This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/NF-BQhzzUTXiylJC1JLfyL2IYa0.roa File: NF-BQhzzUTXiylJC1JLfyL2IYa0.roa (raw, json) Hash identifier: RWg1VoStDZQpV4Z/AFU+xbdXjMAvA+sGAZu7kpEePOE= Subject key identifier: 34:5F:81:42:1C:F3:51:35:E2:CA:52:42:D4:92:DF:C8:BD:88:61:AD Certificate issuer: /CN=c089423af1be03027196d1f81df22992978cda6e Certificate serial: 019B7C131933D47493B8D53D4F6DBD434ADD Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/NF-BQhzzUTXiylJC1JLfyL2IYa0.roa Signing time: Fri 02 Jan 2026 00:19:44 +0000 ROA not before: Fri 02 Jan 2026 00:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213220 IP address blocks: 84.252.100.0/23 maxlen: 24 185.243.243.0/24 maxlen: 24 185.245.40.0/24 maxlen: 24 185.245.42.0/23 maxlen: 24 185.245.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:19:33:d4:74:93:b8:d5:3d:4f:6d:bd:43:4a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089423af1be03027196d1f81df22992978cda6e Validity Not Before: Jan 2 00:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=345f81421cf35135e2ca5242d492dfc8bd8861ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:69:0e:c9:fd:8e:71:90:8e:0b:e6:a0:5c:b7: fb:e1:e1:ee:57:73:dd:99:31:8e:9a:d8:20:82:9d: 10:e5:1e:24:66:42:c1:d2:10:97:e8:47:e7:71:92: 8a:83:ec:aa:b4:a1:4e:e3:7c:cd:11:f0:7e:82:bc: a1:ed:c7:7c:75:86:06:41:9f:e1:a5:72:3a:fb:cd: 66:34:ff:71:c8:23:e9:30:fe:ba:37:37:82:a0:4b: 5a:27:bc:33:83:77:86:c7:4c:ff:7e:49:1b:b2:68: bc:21:1b:5f:2c:b0:74:69:e3:f9:96:8f:d5:1a:6a: b7:e5:8d:1e:1e:f7:6d:08:06:75:46:19:71:88:c1: 9e:1e:36:9f:fe:2a:c1:1f:19:ff:84:f4:4b:4f:ee: 9c:91:4b:db:ba:b2:3f:6b:d8:ef:09:25:46:dc:85: ed:33:30:47:e0:3d:e2:2b:ce:58:57:39:9b:ae:4e: 71:51:6f:e2:d0:f7:6f:d7:41:3c:45:78:7a:fb:0b: 35:27:5f:37:7b:c0:ad:7b:de:e5:9f:e1:85:da:9c: 53:65:1c:85:40:64:47:5c:31:e8:b0:11:1b:6a:b8: 1d:e7:af:9f:dd:b3:91:35:b4:d5:5b:4b:d6:80:90: 74:f1:f2:d0:6a:fd:a8:9f:f2:c7:29:a3:7a:a3:e5: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5F:81:42:1C:F3:51:35:E2:CA:52:42:D4:92:DF:C8:BD:88:61:AD X509v3 Authority Key Identifier: keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/NF-BQhzzUTXiylJC1JLfyL2IYa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.252.100.0/23 185.243.243.0/24 185.245.40.0/24 185.245.42.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:c8:a1:ac:af:a3:f9:74:00:c3:9a:a7:58:d7:9c:63:00:f3: 70:fa:e8:48:fe:23:c4:ec:bb:00:32:1f:a0:7e:01:9c:cb:fd: b0:f8:b0:8a:26:f5:dd:2f:6a:75:0c:19:5c:11:d1:7c:3b:b5: 6d:34:c8:37:47:58:fc:75:8e:d0:ca:57:41:6c:e0:af:0a:8f: 4d:76:09:a2:a5:2d:a1:8f:6c:d6:d9:f5:ec:ac:fe:4d:c3:15: 07:2f:a0:e1:9f:3f:a8:0e:7c:d6:cb:3d:a0:1f:9b:80:d9:13: d5:f4:c2:c4:2c:26:6e:fd:a7:07:78:f7:de:20:95:74:a7:06: b2:6a:a9:47:e0:4f:f8:a6:c1:f5:52:05:01:8c:37:e0:81:17: ad:78:81:01:f9:11:a5:59:d2:8f:a4:02:89:1a:85:95:77:4c: 3c:ed:ab:23:6c:e4:74:87:62:48:29:42:96:75:09:20:f6:c9: 7c:85:46:46:b6:dc:d1:e2:4c:2e:c5:cf:1f:1a:ff:71:bb:42: 1d:ce:06:1c:30:4e:9c:0b:e0:1d:76:e6:31:cf:8d:e1:2d:77: fd:7a:0a:51:e4:a7:be:e7:74:21:f0:3d:5d:5f:6d:f7:48:cf: 6f:4b:1d:5c:29:f6:e2:10:e8:58:8d:3c:15:c2:32:0c:69:ed: a3:22:ff:dd -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8Exkz1HSTuNU9T229Q0rdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwODk0MjNhZjFiZTAzMDI3MTk2ZDFmODFkZjIyOTkyOTc4 Y2RhNmUwHhcNMjYwMTAyMDAxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDVmODE0MjFjZjM1MTM1ZTJjYTUyNDJkNDkyZGZjOGJkODg2MWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWkOyf2OcZCOC+agXLf74eHuV3Pd mTGOmtgggp0Q5R4kZkLB0hCX6EfncZKKg+yqtKFO43zNEfB+gryh7cd8dYYGQZ/h pXI6+81mNP9xyCPpMP66NzeCoEtaJ7wzg3eGx0z/fkkbsmi8IRtfLLB0aeP5lo/V Gmq35Y0eHvdtCAZ1RhlxiMGeHjaf/irBHxn/hPRLT+6ckUvburI/a9jvCSVG3IXt MzBH4D3iK85YVzmbrk5xUW/i0Pdv10E8RXh6+ws1J183e8Cte97ln+GF2pxTZRyF QGRHXDHosBEbargd56+f3bORNbTVW0vWgJB08fLQav2on/LHKaN6o+X1uQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFDRfgUIc81E14spSQtSS38i9iGGtMB8GA1UdIwQY MBaAFMCJQjrxvgMCcZbR+B3yKZKXjNpuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgt NjUzMzJiNDdmNWViLzEvTkYtQlFoenpVVFhpeWxKQzFKTGZ5TDJJWWEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9kYzI5MTItYzdiMC00ZGY0LTlhYTgtNjUzMzJiNDdmNWVi LzEvd0lsQ092Ry1Bd0p4bHRINEhmSXBrcGVNMm00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBVPxkAwQA ufPzAwQAufUoAwQBufUqMA0GCSqGSIb3DQEBCwUAA4IBAQB6yKGsr6P5dADDmqdY 15xjAPNw+uhI/iPE7LsAMh+gfgGcy/2w+LCKJvXdL2p1DBlcEdF8O7VtNMg3R1j8 dY7QyldBbOCvCo9NdgmipS2hj2zW2fXsrP5NwxUHL6Dhnz+oDnzWyz2gH5uA2RPV 9MLELCZu/acHePfeIJV0pwayaqlH4E/4psH1UgUBjDfggReteIEB+RGlWdKPpAKJ GoWVd0w87asjbOR0h2JIKUKWdQkg9sl8hUZGttzR4kwuxc8fGv9xu0IdzgYcME6c C+AdduYxz43hLXf9egpR5Ke+53Qh8D1dX233SM9vSx1cKfbiEOhYjTwVwjIMae2j Iv/d -----END CERTIFICATE-----Generated at Sun Jan 25 21:15:18 2026 by rpki-client