This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bggyTiI2N3PjgBlnfOFPA0WYC6Y.roa File: bggyTiI2N3PjgBlnfOFPA0WYC6Y.roa (raw, json) Hash identifier: bR2zoV9l2pkCiJn337wofgAY9/5SKwn8CooUtUOuQ8U= Subject key identifier: 6E:08:32:4E:22:36:37:73:E3:80:19:67:7C:E1:4F:03:45:98:0B:A6 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15F35298DF315FA203C5EC1434646B Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bggyTiI2N3PjgBlnfOFPA0WYC6Y.roa Signing time: Fri 02 Jan 2026 14:21:43 +0000 ROA not before: Fri 02 Jan 2026 14:21:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 45.81.114.0/24 maxlen: 24 45.138.181.0/24 maxlen: 24 45.151.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:f3:52:98:df:31:5f:a2:03:c5:ec:14:34:64:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e08324e22363773e38019677ce14f0345980ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9b:b8:cf:d6:f4:0d:78:29:e8:17:b4:75:74: a3:06:18:05:0e:16:2d:de:4a:ce:80:18:99:b1:11: 7f:d9:85:4e:43:47:0f:22:97:75:b3:2a:2a:0b:d8: ab:69:7f:f3:bf:17:ea:c7:c9:30:be:8a:12:d3:16: fb:79:fc:79:00:3e:99:9a:02:8d:94:8e:ef:6d:34: a6:f9:26:9d:6f:21:a1:25:9e:43:60:bb:99:18:33: 46:32:0f:4e:86:6a:ae:93:83:cb:63:48:3d:93:a0: 59:10:cb:65:21:0a:0e:78:f0:b7:7b:e3:fe:bd:5a: f9:78:fb:70:f5:e4:a2:60:8e:9e:88:3b:ff:62:90: c0:64:3b:04:7d:ee:38:43:cc:b8:a2:65:26:b5:6e: 2d:0e:3d:a0:04:e0:8c:0e:4d:02:f0:98:eb:99:ea: cb:64:9b:51:59:8b:4d:f6:f2:11:15:87:be:3c:58: e7:ef:ab:b7:6c:5d:da:d5:40:9c:49:d2:e4:77:50: bb:27:98:44:9c:6b:68:f9:b7:25:e7:fd:54:4b:43: 98:36:c9:8b:28:8e:4a:7a:a0:14:22:6e:ce:43:da: 56:33:f0:eb:66:20:8e:ea:46:cb:d3:da:ab:f3:ec: cf:71:a6:b0:a0:0a:fd:94:c7:46:b1:fb:0e:ce:b6: d5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:08:32:4E:22:36:37:73:E3:80:19:67:7C:E1:4F:03:45:98:0B:A6 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/bggyTiI2N3PjgBlnfOFPA0WYC6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.81.114.0/24 45.138.181.0/24 45.151.0.0/24 Signature Algorithm: sha256WithRSAEncryption 12:51:a3:f5:8c:da:81:91:70:27:5a:ee:42:d7:4e:d4:17:d1: 1f:a4:94:18:4c:82:a5:53:05:c1:0f:3b:73:1c:d2:ac:eb:0a: 0d:05:0b:94:7b:d9:e4:c4:75:a5:95:9e:ed:93:8c:c9:b6:1d: 79:6a:7d:eb:0b:88:52:58:97:06:61:b7:59:09:44:e0:02:82: 63:52:f4:ed:4f:ea:af:06:03:73:29:00:77:97:d8:bd:c2:ea: 1b:36:22:05:0d:71:32:b7:69:83:0a:5e:b7:0d:b8:53:8e:78: 1f:fd:70:e1:3d:61:9d:57:56:a4:5f:2a:1f:c6:19:96:e3:2f: e6:45:41:6b:d7:08:56:4e:c3:1a:0c:b1:61:1c:40:dc:38:f6: 2c:5b:b5:2f:db:79:fb:a3:ec:ff:dc:ad:2b:8c:13:54:e6:9a: 5d:a0:1d:29:27:9f:82:b8:40:5d:d0:3e:e4:ce:ae:eb:28:8a: 02:7c:82:7c:e4:52:de:a2:c9:41:06:52:72:5e:b4:2b:11:39: 2d:11:d4:62:fe:0f:d3:27:3b:72:aa:b0:d1:29:c1:2f:3d:4f: f8:2e:5e:83:70:06:14:06:05:56:bb:79:68:99:59:4e:3b:76: c8:e3:b5:ae:f5:82:18:9f:b2:58:cd:bd:d6:41:2e:93:99:6e: fb:d5:da:6b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/FfNSmN8xX6IDxewUNGRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTA4MzI0ZTIyMzYzNzczZTM4MDE5Njc3Y2UxNGYwMzQ1OTgwYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJu4z9b0DXgp6Be0dXSjBhgFDhYt 3krOgBiZsRF/2YVOQ0cPIpd1syoqC9iraX/zvxfqx8kwvooS0xb7efx5AD6ZmgKN lI7vbTSm+SadbyGhJZ5DYLuZGDNGMg9Ohmquk4PLY0g9k6BZEMtlIQoOePC3e+P+ vVr5ePtw9eSiYI6eiDv/YpDAZDsEfe44Q8y4omUmtW4tDj2gBOCMDk0C8JjrmerL ZJtRWYtN9vIRFYe+PFjn76u3bF3a1UCcSdLkd1C7J5hEnGto+bcl5/1US0OYNsmL KI5KeqAUIm7OQ9pWM/DrZiCO6kbL09qr8+zPcaawoAr9lMdGsfsOzrbVHwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFG4IMk4iNjdz44AZZ3zhTwNFmAumMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvYmdneVRpSTJOM1BqZ0JsbmZPRlBBMFdZQzZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVFyAwQA LYq1AwQALZcAMA0GCSqGSIb3DQEBCwUAA4IBAQASUaP1jNqBkXAnWu5C107UF9Ef pJQYTIKlUwXBDztzHNKs6woNBQuUe9nkxHWllZ7tk4zJth15an3rC4hSWJcGYbdZ CUTgAoJjUvTtT+qvBgNzKQB3l9i9wuobNiIFDXEyt2mDCl63DbhTjngf/XDhPWGd V1akXyofxhmW4y/mRUFr1whWTsMaDLFhHEDcOPYsW7Uv23n7o+z/3K0rjBNU5ppd oB0pJ5+CuEBd0D7kzq7rKIoCfIJ85FLeoslBBlJyXrQrETktEdRi/g/TJztyqrDR KcEvPU/4Ll6DcAYUBgVWu3lomVlOO3bI47Wu9YIYn7JYzb3WQS6TmW771dpr -----END CERTIFICATE-----Generated at Tue Jan 6 20:49:54 2026 by rpki-client