This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/BngoaXPmBES0lcWptUUTkZigcEg.roa File: BngoaXPmBES0lcWptUUTkZigcEg.roa (raw, json) Hash identifier: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI= Subject key identifier: 06:78:28:69:73:E6:04:44:B4:95:C5:A9:B5:45:13:91:98:A0:70:48 Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Certificate serial: 019B7CEDCB86D2513458E8FACD83AD1EAC2C Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/BngoaXPmBES0lcWptUUTkZigcEg.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.186.212.0/24 maxlen: 24 185.186.213.0/24 maxlen: 24 2a0b:8780::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cb:86:d2:51:34:58:e8:fa:cd:83:ad:1e:ac:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3 Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0678286973e60444b495c5a9b545139198a07048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:02:1c:a8:18:7f:55:44:69:c5:e1:cb:92:d1: 66:fb:a8:df:53:b4:0d:b1:16:76:d3:3a:2c:9b:10: 59:2b:fb:d3:53:bf:d3:28:8c:65:4a:2e:ab:b8:ef: ad:86:12:d2:72:e2:2d:99:1b:1b:20:95:28:b1:29: 6d:4b:db:df:09:79:67:b9:27:e1:51:84:6b:e6:56: 73:ca:91:8f:b4:40:28:ef:f7:8c:92:b5:94:8f:53: 5b:ef:33:a1:bd:de:d9:74:c0:3c:e6:39:38:7e:5e: 98:c2:46:10:a4:65:8f:24:21:44:03:8b:0c:12:b7: 64:24:e1:48:c9:b7:76:52:82:69:97:18:26:53:90: 9b:14:c0:b9:e1:52:6b:b8:54:fa:b6:34:f4:98:20: ea:03:eb:b3:89:01:4f:39:ad:41:53:d1:ae:f9:c4: 82:35:22:d5:08:27:fa:52:32:3a:67:ea:d0:51:8a: fb:d7:6b:b6:67:ef:f9:c7:de:ed:15:53:37:6b:86: 42:f0:4e:f0:77:71:e0:29:89:07:cf:e5:92:f6:e7: 8e:cd:75:c3:ae:67:6f:d3:df:86:bd:af:4a:fc:62: f9:d5:00:da:d2:64:86:95:b2:d9:5f:3d:04:8b:3d: cf:28:81:72:78:28:cf:14:76:41:6b:97:3e:e5:b9: 22:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:78:28:69:73:E6:04:44:B4:95:C5:A9:B5:45:13:91:98:A0:70:48 X509v3 Authority Key Identifier: keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/BngoaXPmBES0lcWptUUTkZigcEg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.186.212.0/23 IPv6: 2a0b:8780::/48 Signature Algorithm: sha256WithRSAEncryption 30:81:77:4a:bd:6b:f9:d5:b4:01:4c:da:34:87:3f:b6:5a:60: 1b:98:5a:91:c2:1f:5e:ec:5e:2a:32:d7:36:87:56:75:5c:bd: 7b:e6:3f:f6:b3:a6:d9:92:cc:ad:ef:98:48:1d:90:73:83:47: a1:5e:59:f2:34:58:e6:9c:c6:4f:59:ce:85:c2:16:ef:f3:f7: ce:42:52:e1:05:58:6c:59:a5:06:9c:42:08:a9:bd:20:69:22: d1:be:51:da:97:24:2b:37:b1:b7:53:cc:44:bb:8e:3a:d5:5c: ac:a5:c0:10:b3:e2:76:1c:b1:23:db:d8:21:4e:95:de:24:6f: b0:90:ce:a9:5e:a6:6e:98:03:a3:67:24:2c:09:9a:0f:ea:df: 45:96:6f:67:ba:82:21:b5:ad:df:0a:ef:32:29:9a:97:0f:c9: 60:02:21:de:15:a1:4f:cb:49:07:5c:0d:0d:12:1e:e0:73:56: 25:5a:8a:08:62:59:14:53:0d:dc:9f:63:a8:93:34:98:19:95: d5:d0:7d:c7:1f:5b:c6:21:f8:d8:9c:6d:0d:bd:e6:0f:eb:cb: 16:b4:11:fb:88:42:d8:e3:7e:e4:c6:a8:b8:99:68:79:90:ef: 5b:c8:1f:4a:1b:b2:fd:6b:c3:f1:62:9f:e2:6e:9d:4d:49:82: 19:09:00:02 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87cuG0lE0WOj6zYOtHqwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDAxM2UzNDY0YzE2Y2Q4NTg5YjA1MjAyZmIwZjBjNTkx MGRjYTMwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjc4Mjg2OTczZTYwNDQ0YjQ5NWM1YTliNTQ1MTM5MTk4YTA3MDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4AIcqBh/VURpxeHLktFm+6jfU7QN sRZ20zosmxBZK/vTU7/TKIxlSi6ruO+thhLScuItmRsbIJUosSltS9vfCXlnuSfh UYRr5lZzypGPtEAo7/eMkrWUj1Nb7zOhvd7ZdMA85jk4fl6YwkYQpGWPJCFEA4sM ErdkJOFIybd2UoJplxgmU5CbFMC54VJruFT6tjT0mCDqA+uziQFPOa1BU9Gu+cSC NSLVCCf6UjI6Z+rQUYr712u2Z+/5x97tFVM3a4ZC8E7wd3HgKYkHz+WS9ueOzXXD rmdv09+Gva9K/GL51QDa0mSGlbLZXz0Eiz3PKIFyeCjPFHZBa5c+5bkinwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAZ4KGlz5gREtJXFqbVFE5GYoHBIMB8GA1UdIwQY MBaAFFZAE+NGTBbNhYmwUgL7DwxZENyjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQt ODY2N2ExMDEwMTQzLzEvQm5nb2FYUG1CRVMwbGNXcHRVVVRrWmlnY0VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy85OGVlNzYtMGUwMi00ZmY1LTkxZWQtODY2N2ExMDEwMTQz LzEvVmtBVDQwWk1GczJGaWJCU0F2c1BERmtRM0tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBubrUMA8E AgACMAkDBwAqC4eAAAAwDQYJKoZIhvcNAQELBQADggEBADCBd0q9a/nVtAFM2jSH P7ZaYBuYWpHCH17sXioy1zaHVnVcvXvmP/azptmSzK3vmEgdkHODR6FeWfI0WOac xk9ZzoXCFu/z985CUuEFWGxZpQacQgipvSBpItG+UdqXJCs3sbdTzES7jjrVXKyl wBCz4nYcsSPb2CFOld4kb7CQzqlepm6YA6NnJCwJmg/q30WWb2e6giG1rd8K7zIp mpcPyWACId4VoU/LSQdcDQ0SHuBzViVaighiWRRTDdyfY6iTNJgZldXQfccfW8Yh +NicbQ295g/ryxa0EfuIQtjjfuTGqLiZaHmQ71vIH0obsv1rw/Fin+JunU1JghkJ AAI= -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:39 2026 by rpki-client