This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/G2ewgj52eZh9y6VDlOFJXRHe_BE.roa File: G2ewgj52eZh9y6VDlOFJXRHe_BE.roa (raw, json) Hash identifier: nVokbyOH7Asu4U78dHBpKQjVq6tARnHlznD7elRPZxs= Subject key identifier: 1B:67:B0:82:3E:76:79:98:7D:CB:A5:43:94:E1:49:5D:11:DE:FC:11 Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058 Certificate serial: 019B7E39711FFB8DAFC66E931B5E725235D2 Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/G2ewgj52eZh9y6VDlOFJXRHe_BE.roa Signing time: Fri 02 Jan 2026 10:20:52 +0000 ROA not before: Fri 02 Jan 2026 10:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215931 IP address blocks: 2a0c:b641:b40::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.mft rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:71:1f:fb:8d:af:c6:6e:93:1b:5e:72:52:35:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05976801363d375786152e4d061e75c8beb35058 Validity Not Before: Jan 2 10:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b67b0823e7679987dcba54394e1495d11defc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d5:ad:61:33:df:46:71:b7:ea:d7:08:5a:3b: e2:0c:66:0d:d1:a9:70:b1:1b:33:0a:06:5a:2f:d1: 20:87:2d:a9:d5:1c:41:2f:86:73:a8:2f:48:f0:cc: 77:43:84:d5:54:a4:29:5f:70:16:e3:98:bd:f1:76: 08:52:00:89:ce:ff:4a:33:69:8e:04:4e:bc:71:75: 5a:4d:36:b6:39:86:4a:99:1e:38:87:70:84:ec:f8: c0:12:40:70:9a:02:2f:f2:93:28:d4:e4:28:ec:3c: 01:17:9f:39:51:c3:de:14:cb:65:fb:0c:c2:37:a8: f9:9e:d0:00:ff:6b:fb:0e:a3:c9:19:89:ba:e0:a2: 03:d5:46:39:b2:28:eb:c5:b4:a2:82:7d:3d:0f:53: 3d:e2:af:98:9f:a6:d9:20:1b:e7:16:a2:5e:64:9d: 5a:f1:9e:7c:48:c0:34:8c:43:e7:99:64:cb:f4:3d: 56:10:b7:60:8f:1c:e3:a8:89:0a:87:9f:df:2c:6b: 31:4d:d2:fc:fc:5f:a7:38:79:61:b7:fa:da:97:1d: 85:25:84:2e:a9:a8:ce:57:db:90:a2:e7:7f:bb:a9: a3:48:95:36:d8:5a:fc:9b:15:b0:d0:b1:ef:0f:d1: df:e7:42:53:cb:bd:4e:4a:a7:23:c7:82:5e:88:19: 19:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:67:B0:82:3E:76:79:98:7D:CB:A5:43:94:E1:49:5D:11:DE:FC:11 X509v3 Authority Key Identifier: keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/G2ewgj52eZh9y6VDlOFJXRHe_BE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0c:b641:b40::/44 Signature Algorithm: sha256WithRSAEncryption 43:bb:41:47:a5:85:fc:0e:50:6c:f7:26:a6:20:b1:0b:72:50: b1:4d:27:24:c8:9f:84:6f:18:5a:9f:99:88:77:6d:08:03:a5: cf:33:e5:65:47:2c:a9:74:75:7e:5c:68:58:d2:ea:cc:58:82: 38:45:a0:5f:a1:35:77:d8:e2:1e:d1:45:2d:0f:49:46:ab:4e: 79:26:4d:f1:8b:f2:7f:60:ab:8d:17:62:17:6b:1a:67:06:c4: 46:03:5c:b7:09:1a:fe:f7:6b:5a:98:a5:7a:9c:02:f0:ba:c8: e9:9c:fb:24:5f:36:05:66:0e:96:45:be:70:44:04:4d:b1:d7: 8f:64:03:b5:24:70:2c:8a:a7:cb:0b:9a:7d:08:07:f8:2a:fb: b0:65:b5:c8:80:24:9c:fc:46:82:af:f6:b5:0e:14:aa:f8:07: 1b:b5:a8:8d:63:58:77:87:6d:57:84:30:2c:ac:d4:56:c5:95: e4:21:54:75:fe:5f:65:f8:2f:a7:70:aa:a3:e8:b4:9b:43:65: 53:e4:03:a4:2f:b4:e9:ca:d7:f8:17:ce:f0:d6:61:ea:4f:16: 20:8e:c5:e0:9e:3c:c7:fd:0c:fe:e5:11:5c:ca:50:c0:59:17: 32:e8:6e:7e:67:5b:95:a2:13:2e:ce:c8:57:7d:24:18:63:64: 43:7e:ca:bf -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgISAZt+OXEf+42vxm6TG15yUjXSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi MzUwNTgwHhcNMjYwMTAyMTAyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjY3YjA4MjNlNzY3OTk4N2RjYmE1NDM5NGUxNDk1ZDExZGVmYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tWtYTPfRnG36tcIWjviDGYN0alw sRszCgZaL9Eghy2p1RxBL4ZzqC9I8Mx3Q4TVVKQpX3AW45i98XYIUgCJzv9KM2mO BE68cXVaTTa2OYZKmR44h3CE7PjAEkBwmgIv8pMo1OQo7DwBF585UcPeFMtl+wzC N6j5ntAA/2v7DqPJGYm64KID1UY5sijrxbSign09D1M94q+Yn6bZIBvnFqJeZJ1a 8Z58SMA0jEPnmWTL9D1WELdgjxzjqIkKh5/fLGsxTdL8/F+nOHlht/ralx2FJYQu qajOV9uQoud/u6mjSJU22Fr8mxWw0LHvD9Hf50JTy71OSqcjx4JeiBkZ/wIDAQAB o4ICDDCCAggwHQYDVR0OBBYEFBtnsII+dnmYfculQ5ThSV0R3vwRMB8GA1UdIwQY MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et NWVjOGM4ZWQ2MGZkLzEvRzJld2dqNTJlWmg5eTZWRGxPRkpYUkhlX0JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQtA MA0GCSqGSIb3DQEBCwUAA4IBAQBDu0FHpYX8DlBs9yamILELclCxTSckyJ+Ebxha n5mId20IA6XPM+VlRyypdHV+XGhY0urMWII4RaBfoTV32OIe0UUtD0lGq055Jk3x i/J/YKuNF2IXaxpnBsRGA1y3CRr+92tamKV6nALwusjpnPskXzYFZg6WRb5wRARN sdePZAO1JHAsiqfLC5p9CAf4KvuwZbXIgCSc/EaCr/a1DhSq+AcbtaiNY1h3h21X hDAsrNRWxZXkIVR1/l9l+C+ncKqj6LSbQ2VT5AOkL7Tpytf4F87w1mHqTxYgjsXg njzH/Qz+5RFcylDAWRcy6G5+Z1uVohMuzshXfSQYY2RDfsq/ -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:59 2026 by rpki-client