This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/BGZv9D_VhejCl-jfPTnDgqEd_C8.roa File: BGZv9D_VhejCl-jfPTnDgqEd_C8.roa (raw, json) Hash identifier: 24tOC1DrpPlHEZKfZuWIAXFtAWXcsMjorM9au3Z+HuM= Subject key identifier: 04:66:6F:F4:3F:D5:85:E8:C2:97:E8:DF:3D:39:C3:82:A1:1D:FC:2F Certificate issuer: /CN=a5abc43afced72fb92778728bee571c678f53853 Certificate serial: 019B7C7EF24C70C959ACFC3A3BD72FA3E244 Authority key identifier: A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/BGZv9D_VhejCl-jfPTnDgqEd_C8.roa Signing time: Fri 02 Jan 2026 02:17:32 +0000 ROA not before: Fri 02 Jan 2026 02:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30781 IP address blocks: 83.97.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.mft rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f2:4c:70:c9:59:ac:fc:3a:3b:d7:2f:a3:e2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5abc43afced72fb92778728bee571c678f53853 Validity Not Before: Jan 2 02:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=04666ff43fd585e8c297e8df3d39c382a11dfc2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:d7:07:bc:39:ef:90:68:f4:11:89:c7:1d: 3d:8c:db:bf:8f:71:d5:f2:f2:1d:1d:1d:75:85:eb: fc:c9:12:40:0d:43:86:f5:8d:87:f1:bb:24:d0:a9: 16:8f:00:b7:43:b9:3b:a8:dd:c3:20:7f:b2:df:87: d0:1e:d0:8d:82:cd:7f:b7:c2:38:2a:79:21:11:1e: f5:cb:38:12:99:23:6a:d8:32:12:79:01:82:9b:bb: 43:1e:54:60:a2:d7:0c:e7:57:01:6c:9e:9a:e4:e1: 85:cd:05:76:f2:42:d5:a2:52:51:62:f2:ec:60:4d: 6f:2e:98:04:77:5b:5e:9e:de:2e:7c:2a:34:2c:b7: 3c:8e:95:dc:21:23:91:67:3b:89:64:bf:88:50:da: b4:df:27:09:11:bd:cc:31:1e:bb:e1:c5:f4:0d:97: 0c:3e:99:8e:c5:d7:04:17:84:0f:e9:1b:7f:61:15: fc:3c:57:48:a5:f8:43:ec:61:93:9e:bb:a4:db:0f: 05:77:c4:e9:cf:02:63:8f:17:f5:07:8a:aa:57:cd: 23:15:51:31:05:52:64:1e:22:ed:5f:02:db:4f:4c: 52:e0:a3:92:c8:40:03:23:3b:56:18:ba:c2:1a:36: 57:d3:bc:36:13:fb:f2:ac:b7:61:73:7a:20:58:9e: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:66:6F:F4:3F:D5:85:E8:C2:97:E8:DF:3D:39:C3:82:A1:1D:FC:2F X509v3 Authority Key Identifier: keyid:A5:AB:C4:3A:FC:ED:72:FB:92:77:87:28:BE:E5:71:C6:78:F5:38:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pavEOvztcvuSd4covuVxxnj1OFM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/BGZv9D_VhejCl-jfPTnDgqEd_C8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9b76a-10b3-47c0-a517-b5e91fc65051/1/pavEOvztcvuSd4covuVxxnj1OFM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.97.56.0/21 Signature Algorithm: sha256WithRSAEncryption c0:6f:66:63:90:90:f7:81:11:e6:e5:07:c6:a5:a0:c1:f8:4c: c9:b5:0d:7f:4f:85:76:bc:d5:f8:7a:28:dd:5c:8f:44:3f:d5: f4:91:99:53:5a:ed:31:52:bb:df:17:74:c1:68:3c:ab:2b:1d: 63:89:41:70:b4:4a:5b:51:98:a4:96:75:aa:9a:b0:06:d4:45: bd:bb:23:ef:77:b9:4a:23:2d:0c:5c:66:de:45:2d:4a:14:cb: 1d:32:f8:ab:0c:b0:6d:68:01:09:da:37:e9:5b:4c:4a:6a:55: ab:94:af:7c:ab:cd:67:d1:73:b5:bb:cc:8f:c6:63:0a:9a:2b: 54:a1:71:55:c9:16:f0:e1:a6:2a:3a:e1:80:c3:dd:60:97:6f: 10:50:07:2d:cf:93:ad:34:e1:97:37:8f:c4:d7:3e:46:0d:24: 4a:19:d3:ab:45:8d:14:60:4f:4c:e7:c7:61:f2:51:0d:f8:21: ec:d8:44:a5:93:c8:2a:30:77:fc:ff:55:ef:3a:98:d1:2d:f5: 7d:dd:33:f0:84:06:09:48:7e:e9:8d:17:ae:a8:6d:84:07:a5: 75:5c:e3:77:80:d5:40:c6:34:65:b1:95:59:de:b6:78:6e:f0: 8b:25:f4:36:c7:c0:7c:18:2e:67:64:69:6f:a6:29:35:80:e1: a1:18:06:9e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fvJMcMlZrPw6O9cvo+JEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWJjNDNhZmNlZDcyZmI5Mjc3ODcyOGJlZTU3MWM2Nzhm NTM4NTMwHhcNMjYwMTAyMDIxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDY2NmZmNDNmZDU4NWU4YzI5N2U4ZGYzZDM5YzM4MmExMWRmYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NXXB7w575Bo9BGJxx09jNu/j3HV 8vIdHR11hev8yRJADUOG9Y2H8bsk0KkWjwC3Q7k7qN3DIH+y34fQHtCNgs1/t8I4 KnkhER71yzgSmSNq2DISeQGCm7tDHlRgotcM51cBbJ6a5OGFzQV28kLVolJRYvLs YE1vLpgEd1tent4ufCo0LLc8jpXcISORZzuJZL+IUNq03ycJEb3MMR674cX0DZcM PpmOxdcEF4QP6Rt/YRX8PFdIpfhD7GGTnruk2w8Fd8TpzwJjjxf1B4qqV80jFVEx BVJkHiLtXwLbT0xS4KOSyEADIztWGLrCGjZX07w2E/vyrLdhc3ogWJ5bLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFARmb/Q/1YXowpfo3z05w4KhHfwvMB8GA1UdIwQY MBaAFKWrxDr87XL7kneHKL7lccZ49ThTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTct YjVlOTFmYzY1MDUxLzEvQkdadjlEX1ZoZWpDbC1qZlBUbkRncUVkX0M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9lOWI3NmEtMTBiMy00N2MwLWE1MTctYjVlOTFmYzY1MDUx LzEvcGF2RU92enRjdnVTZDRjb3Z1Vnh4bmoxT0ZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDU2E4MA0G CSqGSIb3DQEBCwUAA4IBAQDAb2ZjkJD3gRHm5QfGpaDB+EzJtQ1/T4V2vNX4eijd XI9EP9X0kZlTWu0xUrvfF3TBaDyrKx1jiUFwtEpbUZiklnWqmrAG1EW9uyPvd7lK Iy0MXGbeRS1KFMsdMvirDLBtaAEJ2jfpW0xKalWrlK98q81n0XO1u8yPxmMKmitU oXFVyRbw4aYqOuGAw91gl28QUActz5OtNOGXN4/E1z5GDSRKGdOrRY0UYE9M58dh 8lEN+CHs2ESlk8gqMHf8/1XvOpjRLfV93TPwhAYJSH7pjReuqG2EB6V1XON3gNVA xjRlsZVZ3rZ4bvCLJfQ2x8B8GC5nZGlvpik1gOGhGAae -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:50 2026 by rpki-client