This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa File: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (raw, json) Hash identifier: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw= Subject key identifier: 07:3A:3F:54:7C:E1:C8:CC:55:9A:56:86:6F:B7:83:A4:C3:B3:28:DC Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019B7FF12E5FC73B2972FDA38DE7D6E6F4EB Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa Signing time: Fri 02 Jan 2026 18:21:11 +0000 ROA not before: Fri 02 Jan 2026 18:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9053 IP address blocks: 2a0a:54c1:28::/48 maxlen: 48 2a0a:54c1:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:2e:5f:c7:3b:29:72:fd:a3:8d:e7:d6:e6:f4:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jan 2 18:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=073a3f547ce1c8cc559a56866fb783a4c3b328dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5e:2b:4e:96:b2:96:5d:81:cc:ac:93:24:8c: 47:ee:ca:b0:68:40:6f:dd:84:7d:69:1b:ac:d4:39: 6e:4b:b5:84:5f:1c:5c:fb:d9:bc:f3:53:07:81:69: 3c:52:f9:3f:c2:7f:3c:3a:5e:28:20:e9:59:06:7c: bc:a9:ff:45:f9:d0:fa:87:04:36:9c:2a:8a:62:81: 01:c1:06:eb:d5:60:8a:50:29:b7:11:1f:b2:b3:b0: 24:f5:5f:3d:eb:9f:b5:2a:a2:41:9f:38:f1:51:07: 3b:22:8e:da:78:e2:8d:65:de:54:da:7e:33:57:01: 42:d1:b3:74:ab:25:04:d9:41:d3:3d:ab:40:17:9c: eb:61:6c:78:25:73:a4:61:ff:1f:29:7e:a2:f4:2e: e0:ea:35:a0:b4:58:4f:ae:9c:f3:ea:b6:e4:9d:ef: 60:87:e3:e4:cf:79:e1:a6:12:49:0d:40:06:cd:cd: c5:f6:3b:5d:29:d8:d0:b8:11:d6:b3:9f:80:53:74: e9:1c:c6:c1:28:9c:68:66:e7:90:72:61:fd:50:7f: 0b:9b:9b:dc:24:8e:92:3d:ce:69:64:d8:b6:95:7d: fb:19:51:5c:ba:c2:03:2a:b3:1e:f0:1f:61:73:01: 2b:f9:dc:b7:e3:3e:78:29:86:b5:de:e9:54:7d:2a: 96:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:3A:3F:54:7C:E1:C8:CC:55:9A:56:86:6F:B7:83:A4:C3:B3:28:DC X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:54c1:28::/47 Signature Algorithm: sha256WithRSAEncryption 13:d2:6c:fc:fd:37:0d:40:84:7e:2a:63:e2:61:91:fe:1d:35: 6e:29:46:cb:03:57:49:8e:11:f0:80:2a:70:6c:5c:92:57:f2: de:e9:3f:b3:a1:44:82:3d:4c:9f:88:df:30:a6:13:06:91:55: 0e:ec:f4:e0:e4:83:72:ac:d7:3f:6c:8e:5e:c4:b1:f9:ca:d5: 38:bd:90:3d:72:d1:a3:d5:82:20:8a:c9:d2:a0:bf:7a:fd:53: ef:8b:53:66:e1:f1:20:13:70:26:f0:7a:2d:85:21:9e:b7:f5: 1d:5d:d0:be:3a:38:ec:6c:7f:f9:ea:f7:62:3f:74:fa:7e:bd: 6f:d6:b9:f2:80:7b:a4:4a:39:af:be:29:36:03:95:4c:28:23: 09:00:d8:09:53:1b:b9:28:c1:71:ce:ee:a3:05:d0:a1:b1:aa: b0:2d:3f:87:a1:99:3a:56:25:11:b4:e9:4d:f8:0c:aa:d9:12: 6f:d4:51:d0:c8:de:e5:ce:4b:b9:55:02:5e:6f:d7:37:df:54: 52:26:a7:a7:78:11:25:87:7a:59:2c:ae:7c:d7:af:69:fe:46: d5:a3:1a:b6:dc:5b:b9:df:d4:2c:4f:12:28:f0:90:e1:fa:cd: 96:30:4e:a0:4a:2c:c4:54:1f:0a:62:ab:2f:7d:6a:4a:bf:83: f3:97:c0:a6 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8S5fxzspcv2jjefW5vTrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwMTAyMTgyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzNhM2Y1NDdjZTFjOGNjNTU5YTU2ODY2ZmI3ODNhNGMzYjMyOGRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V4rTpayll2BzKyTJIxH7sqwaEBv 3YR9aRus1DluS7WEXxxc+9m881MHgWk8Uvk/wn88Ol4oIOlZBny8qf9F+dD6hwQ2 nCqKYoEBwQbr1WCKUCm3ER+ys7Ak9V8965+1KqJBnzjxUQc7Io7aeOKNZd5U2n4z VwFC0bN0qyUE2UHTPatAF5zrYWx4JXOkYf8fKX6i9C7g6jWgtFhPrpzz6rbkne9g h+Pkz3nhphJJDUAGzc3F9jtdKdjQuBHWs5+AU3TpHMbBKJxoZueQcmH9UH8Lm5vc JI6SPc5pZNi2lX37GVFcusIDKrMe8B9hcwEr+dy34z54KYa13ulUfSqWAQIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFAc6P1R84cjMVZpWhm+3g6TDsyjcMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvQnpvX1ZIemh5TXhWbWxhR2I3ZURwTU96S053LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBKgpUwQAo MA0GCSqGSIb3DQEBCwUAA4IBAQAT0mz8/TcNQIR+KmPiYZH+HTVuKUbLA1dJjhHw gCpwbFySV/Le6T+zoUSCPUyfiN8wphMGkVUO7PTg5INyrNc/bI5exLH5ytU4vZA9 ctGj1YIgisnSoL96/VPvi1Nm4fEgE3Am8HothSGet/UdXdC+OjjsbH/56vdiP3T6 fr1v1rnygHukSjmvvik2A5VMKCMJANgJUxu5KMFxzu6jBdChsaqwLT+HoZk6ViUR tOlN+Ayq2RJv1FHQyN7lzku5VQJeb9c331RSJqeneBElh3pZLK58169p/kbVoxq2 3Fu539QsTxIo8JDh+s2WME6gSizEVB8KYqsvfWpKv4Pzl8Cm -----END CERTIFICATE-----Generated at Sun Jan 25 13:01:34 2026 by rpki-client