This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Bg8w9OwS-V1FP_ibTHH9DalAv-s.roa File: Bg8w9OwS-V1FP_ibTHH9DalAv-s.roa (raw, json) Hash identifier: K1oLrxNLC+dgNudVPYFexaQZYQj2LZS3GiKE8SCCQ/k= Subject key identifier: 06:0F:30:F4:EC:12:F9:5D:45:3F:F8:9B:4C:71:FD:0D:A9:40:BF:EB Certificate issuer: /CN=a87090c275c34c05c306f3b36063893a0d72782a Certificate serial: 019B7BA40E134A2A228BA68AC685DCECA351 Authority key identifier: A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Bg8w9OwS-V1FP_ibTHH9DalAv-s.roa Signing time: Thu 01 Jan 2026 22:18:27 +0000 ROA not before: Thu 01 Jan 2026 22:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203549 IP address blocks: 185.103.111.0/24 maxlen: 24 185.109.22.0/23 maxlen: 23 185.109.22.0/24 maxlen: 24 185.109.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.mft rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:0e:13:4a:2a:22:8b:a6:8a:c6:85:dc:ec:a3:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a87090c275c34c05c306f3b36063893a0d72782a Validity Not Before: Jan 1 22:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=060f30f4ec12f95d453ff89b4c71fd0da940bfeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:34:ef:3b:47:5d:b2:62:30:e8:b7:54:09:c3: f1:7d:e5:ec:47:c5:4d:f5:95:65:c2:4b:aa:b9:97: 73:74:96:32:e7:03:96:50:2b:1a:b0:b6:4f:71:b4: 9e:61:6a:5c:ab:8a:2c:09:3a:ed:c8:92:af:23:5b: ff:a6:31:06:16:ac:79:40:c1:16:6a:66:d3:a5:76: eb:a9:a3:8e:73:41:5b:9b:08:2d:a9:f2:d5:93:01: 09:d7:7d:ff:c1:8d:c2:d4:5b:4f:03:81:2f:b3:16: f6:6a:fe:e9:99:3c:99:ef:f5:7e:3b:e1:59:3a:ba: 90:63:06:84:66:5a:7e:4d:c0:30:8c:60:af:59:bf: dd:a4:44:58:2c:40:80:16:f4:82:3f:53:ad:32:c0: 7c:bf:01:c4:51:16:b7:c3:d1:73:8d:fd:61:48:12: 8d:a9:10:0d:75:7c:2c:c3:6f:b8:1f:25:1e:be:b6: 7b:44:a9:81:f4:ac:26:49:e7:16:de:63:0f:b7:ff: 03:be:4f:89:f8:22:c1:9d:d0:ca:5d:59:6f:56:48: 29:28:a3:62:fc:e8:df:85:26:d8:73:d6:64:6e:7f: ac:f0:35:73:47:b6:65:b2:48:83:23:62:68:0f:79: e7:0c:69:21:7e:cb:44:3a:5b:3b:a8:7e:7b:44:3b: 24:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0F:30:F4:EC:12:F9:5D:45:3F:F8:9B:4C:71:FD:0D:A9:40:BF:EB X509v3 Authority Key Identifier: keyid:A8:70:90:C2:75:C3:4C:05:C3:06:F3:B3:60:63:89:3A:0D:72:78:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHCQwnXDTAXDBvOzYGOJOg1yeCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/Bg8w9OwS-V1FP_ibTHH9DalAv-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qHCQwnXDTAXDBvOzYGOJOg1yeCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.103.111.0/24 185.109.22.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:fc:f4:26:67:54:71:6d:8b:46:33:50:24:38:f9:d1:67:d8: f9:e2:5f:87:29:99:69:e5:49:f6:34:ed:1a:61:8e:0f:9f:6c: c9:bc:fa:42:73:d0:71:08:08:10:7a:fe:d2:ae:76:95:5d:83: 4d:21:78:ac:e3:9a:3b:6a:7f:d7:1e:cb:06:dd:07:94:bd:0f: 0c:fc:6b:21:69:16:3b:36:d2:d7:76:58:62:3b:28:aa:d3:5d: 06:d2:8a:ca:11:cc:ed:59:5d:ff:29:8a:1d:22:3c:57:f8:4b: 9e:47:c5:f7:56:9f:e8:8c:ec:e9:33:d8:a8:ca:ee:ab:c4:94: 6d:5e:a3:d7:9c:d4:f4:cb:66:53:13:0b:c5:d2:c1:80:06:d7: dc:44:d9:c5:b3:d2:d1:dc:f1:f1:f9:a9:50:07:9a:80:4b:bb: a7:ab:8d:91:4c:06:5b:23:c0:be:18:5f:35:83:d4:6f:11:92: 86:6b:5d:5d:e1:75:66:ff:f4:fd:8e:11:54:63:60:d0:dd:88: 9c:c7:32:89:e0:d6:2c:c6:32:7b:30:89:6a:78:9b:6f:96:a7: e8:30:b4:ac:81:a6:04:48:cf:20:07:36:38:aa:2f:e1:fc:f7: 23:f8:b2:4f:d3:73:8f:ac:53:5b:24:7e:84:29:cf:4e:c5:b5: 41:9d:35:65 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pA4TSioii6aKxoXc7KNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NzA5MGMyNzVjMzRjMDVjMzA2ZjNiMzYwNjM4OTNhMGQ3 Mjc4MmEwHhcNMjYwMTAxMjIxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjBmMzBmNGVjMTJmOTVkNDUzZmY4OWI0YzcxZmQwZGE5NDBiZmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTTvO0ddsmIw6LdUCcPxfeXsR8VN 9ZVlwkuquZdzdJYy5wOWUCsasLZPcbSeYWpcq4osCTrtyJKvI1v/pjEGFqx5QMEW ambTpXbrqaOOc0FbmwgtqfLVkwEJ133/wY3C1FtPA4Evsxb2av7pmTyZ7/V+O+FZ OrqQYwaEZlp+TcAwjGCvWb/dpERYLECAFvSCP1OtMsB8vwHEURa3w9Fzjf1hSBKN qRANdXwsw2+4HyUevrZ7RKmB9KwmSecW3mMPt/8Dvk+J+CLBndDKXVlvVkgpKKNi /OjfhSbYc9Zkbn+s8DVzR7ZlskiDI2JoD3nnDGkhfstEOls7qH57RDskaQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAYPMPTsEvldRT/4m0xx/Q2pQL/rMB8GA1UdIwQY MBaAFKhwkMJ1w0wFwwbzs2BjiToNcngqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt YjU3YTM2ZjJhZmNkLzEvQmc4dzlPd1MtVjFGUF9pYlRISDlEYWxBdi1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk LzEvcUhDUXduWERUQVhEQnZPellHT0pPZzF5ZUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWdvAwQB uW0WMA0GCSqGSIb3DQEBCwUAA4IBAQBO/PQmZ1RxbYtGM1AkOPnRZ9j54l+HKZlp 5Un2NO0aYY4Pn2zJvPpCc9BxCAgQev7SrnaVXYNNIXis45o7an/XHssG3QeUvQ8M /GshaRY7NtLXdlhiOyiq010G0orKEcztWV3/KYodIjxX+EueR8X3Vp/ojOzpM9io yu6rxJRtXqPXnNT0y2ZTEwvF0sGABtfcRNnFs9LR3PHx+alQB5qAS7unq42RTAZb I8C+GF81g9RvEZKGa11d4XVm//T9jhFUY2DQ3YicxzKJ4NYsxjJ7MIlqeJtvlqfo MLSsgaYESM8gBzY4qi/h/Pcj+LJP03OPrFNbJH6EKc9OxbVBnTVl -----END CERTIFICATE-----Generated at Tue Jan 20 02:46:32 2026 by rpki-client