:b4:c4:9a:fa:b0:cd:56:d8:ea:b7:a6:d6:57:8a:5d:92: 88:b3:8c:d3:de:cf:d2:b9:c6:9c:d2:98:b5:db:6c:0d:47:48: f1:b5:ab:de:dd:0d:26:4d:29:76:7e:c3:0d:48:b5:1d:ed:89: a8:29:4c:48:8d:af:d7:8d:35:45:4d:bb:fb:60:d8:38:76:49: 32:6b:a5:5e:f6:95:48:d6:bd:55:43:fe:18:ff:8e:b6:3c:e3: c9:d0:9b:e4:49:3a:9e:a6:8d:bf:4c:db:22:d4:93:f6:25:de: ac:70:37:a0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZvaEPCJANHNV2f4dbPVKTrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjYwMTIwMDYyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjMzZmNmMmE5MzdiM2EwMTE4ODk5NDZjYjA2NzZkZjVlZmU0MjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlewnQpI23QzYqovcp6uPqqB9MtvZ dCWGXZI6qLVpKEJJ2VyZpYt7toIVGd6Y9ZIfxBJwDunInkvEsxFt2rWJjIBar6Qb WxuBPKL+hBNnCU4rNxUEtoPy5nxB6B65/zHxGKaQTsg7+IXr052LSsieSh/A9vBb cH06DhP/0Qhxeocryn2xTfeKyhCfDb67qVUkHtTnyREoRapOzF8LlHboHHGLJXpF CzxH7qjQdUpX2CqQKFa2YYl2sG2/QizTIslN+KgHKXwmY9CMkpSXYQjHGzal+QJF OKb+40a+c38/7GqCjM3H4oiY2i/D0Q+heHnRIQVF64rXfzjJtvx1XsqB3QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFG8z/PKpN7OgEYiZRssGdt9e/kJJMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvYnpQODhxazNzNkFSaUpsR3l3WjIzMTctUWtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABQ9ucD BARQ9uAwDQYJKoZIhvcNAQELBQADggEBAHQlSsmKmEgY4g3uRZ0zATKH7Uc3+iAF +u9+yTdKTUymM0eMl92COrHg1ZEXD4VUwGGgJkqAytZCk6mVQ7A6lDHyko+8j6+b Jdw/6CQcNOKp5jF4LxinkWUSqmjJWyUjPKel97SV2EHXKUdvZ5ywgQXetn1UghfF 4XMR40H3SkplV0uD02ckMHtmox7UZ0x1siultMSa+rDNVtjqt6bWV4pdkoizjNPe z9K5xpzSmLXbbA1HSPG1q97dDSZNKXZ+ww1ItR3tiagpTEiNr9eNNUVNu/tg2Dh2 STJrpV72lUjWvVVD/hj/jrY848nQm+RJOp6mjb9M2yLUk/Yl3qxwN6A= -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:50 2026 by rpki-client