This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa File: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (raw, json) Hash identifier: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU= Subject key identifier: 05:F7:BB:2F:6A:D1:0B:04:71:78:40:03:C8:19:9B:A0:9D:2C:5B:2C Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019B7AC797963802B925BF61989CA6956003 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa Signing time: Thu 01 Jan 2026 18:17:39 +0000 ROA not before: Thu 01 Jan 2026 18:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202029 IP address blocks: 85.9.104.0/24 maxlen: 24 85.9.106.0/24 maxlen: 24 91.239.214.0/24 maxlen: 24 185.83.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:97:96:38:02:b9:25:bf:61:98:9c:a6:95:60:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jan 1 18:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05f7bb2f6ad10b0471784003c8199ba09d2c5b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ba:68:e9:12:f4:d8:7a:e4:bc:84:08:6d:92: 2b:9b:45:f1:ea:37:da:bc:88:b3:cc:1b:d0:76:87: e1:97:f8:b2:8a:ac:49:ad:14:a8:3e:dc:0b:19:63: 2e:2a:63:60:9a:52:57:fa:20:b5:de:6a:84:7a:c6: 83:9e:e3:2f:86:6e:a8:67:a9:50:5e:c3:c7:cb:c9: 6a:c0:d8:76:8b:ee:c3:51:79:bc:4f:a0:ce:c2:46: 7a:4b:73:8b:67:a2:05:c0:9e:73:cf:78:8b:2d:ab: 96:2f:10:cb:fe:40:74:b5:bb:6c:5e:4b:69:d1:de: e3:d3:30:6b:f5:c7:ed:dc:61:a8:0e:d9:92:de:a4: 5c:89:1d:b4:44:c2:e0:42:e0:14:42:e4:8d:91:47: 8a:d9:2a:e9:79:87:b1:ed:d8:5b:06:90:28:23:cc: eb:ec:84:74:2e:4b:eb:85:33:6b:d5:93:d2:71:27: f9:26:f9:da:f9:29:19:80:68:d7:df:1e:9a:51:ee: 73:c8:fc:34:d6:ee:21:5f:a9:00:d0:69:7a:5d:3f: a7:e8:ce:19:2c:0d:be:32:31:ed:a3:89:ee:6e:ba: f9:6d:3f:68:89:87:83:22:39:4a:13:dc:3e:2d:44: 81:4e:83:d1:76:d1:28:5f:5b:58:f8:3e:cf:fe:0f: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F7:BB:2F:6A:D1:0B:04:71:78:40:03:C8:19:9B:A0:9D:2C:5B:2C X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.9.104.0/24 85.9.106.0/24 91.239.214.0/24 185.83.90.0/24 Signature Algorithm: sha256WithRSAEncryption 40:5b:6f:47:0e:64:8f:83:38:0b:f0:41:27:44:29:4e:c1:89: 8a:78:8f:3b:81:84:08:15:06:01:09:6e:3a:d6:b8:ba:d5:09: a1:d7:6b:05:37:84:44:c5:3b:6c:f0:bf:a0:3e:9a:fe:b2:8f: 6e:1a:af:8b:6b:b3:cd:10:40:a2:5e:68:d2:61:f4:86:13:c8: d9:65:0d:a1:0a:5b:1b:27:82:88:29:9e:eb:43:9f:32:b9:c9: 95:a5:01:8d:00:f2:5d:28:13:98:7b:45:b7:a8:48:3d:5f:2b: 8d:de:58:6c:dc:bb:c8:f8:96:ae:3e:84:36:43:b6:10:9d:22: 83:2b:9b:9f:cc:fb:93:4f:2c:6c:96:66:4a:db:5a:c8:28:52: c4:35:56:a3:cc:f7:e8:48:1c:85:18:4b:62:4e:61:f9:d3:fd: 93:06:15:09:89:7d:61:a5:e4:0d:71:f0:8f:f1:b6:cf:7d:f1: ec:29:6d:71:d8:4e:f9:93:eb:74:70:7e:b3:a6:0e:5c:f1:fb: 62:1a:fc:c0:57:9b:8c:69:3a:f6:20:92:1e:6d:0f:3b:cd:94: ed:c2:53:0d:35:59:97:a2:5e:39:10:60:dd:28:91:b5:ac:e9: f5:c4:22:3d:7f:2b:3a:5b:e7:0c:3f:84:05:31:ac:74:b3:3b: 24:13:31:0a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt6x5eWOAK5Jb9hmJymlWADMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwMTAxMTgxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWY3YmIyZjZhZDEwYjA0NzE3ODQwMDNjODE5OWJhMDlkMmM1YjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLpo6RL02HrkvIQIbZIrm0Xx6jfa vIizzBvQdofhl/iyiqxJrRSoPtwLGWMuKmNgmlJX+iC13mqEesaDnuMvhm6oZ6lQ XsPHy8lqwNh2i+7DUXm8T6DOwkZ6S3OLZ6IFwJ5zz3iLLauWLxDL/kB0tbtsXktp 0d7j0zBr9cft3GGoDtmS3qRciR20RMLgQuAUQuSNkUeK2SrpeYex7dhbBpAoI8zr 7IR0LkvrhTNr1ZPScSf5Jvna+SkZgGjX3x6aUe5zyPw01u4hX6kA0Gl6XT+n6M4Z LA2+MjHto4nubrr5bT9oiYeDIjlKE9w+LUSBToPRdtEoX1tY+D7P/g+qFwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAX3uy9q0QsEcXhAA8gZm6CdLFssMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvQmZlN0wyclJDd1J4ZUVBRHlCbWJvSjBzV3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVQloAwQA VQlqAwQAW+/WAwQAuVNaMA0GCSqGSIb3DQEBCwUAA4IBAQBAW29HDmSPgzgL8EEn RClOwYmKeI87gYQIFQYBCW461ri61Qmh12sFN4RExTts8L+gPpr+so9uGq+La7PN EECiXmjSYfSGE8jZZQ2hClsbJ4KIKZ7rQ58yucmVpQGNAPJdKBOYe0W3qEg9XyuN 3lhs3LvI+JauPoQ2Q7YQnSKDK5ufzPuTTyxslmZK21rIKFLENVajzPfoSByFGEti TmH50/2TBhUJiX1hpeQNcfCP8bbPffHsKW1x2E75k+t0cH6zpg5c8ftiGvzAV5uM aTr2IJIebQ87zZTtwlMNNVmXol45EGDdKJG1rOn1xCI9fys6W+cMP4QFMax0szsk EzEK -----END CERTIFICATE-----Generated at Sun Jan 11 23:53:55 2026 by rpki-client