This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BEPBwOdNYd7WfLJwJcNi8nbcrSY.roa File: BEPBwOdNYd7WfLJwJcNi8nbcrSY.roa (raw, json) Hash identifier: XfqxcrhooGDMrqaTGYcUOYMMr4SRdgW/8sOpM0va4ts= Subject key identifier: 04:43:C1:C0:E7:4D:61:DE:D6:7C:B2:70:25:C3:62:F2:76:DC:AD:26 Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Certificate serial: 019B7B3608A36D26AED821FC9E4D9C716C43 Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BEPBwOdNYd7WfLJwJcNi8nbcrSY.roa Signing time: Thu 01 Jan 2026 20:18:17 +0000 ROA not before: Thu 01 Jan 2026 20:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53730 IP address blocks: 87.236.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 04:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:08:a3:6d:26:ae:d8:21:fc:9e:4d:9c:71:6c:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56 Validity Not Before: Jan 1 20:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0443c1c0e74d61ded67cb27025c362f276dcad26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:6e:78:b5:37:00:7d:ad:e0:32:e0:87:72: 3e:fe:af:7b:74:a1:10:f6:83:a5:36:03:43:dd:e7: 00:7b:59:a2:74:75:c5:3a:e3:35:45:8f:77:54:58: 52:a1:00:4e:22:c1:b0:e8:90:6e:79:29:ce:80:76: 14:ac:a7:c2:13:1f:e2:6d:23:76:4d:9b:4f:d6:ba: dc:20:78:6f:19:ad:1c:fc:6c:95:64:a2:0e:84:8d: 51:43:74:07:99:04:9b:eb:cf:d4:67:72:8c:32:03: 1e:dc:61:77:2c:94:c8:61:4e:7f:c7:f5:0e:b6:0a: c9:08:16:e6:c7:00:61:92:8f:2c:84:4d:4a:f4:28: 73:5f:5e:ac:ab:ae:b1:48:eb:09:3b:3f:be:57:60: ae:cd:b6:db:e1:7c:fa:2e:3a:00:b9:ee:72:f0:c1: 61:ec:d0:79:b7:49:65:47:d8:bb:aa:dc:72:f2:4a: d6:0c:75:0b:1c:b3:7d:18:53:74:3f:b3:4f:93:bc: fb:02:03:f7:49:30:f0:a5:37:bd:80:1c:36:ac:0c: 78:6c:00:3a:c4:7f:8b:f8:14:8d:1f:02:c1:0b:7b: cb:86:26:37:23:e0:0f:89:78:06:8e:ef:53:d3:78: 03:e3:96:43:c4:da:e6:4f:86:80:02:bf:66:a2:49: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:43:C1:C0:E7:4D:61:DE:D6:7C:B2:70:25:C3:62:F2:76:DC:AD:26 X509v3 Authority Key Identifier: keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/BEPBwOdNYd7WfLJwJcNi8nbcrSY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.167.0/24 Signature Algorithm: sha256WithRSAEncryption 14:b3:51:7b:ad:4d:26:02:1b:13:8a:d0:de:92:85:b4:ca:1a: 3e:45:5a:2e:35:2f:6e:13:9f:99:64:44:27:85:d5:52:1e:87: 93:4e:d8:d3:3f:83:93:a2:17:85:3f:e3:1c:93:c2:a7:55:e8: 82:cf:b3:c8:34:83:36:bd:4a:e8:c8:06:24:8c:b3:42:96:05: 29:30:19:66:de:c3:00:3e:dd:dc:d1:42:da:fc:8e:7d:24:3c: 29:c2:15:5f:4a:48:e4:b3:27:2f:ed:2f:d0:b9:1c:8c:68:74: 68:3d:f3:86:1b:f1:be:6e:fa:e0:0a:e7:cb:c5:7a:ea:7a:67: f4:f8:99:82:82:77:9b:5f:f8:8f:56:a2:ff:c7:57:38:b6:ce: 3e:10:3f:d8:bf:7b:6e:1e:7c:ca:e9:7f:91:60:b6:b9:e4:ac: 49:0a:c5:77:c6:2e:12:af:d2:70:ec:11:5e:0f:52:fa:5f:69: 4a:25:46:89:12:65:d6:a7:75:56:06:61:ff:27:8f:0d:49:75: 37:e6:cd:05:db:31:1d:6a:bb:12:cc:24:06:03:11:da:87:09: 52:dd:54:75:89:b4:86:5b:83:15:a8:e1:da:f0:73:61:76:70: ee:29:d0:13:ab:2c:9d:39:88:c6:71:69:db:a3:c0:7d:6f:66: 54:90:c9:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NgijbSau2CH8nk2ccWxDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw N2VlNTYwHhcNMjYwMTAxMjAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDQzYzFjMGU3NGQ2MWRlZDY3Y2IyNzAyNWMzNjJmMjc2ZGNhZDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnBueLU3AH2t4DLgh3I+/q97dKEQ 9oOlNgND3ecAe1midHXFOuM1RY93VFhSoQBOIsGw6JBueSnOgHYUrKfCEx/ibSN2 TZtP1rrcIHhvGa0c/GyVZKIOhI1RQ3QHmQSb68/UZ3KMMgMe3GF3LJTIYU5/x/UO tgrJCBbmxwBhko8shE1K9ChzX16sq66xSOsJOz++V2Cuzbbb4Xz6LjoAue5y8MFh 7NB5t0llR9i7qtxy8krWDHULHLN9GFN0P7NPk7z7AgP3STDwpTe9gBw2rAx4bAA6 xH+L+BSNHwLBC3vLhiY3I+APiXgGju9T03gD45ZDxNrmT4aAAr9mokkx3wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFARDwcDnTWHe1nyycCXDYvJ23K0mMB8GA1UdIwQY MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt OGJmYmRkNDVjYjYyLzEvQkVQQndPZE5ZZDdXZkxKd0pjTmk4bmJjclNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+ynMA0G CSqGSIb3DQEBCwUAA4IBAQAUs1F7rU0mAhsTitDekoW0yho+RVouNS9uE5+ZZEQn hdVSHoeTTtjTP4OToheFP+Mck8KnVeiCz7PINIM2vUroyAYkjLNClgUpMBlm3sMA Pt3c0ULa/I59JDwpwhVfSkjksycv7S/QuRyMaHRoPfOGG/G+bvrgCufLxXrqemf0 +JmCgnebX/iPVqL/x1c4ts4+ED/Yv3tuHnzK6X+RYLa55KxJCsV3xi4Sr9Jw7BFe D1L6X2lKJUaJEmXWp3VWBmH/J48NSXU35s0F2zEdarsSzCQGAxHahwlS3VR1ibSG W4MVqOHa8HNhdnDuKdATqyydOYjGcWnbo8B9b2ZUkMlH -----END CERTIFICATE-----Generated at Thu Jan 15 13:18:35 2026 by rpki-client