This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/BCQ0DKOeh3iLqn9KXd7PInHyxYw.roa File: BCQ0DKOeh3iLqn9KXd7PInHyxYw.roa (raw, json) Hash identifier: eft6m3JptVmtzdPERPluUo59RQtEO200AP3IB4mKPqc= Subject key identifier: 04:24:34:0C:A3:9E:87:78:8B:AA:7F:4A:5D:DE:CF:22:71:F2:C5:8C Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6 Certificate serial: 019B7D5AE955D07100153D94661BE5D5625D Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/BCQ0DKOeh3iLqn9KXd7PInHyxYw.roa Signing time: Fri 02 Jan 2026 06:17:48 +0000 ROA not before: Fri 02 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31037 IP address blocks: 185.101.16.0/22 maxlen: 22 185.101.16.0/24 maxlen: 24 185.101.17.0/24 maxlen: 24 185.101.18.0/24 maxlen: 24 185.101.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e9:55:d0:71:00:15:3d:94:66:1b:e5:d5:62:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6 Validity Not Before: Jan 2 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0424340ca39e87788baa7f4a5ddecf2271f2c58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f6:1b:b5:d1:ce:96:84:3f:99:e9:03:dd:fc: d5:e2:0a:db:f9:20:ec:5e:3e:4f:07:33:ca:70:65: 3b:9b:1f:f0:cc:17:1e:e3:36:f8:58:9d:03:32:d7: c3:d3:94:ac:f1:22:42:35:b9:9d:d5:67:5b:ea:5b: 22:4e:6a:2a:90:5a:2c:c3:87:e4:98:e2:4a:83:42: 94:50:7d:33:3a:eb:ce:18:0e:61:3e:2e:7e:2b:02: 7c:56:a7:e3:ca:c4:92:53:da:b0:65:32:5d:27:29: b0:5c:1d:ec:3b:4b:9a:45:d6:6e:d7:ff:42:ef:7b: e9:2c:13:64:02:5c:f8:84:77:44:23:b5:86:91:c8: b2:18:53:c6:3d:cd:af:93:8c:45:2a:3f:d0:76:04: 0f:6b:c5:03:70:19:8e:4d:8d:3b:b9:04:34:a2:f2: c8:7a:d1:0a:f0:d2:0e:7f:9f:db:69:ee:fb:4e:64: e4:99:8f:fd:03:b6:1e:a7:a7:bd:ac:88:b3:87:7c: 37:9c:20:a6:1d:e0:cd:ce:61:a0:31:37:34:5c:93: 12:70:5d:b5:99:ba:3d:73:d1:b6:1a:83:cf:f4:e1: 09:f4:c4:41:38:90:19:a8:0a:38:ec:ae:b0:9b:b2: b3:3c:3a:42:b9:e7:fc:62:b1:7e:bd:ed:6f:a9:94: 47:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:24:34:0C:A3:9E:87:78:8B:AA:7F:4A:5D:DE:CF:22:71:F2:C5:8C X509v3 Authority Key Identifier: keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/BCQ0DKOeh3iLqn9KXd7PInHyxYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.16.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:b7:2c:bc:6f:0c:37:26:64:27:e2:69:46:6b:94:76:d6:bd: 85:78:e7:0a:2a:d6:62:9b:d3:f5:ff:42:62:8c:1e:39:83:35: dd:53:37:e3:1f:1c:81:4a:74:c5:e3:4b:e8:36:7c:7a:9c:1a: 4d:5a:65:28:df:c3:ea:d3:e3:1a:2d:14:a8:c6:99:97:6a:ca: a5:9b:d7:60:ed:b0:53:05:35:e8:82:c7:83:e2:6c:06:68:e9: 92:6b:d8:ea:22:16:c0:f4:28:6e:37:fe:2c:95:8b:1e:7b:f5: 7b:f3:1e:11:10:e2:9b:e1:e8:70:9d:4b:92:aa:9e:3e:c4:9e: a5:fe:35:42:a6:54:b3:4c:c6:90:73:6d:81:b3:2e:c1:14:6e: c3:38:02:1a:3b:62:d0:20:d2:ad:25:0f:fb:34:45:df:e8:d2: 2b:71:59:ed:d3:b7:7b:c1:1e:aa:c4:ff:be:1f:4b:67:4c:be: d2:4b:cc:b6:23:fe:3b:93:d7:4e:e1:40:27:ab:28:3b:e0:e8: fb:3b:d2:4a:00:70:f0:38:01:d1:5e:58:aa:ad:50:5d:35:95: 01:b8:25:58:ba:ab:c6:25:a8:22:0b:f6:cb:cc:8e:41:30:e2: e5:ca:49:85:4a:37:2b:45:7f:28:7d:63:79:39:4c:a0:3b:08: c1:49:8d:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WulV0HEAFT2UZhvl1WJdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYWVlOTRkMGZmZjZjNmM3NTJhNjk0MmZmYTk2MmFlMzdj N2U2YjYwHhcNMjYwMTAyMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDI0MzQwY2EzOWU4Nzc4OGJhYTdmNGE1ZGRlY2YyMjcxZjJjNThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfYbtdHOloQ/mekD3fzV4grb+SDs Xj5PBzPKcGU7mx/wzBce4zb4WJ0DMtfD05Ss8SJCNbmd1Wdb6lsiTmoqkFosw4fk mOJKg0KUUH0zOuvOGA5hPi5+KwJ8VqfjysSSU9qwZTJdJymwXB3sO0uaRdZu1/9C 73vpLBNkAlz4hHdEI7WGkciyGFPGPc2vk4xFKj/QdgQPa8UDcBmOTY07uQQ0ovLI etEK8NIOf5/bae77TmTkmY/9A7Yep6e9rIizh3w3nCCmHeDNzmGgMTc0XJMScF21 mbo9c9G2GoPP9OEJ9MRBOJAZqAo47K6wm7KzPDpCuef8YrF+ve1vqZRHnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAQkNAyjnod4i6p/Sl3ezyJx8sWMMB8GA1UdIwQY MBaAFCOu6U0P/2xsdSppQv+pYq43x+a2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUt YTMxODUzZTY5OTdhLzEvQkNRMERLT2VoM2lMcW45S1hkN1BJbkh5eFl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUtYTMxODUzZTY5OTdh LzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWUQMA0G CSqGSIb3DQEBCwUAA4IBAQBOtyy8bww3JmQn4mlGa5R21r2FeOcKKtZim9P1/0Ji jB45gzXdUzfjHxyBSnTF40voNnx6nBpNWmUo38Pq0+MaLRSoxpmXasqlm9dg7bBT BTXogseD4mwGaOmSa9jqIhbA9ChuN/4slYsee/V78x4REOKb4ehwnUuSqp4+xJ6l /jVCplSzTMaQc22Bsy7BFG7DOAIaO2LQINKtJQ/7NEXf6NIrcVnt07d7wR6qxP++ H0tnTL7SS8y2I/47k9dO4UAnqyg74Oj7O9JKAHDwOAHRXliqrVBdNZUBuCVYuqvG JagiC/bLzI5BMOLlykmFSjcrRX8ofWN5OUygOwjBSY1W -----END CERTIFICATE-----Generated at Mon Feb 2 14:04:10 2026 by rpki-client