This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/BDPTI5i4mKqpMJBYvSboypMMNuE.roa File: BDPTI5i4mKqpMJBYvSboypMMNuE.roa (raw, json) Hash identifier: RTLrC8P78AL/8G7o0NMHm7j+X+zOpyoxook+7m1TQVo= Subject key identifier: 04:33:D3:23:98:B8:98:AA:A9:30:90:58:BD:26:E8:CA:93:0C:36:E1 Certificate issuer: /CN=bbffc9a9832667ac0d6d1e2406550533c3b55618 Certificate serial: 019B797E9CA6CC54F341FD89FE35B8326586 Authority key identifier: BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/BDPTI5i4mKqpMJBYvSboypMMNuE.roa Signing time: Thu 01 Jan 2026 12:18:19 +0000 ROA not before: Thu 01 Jan 2026 12:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212103 IP address blocks: 194.115.182.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.mft rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:9c:a6:cc:54:f3:41:fd:89:fe:35:b8:32:65:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbffc9a9832667ac0d6d1e2406550533c3b55618 Validity Not Before: Jan 1 12:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0433d32398b898aaa9309058bd26e8ca930c36e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a1:10:da:45:ad:47:87:e9:61:7f:ac:cc:e2: 5d:28:c0:e5:b3:46:9f:50:0f:c9:eb:06:55:1c:64: fd:3e:8d:04:59:e1:39:e7:c9:0e:f7:89:65:05:6b: a3:d9:8e:f7:e6:b9:c0:1c:25:f5:e6:6b:b4:ff:65: 46:80:fc:dc:76:3f:d2:f3:5f:13:c2:62:66:06:38: 12:b1:cf:c6:5e:8e:a5:31:0d:8e:b6:37:97:b0:70: 93:8c:fe:87:3e:2e:e1:62:1f:41:81:80:8e:2b:cc: b7:c9:e4:6b:7f:61:b5:b6:5a:d0:6b:73:65:e1:b6: d8:d9:c7:7b:a0:44:49:7c:36:52:2a:6a:95:cd:9f: c0:4a:03:5c:4f:c9:1f:39:f4:ba:f0:42:22:fb:6c: 9b:52:5a:28:3b:ba:1f:df:51:7f:d1:71:51:91:11: 3a:49:e2:75:bc:47:22:ca:2c:cd:45:86:83:e3:20: 1a:0b:49:37:2a:ff:9d:d1:d3:65:bb:48:65:ed:8b: 19:82:e6:05:e6:e8:b0:16:c3:fc:d5:6b:0d:57:f6: c7:a8:a4:8c:57:6d:91:06:b6:bf:3f:cd:a5:24:c4: 9e:52:f0:d4:db:df:f1:ec:80:80:d7:49:ca:92:33: 98:b8:96:43:40:9f:d7:df:f6:96:f3:09:d7:23:6f: 60:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:33:D3:23:98:B8:98:AA:A9:30:90:58:BD:26:E8:CA:93:0C:36:E1 X509v3 Authority Key Identifier: keyid:BB:FF:C9:A9:83:26:67:AC:0D:6D:1E:24:06:55:05:33:C3:B5:56:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/BDPTI5i4mKqpMJBYvSboypMMNuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fe1b28-1519-4055-b0fb-7497e5a8f11b/1/u__JqYMmZ6wNbR4kBlUFM8O1Vhg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.115.182.0/23 Signature Algorithm: sha256WithRSAEncryption 88:37:33:d1:d5:4d:6d:90:d6:77:12:1e:b5:5b:26:9f:b1:5b: 1d:08:12:e1:88:5b:96:72:2e:8c:4b:5b:8c:5c:79:1f:33:9d: 49:e6:42:89:43:6e:53:e2:82:17:1b:ba:1e:e8:60:cb:ac:4b: e2:2b:ec:97:c0:aa:c0:43:e7:97:52:24:c5:7e:bb:a9:d5:b9: e4:0c:56:12:47:a6:cf:0c:5e:65:ad:58:fc:76:de:4d:d9:34: 14:11:d6:92:ac:1d:70:3e:06:a6:2b:77:57:35:27:82:99:e5: 05:dc:5e:af:63:59:e3:1a:de:be:6e:0e:c0:90:42:05:af:45: 5d:e0:5e:c0:09:79:df:83:8d:33:43:ab:bf:a1:95:dc:c3:30: 14:58:0e:4a:99:54:ae:fb:d4:8f:bc:18:81:09:21:18:64:30: 14:96:88:dc:4a:90:20:0c:02:b1:4c:42:bb:6a:1f:1f:47:d8: cf:30:49:c2:98:24:b9:1a:e8:bc:1a:d6:84:56:17:2d:85:dd: 88:70:a9:f7:0e:02:56:35:6c:88:cf:d7:81:f5:9c:23:09:86: bc:69:29:0f:32:02:4a:77:0c:8e:01:49:de:00:11:51:ad:25: ff:1b:9c:45:29:7b:94:7a:b1:3e:db:be:cc:19:ba:5e:f4:a0: 62:a2:50:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fpymzFTzQf2J/jW4MmWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZmZjOWE5ODMyNjY3YWMwZDZkMWUyNDA2NTUwNTMzYzNi NTU2MTgwHhcNMjYwMTAxMTIxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDMzZDMyMzk4Yjg5OGFhYTkzMDkwNThiZDI2ZThjYTkzMGMzNmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qEQ2kWtR4fpYX+szOJdKMDls0af UA/J6wZVHGT9Po0EWeE558kO94llBWuj2Y735rnAHCX15mu0/2VGgPzcdj/S818T wmJmBjgSsc/GXo6lMQ2OtjeXsHCTjP6HPi7hYh9BgYCOK8y3yeRrf2G1tlrQa3Nl 4bbY2cd7oERJfDZSKmqVzZ/ASgNcT8kfOfS68EIi+2ybUlooO7of31F/0XFRkRE6 SeJ1vEciyizNRYaD4yAaC0k3Kv+d0dNlu0hl7YsZguYF5uiwFsP81WsNV/bHqKSM V22RBra/P82lJMSeUvDU29/x7ICA10nKkjOYuJZDQJ/X3/aW8wnXI29gZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAQz0yOYuJiqqTCQWL0m6MqTDDbhMB8GA1UdIwQY MBaAFLv/yamDJmesDW0eJAZVBTPDtVYYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmIt NzQ5N2U1YThmMTFiLzEvQkRQVEk1aTRtS3FwTUpCWXZTYm95cE1NTnVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mZTFiMjgtMTUxOS00MDU1LWIwZmItNzQ5N2U1YThmMTFi LzEvdV9fSnFZTW1aNndOYlI0a0JsVUZNOE8xVmhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwnO2MA0G CSqGSIb3DQEBCwUAA4IBAQCINzPR1U1tkNZ3Eh61WyafsVsdCBLhiFuWci6MS1uM XHkfM51J5kKJQ25T4oIXG7oe6GDLrEviK+yXwKrAQ+eXUiTFfrup1bnkDFYSR6bP DF5lrVj8dt5N2TQUEdaSrB1wPgamK3dXNSeCmeUF3F6vY1njGt6+bg7AkEIFr0Vd 4F7ACXnfg40zQ6u/oZXcwzAUWA5KmVSu+9SPvBiBCSEYZDAUlojcSpAgDAKxTEK7 ah8fR9jPMEnCmCS5Gui8GtaEVhcthd2IcKn3DgJWNWyIz9eB9ZwjCYa8aSkPMgJK dwyOAUneABFRrSX/G5xFKXuUerE+277MGbpe9KBiolBy -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:45 2026 by rpki-client