This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BeXFKOs5hBM-61-mADglGxQtaG0.roa File: BeXFKOs5hBM-61-mADglGxQtaG0.roa (raw, json) Hash identifier: FQz4pWAPwoThR7jeXB4hcnz/OAIzvpE/xTyaCdTImzw= Subject key identifier: 05:E5:C5:28:EB:39:84:13:3E:EB:5F:A6:00:38:25:1B:14:2D:68:6D Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A258833EC147502DADF777550B11CF Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BeXFKOs5hBM-61-mADglGxQtaG0.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202736 IP address blocks: 212.134.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:58:83:3e:c1:47:50:2d:ad:f7:77:55:0b:11:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05e5c528eb3984133eeb5fa60038251b142d686d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b7:44:6e:a4:6b:72:10:6e:33:a7:ba:bd:49: b7:cc:f5:f1:da:58:8e:2f:47:92:52:7b:ba:a4:99: 0d:0f:e1:b8:aa:8f:9b:ac:ec:1a:55:3f:9d:45:6f: ef:34:91:ba:38:3d:b5:7c:f7:c4:1a:4c:77:0a:cc: 39:0f:70:e2:36:5c:af:a6:b8:15:5d:fa:bf:70:d4: eb:c0:88:4a:8b:c5:a2:9d:f0:10:05:b2:ff:82:fb: 96:43:91:ad:ff:1e:7e:af:d9:0a:7f:4f:49:33:1a: 9c:d4:6b:6a:ac:a8:2c:f5:84:83:da:cd:f6:01:1a: 43:b7:b3:25:13:3b:f4:df:4a:09:c5:06:6c:c4:f7: fd:71:84:27:1b:e7:70:1d:15:a3:a3:66:e4:83:75: ff:0d:07:90:39:a9:30:20:85:80:d4:c7:af:4c:8a: 17:17:03:26:15:69:d0:57:cd:0f:d4:2a:4a:73:32: 44:4b:91:a4:c1:17:31:ef:ff:83:d9:e8:14:3b:2f: f8:b8:41:45:61:3e:87:73:50:da:55:9c:c3:58:c4: 5f:4f:ac:35:f4:80:0e:f6:49:7f:8a:42:f1:cf:b0: 10:54:ac:32:64:91:d2:4a:86:59:7e:2f:bb:61:52: cf:71:40:88:51:8f:be:c1:06:d3:72:a4:b0:20:2d: e6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E5:C5:28:EB:39:84:13:3E:EB:5F:A6:00:38:25:1B:14:2D:68:6D X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BeXFKOs5hBM-61-mADglGxQtaG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.134.178.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:ea:6b:84:19:f8:8b:0f:21:bf:8e:67:f6:c8:a7:6a:b4:53: 3f:aa:96:1d:78:70:ac:6c:8c:6e:b5:55:98:c5:3f:5f:3c:81: 58:7b:88:79:da:9b:c3:e7:46:ab:5b:4b:65:bb:cc:5e:25:65: fc:0c:62:12:d3:24:c6:cf:71:69:6c:8b:73:41:76:a0:2c:7f: c5:e2:d7:05:8f:dd:6c:61:da:e2:ee:f2:2c:00:c1:0d:01:16: 3f:2c:d3:26:ae:cf:0e:5e:86:5e:5c:f1:d6:61:22:ae:a3:af: ef:bc:05:ba:af:e8:e7:5e:d6:c0:0d:89:05:86:0f:ba:f8:5c: fa:27:d3:fd:2f:d2:da:e6:94:37:4d:31:5b:8b:77:c6:52:c8: 03:68:fc:0c:e9:77:b9:e6:b6:10:75:5f:c6:e5:df:25:9b:70: 66:de:8c:1f:04:d8:52:32:23:2c:f2:6b:e5:e2:d7:41:b6:5a: ed:5c:6b:b5:f3:3f:63:3e:f8:fe:8f:f6:db:ba:99:a6:8f:79: 82:91:79:7c:83:fc:1c:15:e5:f3:2f:27:2d:7a:da:7e:e4:fd: c7:69:7c:aa:72:96:55:14:80:4d:89:e2:ee:dd:83:c6:c7:6c: e8:95:e1:ad:db:84:82:62:31:1e:c3:95:a7:78:66:2f:e0:03: 28:89:78:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oliDPsFHUC2t93dVCxHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWU1YzUyOGViMzk4NDEzM2VlYjVmYTYwMDM4MjUxYjE0MmQ2ODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LdEbqRrchBuM6e6vUm3zPXx2liO L0eSUnu6pJkND+G4qo+brOwaVT+dRW/vNJG6OD21fPfEGkx3Csw5D3DiNlyvprgV Xfq/cNTrwIhKi8WinfAQBbL/gvuWQ5Gt/x5+r9kKf09JMxqc1GtqrKgs9YSD2s32 ARpDt7MlEzv030oJxQZsxPf9cYQnG+dwHRWjo2bkg3X/DQeQOakwIIWA1MevTIoX FwMmFWnQV80P1CpKczJES5GkwRcx7/+D2egUOy/4uEFFYT6Hc1DaVZzDWMRfT6w1 9IAO9kl/ikLxz7AQVKwyZJHSSoZZfi+7YVLPcUCIUY++wQbTcqSwIC3mrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAXlxSjrOYQTPutfpgA4JRsULWhtMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvQmVYRktPczVoQk0tNjEtbUFEZ2xHeFF0YUcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1IayMA0G CSqGSIb3DQEBCwUAA4IBAQCa6muEGfiLDyG/jmf2yKdqtFM/qpYdeHCsbIxutVWY xT9fPIFYe4h52pvD50arW0tlu8xeJWX8DGIS0yTGz3FpbItzQXagLH/F4tcFj91s Ydri7vIsAMENARY/LNMmrs8OXoZeXPHWYSKuo6/vvAW6r+jnXtbADYkFhg+6+Fz6 J9P9L9La5pQ3TTFbi3fGUsgDaPwM6Xe55rYQdV/G5d8lm3Bm3owfBNhSMiMs8mvl 4tdBtlrtXGu18z9jPvj+j/bbupmmj3mCkXl8g/wcFeXzLyctetp+5P3HaXyqcpZV FIBNieLu3YPGx2zoleGt24SCYjEew5WneGYv4AMoiXhR -----END CERTIFICATE-----Generated at Sun Jan 11 07:31:24 2026 by rpki-client