This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BijRcNIUyRW3wnZDO1fTkdwcxB0.roa File: BijRcNIUyRW3wnZDO1fTkdwcxB0.roa (raw, json) Hash identifier: axk8akn75w1xJhtUcczORKV1y2vLCS+48p/+bkW5dcs= Subject key identifier: 06:28:D1:70:D2:14:C9:15:B7:C2:76:43:3B:57:D3:91:DC:1C:C4:1D Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A243ABDCD8A51558D7C375589DF76F Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BijRcNIUyRW3wnZDO1fTkdwcxB0.roa Signing time: Thu 01 Jan 2026 08:17:38 +0000 ROA not before: Thu 01 Jan 2026 08:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19211 IP address blocks: 195.172.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:43:ab:dc:d8:a5:15:58:d7:c3:75:58:9d:f7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0628d170d214c915b7c276433b57d391dc1cc41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9b:f3:33:1a:39:55:15:2a:71:38:3e:cc:45: 98:45:da:3f:ec:22:16:7a:e7:2e:ff:a6:37:b8:ff: 2a:ed:16:13:d6:95:d2:76:40:93:5c:02:75:e0:d6: 17:25:f4:ce:d9:50:d0:48:3c:10:fd:6e:1d:da:a8: d2:98:a6:22:0d:d6:40:4f:20:4d:56:ef:ad:ae:56: 32:a8:f7:19:66:3a:e4:b4:10:32:6e:f1:f0:45:4e: 20:89:bc:7f:d5:b5:5f:75:17:03:6f:b2:57:26:a8: 2f:7f:c6:51:e0:24:7c:3c:84:d3:08:0f:bb:8f:ca: 3e:5f:00:ff:95:d0:ad:12:a0:6b:a3:0b:c2:9d:1b: f4:31:3a:f4:af:14:3f:71:c2:85:b3:51:ac:05:16: 20:4f:76:90:50:9e:b9:18:4d:6b:0e:bf:cf:2f:e5: 56:7c:93:84:20:2a:24:aa:44:50:eb:27:3d:66:ca: b6:22:ef:29:26:b5:db:28:c9:91:87:bb:ec:d2:ec: ac:ff:97:99:25:09:e6:e6:f1:70:2c:6f:87:69:22: 3d:08:90:a0:6b:90:b3:10:55:cc:f4:3a:17:f3:7e: 1c:db:dd:8a:85:8b:56:38:68:7f:4e:2f:4c:e1:54: 50:82:b3:b2:c4:36:f8:5a:d4:1d:20:ec:05:c3:23: f7:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:28:D1:70:D2:14:C9:15:B7:C2:76:43:3B:57:D3:91:DC:1C:C4:1D X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/BijRcNIUyRW3wnZDO1fTkdwcxB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.172.152.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:d7:c6:35:a1:7e:cf:06:96:1a:79:7e:da:cb:c1:90:51:3b: 30:d0:2b:43:81:58:39:2c:07:40:80:24:63:86:25:21:63:f5: ee:63:3d:10:e8:35:fa:4c:13:eb:ce:8c:6f:63:f2:76:b4:95: 95:4d:2b:b9:77:b6:3d:d0:e0:1c:11:74:93:0a:d8:34:d9:85: 72:20:b8:a4:f1:7b:8f:ce:a0:e0:d6:c7:47:bc:fb:49:03:50: c7:5d:b1:13:7a:8b:42:39:be:00:52:8c:02:60:3f:f1:a8:92: 3e:fd:a2:b6:03:b3:61:96:47:ed:81:3e:cf:99:26:d8:68:19: e3:d6:27:eb:0b:8c:d9:3f:a5:22:65:28:05:8f:46:b3:e3:8e: d7:c4:ad:d2:a6:e1:3f:c7:0d:1c:81:0d:57:37:df:df:38:5b: 0c:f1:3d:ee:9c:94:22:69:59:02:25:13:bd:c4:d1:ba:eb:a1: 63:ce:a1:94:3d:44:27:84:7f:55:8d:b9:cf:65:c0:54:19:be: d1:c9:54:8c:f7:9d:6d:56:cc:f9:ac:02:f0:2a:99:47:8e:9c: b5:5f:1f:ca:40:5f:f1:b5:9f:ba:ce:b2:3b:76:92:f2:9d:5f: 86:af:6b:51:2f:a9:c9:7c:ad:34:60:40:2d:97:5c:6f:0a:75: 6d:88:9a:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4okOr3NilFVjXw3VYnfdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjI4ZDE3MGQyMTRjOTE1YjdjMjc2NDMzYjU3ZDM5MWRjMWNjNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJvzMxo5VRUqcTg+zEWYRdo/7CIW eucu/6Y3uP8q7RYT1pXSdkCTXAJ14NYXJfTO2VDQSDwQ/W4d2qjSmKYiDdZATyBN Vu+trlYyqPcZZjrktBAybvHwRU4gibx/1bVfdRcDb7JXJqgvf8ZR4CR8PITTCA+7 j8o+XwD/ldCtEqBrowvCnRv0MTr0rxQ/ccKFs1GsBRYgT3aQUJ65GE1rDr/PL+VW fJOEICokqkRQ6yc9Zsq2Iu8pJrXbKMmRh7vs0uys/5eZJQnm5vFwLG+HaSI9CJCg a5CzEFXM9DoX834c292KhYtWOGh/Ti9M4VRQgrOyxDb4WtQdIOwFwyP3OwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAYo0XDSFMkVt8J2QztX05HcHMQdMB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvQmlqUmNOSVV5Ulczd25aRE8xZlRrZHdjeEIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDw6yYMA0G CSqGSIb3DQEBCwUAA4IBAQBa18Y1oX7PBpYaeX7ay8GQUTsw0CtDgVg5LAdAgCRj hiUhY/XuYz0Q6DX6TBPrzoxvY/J2tJWVTSu5d7Y90OAcEXSTCtg02YVyILik8XuP zqDg1sdHvPtJA1DHXbETeotCOb4AUowCYD/xqJI+/aK2A7NhlkftgT7PmSbYaBnj 1ifrC4zZP6UiZSgFj0az447XxK3SpuE/xw0cgQ1XN9/fOFsM8T3unJQiaVkCJRO9 xNG666FjzqGUPUQnhH9VjbnPZcBUGb7RyVSM951tVsz5rALwKplHjpy1Xx/KQF/x tZ+6zrI7dpLynV+Gr2tRL6nJfK00YEAtl1xvCnVtiJot -----END CERTIFICATE-----Generated at Tue Jan 13 02:11:28 2026 by rpki-client