This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/bqVn7MXwxuXZ_oo2R8hq2Zv9k3I.roa File: bqVn7MXwxuXZ_oo2R8hq2Zv9k3I.roa (raw, json) Hash identifier: NNGJ5v+nT7mNuShEqExEvYmFWbIK2sHk+TsWzrH5p5s= Subject key identifier: 6E:A5:67:EC:C5:F0:C6:E5:D9:FE:8A:36:47:C8:6A:D9:9B:FD:93:72 Certificate issuer: /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355 Certificate serial: 019B7BA4EF73ABB2D2192FDF1908C1BA392A Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/bqVn7MXwxuXZ_oo2R8hq2Zv9k3I.roa Signing time: Thu 01 Jan 2026 22:19:25 +0000 ROA not before: Thu 01 Jan 2026 22:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203020 IP address blocks: 2.58.76.0/22 maxlen: 32 45.67.4.0/22 maxlen: 32 92.119.168.0/22 maxlen: 32 103.110.160.0/22 maxlen: 32 103.113.29.0/24 maxlen: 24 103.195.144.0/22 maxlen: 32 103.219.212.0/23 maxlen: 32 137.59.4.0/22 maxlen: 32 185.72.240.0/22 maxlen: 32 213.173.60.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ef:73:ab:b2:d2:19:2f:df:19:08:c1:ba:39:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355 Validity Not Before: Jan 1 22:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ea567ecc5f0c6e5d9fe8a3647c86ad99bfd9372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e0:1c:8f:73:c2:a4:1f:5a:21:e0:70:28:84: 29:5a:1c:25:1b:ab:d7:6f:79:09:07:7c:30:80:d6: 74:99:8f:ef:33:73:4b:c2:f7:9f:16:5e:f7:3f:53: 49:c2:52:51:85:70:58:02:0b:dc:12:55:df:95:9f: 0d:a7:de:26:80:6f:9f:fd:99:89:ef:73:09:0b:71: 2d:c6:b5:5a:0a:78:a6:c2:6e:2c:c8:6e:1c:92:04: 41:5f:4e:70:1c:19:c8:d4:a8:15:d3:7c:72:07:f4: c5:90:a3:54:ca:21:59:75:d5:1f:08:79:be:39:a0: b4:82:c9:80:42:0b:c6:71:b2:f5:86:f0:db:1c:04: 5a:1a:0b:67:5f:c8:fb:cf:a1:b4:fc:c8:ba:0a:2b: 30:7f:b6:97:c7:27:b8:b1:22:33:c8:6d:27:23:e7: 6f:95:fb:1f:21:75:6c:ee:c4:fe:5a:22:fb:99:55: 1a:91:e8:9d:08:f3:cf:49:35:0c:f4:38:26:50:11: 68:e2:f8:49:65:d6:da:85:34:bf:e1:54:d7:6f:b6: 1d:14:b2:b4:b2:53:06:b0:1f:91:c9:38:00:f2:3f: 3d:da:8b:2a:b7:2b:d5:bd:01:03:dd:f8:aa:99:19: 0b:db:8e:ce:70:a0:6a:67:08:a1:c0:60:10:84:ac: 41:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:A5:67:EC:C5:F0:C6:E5:D9:FE:8A:36:47:C8:6A:D9:9B:FD:93:72 X509v3 Authority Key Identifier: keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/bqVn7MXwxuXZ_oo2R8hq2Zv9k3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.58.76.0/22 45.67.4.0/22 92.119.168.0/22 103.110.160.0/22 103.113.29.0/24 103.195.144.0/22 103.219.212.0/23 137.59.4.0/22 185.72.240.0/22 213.173.60.0/22 Signature Algorithm: sha256WithRSAEncryption 82:46:0a:ad:41:74:8c:89:b1:79:1c:fb:3e:2b:72:cc:0b:2f: 56:b1:ee:34:51:8b:7a:d0:5f:cc:56:92:69:1d:26:1e:a8:6c: d4:05:58:48:1b:59:33:6d:a0:64:5d:20:f0:0a:3b:90:2f:72: a7:0e:28:5e:7c:9c:7f:1a:d4:e5:0e:3e:62:d6:24:35:7c:8b: c3:38:da:cd:b0:f3:83:51:1d:a0:9d:1c:e5:47:2f:f8:7c:b0: 00:fa:6f:4e:ca:45:3e:f0:01:d5:86:ad:1b:03:83:5d:bf:5a: c1:17:72:72:76:38:ff:fc:12:2a:03:b1:9c:95:e2:38:d6:93: 18:f0:19:87:41:d9:53:ba:6e:d5:26:02:db:d1:6e:7a:4f:a5: d7:65:70:ed:ee:7f:29:9a:68:8a:89:10:54:f1:04:be:15:f1: a7:93:3a:33:1e:8e:69:f1:03:93:2d:91:43:24:4d:ae:15:c4: 0d:4d:df:65:5d:e1:0d:b5:f4:ce:50:30:29:3f:fb:5c:0d:e6: 67:45:e9:d6:83:c1:92:f0:b1:4f:5e:19:b9:21:59:7a:e6:00: e9:9e:8b:d5:cc:48:4c:16:f3:cc:c5:41:a2:96:f5:30:09:cd: 2d:a5:95:7c:6e:41:14:ab:40:67:37:6d:79:41:b5:ae:37:ec: 0f:4a:e8:94 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt7pO9zq7LSGS/fGQjBujkqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzOTkxYWZjZDQ1NWViMWIxNzRmY2Y4OWY4ZTEwZWFmN2Y3 MGIzNTUwHhcNMjYwMTAxMjIxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZWE1NjdlY2M1ZjBjNmU1ZDlmZThhMzY0N2M4NmFkOTliZmQ5MzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+Acj3PCpB9aIeBwKIQpWhwlG6vX b3kJB3wwgNZ0mY/vM3NLwvefFl73P1NJwlJRhXBYAgvcElXflZ8Np94mgG+f/ZmJ 73MJC3EtxrVaCnimwm4syG4ckgRBX05wHBnI1KgV03xyB/TFkKNUyiFZddUfCHm+ OaC0gsmAQgvGcbL1hvDbHARaGgtnX8j7z6G0/Mi6Ciswf7aXxye4sSIzyG0nI+dv lfsfIXVs7sT+WiL7mVUakeidCPPPSTUM9DgmUBFo4vhJZdbahTS/4VTXb7YdFLK0 slMGsB+RyTgA8j892osqtyvVvQED3fiqmRkL247OcKBqZwihwGAQhKxBSwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFG6lZ+zF8Mbl2f6KNkfIatmb/ZNyMB8GA1UdIwQY MBaAFIOZGvzUVesbF0/PifjhDq9/cLNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmIt ZTE1NDM3MzgwMDk5LzEvYnFWbjdNWHd4dVhaX29vMlI4aHEyWnY5azNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS82OWVkMjktYWY0ZS00NTI0LWFkZmItZTE1NDM3MzgwMDk5 LzEvZzVrYV9OUlY2eHNYVDgtSi1PRU9yMzl3czFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCAjpMAwQC LUMEAwQCXHeoAwQCZ26gAwQAZ3EdAwQCZ8OQAwQBZ9vUAwQCiTsEAwQCuUjwAwQC 1a08MA0GCSqGSIb3DQEBCwUAA4IBAQCCRgqtQXSMibF5HPs+K3LMCy9Wse40UYt6 0F/MVpJpHSYeqGzUBVhIG1kzbaBkXSDwCjuQL3KnDihefJx/GtTlDj5i1iQ1fIvD ONrNsPODUR2gnRzlRy/4fLAA+m9OykU+8AHVhq0bA4Ndv1rBF3Jydjj//BIqA7Gc leI41pMY8BmHQdlTum7VJgLb0W56T6XXZXDt7n8pmmiKiRBU8QS+FfGnkzozHo5p 8QOTLZFDJE2uFcQNTd9lXeENtfTOUDApP/tcDeZnRenWg8GS8LFPXhm5IVl65gDp novVzEhMFvPMxUGilvUwCc0tpZV8bkEUq0BnN215QbWuN+wPSuiU -----END CERTIFICATE-----Generated at Sun Jan 18 10:46:40 2026 by rpki-client