This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/BcFq67gt-RKOvupOqp8wx9B2E4U.roa File: BcFq67gt-RKOvupOqp8wx9B2E4U.roa (raw, json) Hash identifier: by17HKxYLGTRqXTNejn/CxcA/Hu0QDCXw3xviknWPjI= Subject key identifier: 05:C1:6A:EB:B8:2D:F9:12:8E:BE:EA:4E:AA:9F:30:C7:D0:76:13:85 Certificate issuer: /CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee Certificate serial: 019B7C12881967F328AB56BC7185F12CCDB3 Authority key identifier: F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/BcFq67gt-RKOvupOqp8wx9B2E4U.roa Signing time: Fri 02 Jan 2026 00:19:07 +0000 ROA not before: Fri 02 Jan 2026 00:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4455 IP address blocks: 45.9.80.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.mft rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:88:19:67:f3:28:ab:56:bc:71:85:f1:2c:cd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4f67a40cf5e85c2d2b6558b4099af125d1050ee Validity Not Before: Jan 2 00:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05c16aebb82df9128ebeea4eaa9f30c7d0761385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:d4:20:1a:5b:e3:a9:3e:b9:c9:d9:60:c6: e3:bc:33:cd:bc:52:d4:35:54:6f:1f:e4:13:b8:b6: e1:93:0e:a9:41:ed:e7:80:c4:01:34:87:b3:3e:fa: 15:cc:a6:7f:c5:0c:65:6d:ca:4b:3e:72:87:cb:e3: bf:10:ad:40:2d:44:eb:f9:cf:cb:41:c2:c6:66:05: 5c:60:44:eb:29:46:9e:1c:07:0e:90:06:3f:c1:c3: 64:3b:63:1b:ae:91:6f:86:2d:0e:69:d9:98:5a:ca: 4a:79:50:1d:f0:55:5c:4e:f8:d3:af:98:c1:8b:02: 7c:2c:3c:2c:e9:5c:ca:74:2d:a5:00:68:b4:62:71: a7:fe:80:7b:a2:83:96:d1:0e:79:ac:5b:4a:f9:49: 2d:b5:8e:5c:de:49:f5:05:1f:8a:79:34:65:0d:b8: 9d:e2:79:9a:c1:6f:03:5f:8f:09:c8:15:db:7c:ba: 4e:85:88:c9:6d:6c:fc:cb:3b:68:51:f5:84:a6:5b: c8:d6:c5:0d:4a:20:d8:1f:10:ea:4f:f5:b0:6e:d7: 7a:77:73:f6:15:7d:37:a6:32:ce:02:a6:e6:ae:5e: 37:6c:c6:88:00:7b:78:fa:6a:58:2c:02:d3:0a:ca: 06:5e:a6:52:f9:2a:60:3b:c0:d5:e4:c2:f1:fc:97: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C1:6A:EB:B8:2D:F9:12:8E:BE:EA:4E:AA:9F:30:C7:D0:76:13:85 X509v3 Authority Key Identifier: keyid:F4:F6:7A:40:CF:5E:85:C2:D2:B6:55:8B:40:99:AF:12:5D:10:50:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9PZ6QM9ehcLStlWLQJmvEl0QUO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/BcFq67gt-RKOvupOqp8wx9B2E4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/707b4f-6cd6-488a-8def-3a5c71f86821/1/9PZ6QM9ehcLStlWLQJmvEl0QUO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.9.80.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:85:e8:53:eb:32:d0:60:dd:18:04:1f:be:be:a5:56:53:4b: 73:0c:0e:9c:b7:ad:3e:be:7a:40:91:37:5a:9d:b0:f3:80:ff: a5:f9:85:9b:3d:89:e3:c4:2b:56:03:6e:d6:7d:3f:99:19:f7: ca:39:5d:51:bb:10:15:63:8d:19:30:8c:29:c6:87:32:3d:2d: fb:0e:8f:90:a4:16:e9:ea:69:0e:a5:bf:e3:7c:ae:f4:6f:99: 1e:7d:d3:1f:06:3c:89:d5:14:8a:96:3c:6f:57:d0:55:ff:9f: cc:d7:42:7e:55:5e:a0:1f:c9:85:6b:b3:bd:09:3d:30:21:25: 17:64:5d:98:c7:eb:2f:f3:25:f8:17:93:5c:8b:b6:28:66:48: 0b:7d:0a:60:d9:19:7f:71:3e:dc:da:78:8b:04:a7:2c:f0:af: 5a:7b:b9:56:af:85:9d:ec:d8:8b:e6:b1:04:26:df:e1:bc:91: 1a:a0:62:35:6f:9c:08:23:05:cd:5d:02:c9:14:a4:23:a3:5b: 82:e4:23:79:61:34:d6:97:f8:b3:76:aa:ff:25:16:2e:2d:27: 0a:b1:7b:9f:6e:ff:ce:f4:1a:58:83:db:f6:52:97:00:64:38: 94:03:54:6f:c8:27:e9:73:b3:6c:34:25:b7:01:a8:ed:92:c3: b3:13:23:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EogZZ/Moq1a8cYXxLM2zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZjY3YTQwY2Y1ZTg1YzJkMmI2NTU4YjQwOTlhZjEyNWQx MDUwZWUwHhcNMjYwMTAyMDAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWMxNmFlYmI4MmRmOTEyOGViZWVhNGVhYTlmMzBjN2QwNzYxMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqbUIBpb46k+ucnZYMbjvDPNvFLU NVRvH+QTuLbhkw6pQe3ngMQBNIezPvoVzKZ/xQxlbcpLPnKHy+O/EK1ALUTr+c/L QcLGZgVcYETrKUaeHAcOkAY/wcNkO2MbrpFvhi0OadmYWspKeVAd8FVcTvjTr5jB iwJ8LDws6VzKdC2lAGi0YnGn/oB7ooOW0Q55rFtK+UkttY5c3kn1BR+KeTRlDbid 4nmawW8DX48JyBXbfLpOhYjJbWz8yztoUfWEplvI1sUNSiDYHxDqT/Wwbtd6d3P2 FX03pjLOAqbmrl43bMaIAHt4+mpYLALTCsoGXqZS+SpgO8DV5MLx/JeDDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAXBauu4LfkSjr7qTqqfMMfQdhOFMB8GA1UdIwQY MBaAFPT2ekDPXoXC0rZVi0CZrxJdEFDuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYt M2E1YzcxZjg2ODIxLzEvQmNGcTY3Z3QtUktPdnVwT3FwOHd4OUIyRTRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi83MDdiNGYtNmNkNi00ODhhLThkZWYtM2E1YzcxZjg2ODIx LzEvOVBaNlFNOWVoY0xTdGxXTFFKbXZFbDBRVU80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQlQMA0G CSqGSIb3DQEBCwUAA4IBAQA6hehT6zLQYN0YBB++vqVWU0tzDA6ct60+vnpAkTda nbDzgP+l+YWbPYnjxCtWA27WfT+ZGffKOV1RuxAVY40ZMIwpxocyPS37Do+QpBbp 6mkOpb/jfK70b5kefdMfBjyJ1RSKljxvV9BV/5/M10J+VV6gH8mFa7O9CT0wISUX ZF2Yx+sv8yX4F5Nci7YoZkgLfQpg2Rl/cT7c2niLBKcs8K9ae7lWr4Wd7NiL5rEE Jt/hvJEaoGI1b5wIIwXNXQLJFKQjo1uC5CN5YTTWl/izdqr/JRYuLScKsXufbv/O 9BpYg9v2UpcAZDiUA1RvyCfpc7NsNCW3AajtksOzEyP+ -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:41 2026 by rpki-client