This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/be0cjhAEu1p8Qb5tGlMSyUEDr-8.roa File: be0cjhAEu1p8Qb5tGlMSyUEDr-8.roa (raw, json) Hash identifier: iWxHjwfuXSnOXM+4EBopGhWz6sGJ/Fj0z8QWrUeSyfM= Subject key identifier: 6D:ED:1C:8E:10:04:BB:5A:7C:41:BE:6D:1A:53:12:C9:41:03:AF:EF Certificate issuer: /CN=c017a4a82172b206afee1c13d296ee260385b571 Certificate serial: 019B77C757FEEA477D49B226EC5CB1583ABD Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/be0cjhAEu1p8Qb5tGlMSyUEDr-8.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200874 IP address blocks: 185.89.116.0/22 maxlen: 24 2a03:8320::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:57:fe:ea:47:7d:49:b2:26:ec:5c:b1:58:3a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ded1c8e1004bb5a7c41be6d1a5312c94103afef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ca:da:37:28:98:b4:91:6c:0e:f1:2e:a1:58: c3:e5:e9:79:2a:27:ba:a3:b9:8a:94:77:fd:df:1d: 09:32:1a:08:27:bf:1e:46:94:5e:b6:a3:41:02:f3: 33:20:cf:c2:63:b0:1c:b5:b8:49:d1:2a:da:a2:32: db:27:cd:55:da:44:84:8d:fa:d8:0e:6f:90:56:14: f2:f9:75:2e:12:3a:1c:4f:9b:b4:22:e1:7e:77:61: 18:2e:1a:b5:72:38:d2:51:bd:97:9f:d9:c0:35:fb: 03:3a:b8:0b:13:b5:a7:53:9e:94:d3:11:44:8b:4e: e5:26:3f:c1:b2:91:59:a0:7d:ee:2f:2e:2a:dd:42: d4:45:4d:24:9a:8a:6a:6e:c7:30:09:84:e7:fb:1b: 59:68:6f:c1:9a:49:c0:80:31:da:98:c6:f7:93:c3: 5d:bc:04:f4:bf:e4:c7:1c:ba:37:66:c3:ec:ea:af: ea:2a:60:cd:01:bb:ee:6d:96:13:aa:61:3c:fb:f4: bf:5c:ec:5f:e0:9e:82:1a:85:8b:8b:18:de:fb:c1: d8:12:24:34:d5:74:ed:3b:bf:a6:26:b9:a7:6d:72: 0d:29:7f:c1:e6:b2:b0:97:6c:09:ad:62:bd:3d:5e: 2c:21:d6:08:59:46:0a:85:e4:10:b4:4d:a5:f9:79: 76:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:ED:1C:8E:10:04:BB:5A:7C:41:BE:6D:1A:53:12:C9:41:03:AF:EF X509v3 Authority Key Identifier: keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/be0cjhAEu1p8Qb5tGlMSyUEDr-8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.89.116.0/22 IPv6: 2a03:8320::/32 Signature Algorithm: sha256WithRSAEncryption 6e:85:0c:7f:10:29:e2:27:c0:36:e5:6f:9a:3d:3d:c2:43:17: 2c:05:25:84:05:86:d9:92:d6:8e:3f:d1:73:d5:bf:df:84:95: 60:41:4e:6c:0d:2a:38:ed:d6:60:5d:51:aa:cc:82:fa:7b:09: d3:49:5b:47:77:2d:a9:ce:63:98:ed:a9:fd:50:2d:30:68:ba: df:16:ca:bb:bb:6d:7a:36:87:3e:56:d0:40:4c:66:58:ee:39: 40:1a:98:6a:89:eb:01:f1:31:22:57:27:c1:ac:4d:69:52:9a: aa:47:b2:48:6c:b8:d7:09:02:45:46:ef:ed:3e:34:15:e1:8a: 17:5f:72:80:19:f3:e5:11:1f:90:d2:3d:4d:d8:dd:c3:d9:69: f0:11:4d:f0:5a:b4:19:08:ce:9c:65:5a:b9:0b:23:ba:99:df: 03:f5:11:c9:48:d8:3e:a5:70:89:a8:44:de:97:b8:e3:e8:bc: 72:42:19:bb:eb:f6:28:88:60:77:d5:32:2f:c7:98:77:9c:d0: 68:f0:ce:d8:c3:1b:7f:3f:dc:aa:5f:1e:af:bb:9e:bc:dc:cb: c4:a0:5f:3d:7b:5b:25:a0:35:d9:68:f6:c1:16:f0:24:e4:b5: 20:4d:a5:70:91:52:0a:55:3a:a3:1d:b8:52:1e:e3:dd:5d:b6: 38:85:65:93 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x1f+6kd9SbIm7FyxWDq9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwMTdhNGE4MjE3MmIyMDZhZmVlMWMxM2QyOTZlZTI2MDM4 NWI1NzEwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGVkMWM4ZTEwMDRiYjVhN2M0MWJlNmQxYTUzMTJjOTQxMDNhZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMraNyiYtJFsDvEuoVjD5el5Kie6 o7mKlHf93x0JMhoIJ78eRpRetqNBAvMzIM/CY7ActbhJ0SraojLbJ81V2kSEjfrY Dm+QVhTy+XUuEjocT5u0IuF+d2EYLhq1cjjSUb2Xn9nANfsDOrgLE7WnU56U0xFE i07lJj/BspFZoH3uLy4q3ULURU0kmopqbscwCYTn+xtZaG/BmknAgDHamMb3k8Nd vAT0v+THHLo3ZsPs6q/qKmDNAbvubZYTqmE8+/S/XOxf4J6CGoWLixje+8HYEiQ0 1XTtO7+mJrmnbXINKX/B5rKwl2wJrWK9PV4sIdYIWUYKheQQtE2l+Xl2KwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFG3tHI4QBLtafEG+bRpTEslBA6/vMB8GA1UdIwQY MBaAFMAXpKghcrIGr+4cE9KW7iYDhbVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMt OTBhZGVjODVkZDg1LzEvYmUwY2poQUV1MXA4UWI1dEdsTVN5VUVEci04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMtOTBhZGVjODVkZDg1 LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVl0MA0E AgACMAcDBQAqA4MgMA0GCSqGSIb3DQEBCwUAA4IBAQBuhQx/ECniJ8A25W+aPT3C QxcsBSWEBYbZktaOP9Fz1b/fhJVgQU5sDSo47dZgXVGqzIL6ewnTSVtHdy2pzmOY 7an9UC0waLrfFsq7u216Noc+VtBATGZY7jlAGphqiesB8TEiVyfBrE1pUpqqR7JI bLjXCQJFRu/tPjQV4YoXX3KAGfPlER+Q0j1N2N3D2WnwEU3wWrQZCM6cZVq5CyO6 md8D9RHJSNg+pXCJqETel7jj6LxyQhm76/YoiGB31TIvx5h3nNBo8M7Ywxt/P9yq Xx6vu5683MvEoF89e1sloDXZaPbBFvAk5LUgTaVwkVIKVTqjHbhSHuPdXbY4hWWT -----END CERTIFICATE-----Generated at Mon Feb 9 22:27:12 2026 by rpki-client