This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/bzkVBP_m0QOkL7HvzQFXrT5rq10.roa File: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (raw, json) Hash identifier: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI= Subject key identifier: 6F:39:15:04:FF:E6:D1:03:A4:2F:B1:EF:CD:01:57:AD:3E:6B:AB:5D Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019B7FF1328BB95B2A62175229B52B920A89 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/bzkVBP_m0QOkL7HvzQFXrT5rq10.roa Signing time: Fri 02 Jan 2026 18:21:12 +0000 ROA not before: Fri 02 Jan 2026 18:21:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203661 IP address blocks: 2a04:92c7:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:32:8b:b9:5b:2a:62:17:52:29:b5:2b:92:0a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jan 2 18:21:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f391504ffe6d103a42fb1efcd0157ad3e6bab5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b3:73:ac:a5:d9:54:b1:a2:8e:2e:c2:2f:dd: bd:6c:69:d2:5f:bc:b9:2b:41:66:6c:03:1a:24:e2: 31:af:43:9c:aa:92:7f:63:2f:33:4a:7f:10:04:34: ea:6b:40:94:b9:ae:6a:26:13:b0:9a:ee:4e:2e:17: 40:81:56:5a:5b:f0:13:ff:d9:0f:9b:8d:44:5d:a4: a4:e4:37:e0:06:89:9b:71:ec:34:a7:08:d1:eb:79: f0:60:c4:5d:a6:12:5f:f9:97:35:f2:57:17:77:c2: 15:48:93:26:0c:54:d8:2e:08:e4:7c:7a:11:c2:27: c3:15:09:17:5e:ea:af:14:02:af:a4:12:9b:68:05: cb:59:a0:b8:e2:da:ad:67:c2:5e:3d:b8:6b:dd:98: 2d:bf:db:ba:51:cd:9c:1c:90:18:4d:d3:f2:b7:8b: 4f:64:34:ba:d5:1d:f0:00:c5:c0:aa:5f:df:6e:70: 7d:bc:45:4d:22:26:9d:07:bb:a1:bf:7e:9c:fe:1c: 6c:78:23:20:bb:81:05:28:ef:d1:7e:ab:94:b1:75: 4b:02:af:ae:15:0c:f1:03:97:95:d3:35:8c:c9:85: 42:31:99:51:54:d8:b5:89:a9:b0:98:cd:2f:97:f2: 10:5d:f1:e2:e5:c1:d3:db:b3:76:17:e0:05:6b:35: 12:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:39:15:04:FF:E6:D1:03:A4:2F:B1:EF:CD:01:57:AD:3E:6B:AB:5D X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/bzkVBP_m0QOkL7HvzQFXrT5rq10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a04:92c7:b::/48 Signature Algorithm: sha256WithRSAEncryption 81:30:e7:52:46:43:f1:9b:cc:d1:6d:ce:7d:71:e2:c1:7d:d4: c3:32:7e:32:a9:46:2f:77:f4:66:69:25:e7:51:8b:44:c3:98: c0:6c:6e:26:fc:59:d6:ec:b9:be:ff:f4:fb:a1:37:1a:51:e0: a1:f7:20:f1:c5:41:73:03:f4:94:a8:3c:bd:23:11:28:e3:ea: 27:ee:e3:7c:3d:cb:38:18:a2:19:da:47:17:3e:dc:b1:aa:8f: d2:e0:cd:5a:25:6b:5d:f4:cf:21:f7:68:1c:84:63:44:14:11: 76:c5:55:83:6a:d3:f6:00:51:e4:cc:a8:ef:66:29:db:d8:08: aa:fa:be:fe:3b:a0:ae:ad:c3:f3:72:e7:c6:48:71:04:2b:35: 86:74:77:8b:76:65:92:6e:0f:5c:bb:39:f4:5f:66:85:1a:c9: e0:37:52:49:23:53:41:6e:5c:70:6b:f2:c6:8f:91:7a:fd:62: cf:72:f0:39:15:65:79:46:74:52:65:bd:cc:68:af:49:2a:ea: 57:88:f4:97:d6:d1:7d:c8:82:ad:ee:5a:fd:d0:34:00:2c:42: ba:45:28:05:ea:6f:85:c2:7d:e9:44:3d:74:37:b6:ed:40:95: 9e:16:dd:ed:5d:27:17:52:0a:4f:8f:af:c4:ed:12:e0:0c:8f: 7c:a3:1c:4d -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt/8TKLuVsqYhdSKbUrkgqJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwMTAyMTgyMTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjM5MTUwNGZmZTZkMTAzYTQyZmIxZWZjZDAxNTdhZDNlNmJhYjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LNzrKXZVLGiji7CL929bGnSX7y5 K0FmbAMaJOIxr0OcqpJ/Yy8zSn8QBDTqa0CUua5qJhOwmu5OLhdAgVZaW/AT/9kP m41EXaSk5DfgBombcew0pwjR63nwYMRdphJf+Zc18lcXd8IVSJMmDFTYLgjkfHoR wifDFQkXXuqvFAKvpBKbaAXLWaC44tqtZ8JePbhr3Zgtv9u6Uc2cHJAYTdPyt4tP ZDS61R3wAMXAql/fbnB9vEVNIiadB7uhv36c/hxseCMgu4EFKO/RfquUsXVLAq+u FQzxA5eV0zWMyYVCMZlRVNi1iamwmM0vl/IQXfHi5cHT27N2F+AFazUSEwIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFG85FQT/5tEDpC+x780BV60+a6tdMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvYnprVkJQX20wUU9rTDdIdnpRRlhyVDVycTEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgSSxwAL MA0GCSqGSIb3DQEBCwUAA4IBAQCBMOdSRkPxm8zRbc59ceLBfdTDMn4yqUYvd/Rm aSXnUYtEw5jAbG4m/FnW7Lm+//T7oTcaUeCh9yDxxUFzA/SUqDy9IxEo4+on7uN8 Pcs4GKIZ2kcXPtyxqo/S4M1aJWtd9M8h92gchGNEFBF2xVWDatP2AFHkzKjvZinb 2Aiq+r7+O6CurcPzcufGSHEEKzWGdHeLdmWSbg9cuzn0X2aFGsngN1JJI1NBblxw a/LGj5F6/WLPcvA5FWV5RnRSZb3MaK9JKupXiPSX1tF9yIKt7lr90DQALEK6RSgF 6m+Fwn3pRD10N7btQJWeFt3tXScXUgpPj6/E7RLgDI98oxxN -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:12 2026 by rpki-client