This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/BzRL5dLKwivSlyjmJMancnc4uqU.roa File: BzRL5dLKwivSlyjmJMancnc4uqU.roa (raw, json) Hash identifier: UbHMELNkAAYWrKJkN37hNTOWEDyB+0NpPi1jJDfFK5I= Subject key identifier: 07:34:4B:E5:D2:CA:C2:2B:D2:97:28:E6:24:C6:A7:72:77:38:BA:A5 Certificate issuer: /CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Certificate serial: 019B76EB1C2013E78FD6A68B7F7E0C1E4A66 Authority key identifier: F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/BzRL5dLKwivSlyjmJMancnc4uqU.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47886 IP address blocks: 185.202.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.mft rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1c:20:13:e7:8f:d6:a6:8b:7f:7e:0c:1e:4a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5f0f07ca0a6b4cb2c159e9045974503ae288581 Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07344be5d2cac22bd29728e624c6a7727738baa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7c:5a:87:09:08:e0:9d:5b:23:2e:6c:92:c2: 41:89:8f:2b:66:06:db:99:00:d3:d7:eb:13:47:6f: 0a:00:4e:4c:0c:dd:83:20:bf:5b:b9:aa:d1:c9:0c: a1:18:d0:0b:e2:3f:c9:76:c7:41:63:f1:43:bc:cd: b4:ab:99:e1:46:b2:b0:2f:18:60:50:51:3c:51:bf: 7c:cf:a7:0b:d1:b9:66:89:de:eb:e9:f7:1b:6e:6a: de:bb:a7:9d:82:92:71:ba:f1:6a:6a:53:2e:22:c4: 6c:3c:b9:81:9a:6f:75:60:33:e6:f3:08:dc:82:7a: 62:e4:72:18:18:97:be:89:6a:b8:ab:28:31:1b:29: 4c:5e:01:b2:5d:54:d7:aa:78:81:8b:9f:13:db:0e: be:a5:7a:f0:57:80:bc:97:32:04:df:dc:59:3b:e6: 04:e8:cd:e3:21:1a:49:10:a6:3f:c5:cf:a8:a7:6a: db:4e:0f:74:e3:a8:f2:14:49:34:43:85:61:b2:9d: 6b:7e:55:8d:30:6f:96:2b:ee:b1:91:f7:3f:3f:f8: 8a:b6:e3:e6:ce:92:1b:6b:a8:92:47:b4:e1:a1:45: 15:67:08:1f:f3:78:7e:15:dc:c9:a3:02:82:80:9b: f1:82:1f:05:8c:7a:e1:9c:03:4f:a9:e2:1d:36:5c: 2a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:34:4B:E5:D2:CA:C2:2B:D2:97:28:E6:24:C6:A7:72:77:38:BA:A5 X509v3 Authority Key Identifier: keyid:F5:F0:F0:7C:A0:A6:B4:CB:2C:15:9E:90:45:97:45:03:AE:28:85:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fDwfKCmtMssFZ6QRZdFA64ohYE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/BzRL5dLKwivSlyjmJMancnc4uqU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/eb0d91-708c-4910-84f9-323486ca0540/1/9fDwfKCmtMssFZ6QRZdFA64ohYE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.202.255.0/24 Signature Algorithm: sha256WithRSAEncryption b8:cd:00:7b:12:b3:7f:dc:df:15:7c:ca:18:c3:0c:f8:2e:f5: 25:68:f3:a1:92:68:44:53:bb:24:0d:70:0b:c7:ca:d1:bf:42: 98:85:5c:f4:fb:78:c5:b7:eb:4d:b4:7b:ab:72:ee:b2:f6:df: 5b:0c:ce:36:c1:1f:fd:14:c4:2f:a8:c2:10:96:1b:ca:a7:08: fd:ec:02:b8:3b:30:3c:d0:98:d9:60:42:8f:ea:ce:1f:95:ec: e0:76:ee:47:65:5a:5b:a6:69:c9:4a:c3:ff:a4:36:1b:54:42: b1:95:c1:a9:34:e1:99:ee:16:c6:22:53:33:7f:74:52:a6:1f: bb:05:e9:1d:a8:4c:c8:0c:d4:ab:c5:6c:61:9c:b4:89:65:b9: b1:47:3a:2f:13:2d:9c:c2:9a:38:85:b5:21:3d:55:1f:3c:e7: 03:eb:4b:15:6c:84:e1:6e:0e:ec:34:22:f0:55:e1:55:d8:21: c5:a9:4a:1e:48:60:68:ca:e7:02:9b:5b:87:91:2e:ea:e3:3a: 47:eb:4a:3d:25:2e:f4:13:d2:b4:f6:9c:20:90:b2:e2:ae:05: 53:87:91:eb:6e:d9:b9:29:c2:79:16:c1:59:2c:0b:1c:23:e1: 32:f1:3b:35:d3:d9:a6:4f:0a:b7:ac:49:40:61:c4:a3:67:68: e8:7e:0b:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xwgE+eP1qaLf34MHkpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZjBmMDdjYTBhNmI0Y2IyYzE1OWU5MDQ1OTc0NTAzYWUy ODg1ODEwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzM0NGJlNWQyY2FjMjJiZDI5NzI4ZTYyNGM2YTc3Mjc3MzhiYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HxahwkI4J1bIy5sksJBiY8rZgbb mQDT1+sTR28KAE5MDN2DIL9buarRyQyhGNAL4j/JdsdBY/FDvM20q5nhRrKwLxhg UFE8Ub98z6cL0blmid7r6fcbbmreu6edgpJxuvFqalMuIsRsPLmBmm91YDPm8wjc gnpi5HIYGJe+iWq4qygxGylMXgGyXVTXqniBi58T2w6+pXrwV4C8lzIE39xZO+YE 6M3jIRpJEKY/xc+op2rbTg9046jyFEk0Q4Vhsp1rflWNMG+WK+6xkfc/P/iKtuPm zpIba6iSR7ThoUUVZwgf83h+FdzJowKCgJvxgh8FjHrhnANPqeIdNlwqxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAc0S+XSysIr0pco5iTGp3J3OLqlMB8GA1UdIwQY MBaAFPXw8HygprTLLBWekEWXRQOuKIWBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0Zjkt MzIzNDg2Y2EwNTQwLzEvQnpSTDVkTEt3aXZTbHlqbUpNYW5jbmM0dXFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9lYjBkOTEtNzA4Yy00OTEwLTg0ZjktMzIzNDg2Y2EwNTQw LzEvOWZEd2ZLQ210TXNzRlo2UVJaZEZBNjRvaFlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucr/MA0G CSqGSIb3DQEBCwUAA4IBAQC4zQB7ErN/3N8VfMoYwwz4LvUlaPOhkmhEU7skDXAL x8rRv0KYhVz0+3jFt+tNtHurcu6y9t9bDM42wR/9FMQvqMIQlhvKpwj97AK4OzA8 0JjZYEKP6s4flezgdu5HZVpbpmnJSsP/pDYbVEKxlcGpNOGZ7hbGIlMzf3RSph+7 BekdqEzIDNSrxWxhnLSJZbmxRzovEy2cwpo4hbUhPVUfPOcD60sVbIThbg7sNCLw VeFV2CHFqUoeSGBoyucCm1uHkS7q4zpH60o9JS70E9K09pwgkLLirgVTh5Hrbtm5 KcJ5FsFZLAscI+Ey8Ts109mmTwq3rElAYcSjZ2jofguE -----END CERTIFICATE-----Generated at Mon Jan 26 01:02:05 2026 by rpki-client