This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bGaS32LXaNGNxe_s5De9tHByKv4.roa File: bGaS32LXaNGNxe_s5De9tHByKv4.roa (raw, json) Hash identifier: ZSt/5Hyguoev+C5o0hamACfAIpyXUwanlkxjuA3Tskk= Subject key identifier: 6C:66:92:DF:62:D7:68:D1:8D:C5:EF:EC:E4:37:BD:B4:70:72:2A:FE Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D8A9C058D3D4F7DCC6201A255C87E Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bGaS32LXaNGNxe_s5De9tHByKv4.roa Signing time: Fri 02 Jan 2026 06:20:40 +0000 ROA not before: Fri 02 Jan 2026 06:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216300 IP address blocks: 45.12.68.0/24 maxlen: 24 93.88.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:8a:9c:05:8d:3d:4f:7d:cc:62:01:a2:55:c8:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c6692df62d768d18dc5efece437bdb470722afe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:11:e2:87:3b:bd:56:ff:8d:98:44:c3:2d:87: 7a:49:77:01:06:3e:6b:1c:3a:01:34:bd:eb:18:a2: 18:b8:a0:a4:f7:60:42:1f:49:36:c2:a0:e3:9a:8f: ae:ba:9c:4a:82:d2:84:b7:e1:e1:6f:ef:55:89:df: e8:97:ee:f1:e7:20:2a:23:a0:0e:6a:19:b2:10:92: fd:d1:17:cc:d0:60:0a:c9:e1:b5:bb:22:56:46:ca: f5:10:09:db:60:31:e9:51:e4:4b:7b:60:5e:52:38: d6:82:f1:c9:ca:fd:53:8d:58:fa:64:e3:d9:ab:aa: 6b:c0:fc:2b:e8:59:17:ce:df:17:e4:5c:30:dc:9c: 18:c9:a5:9d:91:4d:bd:05:c7:ab:7a:d9:bf:53:4c: 83:54:b4:92:10:67:0b:0b:d9:ae:90:d6:ad:79:e7: 1d:95:b2:eb:32:3f:38:07:32:cb:a7:64:24:5c:a7: 52:9f:e8:9f:de:a4:50:73:0d:d7:cb:c0:98:64:25: 33:34:3f:91:90:fe:dd:94:99:aa:67:05:13:08:68: 17:9c:ca:5d:d6:52:4e:9d:29:9c:b0:b7:23:0e:ba: 67:2f:cb:24:be:a9:af:5d:1b:48:b7:e9:08:db:d4: 35:c7:ad:75:55:96:6f:3c:90:8a:54:c0:7e:b9:20: d9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:66:92:DF:62:D7:68:D1:8D:C5:EF:EC:E4:37:BD:B4:70:72:2A:FE X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bGaS32LXaNGNxe_s5De9tHByKv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.68.0/24 93.88.200.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:f5:89:0f:17:e3:e4:db:04:01:52:44:69:e5:c3:6b:c7:ce: 23:f5:90:3f:21:79:fe:98:57:5e:bf:c5:5d:68:e5:88:f0:9b: 12:9b:ec:86:c8:50:25:3c:9a:12:26:f1:06:ef:19:69:5c:69: 3d:46:03:25:a7:d3:bf:89:86:40:57:06:b3:9a:e5:81:f6:a4: a3:d6:ca:c9:e6:97:07:1f:68:0b:ab:c1:be:df:f7:d4:57:b3: cb:c0:5e:e3:57:3b:28:4b:34:a3:aa:f8:c1:6a:7f:84:fe:fe: f9:5f:a0:9f:eb:24:cf:e4:f5:5f:d9:77:46:91:03:d5:ab:e2: 6b:d1:c2:03:c4:96:67:ef:f4:f8:18:0f:3c:cb:15:30:c6:90: f1:26:07:cc:16:15:c3:88:1f:7f:32:34:45:b4:14:13:27:e6: 0f:e8:15:ae:b4:38:b4:29:8f:ef:77:db:00:c3:68:cd:7e:d0: b7:ed:b3:87:f4:83:13:8d:d6:9a:5d:58:47:a5:fb:04:b1:c0: b2:e9:6c:dd:7b:a0:c3:15:eb:41:f1:e4:08:ca:19:9b:46:24: 83:ad:ba:2d:08:04:62:8d:ad:7a:82:69:7e:10:f5:af:56:cb: d3:e2:2a:e1:f0:2a:90:41:dc:39:d0:36:43:d4:54:7c:fa:a4: ca:af:c4:0c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XYqcBY09T33MYgGiVch+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzY2OTJkZjYyZDc2OGQxOGRjNWVmZWNlNDM3YmRiNDcwNzIyYWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRHihzu9Vv+NmETDLYd6SXcBBj5r HDoBNL3rGKIYuKCk92BCH0k2wqDjmo+uupxKgtKEt+Hhb+9Vid/ol+7x5yAqI6AO ahmyEJL90RfM0GAKyeG1uyJWRsr1EAnbYDHpUeRLe2BeUjjWgvHJyv1TjVj6ZOPZ q6prwPwr6FkXzt8X5Fww3JwYyaWdkU29Bceretm/U0yDVLSSEGcLC9mukNateecd lbLrMj84BzLLp2QkXKdSn+if3qRQcw3Xy8CYZCUzND+RkP7dlJmqZwUTCGgXnMpd 1lJOnSmcsLcjDrpnL8skvqmvXRtIt+kI29Q1x611VZZvPJCKVMB+uSDZoQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGxmkt9i12jRjcXv7OQ3vbRwcir+MB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvYkdhUzMyTFhhTkdOeGVfczVEZTl0SEJ5S3Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQxEAwQA XVjIMA0GCSqGSIb3DQEBCwUAA4IBAQCP9YkPF+Pk2wQBUkRp5cNrx84j9ZA/IXn+ mFdev8VdaOWI8JsSm+yGyFAlPJoSJvEG7xlpXGk9RgMlp9O/iYZAVwazmuWB9qSj 1srJ5pcHH2gLq8G+3/fUV7PLwF7jVzsoSzSjqvjBan+E/v75X6Cf6yTP5PVf2XdG kQPVq+Jr0cIDxJZn7/T4GA88yxUwxpDxJgfMFhXDiB9/MjRFtBQTJ+YP6BWutDi0 KY/vd9sAw2jNftC37bOH9IMTjdaaXVhHpfsEscCy6Wzde6DDFetB8eQIyhmbRiSD rbotCARija16gml+EPWvVsvT4irh8CqQQdw50DZD1FR8+qTKr8QM -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:02 2026 by rpki-client