This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/BdqGs3R6xCnjEwShLrflyZwaVp0.roa File: BdqGs3R6xCnjEwShLrflyZwaVp0.roa (raw, json) Hash identifier: RR88JIqbu0K/mTZcvwGkA42FVlGztgnaWCqdDikFkjg= Subject key identifier: 05:DA:86:B3:74:7A:C4:29:E3:13:04:A1:2E:B7:E5:C9:9C:1A:56:9D Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3 Certificate serial: 019B7DCAFC16AD1026F4FABC31053EDD52FE Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/BdqGs3R6xCnjEwShLrflyZwaVp0.roa Signing time: Fri 02 Jan 2026 08:20:13 +0000 ROA not before: Fri 02 Jan 2026 08:20:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39584 IP address blocks: 193.200.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:fc:16:ad:10:26:f4:fa:bc:31:05:3e:dd:52:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3 Validity Not Before: Jan 2 08:20:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05da86b3747ac429e31304a12eb7e5c99c1a569d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:36:69:36:b4:db:1f:09:ec:16:1a:10:38:56: 17:34:5c:fb:51:2d:f4:5a:f2:8c:c9:5c:1a:b8:ca: e6:b9:d7:84:bd:1c:f5:c4:fb:e5:bf:ec:64:d1:28: b4:9d:96:ac:b4:4a:1c:29:fe:2d:6c:32:7d:0f:52: bf:d3:33:0e:e1:65:af:e2:5f:fe:90:2d:5e:c0:f5: 2f:bc:70:b8:2c:ba:d1:e5:c1:6d:ad:a2:cc:1d:54: d0:73:e0:25:21:51:6f:1f:de:13:16:f5:5d:a0:8f: 7c:f0:f4:60:bc:dd:75:41:6a:8e:47:48:e2:9d:d6: 45:8e:87:7e:4d:11:42:42:f1:5f:b3:94:10:c3:b8: 96:c4:fb:14:e1:c6:c1:28:ee:75:18:c0:35:bf:91: e7:d3:cb:13:10:a7:16:ce:9c:a2:d8:29:f5:8d:01: 67:d6:5b:23:f3:da:3d:d2:a9:d3:04:2c:0d:85:af: e8:48:84:ae:ff:7b:a1:82:9e:84:4c:08:bc:ce:ae: 10:49:cc:e7:7c:94:70:87:a9:af:79:e1:89:7f:fa: a6:25:28:38:59:1a:82:b9:b7:36:b8:69:95:c9:23: 3d:f7:94:57:4d:ca:ad:74:05:57:57:a4:72:6e:81: 2d:7f:c3:ac:82:02:4d:25:8f:da:bb:bd:d6:67:31: 89:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DA:86:B3:74:7A:C4:29:E3:13:04:A1:2E:B7:E5:C9:9C:1A:56:9D X509v3 Authority Key Identifier: keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/BdqGs3R6xCnjEwShLrflyZwaVp0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.200.176.0/24 Signature Algorithm: sha256WithRSAEncryption 99:5f:f1:0f:6f:ff:cc:6e:e6:2b:88:9b:b1:7e:55:62:97:9a: 02:52:70:84:e5:65:76:67:28:d9:ed:b9:2c:54:2c:a8:c7:76: cc:93:44:50:98:5a:3e:15:1d:71:39:c4:23:42:7c:9b:62:8a: 3f:04:2f:38:37:4d:9b:1f:d2:11:9d:23:e5:b8:67:f7:61:24: 92:5c:a2:35:19:de:c6:24:41:a1:1c:73:3a:1f:fa:62:4d:ba: fe:ca:50:86:3e:f7:5b:a4:be:d3:f3:de:20:a3:b9:a9:36:c9: 50:5e:76:8b:14:ff:e8:ef:33:51:46:af:88:a9:88:21:0a:d1: 26:5d:26:0f:a1:e9:c7:d7:f1:4b:ff:f4:3f:25:20:98:49:62: 0e:d6:4f:a0:e7:8c:91:3b:3a:2a:cf:bf:a0:d5:d8:af:ff:b6: 11:19:12:45:42:e5:20:88:b1:c1:f8:d6:8a:a6:5c:ae:3d:96: a0:da:be:b4:64:0c:01:de:f5:4a:2a:63:71:69:25:de:95:d7: 6f:94:51:29:2a:a5:cb:b4:ad:51:b2:a5:29:f1:e9:79:ae:2f: 04:69:17:db:ae:97:ff:89:26:37:e5:46:87:fb:15:96:12:37: 31:7d:4d:9b:5a:eb:9e:d2:31:be:e8:1c:a7:d3:c3:96:67:7a: 31:67:96:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yvwWrRAm9Pq8MQU+3VL+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwMGM3YWM1NmIxMWUxMDRhYmIxNjdiYjFhYjM3OTJiM2Zh N2MzZDMwHhcNMjYwMTAyMDgyMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWRhODZiMzc0N2FjNDI5ZTMxMzA0YTEyZWI3ZTVjOTljMWE1NjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzzZpNrTbHwnsFhoQOFYXNFz7US30 WvKMyVwauMrmudeEvRz1xPvlv+xk0Si0nZastEocKf4tbDJ9D1K/0zMO4WWv4l/+ kC1ewPUvvHC4LLrR5cFtraLMHVTQc+AlIVFvH94TFvVdoI988PRgvN11QWqOR0ji ndZFjod+TRFCQvFfs5QQw7iWxPsU4cbBKO51GMA1v5Hn08sTEKcWzpyi2Cn1jQFn 1lsj89o90qnTBCwNha/oSISu/3uhgp6ETAi8zq4QScznfJRwh6mveeGJf/qmJSg4 WRqCubc2uGmVySM995RXTcqtdAVXV6RyboEtf8OsggJNJY/au73WZzGJxQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAXahrN0esQp4xMEoS635cmcGladMB8GA1UdIwQY MBaAFOAMesVrEeEEq7FnuxqzeSs/p8PTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYt NGZkMGUxYjljMTJmLzEvQmRxR3MzUjZ4Q25qRXdTaExyZmx5WndhVnAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9mMjAwNzEtMjJhMS00NjFkLWI2YmYtNGZkMGUxYjljMTJm LzEvNEF4NnhXc1I0UVNyc1dlN0dyTjVLei1udzlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwciwMA0G CSqGSIb3DQEBCwUAA4IBAQCZX/EPb//MbuYriJuxflVil5oCUnCE5WV2ZyjZ7bks VCyox3bMk0RQmFo+FR1xOcQjQnybYoo/BC84N02bH9IRnSPluGf3YSSSXKI1Gd7G JEGhHHM6H/piTbr+ylCGPvdbpL7T894go7mpNslQXnaLFP/o7zNRRq+IqYghCtEm XSYPoenH1/FL//Q/JSCYSWIO1k+g54yROzoqz7+g1div/7YRGRJFQuUgiLHB+NaK plyuPZag2r60ZAwB3vVKKmNxaSXelddvlFEpKqXLtK1RsqUp8el5ri8EaRfbrpf/ iSY35UaH+xWWEjcxfU2bWuue0jG+6Byn08OWZ3oxZ5Yk -----END CERTIFICATE-----Generated at Tue Feb 10 01:07:22 2026 by rpki-client