This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/BGQ2LKIFncDM2cfzFM7L-AHUNKo.roa File: BGQ2LKIFncDM2cfzFM7L-AHUNKo.roa (raw, json) Hash identifier: XPAzl9bkrz2kxf/zVv1dmu57yasth2+5TX42SAtg2YE= Subject key identifier: 04:64:36:2C:A2:05:9D:C0:CC:D9:C7:F3:14:CE:CB:F8:01:D4:34:AA Certificate issuer: /CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d Certificate serial: 019B7BA349E37DAC5055B22671F2FBDBD731 Authority key identifier: 2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/BGQ2LKIFncDM2cfzFM7L-AHUNKo.roa Signing time: Thu 01 Jan 2026 22:17:37 +0000 ROA not before: Thu 01 Jan 2026 22:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204581 IP address blocks: 185.239.228.0/22 maxlen: 24 194.59.157.0/24 maxlen: 24 194.59.168.0/24 maxlen: 24 194.59.176.0/24 maxlen: 24 194.59.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.mft rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 22:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:49:e3:7d:ac:50:55:b2:26:71:f2:fb:db:d7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fbd3c7e9c77f9a8894905650d7f5a439a07265d Validity Not Before: Jan 1 22:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0464362ca2059dc0ccd9c7f314cecbf801d434aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:34:6d:f8:ea:90:2e:fc:77:e7:bf:09:76:9b: 6c:fa:a7:d9:63:88:a2:dc:2d:4a:1c:ce:84:2a:81: 17:ca:7e:0e:7a:95:a8:48:d8:74:8d:a3:52:e7:6d: b5:8c:0e:c3:3b:34:5e:bb:37:6e:ef:7f:4f:40:e9: 55:4e:ef:4e:ca:03:b7:00:93:07:73:02:21:b1:46: bc:38:25:7f:3f:8b:be:d2:78:5c:f6:db:02:22:93: 07:35:e0:a4:be:e1:e0:1f:1a:4a:13:79:14:4d:68: dd:0b:e3:36:f6:7e:79:1e:52:4f:17:1a:2e:d7:d7: 51:dc:28:fc:e0:7f:c9:eb:03:cc:a7:7f:9b:2e:72: cf:e9:7f:96:e0:1d:39:3d:84:df:ba:85:cd:e8:07: f9:17:73:33:56:eb:0d:7a:57:b8:ad:9d:3f:73:30: be:eb:05:cc:ae:81:df:14:11:d5:9b:f8:7c:76:bb: 9b:2f:97:90:ee:51:80:25:ad:1f:7e:8d:28:8c:cb: 95:c4:cf:7f:9a:5c:1d:a4:a0:cf:26:a0:68:3b:27: ac:ce:7e:fb:83:e7:fa:44:df:92:12:29:4e:22:66: a3:5d:92:8c:9e:98:ee:56:72:36:c1:04:84:53:fa: 9e:75:fe:cf:e7:22:c4:7e:47:ed:e7:c9:eb:3f:02: 3b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:64:36:2C:A2:05:9D:C0:CC:D9:C7:F3:14:CE:CB:F8:01:D4:34:AA X509v3 Authority Key Identifier: keyid:2F:BD:3C:7E:9C:77:F9:A8:89:49:05:65:0D:7F:5A:43:9A:07:26:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L708fpx3-aiJSQVlDX9aQ5oHJl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/BGQ2LKIFncDM2cfzFM7L-AHUNKo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eebdcd-896f-4675-a246-5dcbbde35dcd/1/L708fpx3-aiJSQVlDX9aQ5oHJl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.239.228.0/22 194.59.157.0/24 194.59.168.0/24 194.59.176.0/24 194.59.181.0/24 Signature Algorithm: sha256WithRSAEncryption 96:f0:31:ce:eb:cb:14:38:34:c1:fa:8c:e5:ba:a4:b2:2c:a4: a9:fc:1a:9f:43:43:b4:de:79:e5:04:bc:46:72:e4:05:ca:29: a9:37:eb:e2:33:8d:f7:0a:58:cf:a3:36:24:38:74:7d:dc:98: 82:bb:6c:7e:5d:06:3b:9b:39:07:4d:41:7a:c6:ac:bb:d7:20: 43:e5:d5:ee:87:aa:b3:02:cc:66:29:c6:0a:3b:3a:2e:dc:a6: ea:a4:3e:1a:3a:86:7b:c4:92:f2:ce:4d:74:a7:53:3b:ec:5d: 0f:5f:b2:c5:ef:61:da:7a:9b:8f:d1:e2:00:64:e8:1a:cc:cf: af:2a:59:08:11:fa:ee:d9:ef:a6:1c:52:ff:12:93:64:ad:a9: 5c:25:8a:70:21:7d:1f:dc:bc:80:d5:b4:81:d6:1d:b2:c6:e6: 09:07:f2:47:15:26:fd:bb:cb:84:15:52:f8:1e:ac:1a:7a:66: 50:2f:58:ed:08:74:d0:a4:c8:c3:6f:10:52:44:31:0f:56:50: ae:dc:1b:e7:52:ba:ee:85:34:4f:68:9a:09:ec:8c:3d:c5:13: 64:ee:01:ab:bd:9a:c5:03:26:66:81:fb:fd:9d:11:cb:3a:7b: fa:4c:71:92:13:07:0d:c4:45:69:6b:e7:b4:f4:f4:c1:74:65: f5:6c:69:62 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt7o0njfaxQVbImcfL729cxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYmQzYzdlOWM3N2Y5YTg4OTQ5MDU2NTBkN2Y1YTQzOWEw NzI2NWQwHhcNMjYwMTAxMjIxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDY0MzYyY2EyMDU5ZGMwY2NkOWM3ZjMxNGNlY2JmODAxZDQzNGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jRt+OqQLvx3578Jdpts+qfZY4ii 3C1KHM6EKoEXyn4OepWoSNh0jaNS5221jA7DOzReuzdu739PQOlVTu9OygO3AJMH cwIhsUa8OCV/P4u+0nhc9tsCIpMHNeCkvuHgHxpKE3kUTWjdC+M29n55HlJPFxou 19dR3Cj84H/J6wPMp3+bLnLP6X+W4B05PYTfuoXN6Af5F3MzVusNele4rZ0/czC+ 6wXMroHfFBHVm/h8drubL5eQ7lGAJa0ffo0ojMuVxM9/mlwdpKDPJqBoOyeszn77 g+f6RN+SEilOImajXZKMnpjuVnI2wQSEU/qedf7P5yLEfkft58nrPwI7fQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFARkNiyiBZ3AzNnH8xTOy/gB1DSqMB8GA1UdIwQY MBaAFC+9PH6cd/moiUkFZQ1/WkOaByZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDcwOGZweDMtYWlKU1FWbERYOWFRNW9ISmwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9lZWJkY2QtODk2Zi00Njc1LWEyNDYt NWRjYmJkZTM1ZGNkLzEvQkdRMkxLSUZuY0RNMmNmekZNN0wtQUhVTktvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9lZWJkY2QtODk2Zi00Njc1LWEyNDYtNWRjYmJkZTM1ZGNk LzEvTDcwOGZweDMtYWlKU1FWbERYOWFRNW9ISmwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCue/kAwQA wjudAwQAwjuoAwQAwjuwAwQAwju1MA0GCSqGSIb3DQEBCwUAA4IBAQCW8DHO68sU ODTB+ozluqSyLKSp/BqfQ0O03nnlBLxGcuQFyimpN+viM433CljPozYkOHR93JiC u2x+XQY7mzkHTUF6xqy71yBD5dXuh6qzAsxmKcYKOzou3KbqpD4aOoZ7xJLyzk10 p1M77F0PX7LF72HaepuP0eIAZOgazM+vKlkIEfru2e+mHFL/EpNkralcJYpwIX0f 3LyA1bSB1h2yxuYJB/JHFSb9u8uEFVL4HqwaemZQL1jtCHTQpMjDbxBSRDEPVlCu 3BvnUrruhTRPaJoJ7Iw9xRNk7gGrvZrFAyZmgfv9nRHLOnv6THGSEwcNxEVpa+e0 9PTBdGX1bGli -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:18 2026 by rpki-client