This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bgeYFuQpAXe0etKgwCdWnHQ2eYY.roa File: bgeYFuQpAXe0etKgwCdWnHQ2eYY.roa (raw, json) Hash identifier: BVo/Qjuew4X5GMeao4AIFiO81hmqrkNuQz/m7TqcIo4= Subject key identifier: 6E:07:98:16:E4:29:01:77:B4:7A:D2:A0:C0:27:56:9C:74:36:79:86 Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Certificate serial: 019B7F149F86847AFEB2AF07C5BF7317BE7A Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bgeYFuQpAXe0etKgwCdWnHQ2eYY.roa Signing time: Fri 02 Jan 2026 14:20:16 +0000 ROA not before: Fri 02 Jan 2026 14:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8368 IP address blocks: 62.192.102.0/23 maxlen: 23 62.192.114.0/23 maxlen: 23 62.192.126.0/23 maxlen: 23 213.169.204.0/23 maxlen: 23 213.169.240.0/23 maxlen: 23 217.8.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:9f:86:84:7a:fe:b2:af:07:c5:bf:73:17:be:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171 Validity Not Before: Jan 2 14:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6e079816e4290177b47ad2a0c027569c74367986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:fc:08:2f:92:72:8b:d3:b1:e8:b3:ab:5a:b3: 0d:2a:37:cc:d5:cf:e7:6c:98:fd:3c:00:8a:d6:e6: 1a:17:72:e4:9b:09:cd:be:e6:cc:84:1b:e5:54:d5: 82:fb:51:d8:b6:3e:fd:c3:f5:14:94:a0:4d:22:5c: aa:10:97:0f:7e:9f:51:d6:f0:cb:35:e3:ea:8d:02: 48:93:bd:de:77:b9:b5:fb:6a:dc:e2:6a:b2:69:50: ab:e9:ec:2b:4b:78:de:83:9c:2a:4d:cb:38:db:d4: d3:ce:72:f5:76:6d:2d:cc:42:de:84:5c:75:dd:13: c8:a8:3b:cd:ed:ca:35:86:fb:bf:42:64:98:1e:0f: e3:34:57:b9:b7:fb:b9:2d:fc:2f:2e:52:ea:c0:0e: 3f:ec:5e:d1:50:c8:b2:af:57:f1:ff:a6:e3:bd:21: fb:26:8f:b7:3d:5e:22:69:b5:69:77:31:d1:b4:e6: ac:c8:32:f6:bd:20:a8:0b:47:5f:94:54:d6:8a:99: a8:48:87:70:fe:91:fb:11:ad:8c:b0:89:25:23:c3: ba:4d:a8:00:06:48:8f:d8:27:ce:fd:26:19:08:be: f1:9d:b3:51:bc:ea:c4:a4:22:cf:89:73:86:b7:d9: 73:5c:45:c4:6b:11:4f:23:a0:84:a6:80:a3:58:81: e2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:07:98:16:E4:29:01:77:B4:7A:D2:A0:C0:27:56:9C:74:36:79:86 X509v3 Authority Key Identifier: keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/bgeYFuQpAXe0etKgwCdWnHQ2eYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.192.102.0/23 62.192.114.0/23 62.192.126.0/23 213.169.204.0/23 213.169.240.0/23 217.8.222.0/23 Signature Algorithm: sha256WithRSAEncryption 1d:fc:73:83:6e:55:ce:29:72:8a:ef:e3:e4:9b:d8:54:e6:fb: e0:1b:d1:02:f7:4e:d3:aa:20:bd:81:db:8d:8e:82:e5:f7:d0: 6e:51:1d:a6:30:d1:47:32:5e:82:b8:c4:ce:43:45:cb:f1:b7: 70:9b:ae:8e:0e:eb:16:43:63:01:7f:01:a8:78:13:22:7c:bb: e3:aa:27:62:e8:b0:64:c4:ad:f3:b2:6b:3a:9e:35:87:dc:2e: 40:15:14:e9:1e:af:c8:a1:65:eb:6d:46:13:97:70:be:34:a8: ab:50:08:a1:19:cc:88:2c:cc:95:ab:19:fb:fb:8d:e1:ea:52: a7:5f:10:c7:67:48:d7:08:72:cf:36:40:03:11:d5:bb:2d:68: 33:8b:31:a5:78:71:65:7e:c4:3b:a3:97:32:5b:d7:03:65:7f: 80:3b:c0:90:87:b5:a1:5f:f6:a0:b5:6a:29:33:2e:0e:ff:a4: c5:f9:c1:54:50:dd:34:09:44:ab:b3:66:b4:3e:f8:4f:c9:c1: 9d:18:49:43:82:bd:c0:f9:a4:8b:06:4c:7a:c7:cb:aa:2e:23: fe:6f:0d:00:41:cd:9b:dd:ba:28:a4:39:50:bd:ea:d5:7c:12: 0f:ed:d6:81:21:97:9d:fd:b2:11:2b:a4:1a:36:ef:83:29:c0: 39:25:dc:3e -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt/FJ+GhHr+sq8Hxb9zF756MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0 NmQxNzEwHhcNMjYwMTAyMTQyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTA3OTgxNmU0MjkwMTc3YjQ3YWQyYTBjMDI3NTY5Yzc0MzY3OTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vwIL5Jyi9Ox6LOrWrMNKjfM1c/n bJj9PACK1uYaF3LkmwnNvubMhBvlVNWC+1HYtj79w/UUlKBNIlyqEJcPfp9R1vDL NePqjQJIk73ed7m1+2rc4mqyaVCr6ewrS3jeg5wqTcs429TTznL1dm0tzELehFx1 3RPIqDvN7co1hvu/QmSYHg/jNFe5t/u5LfwvLlLqwA4/7F7RUMiyr1fx/6bjvSH7 Jo+3PV4iabVpdzHRtOasyDL2vSCoC0dflFTWipmoSIdw/pH7Ea2MsIklI8O6TagA BkiP2CfO/SYZCL7xnbNRvOrEpCLPiXOGt9lzXEXEaxFPI6CEpoCjWIHiYQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFG4HmBbkKQF3tHrSoMAnVpx0NnmGMB8GA1UdIwQY MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt MGNmMTA5M2Q0NTQ4LzEvYmdlWUZ1UXBBWGUwZXRLZ3dDZFduSFEyZVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4 LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBPsBmAwQB PsByAwQBPsB+AwQB1anMAwQB1anwAwQB2QjeMA0GCSqGSIb3DQEBCwUAA4IBAQAd /HODblXOKXKK7+Pkm9hU5vvgG9EC907TqiC9gduNjoLl99BuUR2mMNFHMl6CuMTO Q0XL8bdwm66ODusWQ2MBfwGoeBMifLvjqidi6LBkxK3zsms6njWH3C5AFRTpHq/I oWXrbUYTl3C+NKirUAihGcyILMyVqxn7+43h6lKnXxDHZ0jXCHLPNkADEdW7LWgz izGleHFlfsQ7o5cyW9cDZX+AO8CQh7WhX/agtWopMy4O/6TF+cFUUN00CUSrs2a0 PvhPycGdGElDgr3A+aSLBkx6x8uqLiP+bw0AQc2b3boopDlQverVfBIP7daBIZed /bIRK6QaNu+DKcA5Jdw+ -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:06 2026 by rpki-client