This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/BgYFyQZlOVoVNE_xGRhrUlUnKkE.roa File: BgYFyQZlOVoVNE_xGRhrUlUnKkE.roa (raw, json) Hash identifier: iTNaRaBxLjNxBBzzpY+C9jdK8pNm57Hs3Z5CDJ3xboY= Subject key identifier: 06:06:05:C9:06:65:39:5A:15:34:4F:F1:19:18:6B:52:55:27:2A:41 Certificate issuer: /CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Certificate serial: 019B7C1257273D88026169E47D60EECD6932 Authority key identifier: 27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/BgYFyQZlOVoVNE_xGRhrUlUnKkE.roa Signing time: Fri 02 Jan 2026 00:18:55 +0000 ROA not before: Fri 02 Jan 2026 00:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61073 IP address blocks: 185.51.123.0/24 maxlen: 24 185.183.99.0/24 maxlen: 24 2a04:1680::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.mft rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:57:27:3d:88:02:61:69:e4:7d:60:ee:cd:69:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27b24fd66efe6dc5c3aab2e2e651a4e207fe62e7 Validity Not Before: Jan 2 00:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=060605c90665395a15344ff119186b5255272a41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:16:52:81:75:9f:39:07:bf:d0:7f:d5:b0:4b: 5d:a6:f7:7b:ce:db:85:62:93:b8:a1:2f:6b:0c:69: bf:b8:a5:d9:e2:8a:6d:92:81:95:68:37:37:bb:01: 5d:18:2b:43:c5:42:a4:46:16:51:05:5a:57:32:68: 3e:0b:2b:29:5b:15:39:98:a7:e5:d7:3c:62:02:e5: 34:ce:4c:62:1a:fe:8d:2c:43:5d:5d:9b:b7:72:56: 20:37:27:e6:b7:53:8e:ed:b2:a9:fa:eb:70:a2:1b: 99:1d:6a:94:94:0f:29:e6:c2:35:83:1f:e6:df:c5: c9:f5:e2:01:bf:38:47:33:a4:fd:b2:04:f8:c7:2c: d6:01:21:d6:72:89:ee:26:d7:0b:8e:6b:fc:14:fe: 7a:ef:d9:71:b0:19:91:72:33:f7:2b:a0:fb:c9:3e: a2:4c:e1:83:68:22:4d:13:09:b3:e2:88:01:8d:df: 39:6f:a4:6c:14:d7:79:3e:10:71:05:c4:48:78:ea: 6b:5a:3b:2e:a1:a4:0f:04:20:4a:8b:f3:21:ce:d7: c1:50:b9:f4:af:9b:9f:30:42:9a:ef:0f:14:f9:4c: c1:9f:2a:38:6c:e8:88:27:e1:8b:b6:36:05:d3:a0: f7:0e:d1:fc:be:dd:42:2f:c4:7c:7c:0e:e5:38:e2: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:06:05:C9:06:65:39:5A:15:34:4F:F1:19:18:6B:52:55:27:2A:41 X509v3 Authority Key Identifier: keyid:27:B2:4F:D6:6E:FE:6D:C5:C3:AA:B2:E2:E6:51:A4:E2:07:FE:62:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/BgYFyQZlOVoVNE_xGRhrUlUnKkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/bb01ce-b9b0-4b15-9400-394f50d4ba38/1/J7JP1m7-bcXDqrLi5lGk4gf-Yuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.51.123.0/24 185.183.99.0/24 IPv6: 2a04:1680::/29 Signature Algorithm: sha256WithRSAEncryption 87:3d:03:5d:83:86:9c:a4:14:ca:23:01:cc:36:30:a2:38:79: 27:42:d6:e2:13:be:89:69:4a:37:0f:cf:09:04:e1:33:68:1e: 2e:14:a0:35:d9:54:8f:32:77:1f:51:7c:e7:45:12:02:bf:d0: 9a:4c:36:a8:16:5d:32:de:18:8e:83:e7:40:a6:04:42:3b:4d: 22:a4:11:fa:fc:98:19:b5:5f:79:20:cd:ad:6c:4e:70:67:54: de:36:86:33:5b:2d:0f:8f:7e:2a:b1:4a:9d:e7:68:2d:76:d6: 09:ac:cd:fe:3a:0f:6c:c4:20:f8:75:20:5e:85:b8:16:c2:e7: ee:8b:16:38:f7:62:05:38:93:4d:06:86:5a:97:5b:8c:03:60: 1a:7e:b0:8b:73:3f:51:7a:2b:40:6f:8d:c9:ef:ab:42:79:94: 7d:3b:ae:89:05:03:b3:9a:61:59:92:c7:77:f1:bd:96:b0:fc: 28:1e:83:ae:dc:21:1f:34:40:be:2a:6f:b3:4f:eb:1f:b7:4c: cf:e8:03:05:46:a0:a2:b6:95:3d:d8:3f:8e:f3:8d:9b:5b:b0: 63:6f:30:0a:1a:2d:2c:3e:1a:ff:7a:83:84:3f:1d:d3:d7:0f: af:34:8d:e8:40:24:65:21:93:d9:c8:c3:a8:c1:6a:ae:ae:55: e3:0f:bc:e0 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8ElcnPYgCYWnkfWDuzWkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YjI0ZmQ2NmVmZTZkYzVjM2FhYjJlMmU2NTFhNGUyMDdm ZTYyZTcwHhcNMjYwMTAyMDAxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjA2MDVjOTA2NjUzOTVhMTUzNDRmZjExOTE4NmI1MjU1MjcyYTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRZSgXWfOQe/0H/VsEtdpvd7ztuF YpO4oS9rDGm/uKXZ4optkoGVaDc3uwFdGCtDxUKkRhZRBVpXMmg+CyspWxU5mKfl 1zxiAuU0zkxiGv6NLENdXZu3clYgNyfmt1OO7bKp+utwohuZHWqUlA8p5sI1gx/m 38XJ9eIBvzhHM6T9sgT4xyzWASHWconuJtcLjmv8FP5679lxsBmRcjP3K6D7yT6i TOGDaCJNEwmz4ogBjd85b6RsFNd5PhBxBcRIeOprWjsuoaQPBCBKi/MhztfBULn0 r5ufMEKa7w8U+UzBnyo4bOiIJ+GLtjYF06D3DtH8vt1CL8R8fA7lOOLoHQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFAYGBckGZTlaFTRP8RkYa1JVJypBMB8GA1UdIwQY MBaAFCeyT9Zu/m3Fw6qy4uZRpOIH/mLnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAt Mzk0ZjUwZDRiYTM4LzEvQmdZRnlRWmxPVm9WTkVfeEdSaHJVbFVuS2tFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9iYjAxY2UtYjliMC00YjE1LTk0MDAtMzk0ZjUwZDRiYTM4 LzEvSjdKUDFtNy1iY1hEcXJMaTVsR2s0Z2YtWXVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuTN7AwQA ubdjMA0EAgACMAcDBQMqBBaAMA0GCSqGSIb3DQEBCwUAA4IBAQCHPQNdg4acpBTK IwHMNjCiOHknQtbiE76JaUo3D88JBOEzaB4uFKA12VSPMncfUXznRRICv9CaTDao Fl0y3hiOg+dApgRCO00ipBH6/JgZtV95IM2tbE5wZ1TeNoYzWy0Pj34qsUqd52gt dtYJrM3+Og9sxCD4dSBehbgWwufuixY492IFOJNNBoZal1uMA2AafrCLcz9ReitA b43J76tCeZR9O66JBQOzmmFZksd38b2WsPwoHoOu3CEfNEC+Km+zT+sft0zP6AMF RqCitpU92D+O842bW7BjbzAKGi0sPhr/eoOEPx3T1w+vNI3oQCRlIZPZyMOowWqu rlXjD7zg -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:57 2026 by rpki-client