This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/BcEnhr3TM-NXG8Q4ay62cxztpy4.roa File: BcEnhr3TM-NXG8Q4ay62cxztpy4.roa (raw, json) Hash identifier: pqYAoj6DHioE/63Z2p/ewbVxl274tw4E0vVzLjsfmyg= Subject key identifier: 05:C1:27:86:BD:D3:33:E3:57:1B:C4:38:6B:2E:B6:73:1C:ED:A7:2E Certificate issuer: /CN=9bdba95290a985a697763d30ab42f9c3784078b2 Certificate serial: 019B7910E96A9CC266F4A802B811C91D8F2E Authority key identifier: 9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/BcEnhr3TM-NXG8Q4ay62cxztpy4.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209368 IP address blocks: 185.133.92.0/22 maxlen: 24 2a09:83c0::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.mft rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e9:6a:9c:c2:66:f4:a8:02:b8:11:c9:1d:8f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bdba95290a985a697763d30ab42f9c3784078b2 Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05c12786bdd333e3571bc4386b2eb6731ceda72e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c3:70:dd:72:82:49:99:c2:35:46:32:f8:6c: f1:fd:49:93:c0:66:3b:13:6e:79:fa:6e:af:13:fc: 34:f1:87:fc:fe:b6:15:82:4a:c8:e3:09:f8:3b:57: 7d:2c:eb:25:60:2a:cd:fc:16:e0:ec:bc:d5:3b:a6: 2a:74:ce:72:5b:01:e9:93:47:28:d3:de:cb:1a:ce: 78:c1:d4:03:30:bf:c9:f0:95:76:1b:e9:bd:77:26: 7a:99:f9:d8:68:71:d0:bb:37:84:40:38:2c:ff:b6: 11:b1:9f:40:df:d9:5b:1e:5c:b8:63:dc:e5:aa:37: 9b:bf:29:e3:e3:8b:6d:30:b4:f3:0b:78:6a:1a:26: 5f:c4:2b:ff:f3:d2:62:26:99:52:59:38:3c:1d:15: c0:47:40:38:90:8c:75:77:49:15:66:c3:cb:00:3b: 79:47:83:19:27:31:6f:f6:19:12:52:02:c6:8f:85: 86:b0:f9:e4:a4:e1:fa:7e:8c:ca:5d:d9:56:31:fc: e0:47:73:7c:15:7a:8f:8a:eb:f9:83:84:3f:43:2e: 1f:b8:87:e9:5d:c9:82:95:b6:5f:6c:78:59:99:4e: 6e:34:71:4b:79:09:2b:cd:f4:01:b7:79:dc:bb:50: 5f:4e:93:65:52:9c:9f:56:6d:e1:e5:27:72:3d:c0: c7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C1:27:86:BD:D3:33:E3:57:1B:C4:38:6B:2E:B6:73:1C:ED:A7:2E X509v3 Authority Key Identifier: keyid:9B:DB:A9:52:90:A9:85:A6:97:76:3D:30:AB:42:F9:C3:78:40:78:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m9upUpCphaaXdj0wq0L5w3hAeLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/BcEnhr3TM-NXG8Q4ay62cxztpy4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/4ae1bd-5864-43f0-b4fd-80a66c0fc884/1/m9upUpCphaaXdj0wq0L5w3hAeLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.133.92.0/22 IPv6: 2a09:83c0::/29 Signature Algorithm: sha256WithRSAEncryption 16:c6:9a:b6:76:f2:90:d6:78:ea:4e:32:26:73:62:88:37:eb: f2:a8:a7:a0:4a:39:17:1f:71:38:48:5e:3c:76:20:9d:df:13: 08:8d:c1:e3:0a:ea:51:59:a4:ff:3c:2f:28:4c:32:8f:a5:d0: 70:db:0f:15:75:93:0a:70:c9:77:27:f1:8e:cb:fa:fc:1c:58: c7:8e:f8:fd:07:8c:d4:68:bc:7c:0a:2b:69:19:b4:75:35:9a: 6b:3f:56:61:fa:f5:5e:e8:b4:02:f6:99:ca:ee:a4:37:12:f2: 39:5b:8e:90:68:0d:6d:9e:01:e7:44:be:70:08:fe:34:5c:7d: 99:f9:8b:1b:da:25:97:71:61:12:2a:f7:f9:d8:1b:08:57:22: 6c:f7:98:53:dd:ac:ec:ed:7d:ce:75:f3:95:86:74:d6:8f:bb: bb:2e:87:25:83:0b:7c:d9:41:8e:03:7c:dc:00:e7:74:c9:70: 34:17:ee:87:2e:d6:1e:23:c8:e1:41:02:60:dd:6a:df:35:9d: b2:cc:87:24:e4:31:a9:ea:46:46:40:05:61:42:c0:9f:98:97: e6:ad:7f:47:92:f9:8a:8b:51:30:97:56:ee:b1:35:8e:10:76: b7:20:7e:88:ed:a3:27:f4:ac:f0:62:18:ec:29:7f:76:41:97: 94:95:3f:0c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EOlqnMJm9KgCuBHJHY8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZGJhOTUyOTBhOTg1YTY5Nzc2M2QzMGFiNDJmOWMzNzg0 MDc4YjIwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWMxMjc4NmJkZDMzM2UzNTcxYmM0Mzg2YjJlYjY3MzFjZWRhNzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Nw3XKCSZnCNUYy+Gzx/UmTwGY7 E255+m6vE/w08Yf8/rYVgkrI4wn4O1d9LOslYCrN/Bbg7LzVO6YqdM5yWwHpk0co 097LGs54wdQDML/J8JV2G+m9dyZ6mfnYaHHQuzeEQDgs/7YRsZ9A39lbHly4Y9zl qjebvynj44ttMLTzC3hqGiZfxCv/89JiJplSWTg8HRXAR0A4kIx1d0kVZsPLADt5 R4MZJzFv9hkSUgLGj4WGsPnkpOH6fozKXdlWMfzgR3N8FXqPiuv5g4Q/Qy4fuIfp XcmClbZfbHhZmU5uNHFLeQkrzfQBt3ncu1BfTpNlUpyfVm3h5SdyPcDHSQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAXBJ4a90zPjVxvEOGsutnMc7acuMB8GA1UdIwQY MBaAFJvbqVKQqYWml3Y9MKtC+cN4QHiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQt ODBhNjZjMGZjODg0LzEvQmNFbmhyM1RNLU5YRzhRNGF5NjJjeHp0cHk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy80YWUxYmQtNTg2NC00M2YwLWI0ZmQtODBhNjZjMGZjODg0 LzEvbTl1cFVwQ3BoYWFYZGowd3EwTDV3M2hBZUxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuYVcMA0E AgACMAcDBQMqCYPAMA0GCSqGSIb3DQEBCwUAA4IBAQAWxpq2dvKQ1njqTjImc2KI N+vyqKegSjkXH3E4SF48diCd3xMIjcHjCupRWaT/PC8oTDKPpdBw2w8VdZMKcMl3 J/GOy/r8HFjHjvj9B4zUaLx8CitpGbR1NZprP1Zh+vVe6LQC9pnK7qQ3EvI5W46Q aA1tngHnRL5wCP40XH2Z+Ysb2iWXcWESKvf52BsIVyJs95hT3azs7X3OdfOVhnTW j7u7Loclgwt82UGOA3zcAOd0yXA0F+6HLtYeI8jhQQJg3WrfNZ2yzIck5DGp6kZG QAVhQsCfmJfmrX9HkvmKi1Ewl1busTWOEHa3IH6I7aMn9KzwYhjsKX92QZeUlT8M -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:24 2026 by rpki-client